Privacy Policy
1. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Eldasio
Franke Trading UG (haftungsbeschränkt)
Ericusspitze 4
20457 Hamburg
Germany
Email: info@eldasio.com
For any questions regarding data protection, you can reach us at info@eldasio.com.
2. Principles of Data Processing
We collect and process personal data only to the extent necessary to provide our services or where you have given us your consent. Processing always takes place in accordance with the GDPR and any applicable national data protection law.
3. Data We Collect and Legal Basis
3.1 Order Processing
When you place an order, we collect: name, delivery address, email address, phone number, payment information, and order history.
Legal basis: Article 6(1)(b) GDPR (performance of a contract). This data is required to process your order. Data relevant for tax purposes may be retained for longer periods under Article 6(1)(c) GDPR (statutory retention obligations).
3.2 Customer Account
If you create a customer account, we collect: email address, password (encrypted), name, and address details.
Legal basis: Article 6(1)(b) GDPR. Account data is stored until the account is deleted, unless statutory retention obligations require a longer period.
3.3 Newsletter and Email Marketing
If you subscribe to our newsletter, we collect your email address and, optionally, your first name.
Legal basis: Article 6(1)(a) GDPR (consent). You can withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us at info@eldasio.com. Newsletter data is stored until consent is withdrawn.
3.4 Contact
When you contact us by email or through a contact form, we collect your name, email address, and the content of your message.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in responding to inquiries), or Article 6(1)(b) GDPR where the inquiry relates to an existing contract. Contact data is deleted once your inquiry has been fully resolved, and no later than three years afterward.
3.5 Website Analytics
When you visit our website, technical data may be collected, such as IP address, browser type, operating system, pages visited, and time spent on the site.
Legal basis: Article 6(1)(a) GDPR (consent via cookie banner) for non essential analytics tools. Essential cookies required for the technical operation of the shop are processed under Article 6(1)(f) GDPR (legitimate interest).
4. Recipients of Your Data
We only share your data with third parties where necessary to fulfil a contract, where you have consented, or where we are legally obligated to do so. This may include our e-commerce platform provider, payment service providers, and shipping carriers involved in delivering your order. These providers process your data only on our instructions and are contractually bound to data protection obligations.
5. Cookies
Our website uses cookies. Essential cookies, needed for functions such as the shopping cart and checkout, do not require consent and are processed under Article 6(1)(f) GDPR. Optional cookies, for example for analytics, are only set with your consent, which you can manage or withdraw at any time through your browser settings.
6. Your Rights
You have the right to request access to the personal data we hold about you (Article 15 GDPR), to request correction of inaccurate data (Article 16 GDPR), to request deletion of your data (Article 17 GDPR), to request restriction of processing (Article 18 GDPR), to receive your data in a portable format (Article 20 GDPR), and to object to processing based on legitimate interest (Article 21 GDPR). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
To exercise any of these rights, contact us at info@eldasio.com. We aim to respond to all requests within 30 days.
7. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. As our business is based in Hamburg, the responsible authority is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig Erhard Str. 22
20459 Hamburg
Germany
8. Data Security
We use technical and organizational security measures to protect your data against loss, misuse, and unauthorized access. Our website uses SSL/TLS encryption for data transmission.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or our services. The current version is always available on our website.