1. Data Controller
The controller responsible for processing personal data on this website is:
EDIGOODS UG (haftungsbeschränkt)
Taubenstraße 16
14974 Ludwigsfelde
Germany
Represented by:
Edmunds Ozols, Managing Director
E-mail: info@edigoods.com
2. General Information About Data Processing
We process personal data only where this is necessary to operate and secure the website, respond to inquiries, take steps requested before entering into a contract, fulfil contractual obligations or comply with legal requirements.
Personal data means any information relating to an identified or identifiable natural person.
The legal bases referred to in this Privacy Policy are based on Article 6 of the General Data Protection Regulation (GDPR).
3. Website Hosting and Server Log Files
This website is hosted by:
Nano IT SIA
Latgales iela 240
Riga, LV-1063
Latvia
When the website is accessed, the hosting server may automatically process technical information required to deliver and secure the website. This information may include:
- IP address;
- date and time of access;
- requested page or file;
- referrer URL;
- browser type and version;
- operating system;
- device information;
- access status and transferred data volume.
This processing is necessary to provide the website, maintain technical stability, detect misuse and protect the website against attacks.
Legal basis:
Article 6(1)(f) GDPR — our legitimate interest in providing a secure and functional website.
Server log data is retained only for as long as necessary for website operation, security, error analysis and the investigation of misuse, unless longer retention is required by law or necessary for the establishment, exercise or defence of legal claims.
A data processing agreement must be maintained with the hosting provider where required by Article 28 GDPR.
4. Contact by Email
If you contact us by email, we process the information you provide, including your email address, message content and any other information included in your communication.
The data is processed to review and respond to your inquiry and to conduct further business communication where appropriate.
Legal bases:
- Article 6(1)(b) GDPR where the communication relates to steps requested before entering into a contract or to an existing contractual relationship;
- Article 6(1)(f) GDPR for other business communications, based on our legitimate interest in responding to inquiries and maintaining business relationships;
- Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation.
The data is retained for as long as necessary to process the inquiry and any resulting business relationship. Data may be retained for longer where statutory retention obligations apply or where this is necessary for the establishment, exercise or defence of legal claims.
5. Contact Form
When you use the contact form, we process the information entered into the form.
The contact form currently requests:
- full name;
- company name;
- business email address;
- country;
- area of interest;
- subject;
- message content;
- confirmation that the Privacy Policy has been read.
Technical security information may also be processed to protect the form against misuse and automated submissions.
The data is processed to review the inquiry, respond to the sender, take requested pre-contractual steps and maintain necessary business communication.
Legal bases:
- Article 6(1)(b) GDPR where the inquiry concerns possible contractual cooperation or an existing contractual relationship;
- Article 6(1)(f) GDPR for other business inquiries, based on our legitimate interest in responding to communications and protecting the contact form from misuse.
The contact-form checkbox confirms that the Privacy Policy has been read. It is not consent to advertising and does not subscribe the sender to a newsletter or mailing list.
Submitted information is sent to info@edigoods.com using the website server operated through the hosting environment. Contact-form information is not used for unrelated marketing purposes.
The data is retained for as long as necessary to process the inquiry and any resulting business relationship. Statutory retention obligations and the need to establish, exercise or defend legal claims may require longer retention.
6. Protection Against Automated Submissions
The contact form uses Cloudflare Turnstile to distinguish legitimate users from automated submissions and protect the website against spam and misuse.
The service is provided by:
Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
United States
Turnstile may process technical signals such as:
- IP address;
- browser and user-agent information;
- TLS and device-related signals;
- website or site-key information;
- verification time and result;
- other technical security information required to detect automated activity.
Cloudflare states that Turnstile does not access, store or transmit the contents entered into the contact form.
Turnstile is loaded only where it is required to protect the contact form.
Purpose of processing:
- prevention of spam and automated submissions;
- protection of the contact form and website infrastructure;
- detection and prevention of misuse;
- maintenance of website security.
Legal basis:
Article 6(1)(f) GDPR — our legitimate interest in securing the website and preventing abusive or automated submissions.
Where access to or storage of information on the user's device is strictly necessary to provide the requested security-protected contact form, the processing is based on § 25(2) TDDDG.
Cloudflare may process information in the United States or other countries. Where personal data is transferred outside the European Economic Area, Cloudflare states that it relies on recognised transfer mechanisms, including the EU-U.S. Data Privacy Framework and, where applicable, the European Commission's Standard Contractual Clauses.
Further information:
Cloudflare Privacy Policy:
https://www.cloudflare.com/privacypolicy/ (opens in a new tab)
Cloudflare Turnstile Privacy Addendum:
https://www.cloudflare.com/turnstile-privacy-policy/ (opens in a new tab)
7. Form Security and Misuse Prevention
To protect the contact form, technical security measures may process limited information connected with a submission, including:
- submission time;
- security verification result;
- technical request information;
- IP-derived or pseudonymised rate-limiting information;
- indicators of automated or abusive behaviour.
This information is used only to detect misuse, prevent repeated automated submissions and maintain the security of the website.
Legal basis:
Article 6(1)(f) GDPR — our legitimate interest in preventing spam, fraud, technical attacks and misuse of the contact form.
Security information is retained only for as long as necessary to detect and prevent misuse, unless longer retention is necessary for the investigation of an incident or the defence of legal claims.
Rate-limiting data must not be used for advertising, visitor profiling or unrelated analytics.
8. Recipients and Service Providers
Personal data may be processed by service providers where this is necessary to operate, secure or maintain the website.
Current service providers may include:
Nano IT SIA
Website hosting, server infrastructure and email-related technical services.
Cloudflare, Inc.
Turnstile security verification for protection against automated contact-form submissions.
Service providers may process personal data only for the agreed purposes and in accordance with applicable data-protection requirements.
Personal data is not sold.
9. International Data Transfers
The website hosting provider is located in Latvia, a Member State of the European Union.
Cloudflare is a provider established in the United States and operates an international infrastructure. Personal data may therefore be processed outside the European Economic Area.
Where required, international transfers are based on an adequacy decision, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses or another legally recognised transfer mechanism.
10. Cookies and Similar Technologies
This website does not currently use optional analytics or advertising cookies.
Technically necessary storage or access may be used where required for website security, operation or the protection of the contact form.
Cloudflare Turnstile is used only for security verification. It must not be configured with optional Pre-Clearance unless this Privacy Policy and the website's cookie requirements are reviewed and updated beforehand.
If analytics, advertising, embedded media or other optional services are introduced in the future, they must not be activated before the relevant data-protection information and, where required, a consent-management mechanism have been implemented.
11. Automated Decision-Making
We do not use personal data submitted through the website for automated decision-making or profiling within the meaning of Article 22 GDPR.
Automated security checks may determine whether a contact-form submission appears to be generated by a bot. These checks are used only to protect the form against spam and misuse and do not make contractual, financial or other similarly significant decisions about individuals.
12. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected.
The applicable retention period may depend on:
- the duration of the inquiry or business communication;
- whether a contractual relationship is established;
- statutory commercial or tax-retention requirements;
- the need to establish, exercise or defend legal claims;
- technical security and incident-response requirements.
When personal data is no longer required and no legal obligation or legitimate reason for further retention exists, it is deleted or anonymised.
13. Your Data Protection Rights
Subject to the legal requirements, you may have the right to:
- request access to your personal data under Article 15 GDPR;
- request correction of inaccurate data under Article 16 GDPR;
- request deletion under Article 17 GDPR;
- request restriction of processing under Article 18 GDPR;
- receive data in a portable format under Article 20 GDPR;
- object to processing based on legitimate interests under Article 21 GDPR;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a data-protection supervisory authority under Article 77 GDPR.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact:
info@edigoods.com
14. Right to Object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
We will then stop processing the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
15. Right to Lodge a Complaint
You have the right to lodge a complaint with a data-protection supervisory authority.
The supervisory authority responsible for EDIGOODS is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
E-mail: Poststelle@LDA.Brandenburg.de
Website: https://www.lda.brandenburg.de/ (opens in a new tab)
16. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure or unauthorised access.
Website communication must use encrypted HTTPS connections.
No method of transmission or storage can guarantee absolute security. Security measures are reviewed and adapted where necessary.
17. Changes to This Privacy Policy
This Privacy Policy may be updated when legal requirements, website functions, hosting arrangements or service providers change.
The current version is published on this page. The date of the latest update is shown at the beginning of the Privacy Policy.
18. Data Protection Contact
If you have questions about this Privacy Policy or the processing of your personal data, contact:
EDIGOODS UG (haftungsbeschränkt)
E-mail: info@edigoods.com