Customer Data Privacy Policy
Effective Date: 01 December 2024
Introduction
At ELAUSYS, we prioritize your privacy and are dedicated to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in compliance with the General Data Protection Regulation (GDPR) and relevant data protection laws.
Types of Personal Data We Collect
We may collect and process the following types of personal data:
- Identification Data: Name, surname and gender.
- Contact Data: Email address, telephone number, and postal address.
- Payment Data: Credit card information and billing address (processed securely via payment processors).
- Account Data: Username, password, and purchase history.
- Technical Data: IP address, browser type, and time zone settings.
- Usage Data: Information about how you use our website, products, and services.
Purpose of Data Processing
We process your personal data for the following purposes:
- Order Processing: To manage and fulfill your orders, including payment processing and delivery.
- Customer Service: To respond to your inquiries and provide customer support.
- Marketing: To send you promotional materials and newsletters, only if you have provided your explicit consent.
- Website Improvement: To analyze website usage and improve our services.
- Legal Compliance: To comply with legal obligations and protect our rights.
Legal Basis for Processing Personal Data
We rely on the following legal bases for processing your personal data:
- Consent: When you provide your explicit consent, such as for receiving marketing communications.
- Contractual Necessity: To fulfill our contractual obligations when you make a purchase.
- Legal Obligation: To comply with applicable laws and regulations.
- Legitimate Interests: For purposes that are in our legitimate interests, provided that they do not override your interests or fundamental rights.
Data Retention
We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements.
Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections to any inaccurate or incomplete data.
- Right to Erasure: Request the deletion of your personal data under certain conditions.
- Right to Restrict Processing: Request the restriction of processing your personal data in certain situations.
- Right to Data Portability: Receive your personal data in a structured, commonly used format.
- Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your personal data.
To exercise any of these rights, please contact us using the contact page.
Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
Sharing Your Data
We may share your personal data with:
- Service Providers: Third-party vendors who assist us in operating our website, conducting our business, or servicing you (e.g., payment processors, delivery services).
- Legal Authorities: When required by law or necessary to protect our rights.
International Transfers
If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data, in accordance with GDPR.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our website or by other means.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us using the form on the contact page.