Privacy Policy

Data Controller Information

Solaras B.V. is the Data Controller for the personal data processed through our platform. Our contact details are:

Data Collection

The data we collect includes personal information that you provide directly to us and information that is automatically collected when you use our platform. We collect this information to provide and improve our e-commerce services, process transactions, and communicate with you effectively.

Information You Provide

• Account registration information (name, email address, phone number)
• Billing and shipping addresses
• Payment information (processed securely through our payment providers)
• Communication preferences and marketing consents
• Customer service inquiries and feedback
• Product reviews and ratings

Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, click patterns)
• Cookies and similar tracking technologies
• Location data (with your consent)
• Transaction history and purchase behaviour

How We Use Your Information

We explain how we use your information in accordance with our legitimate business interests and legal obligations. The use of your data enables us to provide excellent service, improve our platform, and ensure a secure shopping experience for all users.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To fulfil our obligations under our terms of service and process your orders
• Legitimate Interest: To improve our services, prevent fraud, and ensure platform security
• Legal Compliance: To comply with applicable laws and regulations
• Consent: For marketing communications and non-essential cookies (where required)

Purposes of Processing

• Processing and fulfilling orders
• Providing customer support and service
• Improving and personalising user experience
• Fraud prevention and security monitoring
• Marketing communications (with your consent)
• Analytics and platform optimisation
• Compliance with legal and regulatory requirements

Data Sharing and Third Parties

We may share your personal data with trusted third-party service providers who help us operate our platform and provide services to you. These partners are contractually bound to protect your data and use it only for the specified purposes.

Categories of Recipients

• Payment processors and financial institutions
• Shipping and logistics providers
• Cloud hosting and infrastructure providers
• Customer service and support platforms
• Analytics and marketing service providers
• Legal and professional advisors (when required)
• Regulatory authorities (when legally required)

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection standards
• Certification schemes and codes of conduct
• Other legally recognised transfer mechanisms

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention periods vary based on the type of data and the purpose for which it was collected.

Retention Periods

• Account Information: Retained while your account is active and for 3 years after account closure
• Transaction Records: Retained for 7 years for accounting and tax purposes
• Marketing Data: Retained until you withdraw consent or for 3 years of inactivity
• Website Analytics: Anonymised after 14 months
• Customer Service Records: Retained for 3 years for quality and training purposes

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data. You can exercise these rights by contacting us at privacy@solaras.top.

Your Data Protection Rights Include

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Data Portability: Request transfer of your data in a structured format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

We will respond to your requests within one month. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and provide personalised content. For detailed information about our use of cookies, please refer to our Cookie Policy.

You can manage your cookie preferences through your browser settings or our cookie consent banner. Please note that disabling certain cookies may affect the functionality of our website.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication procedures
• Employee training on data protection and security
• Incident response and breach notification procedures
• Compliance with industry security standards (PCI DSS, ISO 27001)

Children's Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions about this privacy policy, want to exercise your data protection rights, or need to contact us regarding data protection matters, please contact us using the information below:

We aim to respond to all privacy-related inquiries within 48 hours during business days. For urgent data protection matters, please call our main number and request to speak with our data protection team.