Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected in connection with our services. It applies to all customers in the area and is intended to meet the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you acknowledge that personal data may be processed as described in this Policy.

1. Introduction

We respect your privacy and are committed to handling personal data in a lawful, fair, and transparent manner. We only collect data that is necessary for specific and legitimate purposes, and we take appropriate technical and organizational measures to safeguard it. This Policy describes the types of data we process, the reasons for processing, the legal bases relied upon, the periods for which data is retained, the categories of processors and recipients, and the rights available to data subjects under GDPR.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data: such as name, title, and similar identifiers.
Contact data: such as postal address, email address, and telephone number.
Account data: such as user IDs, account preferences, and authentication details.
Transaction data: such as records of purchases, payments, invoices, and related service history.
Technical data: such as device information, IP address, browser type, operating system, and access logs.
Usage data: such as interactions with our services, pages viewed, session duration, and feature usage.
Communication data: such as information provided when you make an inquiry, request assistance, or otherwise communicate with us.

We do not intentionally collect special category data unless it is necessary, lawful, and supported by a valid legal basis. If such data is ever required, we will ensure that additional safeguards are applied.

3. How We Collect Personal Data

We collect personal data directly from you when you provide it to us, such as when you place an order, create an account, make an inquiry, or use our services. We may also collect data automatically through technical means when you interact with our systems. In some cases, we may receive data from third parties, including service providers, payment processors, or publicly available sources, where permitted by law.

4. Purposes of Processing

We use personal data only for defined purposes, including:

providing and delivering our services;
managing accounts and customer relationships;
processing payments and completing transactions;
responding to inquiries and providing support;
maintaining security, preventing fraud, and detecting misuse;
improving service quality, functionality, and user experience;
complying with legal, accounting, and regulatory obligations;
exercising or defending legal claims where necessary.

We will not process personal data in a way that is incompatible with these purposes unless required or permitted by law.

5. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Depending on the context, we rely on one or more of the following:

Contract: where processing is necessary to enter into or perform a contract with you.
Legal obligation: where processing is required to comply with a legal duty, such as tax, accounting, or regulatory obligations.
Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include service improvement, fraud prevention, and internal administration.
Consent: where you have given clear consent for a specific purpose, such as certain optional communications or cookies where applicable.
Vital interests: in rare situations where processing is necessary to protect someone’s life.
Public task or official authority: where applicable to the extent required by law.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal.

6. Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers, as required to operate our services and meet legal obligations. Processors process data only on our instructions and under written agreements that require appropriate safeguards.

Categories of processors may include:

Hosting and infrastructure providers: for secure storage and service delivery.
Payment service providers: for payment processing and fraud checks.
Customer support providers: for handling support requests and communications.
IT and security providers: for system maintenance, monitoring, and protection.
Analytics providers: for measuring performance and improving services.
Professional advisors: such as accountants, auditors, or legal advisers, where necessary.

We may also disclose data where required by law, court order, or lawful request from a public authority. If personal data is transferred outside the European Economic Area, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other legally recognized transfer mechanisms.

7. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, or contractual requirements. Retention periods depend on the type of data and the reason it is processed.

Account and service data: retained for the duration of the relationship and a reasonable period afterward.
Transaction and financial records: retained for periods required by tax and commercial law.
Support and correspondence data: retained as long as needed to manage the inquiry and maintain records.
Technical logs and security data: retained for limited periods unless needed for investigations or legal claims.

When personal data is no longer required, we will delete it or anonymize it securely.

8. Data Security

We implement appropriate security measures designed to protect personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures may include access controls, encryption, monitoring, backup procedures, and staff confidentiality obligations. While no system is completely secure, we continuously review our security practices and aim to reduce risks to an acceptable level.

9. Your Rights Under GDPR

Subject to applicable legal conditions, you have the following rights regarding your personal data:

Right of access: to obtain confirmation and a copy of your personal data.
Right to rectification: to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to request limited processing in certain situations.
Right to data portability: to receive certain data in a structured, commonly used format and transmit it elsewhere.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent.
Right not to be subject to automated decision-making: including profiling, where applicable.

You may also have the right to lodge a complaint with a relevant supervisory authority if you believe your data protection rights have been infringed. We encourage you to raise any concerns so that we may address them promptly.

10. Children’s Data

Our services are not intended for children unless expressly stated otherwise. We do not knowingly collect personal data from children without appropriate authorization where required. If we become aware that personal data has been collected inappropriately, we will take steps to delete it or otherwise handle it in compliance with applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, operational practices, or our services. The updated version will apply from the date it is made effective. We encourage you to review this Policy periodically so that you remain informed about how personal data is processed.

Summary of Core Commitments

We process personal data lawfully, fairly, and transparently. We collect only what is needed, use it for specified purposes, share it with carefully selected processors under contract, retain it only as long as necessary, and respect your rights under GDPR. This Policy applies to all customers in the area.

By using our services, you acknowledge that you have read and understood this Privacy Policy.