Privacy Policy

At [Your Company Name], we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

By using our website, [website URL], you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We may collect and process the following personal data:

Personal Identification Information: Name, email address, postal address, phone number, etc.
Payment Information: Payment card details (only for processing payments; we do not store this information).
Browsing Information: IP address, browser type, device information, cookies, browsing activity (e.g., pages visited, links clicked, etc.).
Account Information: If you create an account with us, we may collect your username, password, and preferences.
Communication: Any information you provide to us when contacting customer service or sending inquiries.

2. How We Use Your Data

We use your personal data for the following purposes:

To provide services: Processing orders, managing your account, and delivering products or services.
To improve our website: Analyzing website usage to enhance our content, services, and user experience.
To communicate with you: Sending transactional emails (e.g., order confirmations, shipping updates), marketing communications (with your consent), and responding to customer support inquiries.
To process payments: Handling payment transactions securely through trusted third-party payment processors.
Legal obligations: Complying with legal requirements, such as tax laws, fraud prevention, and other regulatory obligations.

3. Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

Contractual necessity: To fulfill contracts with you (e.g., processing orders, providing customer support).
Legitimate interests: To improve our services, prevent fraud, and provide you with relevant marketing (in cases where we have a legitimate interest, which does not override your rights and freedoms).
Consent: Where we have asked for and received your consent (e.g., to send marketing emails), you can withdraw consent at any time.
Legal obligations: To comply with applicable laws and regulations.

4. Sharing Your Data

We may share your personal data with third parties in the following circumstances:

Service providers: We may share your data with trusted third-party service providers who help us operate our website, process payments, manage our database, or provide other services.
Legal compliance: If required by law, we may share your personal data with authorities for compliance with legal processes or to protect our rights, safety, and property.
Business transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred.

We ensure that any third parties with whom we share your data comply with the GDPR and provide adequate protection for your privacy.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. For example, we may keep order details for accounting purposes and to comply with tax laws.

6. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete information about you.
Right to Erasure: You can request that we delete your personal data, subject to certain exceptions (e.g., for legal or legitimate business reasons).
Right to Restrict Processing: You can ask us to restrict the processing of your personal data under certain circumstances.
Right to Data Portability: You can request that we transfer your personal data to another service provider in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your personal data for marketing purposes or on the basis of legitimate interests.
Right to Withdraw Consent: If you have given consent for specific processing activities, you can withdraw that consent at any time.

If you wish to exercise any of these rights, please contact us at [email address]. We will respond to your request as required by applicable law.

7. Security of Your Data

We implement appropriate technical and organizational measures to safeguard your personal data from unauthorized access, alteration, disclosure, or destruction. While we strive to protect your information, no method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and display personalized content and advertisements. You can manage your cookie preferences through your browser settings. For more information, please refer to our [Cookie Policy].

9. International Data Transfers

As part of our services, your data may be transferred to and stored in countries outside the European Economic Area (EEA). When we transfer your data outside of the EEA, we ensure that it is protected in accordance with GDPR, by implementing safeguards such as Standard Contractual Clauses.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a notice on our website. We encourage you to review this policy periodically to stay informed about how we are protecting your personal data.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

info@grabeh.eu