1. Introduction
naprecliner (“we”, “our”, or “us”) respects your privacy and is committed to handling your personal data in accordance with applicable European data regulations, including the General Data Protection Regulation (GDPR). This Privacy Policy outlines how we collect, use, store, and share your information when you visit www.naprecliner.com (the “Site”) and purchase our products.
2. Data Controller
For the purposes of applicable European privacy legislation, the data controller responsible for your personal data is naprecliner, operating via www.naprecliner.com. You may contact our data handling team via email at control@naprecliner.com.
3. Information We Collect
We collect information necessary to process transactions, fulfill orders, and communicate with customers. This includes:
Contact and Identification Information: Name, delivery address, billing address, email address, and telephone number.
Transaction and Payment Information: Details regarding purchases made on our Site. All financial transactions are processed directly and confidentially through our designated payment processor, Stripe. We do not store full credit card numbers on our servers; payment credentials are collected and processed directly by Stripe in compliance with rigorous industry standards.
Technical and Usage Data: Browser type, internet protocol (IP) address, time zone settings, and interaction logs with our Site, collected via standard server logs.
4. Legal Basis and Purpose of Data Processing
We process your personal data under the following legal frameworks recognized by European law:
Performance of a Contract: Processing is necessary to fulfill orders, ship items, and manage customer inquiries.
Legal Obligations: Compliance with statutory accounting, tax, and commercial retention mandates.
Legitimate Interests: Improving our offerings and maintaining the operational integrity of our website.
5. Payment Processing via Stripe
To complete transactions on our website, we utilize Stripe as our primary payment service provider. When you make a purchase, your payment data is transmitted directly to Stripe. Stripe processes your data in accordance with its own privacy notices and global compliance standards. We do not retain complete payment card data within our internal systems.
6. Data Retention Period
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, including legal, accounting, or reporting requirements:
Transaction and Financial Records: Retained for a period of up to 10 years in accordance with statutory commercial and tax retention obligations under European and German legal frameworks.
Customer Account and Communication Records: Retained for the duration of our active relationship plus a necessary follow-up window, typically not exceeding 3 years after the last interaction, unless a longer statutory period applies.
Technical Logs: Retained for a limited timeframe, typically not exceeding 12 months, for system maintenance and operational auditing.
7. Your Rights Under European Law
Under the GDPR, European residents possess specific rights regarding their personal data, including:
Right of Access: You may request confirmation of whether we process your data and obtain a copy of such data.
Right to Rectification: You may request the correction of inaccurate or incomplete personal data.
Right to Erasure: You may request the deletion of your personal data under specific conditions.
Right to Restriction: You may request the limitation of data processing under statutory criteria.
Right to Data Portability: You may request the transfer of your data in a structured, commonly used format.
* Right to Object: You may object to the processing of your data based on legitimate interests.
To exercise any of these rights, please contact us at control@naprecliner.com.
8. International Data Transfers
Your data is primarily processed within the European Economic Area (EEA) and Germany. Where data is transferred outside the EEA via our service providers (such as Stripe), such transfers are governed by appropriate legal safeguards, including European Commission-approved Standard Contractual Clauses.
9. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect operational, legal, or regulatory modifications. The current version will be posted on this page with an updated effective date.