1. Introduction
Eterolia (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit eterolia.com (the “Website”) or purchase our products.
2. Data Controller
The data controller responsible for your personal data is: Eterolia
Email: eterolia@eterolia.com
3. Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Data you provide directly:
- Identity Data: Name, surname, title.
- Contact Data: Email address, phone number, shipping/billing address.
- Financial Data: Payment card details (processed securely by our payment service providers; we do not store full card data).
- Transaction Data: Details of purchases, order history, refund requests.
- Communication Data: Messages sent via contact forms, email, or social media.
3.2 Data collected automatically:
- Technical Data: IP address, browser type and version, time zone, operating system.
- Usage Data: Pages visited, click patterns, time spent on the Website, referring website.
- Cookies & Tracking Technologies: See our Cookie Policy for details.
3.3 Data from third parties:
- Social media platforms (if you interact with us via social media).
- Analytics providers (e.g., Google Analytics).
- Payment processors (e.g., PayPal, Stripe).
4. How We Use Your Personal Data
We process your data only when we have a legal basis under GDPR:
| Purpose | Legal Basis |
|---|---|
| Processing and delivering your orders | Contract performance |
| Managing payments and preventing fraud | Legitimate interests |
| Sending order updates and service messages | Contract performance |
| Responding to inquiries and support | Legitimate interests |
| Sending marketing emails (if consented) | Consent |
| Improving our website and products | Legitimate interests |
| Complying with legal obligations | Legal obligation |
5. Marketing Communications
- We will only send you marketing emails if you have given explicit consent (e.g., by subscribing to our newsletter).
- You can withdraw consent at any time by clicking “unsubscribe” in any email or contacting us at eterolia@eterolia.com.
- We do not sell, rent, or trade your personal data with third parties for marketing purposes.
6. Data Sharing and Transfers
We may share your data with:
6.1 Service providers:
- Payment processors (PayPal, Stripe)
- Shipping companies (e.g., postal services)
- IT and cloud service providers (hosting, email services)
- Analytics providers (Google Analytics – anonymized data where possible)
6.2 Legal requirements:
We may disclose your data if required by law, court order, or to protect our rights and safety.
6.3 International transfers:
If we transfer data outside the European Economic Area (EEA), we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses).
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of sensitive data (SSL/TLS)
- Secure payment processing
- Regular security assessments
- Access controls and staff training
8. Data Retention
We retain your personal data only as long as necessary for the purposes outlined, including legal, accounting, or reporting requirements.
| Data Type | Retention Period |
|---|---|
| Customer orders | 7 years (for tax and legal compliance) |
| Marketing consents | Until withdrawal of consent |
| Website analytics | Up to 26 months |
| Customer service inquiries | 3 years after resolution |
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right to access – Request a copy of your personal data.
- Right to rectification – Request correction of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) – Request deletion of your data under certain conditions.
- Right to restrict processing – Request limitation of processing in specific situations.
- Right to data portability – Receive your data in a structured, machine-readable format.
- Right to object – Object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent – Withdraw consent at any time (where processing is based on consent).
To exercise your rights, contact us at eterolia@eterolia.com.
We will respond within 30 days.
10. Cookies and Tracking Technologies
We use cookies to enhance your browsing experience. For detailed information, see our separate Cookie Policy.
11. Children’s Privacy
Our Website is not intended for individuals under 16 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately.
12. Third-Party Links
Our Website may contain links to third-party websites. This Privacy Policy does not apply to those sites. Please review their privacy policies separately.
13. Changes to This Privacy Policy
We may update this policy periodically. The updated version will be posted on this page with a new “Last updated” date.
14. Contact & Complaints
For questions or to exercise your rights:
Email: eterolia@eterolia.com
*This Privacy Policy is compliant with the GDPR (Regulation (EU) 2016/679).*