Privacy Policy -

This Privacy Policy explains how personal data is collected, used, stored, shared, and protected in relation to our services. It applies to all customers in the area where our services are offered, and it is designed to meet the requirements of the General Data Protection Regulation (GDPR). By using our services, you acknowledge that your personal data may be processed as described in this Policy.

1. Scope of this Privacy Policy

This Policy applies to personal data processed in connection with our activities, including when you interact with us as a customer, prospective customer, or service user. It covers information collected directly from you, information collected automatically through your use of our services, and information we may receive from third parties where lawful and necessary.

We are committed to processing personal data fairly, lawfully, and transparently. We only collect data that is relevant and limited to what is needed for the purposes described in this Policy. We also take appropriate measures to ensure that your information is kept secure and used in accordance with applicable data protection laws.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity data, such as your name or similar identifiers.
Contact data, such as address, email address, or telephone number.
Transaction data, including records of purchases, payments, or services received.
Technical data, such as device type, browser information, IP address, and usage patterns.
Communication data, including correspondence and records of inquiries or complaints.
Preference data, where applicable, such as service preferences or consent choices.

We do not intentionally collect special category data unless it is strictly necessary and you have provided explicit consent or another lawful basis applies. Special category data includes information revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person’s sex life or sexual orientation.

3. How We Use Personal Data

We process personal data for the following purposes:

to provide, manage, and improve our services;
to communicate with you and respond to requests;
to process payments, fulfill transactions, and maintain records;
to comply with legal and regulatory obligations;
to detect, prevent, and investigate fraud, abuse, or security incidents;
to monitor performance, maintain service quality, and carry out internal administration;
to exercise or defend legal claims where necessary.

We use only the data that is reasonably required for each purpose. Where possible, we anonymize or pseudonymize information so that it cannot directly identify you.

4. Lawful Basis for Processing

Under the GDPR, we process personal data only where we have a lawful basis. Depending on the purpose, our lawful bases may include:

Contract: processing is necessary to enter into or perform a contract with you.
Legal obligation: processing is required to comply with a legal duty.
Legitimate interests: processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
Consent: you have given clear, informed, and voluntary consent for a specific purpose.
Vital interests: processing is necessary to protect someone’s life in an emergency.
Public task: processing is necessary for a task carried out in the public interest, where applicable.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, tax, or reporting requirements. Retention periods depend on the nature of the data, the reason for processing, and any legal obligations that apply.

When data is no longer needed, we will securely delete it or anonymize it so that it can no longer be associated with you. In some cases, we may retain data for longer if it is required for the establishment, exercise, or defense of legal claims, or if another lawful exception applies.

6. Sharing and Processors

We may share personal data with trusted third parties that act as processors on our behalf. These processors are only permitted to process data according to our instructions and are required to maintain appropriate confidentiality and security measures.

Examples of processors may include:

service providers that support hosting, IT, and system maintenance;
payment and transaction processing providers;
customer support and communication service providers;
analytics or reporting providers used to help us understand service performance;
professional advisers, such as legal or accounting advisers, where necessary.

We may also disclose personal data where required by law, regulation, court order, or request from a competent authority. If a processor or other recipient is located outside the European Economic Area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms, where required.

7. Data Security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where suitable, restricted permissions, monitoring, and staff confidentiality obligations.

Although we strive to protect your information, no system can be guaranteed to be completely secure. You should also take reasonable steps to protect your own data, such as keeping account credentials confidential and notifying us promptly if you suspect misuse.

8. Your Rights Under GDPR

Subject to the conditions and exceptions set out in data protection law, you may have the following rights:

Right of access – to obtain confirmation and a copy of your personal data.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to limit processing in certain cases.
Right to data portability – to receive your data in a structured, commonly used format and, where feasible, have it transmitted to another controller.
Right to object – to object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent – where processing is based on consent.
Right to lodge a complaint – with the relevant supervisory authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. We will respond within the timeframes required by law and will provide reasons if we cannot comply with a request in full.

9. Automated Decision-Making

We do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects, unless this is permitted by law and appropriate safeguards are in place. If such processing is introduced, we will provide clear information about it and the rights available to you.

10. International Data Transfers

If personal data is transferred to a country outside the EEA or another jurisdiction with comparable data protection standards, we will ensure the transfer is lawful and appropriately protected. This may include the use of approved contractual protections and supplementary measures where necessary.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service arrangements. Any revised version will apply from the time it becomes effective. We encourage you to review this Policy periodically so that you remain informed about how your personal data is handled.

12. General Statement

This Privacy Policy applies to all customers in the area and should be read together with any additional notices provided at the time of data collection. If a specific notice applies to a particular service or processing activity, that notice may provide more detail while remaining consistent with this Policy.

By continuing to use our services, you confirm that you have read and understood this Policy and that you acknowledge the processing of personal data as described above.