Privacy Policy for Kongra-Gel.com
1. Introduction
At Kongra-Gel.com (“we,” “us,” or “our”), we are firmly committed to safeguarding your privacy and protecting your personal data. This Privacy Policy outlines our practices for collecting, using, storing, and disclosing your information. We recognize the importance of transparency and accountability in data handling. All processing of personal information is carried out in accordance with applicable privacy laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), as amended.
By accessing or using our website, kongra-gel.com, you acknowledge that you have read and understood this Privacy Policy and agree to the terms outlined herein.
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all users of kongra-gel.com, including visitors, registered users, purchasers, and individuals communicating with us via email or other means. Kongra-Gel.com is the data controller for the purposes of GDPR and is responsible for determining the purposes and means of processing your personal data.
For questions or concerns about how we process your personal data, you may reach us at: [email protected].
3. Categories of Data Processed
We may process the following categories of personal and technical data:
a) Usage Data
This includes data about how you interact with our website, such as IP address, browser type and version, time zone settings, referer URLs, pages visited, and session duration.
b) Account Data
This includes personal details you provide during account registration or profile setup, including your full name, address, email address, and telephone number.
c) Profile Data
Data derived from your behavior and interaction with our site, including preferences, purchase history, wishlists, items in your cart, and behavioral analytics.
d) Communication Data
Records of contact you make with us, including support inquiries, submitted forms, customer service conversations, and related correspondence.
e) Technical Data
Information related to the devices you use to access the website, including hardware models, operating system versions, browser configurations, screen resolution, and mobile carrier (if applicable).
f) Transaction Data
This includes information required to process payments and manage orders, such as billing and shipping details and the status of purchases.
g) Preference Data
Your choices regarding marketing communications, newsletters, subscriptions, and expressed interests in specific products or features.
4. Legal Bases for Processing
We rely on several legal bases to lawfully process personal data under the GDPR:
– Consent: Where you have affirmatively given us permission to process your data for a particular purpose (e.g., subscribing to newsletters).
– Contractual Necessity: Where processing is required to perform a contract with you (e.g., to deliver an order or manage your account).
– Legal Obligation: When processing is necessary to comply with relevant laws and regulations.
– Legitimate Interests: We may process your data in furtherance of our legitimate business interests, provided such interests are not overridden by your fundamental rights and freedoms, such as ensuring network security, fraud prevention, customer service enhancement, and website analytics.
Under the CCPA, we do not sell personal information. We may “share” data for cross-site marketing or advertising purposes only in accordance with applicable laws and with your prior consent where required.
5. Your Rights
Subject to limitations under applicable laws, you are entitled to a range of rights regarding your personal data:
– Right of Access: You may request copies of the personal data we hold about you.
– Right to Rectification: You are entitled to request correction of inaccurate or incomplete information.
– Right to Erasure: Also known as the “right to be forgotten,” you can request deletion of your data where there is no legal basis for its retention.
– Right to Restrict Processing: You may request we halt data processing under certain circumstances while we evaluate your request.
– Right to Data Portability: Where technically feasible, you may request a copy of your data in a portable format to transfer elsewhere.
– Right to Object: You can object to certain data uses, especially concerning direct marketing.
To exercise these rights, please contact us at [email protected]. We may require verification of your identity before processing such requests.
6. Security Measures
We have implemented robust technical, organizational, and administrative safeguards to protect your personal data against unauthorized access, loss, misuse, alteration, or destruction. These measures include, but are not limited to:
– End-to-end encryption of data transmissions and secure infrastructure layers
– Role-based access control for personnel handling personal data
– Regular system monitoring, logging, and updates to proactively identify security gaps
– Firewalls, multi-factor authentication, and anti-malware defense
All relevant employees and contractors receive mandatory data protection training to maintain regulatory and technical compliance.
7. International Transfers
Given the global nature of the internet, your data may be transferred to, and stored in, countries outside the European Economic Area (EEA). Where such transfers occur, we ensure compliance via Standard Contractual Clauses approved by the European Commission or through other legally recognized mechanisms.
For individuals subject to the CCPA, data access by external service providers or processors is strictly governed under contractual terms ensuring data privacy obligations remain enforced.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, regulatory, or operational requirements.
– Usage Data: Retained for up to 26 months for analytics and optimization purposes.
– Account and Profile Data: Retained while the account remains active and for up to 6 years thereafter for record-keeping or compliance.
– Communication Data: Retained for up to 3 years for support history and accountability.
– Transaction Data: Retained for 7 years to satisfy accounting and legal obligations.
– Preference Data: Retained until the user revokes consent or modifies preferences.
Once retention periods expire, we securely delete or anonymize the data.
9. Cookie Policy
Kongra-Gel.com uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device to collect standard internet log and visitor behavior information.
Cookies used include:
– Essential Cookies: Necessary for the functionality of the website, such as login sessions and shopping cart maintenance.
– Functional Cookies: Enable advanced features like product recommendations and user preferences.
– Analytics Cookies: Collect data on website usage to help improve user experience and service offerings; these may include Google Analytics or similar platforms.
– Performance Cookies: Track system performance, identify loading issues, and measure server response times.
10. Cookie Management and Compliance
We comply with GDPR and CCPA requirements by obtaining consent where required before setting non-essential cookies. You have control over your cookie preferences:
– Manage settings via our on-site cookie banner or preferences center
– Adjust browser settings to accept or decline certain types of cookies
– Withdraw consent at any time by clearing cookies or revisiting cookie preferences
Please note, disabling certain cookies may limit the performance and features of kongra-gel.com.
11. Children’s Data
Kongra-Gel.com does not knowingly collect or solicit personal data from children under the age of 13. If we become aware that data from a child under 13 has been collected without verifiable parental consent, we will take immediate steps to delete the data. Parents or guardians who believe their child has provided us with personal information may contact us at [email protected].
12. Policy Updates & Notifications
We reserve the right to update or modify this Privacy Policy from time to time in response to legal, technical, or business developments. All changes will be incorporated into a revised version made available at kongra-gel.com/privacy or a similarly accessible location on our site. We may notify users of material changes via email or on-site notification methods as appropriate.
We encourage you to review this policy periodically to stay informed about our privacy practices.
13. Contact Us
For questions, concerns, or to exercise your data protection rights, you may contact us at:
Email: [email protected]
We are dedicated to full compliance with applicable privacy legislation and are committed to protecting your data in accordance with the highest legal and ethical standards. Please do not hesitate to reach out with any privacy-related inquiries.