ECRATY INVESTMENTS, S.L.U. cares about your privacy. Therefore, we only process data that we need to (improve) our services and handle the information we have collected about you and your use of our services carefully. We never provide your data for commercial purposes to third parties.
This privacy policy applies to the use of the website and the related services of ECRATY INVESTMENTS, S.L.U. The effective date for the validity of these terms is 01/05/2023, and the publication of a new version invalidates all previous versions. This privacy policy describes what data we collect about you, how we use it, and under what conditions we may share it with third parties. We also explain how we store and protect your data against misuse and what rights you have regarding the personal data you have provided to us. If you have any questions about our privacy policy, please contact our privacy representative whose contact information is provided at the end of our privacy policy.
About data processing
Below, you can read about how we process your data, where we store it (if applicable), what security techniques we use, and who has access to the data.
Webshop software
Shopify
Our webshop is developed with software from Shopify. Personal data that you provide to us for our services will be shared with this party. Shopify has access to your data to provide us with technical support, but they will never use your data for any other purpose. Based on the agreement we have signed with Shopify, they are obliged to take appropriate security measures. These security measures include the application of SSL encryption and a strong password policy. Shopify is a certified processor of credit card data. Shopify uses cookies to collect technical information about your use of the software, but no personal data is collected and/or stored. Shopify reserves the right to share collected data within the company to further improve their service. Shopify complies with the applicable legal retention periods for (personal) data. The EU/US Privacy Shield applies, and your data may be processed in the United States.
TransIP
We use the services of TransIP for our regular business email traffic. This party has taken appropriate technical and organizational measures to prevent misuse, loss, and corruption of your and our data as much as possible. TransIP does not have access to our mailbox, and we treat all our email traffic confidentially.
Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
Promotional offers from us
We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing).
You will receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.
Third-party marketing
We will get your express opt-in consent before we share your personal data with any company outside Ecraty Investments group of companies for marketing purposes.
Opting out
You can ask us or third parties to stop sending you marketing messages at any time by contacting us at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.
Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see the respective section below.
Change of purpose
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Data retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Your rights
You have the right to request access to, correction of, erasure of, or restriction of your personal data. You also have the right to object to our processing of your personal data in certain circumstances. In addition, you have the right to data portability, which means you can request that we provide you or a third party with a copy of your identity
Your rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:
-
Request access to your personal data
-
Request correction of your personal data
-
Request erasure of your personal data
-
Object to processing of your personal data
-
Request restriction of processing your personal data
-
Request transfer of your personal data
-
Right to withdraw consent
If you wish to exercise any of the rights set out above, please contact us.
No fee usually required
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Changes to this policy
We may update this privacy policy from time to time to reflect changes to our information practices. We encourage you to periodically review this page for the latest information on our privacy practices.
