Privacy Notice
This privacy policy explains the type, scope, and purpose of processing personal data (hereinafter referred to as “data”) in connection with the provision of our services, as well as within our online offering and its related websites, functions, and content, including external online presences such as our social media profiles (collectively referred to as the “Online Offering”). The terminology used, such as “processing” or “controller,” is based on the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Controller
Robinson Guerra (for DREAVERR Digital Solutions LLP)
Email: [email protected]
Types of Data Processed
Inventory Data: e.g., names, addresses.
Contact Data: e.g., email addresses, phone numbers.
Content Data: e.g., text entries, photographs, videos.
Usage Data: e.g., visited websites, access times.
Meta/Communication Data: e.g., device information, IP addresses.
Payment Data: e.g., credit card details, billing address, transaction details (processed by Paddle).
Categories of Data Subjects
Visitors and users of the Online Offering (hereinafter collectively referred to as “users”).
Purpose of Processing
To provide the Online Offering, its functions, and content.
To process payments and deliver services related to the payment provider Paddle.
To respond to contact inquiries and communicate with users.
To implement security measures.
For reach measurement and marketing purposes.
Use of the Payment Provider Paddle
To process payments, we use the payment provider Paddle, which acts as a “reseller” on our behalf. Paddle collects and processes payment data such as credit card details, transaction information, and billing addresses to handle transactions and comply with legal obligations. Paddle’s privacy policy is available at Paddle Privacy Policy.
Legal Bases
The processing of personal data is based on the GDPR:
Consent under Article 6(1)(a) GDPR.
Fulfillment of contractual obligations under Article 6(1)(b) GDPR (e.g., payment processing through Paddle).
Compliance with legal obligations under Article 6(1)(c) GDPR.
Protection of legitimate interests under Article 6(1)(f) GDPR (e.g., fraud prevention).
Security Measures
We implement technical and organizational measures to ensure an appropriate level of security, taking into account the risks to the rights and freedoms of natural persons. Paddle employs its own security measures to safeguard payment data confidentiality and integrity.
Data Sharing
Personal data is shared with Paddle only to the extent necessary for payment processing. Paddle processes this data in compliance with legal requirements. Further sharing occurs only when legally required or necessary for fulfilling contractual obligations.
Data Transfers to Third Countries
Data may be transferred to third countries (outside the EU, EEA, or Switzerland) as part of payment processing through Paddle. Paddle ensures that all data transfers comply with GDPR, for example, through Standard Contractual Clauses.
Data Subject Rights
Under applicable data protection laws, you have the following rights:
Access your processed data and obtain copies.
Rectify inaccurate data.
Request deletion of your data.
Restrict the processing of your data.
Transfer your data to another controller (data portability).
Withdraw your consent at any time with future effect.
Object to data processing for direct marketing or based on legitimate interests.
File a complaint with a supervisory authority.
Cookies and Opt-out for Advertising
Cookies are used to enable functionality and analytics. Cookies set by Paddle for payment processing are necessary. Users can disable cookies in their browser settings, which may limit the functionality of the Online Offering.
Data Retention
Data is deleted in accordance with legal requirements when it is no longer necessary for the purposes for which it was collected. For data processed by Paddle, Paddle’s retention policies apply.
Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect changes in Paddle’s policies or legal requirements. Users will be notified of significant changes.
