Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, disclosed, and protected in relation to our services. It applies to all customers in the area where our services are offered, and it is intended to meet the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Introduction

We are committed to processing personal data in a lawful, fair, and transparent manner. We respect the privacy of individuals and take appropriate technical and organizational measures to protect personal information. This policy describes the categories of data we collect, the purposes for which we use it, the lawful bases for processing, how long we retain it, the third parties that may process it on our behalf, and the rights available to users.

For the purposes of this policy, personal data means any information relating to an identified or identifiable natural person. Processing includes any operation performed on such data, including collection, recording, organization, storage, use, disclosure, deletion, or destruction.

2. Data We Collect

We may collect personal data directly from users, automatically through our systems, or from third parties where permitted by law. The exact data collected depends on the interaction and services used.

2.1 Information you provide

Identity data such as name, title, and similar identifiers.
Contact data such as address, email address, and phone number.
Account data such as login credentials, preferences, and profile information.
Transaction data such as records of purchases, service requests, invoices, and payment-related details.
Communication data such as messages, feedback, complaints, and support requests.

2.2 Information collected automatically

Usage data such as pages viewed, actions taken, and time spent using our services.
Technical data such as IP address, device type, browser type, operating system, and system settings.
Log data such as access times, error reports, and diagnostic information.

Where required, we will seek appropriate consent before using any non-essential tracking or similar technologies.

3. How We Use Personal Data

We use personal data only for specific, explicit, and legitimate purposes. These may include:

providing and operating our services;
managing accounts and user requests;
processing transactions and maintaining records;
responding to inquiries and offering support;
ensuring security, preventing fraud, and detecting misuse;
improving service quality, functionality, and user experience;
complying with legal obligations;
protecting our rights, property, and legitimate interests.

We will not process personal data in a manner that is incompatible with the purposes described in this policy unless we have a valid legal basis to do so.

4. Lawful Basis for Processing

Under GDPR, we process personal data only where we have a lawful basis. Depending on the context, the lawful basis may include one or more of the following:

Contract: processing is necessary to perform a contract with the user or to take steps at the user’s request before entering into a contract.
Legal obligation: processing is necessary to comply with a legal or regulatory requirement.
Legitimate interests: processing is necessary for our legitimate interests, provided those interests are not overridden by the rights and freedoms of the user.
Consent: processing is based on the user’s freely given, specific, informed, and unambiguous consent, which may be withdrawn at any time where relied upon.
Vital interests: in rare cases, processing may be necessary to protect an individual’s vital interests.
Public task: where applicable, processing may be necessary for the performance of a task carried out in the public interest.

Where we rely on legitimate interests, we will consider and balance any potential impact on the user and ensure safeguards are in place. Where consent is the basis, users may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third-party service providers who act as processors on our behalf. These processors are only permitted to process personal data according to our documented instructions and are required to maintain appropriate confidentiality and security measures.

Processors may include providers of:

IT hosting and infrastructure services;
data storage and backup services;
payment processing services;
customer support tools;
analytics and performance monitoring services;
security and fraud prevention services.

We may also disclose personal data where required by law, regulation, legal process, or competent authority. In all such cases, we will limit disclosure to what is necessary and lawful.

If personal data is transferred outside the European Economic Area, we will ensure that appropriate safeguards are in place, such as an adequacy decision, standard contractual clauses, or other lawful transfer mechanisms recognized under GDPR.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, reporting, tax, or dispute-resolution requirements. The retention period depends on the type of data, the purpose of processing, and applicable legal obligations.

When determining retention periods, we consider:

the duration of our relationship with the user;
the nature and sensitivity of the data;
the risk of harm from unauthorized use or disclosure;
legal, regulatory, and contractual requirements;
whether the data is needed for legitimate business purposes.

Once personal data is no longer required, we will securely delete, anonymize, or otherwise irreversibly render it unusable, unless retention is required by law.

7. Data Security

We use reasonable and appropriate safeguards to protect personal data from accidental loss, unauthorized access, alteration, disclosure, or destruction. These measures may include access controls, encryption, secure storage, system monitoring, staff confidentiality obligations, and periodic security reviews.

Although no system can be guaranteed as completely secure, we continuously work to reduce risks and maintain a strong privacy and security framework.

8. User Rights Under GDPR

Individuals whose personal data we process have certain rights under GDPR. Subject to legal limitations and verification of identity, users may exercise the following rights:

Right of access: to obtain confirmation of whether personal data is being processed and to receive a copy of that data.
Right to rectification: to request correction of inaccurate or incomplete personal data.
Right to erasure: to request deletion of personal data in certain circumstances.
Right to restriction: to request limited processing in certain situations.
Right to data portability: to receive personal data in a structured, commonly used, and machine-readable format and, where feasible, to have it transferred to another controller.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: to withdraw consent at any time where processing is based on consent.
Right not to be subject to automated decision-making: to avoid decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects, unless permitted by law.

Users may also have the right to lodge a complaint with their local data protection authority if they believe their rights have been infringed. We encourage individuals to review their rights carefully and to raise concerns promptly so they can be addressed in a timely manner.

9. Children’s Data

Our services are not intended for children unless expressly stated otherwise. We do not knowingly collect personal data from children without appropriate authorization where required by law. If we become aware that personal data has been collected from a child in violation of applicable requirements, we will take steps to delete it or obtain lawful authorization where possible.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, our services, or how we process data. Any revised version will apply from the time it is made available. Users are encouraged to review this policy periodically to remain informed about how personal data is handled.

11. Our Commitment

We are committed to processing personal data in a way that respects privacy, preserves trust, and supports compliance with GDPR principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. This policy applies to all customers in the area and governs all processing carried out in connection with our services.

By using our services, users acknowledge that they have read and understood this Privacy Policy.