PRIVACY POLICY

PRIVACY POLICY

At Worimelaxa, we take the protection of your personal data seriously. This Privacy Policy explains what data we collect when you visit our store or place an order, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Who Is Responsible for Your Data

The controller responsible for processing your personal data is:

EREN-25 SRL
Rue Raphaël 13
1070 Anderlecht
Belgium
Email: info@worimelaxa.com
Phone: +4915907956317

2. What Data We Collect

Data you give us

When you create an account, place an order or contact us, we collect information such as your name, delivery and billing address, email address and phone number. When you pay, we receive the information needed to process your payment. If you write to us, we keep a record of your message and our reply.

Data we collect automatically

When you visit our website, certain technical information is collected automatically. This includes your IP address, browser type, device information, the pages you visit and the time of your visit. We also record details of your orders, such as the date, the items purchased and the amount paid.

Data from third parties

We may receive information about you from service providers who help us run our store, such as payment providers and shipping companies, for example to confirm that a payment was successful or that a parcel was delivered. If you interact with us on social media, we may receive information about that interaction from the platform.

3. Why We Use Your Data and Our Legal Basis

We only process your personal data when we have a legal basis to do so. We use your data for the following purposes:

Processing and delivering your orders, including payment, shipping and customer service. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Communicating with you about your order, returns or questions you send us. Legal basis: performance of a contract and our legitimate interest in good customer service (Art. 6(1)(b) and (f) GDPR).

Sending you newsletters and offers, only if you have signed up. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.

Improving our website and shopping experience, for example through analytics. Legal basis: your consent where cookies are involved, otherwise our legitimate interest (Art. 6(1)(a) and (f) GDPR).

Preventing fraud and protecting our store. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

Meeting legal obligations, such as tax and accounting requirements. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Who We Share Your Data With

We never sell your personal data. We only share it where this is necessary to run our store, and only with:

Shipping companies, who receive your name, address and, where needed, your email address or phone number so they can deliver your parcel and send you delivery updates.

Payment providers, who process your payment securely. They handle your payment details under their own privacy policies.

Technical service providers, such as our website hosting and email providers, who process data on our behalf and are contractually bound to protect it.

Authorities, where we are legally required to share information.

5. Cookies

Our website uses cookies and similar technologies. Cookies that are strictly necessary for the website to function, such as those that remember your shopping cart, are always active. Other cookies, such as those for analytics or marketing, are only set with your consent, which you give through our cookie banner. You can change or withdraw your consent at any time, and you can also delete or block cookies in your browser settings.

6. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes described above. Order and invoice data is kept for as long as required by Belgian tax and accounting law, which is generally up to 10 years. Data used for marketing is kept until you unsubscribe or withdraw your consent. Your customer account remains active until you ask us to delete it.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: You can ask us what data we hold about you.

Right to rectification: You can ask us to correct inaccurate or incomplete data.

Right to erasure: You can ask us to delete your data, unless we are legally required to keep it.

Right to restriction: You can ask us to limit how we use your data.

Right to data portability: You can ask to receive your data in a common, machine readable format.

Right to object: You can object to processing based on our legitimate interest and to direct marketing at any time.

Right to withdraw consent: Where you have given consent, you can withdraw it at any time. This does not affect processing carried out before the withdrawal.

To exercise any of these rights, simply email us at info@worimelaxa.com. We may need to verify your identity, and we will reply within one month.

You also have the right to lodge a complaint with a data protection supervisory authority. Our lead authority is the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, Belgium. You can also contact the supervisory authority in the German federal state where you live.

8. Data Security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses SSL encryption, which you can recognise by the lock symbol in your browser's address bar. Please note that no transmission over the internet can be guaranteed to be completely secure.

9. Transfers Outside the EU

Some of our service providers may process data outside the European Economic Area. Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission or the EU Standard Contractual Clauses.

10. Children

Our store is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If we learn that we have collected such data without parental consent, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example when our services or legal requirements change. The current version is always available on this page.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

EREN-25 SRL
Rue Raphaël 13, 1070 Anderlecht, Belgium
Email: info@worimelaxa.com
Phone: +4915907956317