Privacy Policy
Protecting your privacy is of the utmost importance to Ecoffee (Luproo S.à.r.l.-S) (hereinafter referred to interchangeably as “Customer’s Store Name” and “we,” “Data Controller”). We are committed to protecting your privacy when you visit our website or place orders online.
Ecoffee provides products and services and acts as the Data Controller for the personal data you provide when placing an order.
You can contact Ecoffee’s Data Protection Officer using the contact form at the bottom of this page.
This Privacy Policy explains how your personal data is collected, processed, and shared when you visit the website or place an order on ecoffee-luxembourg.sumupstore.com (hereinafter referred to as the “Website”).
Types of Personal Data We Collect
When you make or attempt to make a purchase through the Website, we collect certain information about you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. This information is referred to as “Order Information.”
When you visit the Website, we automatically collect certain information about your device, including data about your web browser, your IP address, your time zone, and certain cookies stored on your device. In addition, as you browse the Website, we collect information about the specific pages or products you view, the websites or search terms that directed you to the Website, as well as data about how you interact with the Website. This data, which is collected automatically, is referred to as “Device Information.”
We collect device information using the following technologies:
- ‘Cookies’ are data files that are stored on your device or computer; they usually contain a unique, anonymous identifier. For more information about cookies and how to disable them, please visit allaboutcookies.org.
- ‘Log files’ record activity on the website and collect data, including your IP address, the type of browser you use, your internet service provider, the pages you enter and exit the site from, and timestamps.
‘Web beacons’ or ‘pixels’ are electronic files used to record information about how you navigate the website.
Terms and conditions governing the processing of your personal data
Order Information is generally processed for the purpose of fulfilling orders placed on the Website (including for the purposes of processing your payment details, managing delivery arrangements, and issuing invoices and/or order confirmations). Furthermore, this Order Information is processed in order to:
- to communicate with you;
- to monitor orders in order to detect any potential risks or fraud; and
- to send you information or marketing communications about our products and services, provided that such communications are in line with the preferences you have shared with us.
We process your data in order to fulfil our contractual obligations towards you (for example, when you place an order on our website), or to otherwise protect our legitimate business interests as set out above.
Collecting device information (in particular your IP address) enables us to detect potential risks and fraud, and more generally to improve and optimise the website (for example, by analysing data on how our users navigate and interact with the website), and to assess the impact of our marketing and advertising campaigns.
Sharing of your personal data
We share your personal data with third parties so that we can process it in accordance with the terms set out above. For example, we use SumUp to improve our online shop. We also use Google Analytics to understand how our customers use the Website. For more information on how Google uses your personal data, click here. You can also opt out of Google Analytics by clicking here.
We may share data under contracts entered into with service providers who assist with certain aspects of our business. These contracts stipulate that the service providers in question are only permitted to process your personal data for the purposes of the services they provide on our behalf and are prohibited from using it for their own benefit.
Similarly, we may disclose your personal data in order to comply with a legal or regulatory requirement, a summons, a search warrant and/or any other legitimate request for information that we receive, or to protect our rights in any other way.
International data transfers
We may transfer the data we collect about you to third parties acting on our behalf who are located in countries outside the European Economic Area (‘EEA’) or in countries deemed by the European Commission to offer an adequate level of data protection. It is possible that these other countries may not offer the same level of protection for the data collected about you; however, we will continue to collect, store and process your data at all times in accordance with this Privacy Policy and the applicable data protection legislation. We will ensure that data is only shared with organisations that provide an appropriate level of data protection in accordance with the relevant data protection legislation, and that satisfactory contractual arrangements are put in place with those parties.
Your rights
If you are subject to the GDPR, you have the right to access the personal data we hold about you and the right to rectify, update and erase that data; you also have the right to request that the processing of your data be stopped, and to object to profiling and the automated processing of your data; vous disposez en outre du droit à la limitation du traitement et au transfert de vos données (droit à la portabilité) dans certaines circonstances. Pour exercer un de ces droits, veuillez nous contacter aux coordonnées figurant ci-dessous.
You have the right at any time to withdraw your consent to the processing of your personal data where the legal basis for such processing is your consent, by contacting the Data Protection Officer (DPO) at the address provided.
To exercise any of these rights, please contact us using the contact form below.
You also have the right to lodge a complaint with the relevant supervisory authority.
A list of the relevant authorities in each country can be found on the European Commission’s website.
Data retention
When you place an order via the Website, we retain the order details for as long as is necessary to fulfil our services or for as long as required by applicable law. At the end of this period, your personal data will be deleted.
Changes
We reserve the right to amend this Privacy Policy from time to time, for example, to reflect changes in our practices or for any other operational, legal or regulatory reasons.
Contact us
For further information about our privacy practices, or if you have any questions or complaints, please contact us using the contact form below.