Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected by all customers in the area for services provided by . It is designed to meet the requirements of the General Data Protection Regulation (GDPR) and applies to all customers in the relevant area, regardless of how they interact with the service. By using the service, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.

1. Scope of this Policy

This policy applies to all individuals who are customers in the area and whose personal data is processed in connection with the services offered by . It covers data collected directly from you, data generated through your use of the service, and data obtained from third parties where permitted by law. The policy also explains the purposes for which data is used, the legal grounds for processing, the period for which data is kept, and the rights available to you under GDPR.

2. Data We Collect

We may collect the following categories of personal data:

Identity data such as name, title, and similar identifiers.
Contact data such as address, email address, telephone number, or other communication details.
Account data such as login credentials, account preferences, and service settings.
Transaction data such as records of purchases, subscriptions, payments, and related service history.
Technical data such as device type, browser type, IP address, operating system, and usage logs.
Communication data such as correspondence, support requests, feedback, and complaint records.
Usage data such as interaction with service features, session activity, and preferences.

We only collect personal data that is necessary for legitimate business and service purposes. In some cases, limited additional data may be collected to improve performance, maintain security, or fulfill legal obligations.

3. How We Collect Data

Personal data may be collected directly from you when you register, make a request, submit information, or otherwise interact with the service. We may also collect data automatically when you access or use the service. In addition, we may receive data from third parties such as payment processors, service partners, or other entities where lawful and appropriate.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Depending on the activity, we rely on one or more of the following legal grounds:

Performance of a contract: to provide services, manage accounts, process transactions, and fulfill requests.
Legal obligation: to comply with applicable laws, tax rules, accounting obligations, or lawful requests from authorities.
Legitimate interests: to operate, secure, improve, and promote our services, provided those interests are not overridden by your rights and freedoms.
Consent: where required by law, such as for optional communications or specific types of data processing.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. How We Use Personal Data

We use personal data for the following purposes:

to provide and manage services;
to create and administer customer records;
to process transactions and maintain financial records;
to respond to inquiries and support requests;
to protect against fraud, misuse, and security threats;
to comply with applicable legal and regulatory requirements;
to analyze service performance and improve customer experience;
to send operational communications necessary for service delivery.

We will not use your data in ways that are incompatible with the purposes stated in this policy unless required or permitted by law.

6. Data Sharing and Processors

We may share personal data with carefully selected processors and service providers who process data on our behalf and under our instructions. These may include providers of hosting, information technology support, payment processing, analytics, customer management, storage, and security services.

All processors are required to handle personal data securely, keep it confidential, and process it only for specified purposes. We take steps to ensure that appropriate data processing agreements are in place and that processors implement suitable technical and organizational measures.

We may also disclose personal data where required by law, court order, regulatory request, or where necessary to protect our rights, customers, staff, or the public. If a business reorganization, merger, or transfer occurs, personal data may be transferred as part of that transaction, subject to legal safeguards.

7. International Transfers

If personal data is transferred outside the European Economic Area or another jurisdiction with equivalent protections, we will ensure that appropriate safeguards are in place. These safeguards may include standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms recognized under GDPR. We aim to ensure that data remains protected regardless of where it is processed.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, reporting, contractual, and security requirements. Retention periods depend on the type of data and the reason for processing.

Customer account data is kept for the duration of the relationship and for a reasonable period afterward.
Transaction and financial records are kept for the period required by law.
Support and communication records are kept for as long as necessary to resolve issues and maintain service history.
Technical and usage logs are kept for short periods unless longer retention is needed for security or investigation purposes.

When data is no longer needed, it is securely deleted, anonymized, or otherwise disposed of in accordance with applicable retention and security practices.

9. Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures may include access controls, encryption, secure storage, monitoring, and staff confidentiality obligations. While no system can be guaranteed completely secure, we continually review and improve our safeguards to reduce risk.

10. Your Rights Under GDPR

If you are a customer in the area and your data is processed under GDPR, you may have the following rights, subject to legal conditions and exceptions:

Right of access: to request confirmation of whether we process your data and obtain a copy of it.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to request limitation of processing in certain cases.
Right to data portability: to receive certain data in a structured, commonly used, machine-readable format and to transmit it to another controller where applicable.
Right to object: to object to processing based on legitimate interests or to direct marketing where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
Right not to be subject to automated decision-making: to challenge decisions made solely by automated means where such rights apply.

You may also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.

11. Children’s Data

The service is not intended for children unless expressly stated otherwise. We do not knowingly collect personal data from children where such collection would be unlawful. If we become aware that data has been collected from a child in violation of applicable requirements, we will take appropriate steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal, operational, or technical requirements. When we make changes, the revised version will apply to all customers in the area from the effective date stated in the updated policy. We encourage you to review this policy periodically to stay informed about how we process personal data.

Summary of Key Principles

Transparency: we explain what data is collected and why.
Lawfulness: we process data only where a valid GDPR basis applies.
Minimization: we collect only what is necessary.
Storage limitation: we retain data only for appropriate periods.
Accountability: we use processors responsibly and safeguard your rights.

Privacy commitment: We are committed to respecting your privacy and handling personal data in a fair, lawful, and secure manner. This policy applies to all customers in the area and describes the standards we follow when processing personal information for our services.