Privacy Policy
1. Introduction
At Raileu-Rope, accessible at raileu-rope.com, we are committed to safeguarding your privacy and protecting the personal data you entrust to us. We recognize the importance of transparency and accountability in the handling of your information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Scope and Data Controller
This Privacy Policy applies to all personal data we collect through our website, raileu-rope.com, and related services. For the purposes of applicable data protection laws, Raileu-Rope is the “data controller” of your personal data, which means we determine the purposes and means of processing that data.
If you have any questions regarding this policy or our data handling practices, you may contact us at [email protected].
3. Categories of Data We Collect and Process
We may collect and process the following categories of personal data:
a) Usage Data
Includes information about how you use our website, such as IP address, browser type, operating system, referral URLs, pages visited, access timestamps, and session duration.
b) Account Data
When you register an account or place an order, we collect your name, email address, phone number, billing address, and shipping address.
c) Profile Data
Includes your account preferences, purchase history, browsing habits, product interests, and behavioral interactions with raileu-rope.com.
d) Communication Data
Comprises correspondence through support channels, contact forms, emails, and records of your interactions with our customer service teams.
e) Technical Data
Includes device identifiers, system configuration details, browser plugins, network provider, and connection type.
f) Transaction Data
Contains information related to purchases and transactions made through our platform, including payment method, invoice data, delivery status, and fulfillment logistics.
g) Preference Data
Includes marketing communication preferences, language settings, and consent to receive newsletters, promotions, and notifications.
4. Legal Bases for Processing
We process your personal data only when legally permitted under relevant data protection legislation. The legal bases include:
– Consent: For example, when you opt-in to receive marketing communications or cookies.
– Contractual necessity: For processing required to fulfill a contract, such as delivering a purchase or managing your customer account.
– Legal obligation: Where we are required to comply with applicable laws, tax regulations, or court orders.
– Legitimate interests: Where processing is necessary for business purposes such as fraud prevention, service improvement, analytics, or ensuring website security, provided these do not override your rights.
5. Your Rights
Subject to certain limitations and conditions, you have the following rights regarding your personal data:
– Right of Access: You may request confirmation of the personal data we process about you and obtain a copy of that data.
– Right of Rectification: You may request that we correct inaccurate or incomplete personal data.
– Right to Erasure: You may request deletion of your personal data, where legally permissible.
– Right to Restriction: You may request a restriction on the processing of your data in specific circumstances.
– Right to Data Portability: You may request that your data be transmitted to another controller where technically feasible.
– Right to Object: You may object to processing based on legitimate interests or direct marketing purposes.
To exercise any of your rights, please contact us at [email protected].
6. Security Measures
We implement appropriate technical and organizational security measures to protect your personal data, including industry-standard encryption, access controls, secure server environments, anonymization where applicable, routine system backups, and regular staff training on data security practices.
7. International Transfers
Your personal information may be transferred to and stored in countries outside of your residence, including jurisdictions that may not provide the same level of data protection. In such cases, we use standard contractual clauses (SCCs) approved by the European Commission or other recognized mechanisms to ensure lawful and secure data transfers in accordance with GDPR and other regional regulations.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or to comply with legal, contractual, or regulatory obligations. Retention periods vary by data type:
– Account Data: Retained for the duration of the customer relationship and up to 7 years thereafter for regulatory compliance
– Transaction Data: Retained for 7 years for accounting and audit purposes
– Communication Data: Retained for up to 3 years after last contact
– Preference Data: Retained until consent is withdrawn or after 2 years of inactivity
– Usage and Technical Data: Retained for up to 26 months for analytics purposes
9. Cookie Policy
Raileu-rope.com uses cookies and similar technologies to enhance your browsing experience and improve our services. Cookies we use include:
– Essential Cookies: Required for website functionality such as navigation and secure access
– Functional Cookies: Enhance usability by remembering user preferences
– Analytics Cookies: Collect aggregated data about website usage
– Performance Cookies: Measure system performance and usage trends to optimize services
10. Cookie Management and Compliance
Consent for non-essential cookies is requested in accordance with GDPR and CCPA regulations. You may manage your cookie preferences through our website’s cookie banner or through your browser settings. To opt out of browser-based tracking, you can adjust your Do Not Track settings or utilize available cookie management tools. California residents may also opt out through a “Do Not Sell or Share My Personal Information” mechanism provided on our site.
11. Children’s Privacy
Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal data from such individuals. If you believe that a child under 13 has provided us with personal information, please contact us at [email protected], and we will take appropriate steps to delete such data.
12. Policy Updates
We may amend this Privacy Policy as necessary to remain compliant with evolving legal standards or to reflect substantive changes in our practices. Any significant updates will be posted on raileu-rope.com, and where required by law, we will notify users through email or site banner notifications.
13. Contact
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at:
Email: [email protected]
We are fully committed to upholding your privacy rights in accordance with all applicable regulations. If you have any privacy concerns, please don’t hesitate to reach out.