Privacy Policy
1. Introduction
Your privacy is important to us. This Privacy & Data Protection Policy explains in detail what personal data we collect from users, how we process it, and how we ensure compliance with data protection regulations. Please read these terms carefully before providing your personal data on this website.
This policy applies exclusively to personal data obtained on the Lowerton website and is not applicable to information collected by third parties, even if linked from our website.
2. Key Takeaways
- Data Collected: We collect personal data such as name, email, IP address, and any information you provide when signing up, subscribing, or contacting us.
- Purpose of Collection: To improve user experience, manage communication, provide services, and ensure legal compliance.
- User Rights: You have the right to access, rectify, erase, restrict, and object to the processing of your data.
- Third-Party Sharing: We do not sell personal data. We may share necessary data with trusted service providers under strict data protection agreements.
- Security Measures: We employ industry-standard security measures to protect your data.
- Policy Updates: Changes to this policy will be communicated via email or on our website.
3. Data Collection and Processing
We collect personal data through:
- Website Forms: Contact forms, subscription forms, and user registrations.
- Cookies & Analytics: We use cookies and analytics tools to improve functionality and user experience.
- User Communications: Emails and direct messages sent to Lowerton.
4. Legal Basis for Data Processing
We process personal data based on:
- User Consent: When you voluntarily provide your data.
- Contractual Obligation: When processing is necessary to fulfill our service commitments.
- Legal Compliance: To meet regulatory requirements.
- Legitimate Interest: To enhance our services, security, and platform functionality.
5. Data Sharing and Third-Party Processors
We do not sell or trade your personal data. However, we may share data with:
- Hosting and Cloud Providers: Webflow for website hosting.
- Analytics Services: Microsoft Clarity, Google Analytics, and Google Search Console for website insights.
- Customer Support Platforms: For managing inquiries and support requests.
Any third-party service provider is bound by confidentiality agreements and GDPR-compliant data processing terms.
6. International Data Transfers
If we transfer personal data outside the European Economic Area (EEA), we ensure:
- Standard Contractual Clauses are in place with third-party providers.
- Additional safeguards such as encryption and anonymization where applicable.
7. Retention Period
We store personal data only as long as necessary for its intended purpose:
- Marketing Data: Retained until the user unsubscribes.
- Account Data: Stored for the duration of account activity and up to 5 years post-deactivation.
- Legal Compliance Data: Retained as per regulatory requirements.
8. Security Measures
We implement:
- Data Encryption: Secure storage and transmission of personal data.
- Access Controls: Role-based access to sensitive data.
- Regular Security Audits: Continuous assessment and improvement of security measures.
9. User Rights
As per GDPR and applicable data protection laws, you have the following rights:
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure ('Right to be Forgotten'): Request deletion of personal data.
- Right to Restriction: Request limited processing of your data.
- Right to Data Portability: Obtain a copy of your data in a structured format.
- Right to Object: Oppose data processing based on legitimate interests.
- Right to Withdraw Consent: Revoke consent at any time.
To exercise these rights, contact us at legal@lowerton.com.
10. Legal Entity Responsible for Data Processing
The legal entity responsible for any data processing activities is:
Lowerton Innovation SL
CIF: B75529032
C/ Lorenzo Areilza 21
48993, Getxo, Bizkaia, Spain
Email: legal@lowerton.com
Phone: +34 615 838 132
11. Complaints to the Supervisory Authority
If you believe your data protection rights have been violated, you can lodge a complaint with the Spanish Data Protection Agency (AEPD):
- Website: www.aepd.es
- Address: C/. Jorge Juan, 6, 28001, Madrid, Spain
- Phone: +34 912 663 517
12. Policy Updates
We may update this Privacy & Data Protection Policy periodically. Users will be notified via email or website notification of any significant changes.
For further inquiries, contact legal@lowerton.com.