Privacy Policy
GDPR Compliance Statement - https://www.carlat.com/
At our company, we are committed to protecting the privacy and personal data of our customers and website visitors. This GDPR compliance statement outlines how we collect, use, store, and process personal data in accordance with the requirements of the General Data Protection Regulation (GDPR).
-
Data Collection and Purpose: We collect personal data, such as names, contact information, and other relevant details, only for legitimate business purposes, including order processing, customer support, and marketing communication. We do not collect any sensitive personal data without explicit consent.
-
Data Protection Measures: We have implemented appropriate technical and organizational measures to ensure the security and confidentiality of personal data. These measures include secure data storage, restricted access controls, and regular monitoring and updates to our systems.
-
Data Retention: We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
-
Data Sharing: We may share personal data with trusted third-party service providers, such as shipping companies, payment processors, or marketing agencies, strictly for the purpose of providing our services. We ensure that these third parties also comply with GDPR regulations.
-
Individual Rights: Under the GDPR, individuals have the right to access, rectify, and delete their personal data held by us. They also have the right to object to the processing of their personal data and to withdraw consent at any time.
-
Lawful Basis for Processing: We rely on various lawful bases for processing personal data, including consent, contract fulfillment, and legitimate interests. We ensure that the processing of personal data is always proportionate and respects the rights of individuals.
-
Data Transfers: In the event of data transfers outside the European Economic Area (EEA), we will ensure that appropriate safeguards, such as standard contractual clauses or Privacy Shield certification, are in place to protect the transferred data.
-
Contact Information: For any inquiries, requests, or concerns regarding the processing of personal data or GDPR compliance, please contact our Data Protection Officer at [contact email/phone].
Website and data processing operator GEMEX trading, SIA, Reg. No. 40103661189, Riga, Aleksandra Čaka street 81, LV-1011, Latvia
