Privacy Policy

1. General Information

1.1. This Privacy Policy sets forth the procedures by which SIA Aruba (hereinafter – the Controller) processes personal data in the online store.

1.2. The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Personal Data Processed

The Controller may process the following personal data:

• first name, last name;
• contact information (email, phone number);
• delivery address / pickup point;
• payment information (payment status, not card details);
• IP address and technical data.

3. Purposes of Personal Data Processing

Personal data is processed in order to:

• ensure the processing and delivery of orders;
• facilitate payments;
• comply with legal requirements;
• review complaints and warranty claims.

4. Data Retention Period

Personal data is retained for as long as necessary to achieve the relevant purpose or for the period specified in applicable laws and regulations.

5. Disclosure of Personal Data to Third Parties

Personal data may be disclosed to:

• payment service providers;
• delivery service providers;
• government authorities in cases specified by law.

6. Rights of the Data Subject

The data subject has the right to:

• request access to the data;
• request the correction or deletion of the data;
• restrict processing.

7. Data Security

The Controller shall implement appropriate technical and organizational measures to protect personal data.