Thank you for your interest in how we handle your data.
Table of Content
1. Definitions used in this Policy
2. Data protection principles we follow
3. What rights do you have regarding your Personal Data
4. What Personal Data we gather about you
5. How we use your Personal Data
6. Who else has access to your Personal Data
7. How we secure your data
8. Information about cookies
9. Contact information
Personal Data. Any information relating to an identified or identifiable natural person.
Processing. Any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
Data subject. A natural person whose Personal Data is being Processed.
Child. A natural person under 18 years of age.
Anonymization. By modifying the data, identification of a data subject is no longer possible.
Pseudonymization. Modification of data in such a way that it is no longer possible to allocate it to a certain data subject without additional supplementary information.
Activity data. Data stored about the user’s activities.
Analytical tools. Programs allowing analyses of user behavior.
Cookies. A cookie is a small file browsers use to store information about a user’s interaction with a site.
Read more on our Cookies Policy page.
Collector. The natural person or legal entity that, alone or jointly, determines the purposes and means of the processing of personal data.
Processor. The natural person or legal entity that processes personal data on behalf of the controller.
Supervisory authority. The independent public authority responsible for monitoring the application of this GDPR.
Data Protection Officer (DPO). The natural person responsible for overseeing data protection strategy and implementation to ensure compliance with GDPR requirements.
Data Protection Principles
We follow the following data protection principles:
• We are thoughtful about the Personal Data we ask you to provide and the Personal Data that we collect about you through the operation of the Site.
• Processing is limited to the purpose. Our Processing activities fit the purpose for which Personal Data was gathered.
• Processing is done with minimal data. We only gather and Process the minimal amount of Personal Data required for any purpose.
• Processing is limited with a time period. We will not store your personal data for longer than needed.
• We aim for full transparency on how we gather, use, and share your Personal Data.
• We will do our best to ensure the integrity and confidentiality of data.
Data Subject’s rights
The Data Subject has the following rights:
• Right to access – meaning you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your Personal Data gathered.
• Right to rectification – meaning you have the right to request rectification or erasure of your Personal Data that is inaccurate or incomplete.
• Right to erasure – meaning in certain circumstances you can request for your Personal Data to be erased from our records.
• Right to information – meaning you have to right to know whether your Personal Data is being processed; what data is gathered, from where it is obtained and why and by whom it is processed.
• Right to restrict processing – meaning where certain conditions apply, you have the right to restrict the Processing of your Personal Data.
• Right to object to processing – meaning in certain cases you have the right to object to Processing of your Personal Data, for example in the case of direct marketing.
• Right to object to automated Processing – meaning you have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right you can exercise whenever there is an outcome of the profiling that produces legal effects concerning or significantly affecting you.
• Right to data portability – you have the right to obtain your Personal Data in a machine-readable format or if it is feasible, as a direct transfer from one Processor to another.
• Right to lodge a complaint – in the event that we refuse your request under the Rights of Access, we will provide you with a reason as to why. If you are not satisfied with the way your request has been handled please contact us.
• Right for the help of the supervisory authority– meaning you have the right for the help of a supervisory authority and the right for other legal remedies such as claiming damages.
• Right to withdraw consent – you have the right withdraw any given consent for Processing of your Personal Data.
To apply a request regarding your privacy visit our Privacy Center.
Data we collect
Information provided by you
• Basic Account Information: We require individuals who sign up for a Site account to provide an email address.
• Contact information: – Whenever you places an information request to us, your name and email.
• Newsletter: When you subscribe to our newsletter service, your email and preferences.
• Order & Payment Information: When you place an order to us:
• Billing Data: your first and last name, the billing address, phone and email.
• Invoice Data: Company name, full address, phone, VAT number and other data required by law.
(When your order is completed, you’ll receive by email the corresponding downloadable document proving your purchase. In case, during the ordering process, you choose Receipt (default), the document will have the above billing data, otherwise, choosing Invoice, then the Invoice Data will replace the Billing Data in document.)
• Shipping Data (tangible goods, only): Receiver’s first and last name, the shipping address, phone and email.
• Refund Data: In case of tangible returnable products we collect: your email and full name, account no., IBAN, bank’s name and SWIFT.
1. We do not collect any data regarding credit/debit cards, since we use third parties services to fulfill such payments.
Surveys: We may, from time to time, offer surveys and opinion polls and ask you to provide information about your experience and feedback for our services. Information requested for entry may include personal contact information such as your name, email, address, phone number, etc. Participation is entirely voluntary and it’s up to you whether you choose to disclose any information or not.
Other information collected about you automatically
• Website Analytics tools: We may use analytics services by third parties to collect information about the use of this Site. Analytics tools use tracking technologies (like cookies) to recognize your device and compile information about you. They collect information such as what pages you visit and how much time you spend on these pages, the IP address assigned to you, what operating system and web browser you use, and what website you visited prior to visiting our Site.
• Information Logs: When you visit the Site, view content provided by us, use our services, ask us a question, request technical assistance in regards to our services, send us an email or participate in a survey on our website, we automatically collect and store certain information in log files. This includes your IP address, URL, referral URL, exit URL, browser software, operating system, date/time, requests type to our Site and error responses returned by our Site.
• Social Media: We may also get information about you from other sources. For example, if you create or log into your account on our Site through another service (like Facebook), we will receive information from that service (such as your username, basic profile information, and friends list) via the authorization procedures used by that service. The information we receive depends on which services you authorize and any options that are available.
Information from our partners
We might gather information from our trusted partners with confirmation that they have legal grounds to share that information with us. This is either information you have provided them directly with or that they have gathered about you on other legal grounds.
Publicly available information
We might gather information about you that is publicly available.
How we use your Personal Data
We use your Personal Data in order to:
• Register and maintain your account;
• Charge you for any purchased product;
• Provide you with promotional products and services at your request and communicating with you in relation to them;
• Communicate and interact with you; and notifying you of changes to any products and services.
• To further develop and improve our Site–for example by adding new features that we think our users will need;
• To monitor, analyze and better understand how users interact with our Site, which helps us improve our Site and make it easier to use;
• To measure, gauge, and improve the effectiveness of our advertising, and better understand user feedback–for example, we may analyze how many individuals purchased a product after receiving a marketing message (newsletter) or the features used by those who continue to use our Site after a certain period of time;
• To monitor and prevent any problems with our Site, protect the security of our Site, detect and prevent fraudulent transactions and other illegal activities, fight spam, and protect our rights and property and others, which may result in declining by us of a transaction or the use of our Site;
• To communicate with you, for example through an email, about offers and promotions offered by us and others we think will be of interest to you, solicit your feedback, or keep you up to date on us and our products; and
We will inform you of any further Processing and purposes.
Who else can access your Personal Data
We do not share your Personal Data with strangers. Personal Data about you is in some cases provided to our trusted partners in order to either make providing the service to you possible or to enhance your customer experience. We share your data with:
Our processing partners
• SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain. – The Site’s processor.
• Google Analytics is a freemium web analytics service offered by Google that tracks and reports website traffic.
We only work with Processing partners who are able to ensure adequate level of protection to your Personal Data.
Our business partners
• United Parcel Service, Inc., (UPS) is a USA multinational package delivery company.
• PayPal Holdings, Inc. is a USA company operating a worldwide online payments system.
• Authorize.Net is a USA-based payment gateway service provider allowing merchants to accept credit card.
We use Personal Data to PayPal or Authorize.net services to fulfill your payments by debit/credit cards. We do not provide any of your Personal Data to them. They independently from us collect information about you.
Other entities that may access your Personal Data
We may disclose your Personal Data to third parties or public officials when we are legally obliged to do so. We might disclose your Personal Data to third parties if you have consented to it or if there are other legal grounds for it.
How we secure your data
We do our best to keep your Personal Data safe. We use safe protocols for communication and transferring data (such as HTTPS). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and attacks.
Even though we try our best we can not guarantee the security of information. However, we promise to notify suitable authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur.
If you have an account with us, note that you have to keep your username and password secret.
How long we keep your Personal Data
For the purposes for which you have expressed your consent to the collection and use of your Personal Data, we will process your data for that purpose until you withdraw your consent to the processing for that purpose. However, we will retain the strictly necessary data if we are required to retain this data for (i) the defense of our rights in the courts, or (ii) the reporting to the competent authorities.
In the case of orders (and corresponding invoices) containing your Personal Data issued in view / execution of the mutual obligations related to a purchase of products on our Site, we will keep them as long as they are necessary according to the purpose and according to the legal provisions.
We do not intend to collect or knowingly collect information from children. We do not target children with our services. We do not sell products, provide services under the age of 18. If you are under the age of 13, you are not allowed to use the Site and you must request your parent or guardian to use the Site instead.
Address: 11, Ion Berindei str., build 1-2, entr. D, ap. 114
Sector 2, Bucharest , Romania
SiteGround Spain S.L.
Calle de Prim 19, 28004
B-dul G-ral. Gheorghe Magheru 28-30
Sector 1, cod postal 010336 Bucuresti, Romania
Tel: +40.318.059.211 / 212
Data Protection Officer (DPO)
Theodore Maroulis firstname.lastname@example.org