Privacy Policy

Last Updated: [24/08/2024]

Introduction

Alvoire we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.alvoire.com, and interact with our services. Please read this policy carefully to understand our views and practices regarding your personal data and how we treat it.

Data Controller

The data controller responsible for your personal data is:
Alvoire
Brückenstraße 1,
Lüerdissen, 37635,
Germany
Email: legal@alvoire.com

Data We Collect

We may collect and process the following data about you:

1. Personal Identification Information:
   Name, address, email address, telephone number, and other contact details.
2. Financial Information:
   Payment information such as credit card details, billing address, and transaction history.
3. Technical Data:
   IP address, browser type, operating system, device type, and other technical data automatically collected through cookies and other tracking technologies.
4. Usage Data:
   Information about how you use our website, products, and services, including your browsing actions and patterns.
5. Marketing and Communication Data:
   Preferences in receiving marketing from us, your communication preferences, and records of any correspondence with us.

How We Use Your Data

We use your personal data for the following purposes:

1. To Fulfill Orders and Provide Services:
   To process transactions, deliver products, provide customer support, and manage your account.
2. To Improve Our Services:
   To understand how our customers use our website and to enhance the user experience through analysis and research.
3. Marketing and Communication:
   To send you promotional content, newsletters, and other communications that may be of interest to you, provided you have given your consent.
4. Legal Compliance:
   To comply with legal obligations, such as record-keeping, tax obligations, and responding to lawful requests from public authorities.
5. Fraud Prevention and Security:
   To protect against and prevent fraud, unauthorized transactions, claims, and other liabilities, and to manage exposure to risks by verifying your identity and implementing security measures.

Data Sharing and Disclosure

We may share your personal data with:

1. Service Providers:
   Third-party vendors and service providers who perform functions on our behalf, such as payment processing, shipping, marketing, and IT services, under strict data protection agreements.
2. Legal Obligations:
   Government authorities, regulators, or other third parties when required by law, regulation, or legal process, or to protect the rights, property, or safety of Alvoire, our customers, or others.
3. Business Transfers:
   In the event of a merger, acquisition, or sale of all or a portion of our business, your personal data may be transferred to the new owners.

International Data Transfers

Your personal data may be transferred to, stored, and processed in a country other than the one in which it was collected, including countries outside the European Economic Area (EEA). We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs), are in place.

Data Security

We implement a variety of security measures to ensure the safety of your personal data:

1. Encryption:
   All personal data transmitted between your browser and our website is encrypted using Secure Socket Layer (SSL) technology.
2. Access Controls:
   Access to personal data is restricted to authorized personnel only and is granted based on the principle of least privilege.
3. Data Anonymization and Pseudonymization:
   Where possible, we anonymize or pseudonymize personal data to enhance security and privacy.
4. Regular Security Audits:
   We conduct regular security audits and vulnerability assessments to identify and address potential risks.
5. Data Backups:
   We maintain secure backups of personal data to ensure data integrity and availability in the event of a data loss incident.
6. Incident Response Plan:
   We have a robust incident response plan in place to respond promptly and effectively to any data breaches or security incidents. This includes notifying affected individuals and relevant authorities as required by law.

User Responsibility for Data Security

While Alvoire takes extensive measures to secure your personal data, it is important to understand that the security of your data also depends on you. Alvoire cannot guarantee the security of your data during transmission or storage if you fail to take necessary precautions. This responsibility includes, but is not limited to:

1. Maintaining Strong Passwords:
   You are responsible for choosing strong, unique passwords for your accounts and for keeping them confidential. We recommend regularly updating your passwords and using two-factor authentication where possible.
2. Safeguarding Your Devices:
   Ensure that the devices you use to access our services are secure, updated, and protected against malware. This includes using up-to-date antivirus software and avoiding the use of unsecured networks.
3. Monitoring Account Activity:
   Regularly monitor your account for any suspicious activity. If you suspect any unauthorized use or breach of security, notify us immediately.
4. Care in Sharing Personal Data:
   Be cautious when sharing personal data over the internet. Avoid sharing sensitive information unless you are confident in the security of the communication channel.

Legal Basis and References

Under the General Data Protection Regulation (GDPR), the responsibility for data security is shared between the data controller (Alvoire) and the data subject (you). Article 32 of the GDPR outlines the security of processing, emphasizing that both controllers and processors must implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. However, it also implicitly acknowledges that the effectiveness of these measures depends on the context and the cooperation of the data subject.

Furthermore, the principle of “Accountability” under Article 5(2) GDPR requires both the controller and the data subject to be responsible for complying with data protection principles, including security.

By using our website and services, you agree to take reasonable measures to protect your own data and understand that Alvoire cannot be held liable for breaches of data security that arise due to your failure to adhere to these responsibilities.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the nature of the data and the purposes for which it was collected.

Your Data Protection Rights

You have the following rights regarding your personal data:

1. Right to Access:
   You can request a copy of the personal data we hold about you.
2. Right to Rectification:
   You can request that we correct any inaccurate or incomplete data.
3. Right to Erasure:
   You can request that we delete your personal data, subject to certain conditions.
4. Right to Restrict Processing:
   You can request that we limit the processing of your personal data under certain circumstances.
5. Right to Data Portability:
   You can request that we transfer your personal data to another organization or directly to you.
6. Right to Object:
   You can object to the processing of your personal data where we rely on legitimate interests or for direct marketing purposes.
7. Right to Withdraw Consent:
   Where we rely on your consent to process your data, you have the right to withdraw your consent at any time.
8. Right to Lodge a Complaint:
   You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection laws.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience, gather usage data, and deliver personalized content and advertising. You can control cookies through your browser settings and opt-out of certain cookies through our cookie consent manager.

Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices of these third-party services. We encourage you to read their privacy policies before providing any personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. We will notify you of any significant changes by posting the new policy on our website and updating the “Last Updated” date. Your continued use of our website following the posting of changes constitutes your acceptance of such changes.

Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:

Alvoire
Brückenstraße 1,
Lüerdissen, 37635,
Germany
Email: legal@alvoire.com