1. Transparency: We are transparent about how we collect, use, and share your personal data. Our data processing activities are clearly communicated in this policy.
2. Lawfulness, Fairness, and Purpose Limitation: We process your data in accordance with applicable laws and regulations. We only use your data for the purposes you have been informed about, and we do not use it in ways that are unexpected or incompatible with those purposes.
3. Data Minimization: We collect and retain only the minimum amount of data necessary to fulfill our stated purposes. Unnecessary data collection is avoided.
4. Accuracy: We take steps to ensure the data we collect is accurate and up- to-date. If you believe your data is inaccurate, you can request corrections (see “Rights of Data Subjects” below).
5. Security: We implement robust technical and organizational measures to safeguard your personal data from unauthorized access, disclosure, alteration, or destruction.
6. Consent: When required, we obtain your explicit and informed consent before collecting and processing your data. You have the right to withdraw consent at any time.
7. Data Subject Rights: We respect your rights as a data subject, including the right to access, rectify, delete, or port your data. To exercise these rights, please see the section below.
8. Data Transfer: If your personal data is transferred across borders, we ensure adequate safeguards are in place to protect it in accordance with relevant data protection laws.
9. Accountability and Governance: We have established clear roles and responsibilities for data protection within our organization. We have also implemented policies and procedures to demonstrate our compliance with data protection regulations.
10. Data Breach Response: We have a process in place to identify, report, and mitigate data breaches. In the event of a breach, affected individuals and authorities will be informed as required by law.
11. Children’s Privacy: If we offer services to children, we comply with additional regulations governing the collection and processing of data from minors.
12. Privacy by Design: We integrate data protection principles into the design and development of our products, services, and systems from the outset.
13. Data Retention: We define specific retention periods for different categories of data and delete data that is no longer necessary for the purposes for which it was collected.
14. Third-party Relationships: We ensure that third-party service providers who process personal data on our behalf adhere to the same data protection standards.
15. Regular Audits and Assessments: We conduct periodic assessments of our data protection practices, including risk assessments and privacy impact assessments, to identify and mitigate potential privacy risks.

16. Continuous Improvement: We are committed to continuously improving our data protection practices based on evolving laws, technology, and best practices.

     

4. Lawful Basis for Processing Personal Data

We process personal data under various lawful bases, including:

6.3.2 To manage Your Account: We use your Personal Data to manage your registration as a user of our Service. This enables you to access various functionalities of the Service available to registered users.

6.3.3 For the performance of a contract: We process your Personal Data for the development, compliance, and execution of purchase contracts, products, items, or services you have purchased or any other contract with us through the Service.

6.3.4 To contact You: We may contact you by email, telephone calls, SMS, or other electronic communication forms, such as mobile application push notifications. This contact may include updates or informative communications related to the functionalities, products, or contracted services, including security updates when necessary or reasonable for their implementation.

6.3.5 To provide You with news, special offers, and general information: We may use your information to provide you with information about goods, services, and events similar to those you have already purchased or inquired about, unless you have opted not to receive such information.

6.3.6 To manage Your requests: We use your information to attend and manage your requests to us.

6.3.7 For business transfers: We may use your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us about our Service users is among the assets transferred.

6.3.8 For other purposes: We may use your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Service, products, services, marketing, and your experience.

6.4 Sharing Your Personal Data

6.4.1 With Service Providers: We may share your personal information with service providers to monitor and analyze the use of our Service and to contact you.

6.4.2 For business transfers: We may share or transfer your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company.

6.4.3 With Affiliates: We may share your information with our affiliates. In such cases, we will require these affiliates to honor this Privacy Policy. Affiliates include our parent company and any other subsidiaries, joint venture partners, or companies under common control with us.

6.4.4 With business partners: We may share your information with business partners to offer you certain products, services, or promotions.

6.4.5 With other users: When you share personal information or otherwise interact in public areas with other users, such information may be viewed by all users and may be publicly distributed outside our Service.

6.4.6 With Your consent: We may disclose your personal information for any other purpose with your consent.