Pursuant to Article 4 of Regulation (EU) 2016/679 ("GDPR"), the data controller of personal data collected through this website is:

Homeluxech

Website: homeluxech.com

E-mail: customer@homeluxech.com

Phone: +1 (281) 706-7579

Address: 1519 Corral Dr, Houston, TX 77090, United States

The data controller determines the purposes and methods of processing personal data in compliance with Regulation (EU) 2016/679 ("GDPR"), the Personal Data Protection Code, and other applicable data protection legislation.

For some processing activities, we may use external service providers who operate, where applicable, as data processors pursuant to Article 28 of the GDPR.

1. Introduction

This GDPR Policy describes how we process personal data collected through this website and related services.

The protection of personal data is a fundamental element of our commitment to users. All personal data is processed in compliance with the principles of lawfulness, fairness, transparency, and security provided for by Regulation (EU) 2016/679 ("GDPR") and applicable Italian legislation.

This policy applies to all personal information collected during website browsing, account registration, placing an order, requesting assistance, filling out contact forms, and any other interaction with our services.

We invite users to also carefully read our Privacy Policy and Cookie Policy, which complement the information provided in this document and describe in detail the methods of collection, use, and management of personal data and tracking technologies.

Use of the site implies acknowledgement of this GDPR Policy.

2. Principles of data processing

We process personal data in full compliance with the principles established by Article 5 of the GDPR.

In particular, we commit to ensuring that all processing takes place according to the following principles:

• Lawfulness, fairness, and transparency, ensuring that data is processed solely on the basis of a valid legal condition and with clear methods towards the data subject.
• Purpose limitation, collecting data exclusively for specific, explicit, and legitimate purposes.
• Data minimization, limiting collection to only personal data strictly necessary to provide the requested services.
• Accuracy, taking reasonable measures to ensure that personal data is up-to-date and correct.
• Storage limitation, retaining data only for the period necessary to achieve the purposes for which it was collected or for the time required by applicable legislation.
• Integrity and confidentiality, protecting data through appropriate technical and organizational measures against unauthorized access, loss, alteration, or disclosure.
• Accountability, adopting internal procedures and organizational measures suitable to demonstrate compliance with GDPR requirements.

All processing is carried out in compliance with the fundamental rights and freedoms of data subjects.

3. What data we collect

We collect only the personal data necessary to enable the proper functioning of the site, order management, and the provision of requested services.

The categories of data that may be collected include:

Identification data

• Name and surname;
• Account information, where available.

Contact data

• E-mail address;
• Phone number;
• Any information provided during communications with customer service.

Shipping and billing data

• Delivery address;
• Billing address;
• City;
• State/Province;
• Postal code;
• Country.

Order information

We may collect information related to purchases made, including:

• products ordered;
• amounts paid;
• order status;
• purchase history;
• return or refund requests;
• delivery preferences.

Payment information

Payments are processed through specialized providers.

We do not store or have access to full credit or debit card details.

We may only receive limited information necessary to confirm transaction authorization or manage any refunds.

Technical data

During browsing, we may automatically collect certain technical information, including:

• IP address;
• browser type;
• operating system;
• browser language;
• device used;
• date and time of access;
• pages visited;
• referring URL;
• browsing times;
• diagnostic data.

This data is primarily used to ensure site security, improve its performance, and analyze the proper functioning of services.

Cookies and similar technologies

The site uses Cookies and similar technologies as described in the Cookie Policy.

Non-essential Cookies are only installed with the user's prior consent, when required by applicable law.

Consent can be modified or revoked at any time through the tools made available on the site.

Communications with customer service

When the user contacts us via email, contact form, or other assistance channels, we may process the information contained in the request, including any subsequent communications, solely for the purpose of providing assistance and responding to received requests.

Limitation of collection

We collect only the personal data strictly necessary to provide the requested services, comply with legal obligations, improve the user experience, and ensure the proper functioning of the site.

We do not intentionally collect data exceeding the purposes indicated in this GDPR Policy.

4. Purposes of processing

Personal data collected through the site is processed exclusively for determined, explicit, and legitimate purposes, in compliance with Regulation (EU) 2016/679 ("GDPR") and applicable Italian legislation.

In particular, data may be used for:

Order management

• receiving and managing placed orders;
• confirming purchases;
• processing user requests;
• organizing product preparation.

Shipping and delivery

Personal data is used to:

• organize shipping;
• coordinate order delivery;
• communicate any updates regarding shipping status;
• manage any logistical issues.

Payment processing

Necessary information is transmitted to payment service providers exclusively to:

• authorize transactions;
• verify payments;
• prevent fraudulent operations;
• manage any refunds.

Customer assistance

Data may be processed to:

• respond to information requests;
• provide support before and after purchase;
• manage complaints, returns, and refunds;
• improve the quality of customer service.

Site security

Technical data may be used to:

• protect the site from unauthorized access;
• identify suspicious activities;
• prevent fraud and improper use;
• ensure the security of information systems.

Compliance with legal obligations

Personal data may be processed when necessary to:

• comply with tax obligations;
• comply with accounting and administrative obligations;
• comply with requests from competent authorities;
• exercise or defend a right in court.

Site improvement

We may use aggregated or anonymized data to:

• analyze site performance;
• improve browsing experience;
• develop new features;
• optimize offered services.

Commercial communications

With the user's consent, where required by applicable law, we may send:

• newsletters;
• promotional offers;
• commercial communications;
• updates on products or services.

Consent may be revoked at any time without affecting the lawfulness of processing carried out before revocation.

5. Legal basis

All processing of personal data is carried out exclusively on the basis of one of the conditions for lawfulness provided for by Article 6 of the GDPR.

The main legal bases are as follows.

Performance of a contract

Processing is necessary to:

• manage orders;
• process payments;
• make deliveries;
• provide assistance related to purchases;
• to fulfill the obligations arising from the contractual relationship.

Fulfillment of legal obligations

Processing may be necessary to comply with obligations under European or Italian law, including those relating to:

• taxation;
• accounting;
• administration;
• consumer protection;
• fraud prevention.

Legitimate interest

We may process some personal data when it is necessary to pursue legitimate interests, such as:

• ensuring site security;
• preventing illicit use;
• improving service quality;
• managing any disputes;
• protecting our rights.

Such processing is carried out only after verifying that the fundamental rights and freedoms of the data subject do not prevail.

Consent

Where required by applicable law, processing takes place only with the user's prior consent.

This may concern, for example:

• Non-essential cookies;
• marketing activities;
• newsletters;
• promotional communications.

Consent may be revoked at any time.

Vital interests

In exceptional circumstances and in cases provided for by law, processing may be carried out to protect the vital interests of the data subject or of other individuals.

All processing is carried out in compliance with the GDPR, the Personal Data Protection Code, and other applicable provisions.

6. Data Retention

We retain personal data exclusively for the period necessary to achieve the purposes indicated in this GDPR Information Notice.

The retention period may vary depending on the nature of the data processed and the obligations stipulated by current legislation.

In particular, data may be retained:

• for the time necessary to execute the contract;
• for order management;
• for after-sales assistance;
• to fulfill tax and accounting obligations;
• for the protection of rights in case of disputes;
• for the periods provided for by Italian and European law.

Data processed based on consent will be retained until such consent is revoked, unless otherwise required by law.

At the end of the applicable retention periods, personal data will be:

• deleted;
• anonymized;
• or retained only when required by law.

We adopt periodic procedures to verify that data is not retained longer than necessary.

7. Data Sharing

Personal data is shared only when necessary for the purposes indicated in this GDPR Information Notice.

Data may be communicated to the following categories of recipients.

Payment service providers

Strictly necessary information may be shared with authorized providers responsible for payment processing.

These entities operate according to their own security standards and in compliance with applicable law.

Shipping and logistics services

To enable order delivery, some information may be communicated to couriers and logistics service providers.

The information shared is limited to the data necessary to carry out the delivery.

Technology service providers

We may share data with providers who support the website's operation, including:

• hosting;
• cloud infrastructures;
• technical maintenance;
• cybersecurity;
• platform management;
• analytics services.

Professional consultants

When necessary, data may be shared with tax, accounting, or legal consultants exclusively to comply with legal obligations or protect our rights.

Competent authorities

Personal data may be communicated to public authorities when required by current legislation or legally binding provisions.

Prohibition of data sale

We do not sell, rent, or transfer users' personal data to third parties for commercial purposes.

Obligations of recipients

Third-party service providers are authorized to process personal data only to the extent necessary to perform the activities entrusted to them.

When required by the GDPR, these entities operate as data processors pursuant to Article 28 of Regulation (EU) 2016/679 and are bound by contractual obligations of confidentiality, security, and personal data protection.

8. International Data Transfers

Some service providers used for the operation of the website, order management, payment processing, hosting, technical assistance, or other related services may be based or process personal data in countries outside the European Economic Area (EEA).

If it becomes necessary to transfer personal data to such countries, we adopt the safeguards provided for in Articles 44 et seq. of the GDPR.

Depending on the case, these safeguards may include:

• adequacy decisions adopted by the European Commission;
• Standard Contractual Clauses (SCCs);
• additional technical and organizational measures capable of ensuring a level of protection substantially equivalent to that provided by the GDPR.

International transfers are carried out only when necessary for the provision of the requested services or to comply with obligations under applicable law.

Before making such transfers, we evaluate, where necessary, the level of protection offered by the destination country and adopt the measures required by current legislation.

9. Special Categories of Data

We do not intentionally collect special categories of personal data as defined in Article 9 of Regulation (EU) 2016/679 ("GDPR"), such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data, data concerning health or sexual life.

We urge users not to transmit such information through the website, contact forms, or communications with customer service, except when strictly necessary.

If the user voluntarily provides special categories of personal data, such information will be processed exclusively to the extent necessary to manage the received request, in compliance with applicable law and adopting appropriate protection measures.

10. Data Subject Rights

Pursuant to Articles 12-22 of the GDPR, the data subject may at any time exercise the rights recognized by applicable personal data protection legislation.

In particular, the data subject has the right to:

Right to information

Receive clear, transparent, and understandable information about how their personal data is processed.

Right of access

Obtain confirmation as to whether or not personal data concerning them is being processed and receive a copy of the information subject to processing, within the limits provided by law.

Right to rectification

Request the correction or updating of inaccurate or incomplete personal data.

Right to erasure ("right to be forgotten")

Request the erasure of personal data in the cases provided for in Article 17 of the GDPR.

Right to restriction of processing

Obtain the restriction of processing in the cases provided for in Article 18 of the GDPR.

Right to data portability

Receive personal data provided in a structured, commonly used, and machine-readable format, and request its transmission to another data controller when technically feasible.

Right to object

Object to the processing of personal data in the cases provided for in Article 21 of the GDPR.

Right to withdraw consent

Where processing is based on consent, the data subject may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

Right to lodge a complaint

The data subject has the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data violates the GDPR or applicable Italian law.

In Italy, you can contact the Garante per la protezione dei dati personali (Italian Data Protection Authority).

To exercise your rights, you can contact us at the email address provided in the "Contacts" section. Requests will be handled within the timeframes provided by current legislation.

11. Automated Decision-Making and Profiling

Unless otherwise indicated in this GDPR Information Notice or required by applicable law, we do not adopt decision-making processes based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect data subjects pursuant to Article 22 of the GDPR.

Any statistical analysis activities, content personalization, or improvement of the browsing experience are carried out in compliance with current legislation and, when required, exclusively with the user's prior consent.

12. Data Security

We adopt appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or illicit use.

These measures may include, where applicable:

• access control systems;
• management of authorizations and access levels;
• use of secure connections and security protocols;
• confidentiality measures applied to personal data;
• monitoring the security of information systems;
• internal procedures aimed at protecting information.

Security measures are periodically reviewed and updated, where appropriate, to ensure a level of protection adequate to the risks arising from the processing of personal data.

Despite the adoption of adequate security measures, no electronic transmission or storage system can guarantee absolute protection against every possible risk.

13. Changes to this GDPR Information Notice

This GDPR Information Notice may be updated or modified at any time to reflect:

• changes in applicable European or Italian legislation;
• updates to the services offered through the website;
• changes in the methods of personal data processing;
• updates to security measures or internal procedures;
• organizational or operational needs.

The updated version will be published on this page and will become effective from the date of publication.

We invite users to periodically consult this information notice to stay updated on how personal data is processed.

14. Contact us

For any questions regarding this GDPR Policy, the processing of personal data, or the exercise of your GDPR rights, we invite users to contact us preferably by email. We will do our best to respond as quickly as possible during business hours.

Website: Homeluxech

Website: Homeluxech

Domain: homeluxech.com

Email: customer@homeluxech.com

Phone: +1 (281) 706-7579

Address: 1519 Corral Dr, Houston, TX 77090, United States

Customer service hours: Monday to Friday, 09:00 to 18:00.

This GDPR Policy applies to all services and activities carried out through the website and must be read in conjunction with the Privacy Policy, Cookie Policy, and other policies published on the website.