General Data Protection Regulation (GDPR) Compliance Policy

Last Updated: September 1, 2025

Introduction

Celorivora ("we," "us," or "our") is committed to protecting and respecting your privacy. This GDPR Compliance Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (EU) 2016/679.

This policy applies to all individuals whose personal data we process, including website visitors, customers, subscribers, and users of our services.

Data Controller Information

Celorivora acts as the data controller for the personal data we collect and process. For questions regarding this policy or your data rights, please contact us at:

Email: contact@celorivora.com

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

Consent: You have given explicit consent for us to process your personal data for specific purposes.

Contract Performance: Processing is necessary to fulfill our contractual obligations to you or to take steps at your request before entering into a contract.

Legal Obligation: Processing is required to comply with applicable laws and regulations.

Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.

Personal Data We Collect

We may collect and process the following categories of personal data:

Identity and Contact Information

This includes your name, email address, phone number, postal address, username, and similar identifiers.

Technical Data

We collect IP addresses, browser type and version, device information, operating system, time zone settings, browser plug-in types and versions, and other technology on the devices you use to access our services.

Usage Data

This includes information about how you use our website, products, and services, including page views, click patterns, time spent on pages, and navigation paths.

Marketing and Communications Data

We collect your preferences for receiving marketing communications from us and your communication preferences.

Transaction Data

This includes details about payments, subscriptions, purchases, and services you have obtained from us.

How We Use Your Personal Data

We use your personal data for the following purposes:

Service Delivery: To provide, maintain, and improve our services, process transactions, and manage your account.

Communication: To communicate with you about your account, respond to inquiries, provide customer support, and send service-related notifications.

Marketing: To send you promotional materials, newsletters, and other marketing communications where you have consented or where we have a legitimate interest.

Analytics and Improvement: To analyze usage patterns, conduct research, and improve our website, products, and services.

Security: To detect, prevent, and address technical issues, fraud, and security incidents.

Legal Compliance: To comply with legal obligations, respond to lawful requests, and enforce our terms and policies.

Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

Service Providers

We engage third-party service providers to perform functions on our behalf, including hosting, data analysis, payment processing, email delivery, and customer service. These providers have access to personal data only as needed to perform their functions and are obligated to maintain confidentiality.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

Legal Requirements

We may disclose your personal data when required by law, regulation, legal process, or governmental request, or when necessary to protect our rights, property, or safety, or that of others.

With Your Consent

We may share your personal data with third parties when you have provided explicit consent for such sharing.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) that may not offer the same level of data protection. When we transfer data internationally, we implement appropriate safeguards, including:

Standard Contractual Clauses approved by the European Commission.

Ensuring the recipient is located in a country deemed adequate by the European Commission.

Implementing other legally recognized transfer mechanisms.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods vary depending on the type of data and the purpose for processing. When determining retention periods, we consider:

The nature and sensitivity of the personal data.

The purposes for which we process the data.

Whether we can achieve those purposes through other means.

Applicable legal, regulatory, tax, accounting, or other retention requirements.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes collected or when you withdraw consent.

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at contact@celorivora.com. We will respond to your request within one month, though this period may be extended by two additional months where necessary, taking into account the complexity and number of requests.

We may request specific information from you to confirm your identity before processing your request. This is a security measure to ensure personal data is not disclosed to unauthorized persons.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

Encryption of data in transit and at rest.

Regular security assessments and audits.

Access controls and authentication mechanisms.

Employee training on data protection and security.

Incident response and breach notification procedures.

While we strive to protect your personal data, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.

Automated Decision-Making and Profiling

We do not engage in automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you, unless we have obtained your explicit consent, such processing is necessary for entering into or performing a contract, or it is authorized by applicable law with suitable safeguards in place.

If we use automated processing, you have the right to request human intervention, express your point of view, and contest the decision.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of our services. You can manage your cookie preferences through your browser settings. For detailed information about our use of cookies, please refer to our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Data Protection Officer

We have appointed a Data Protection Officer to oversee our compliance with data protection laws. If you have questions about this policy or our data practices, you may contact our Data Protection Officer at contact@celorivora.com.

Changes to This Policy

We may update this GDPR Compliance Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your personal data. Your continued use of our services after changes have been posted constitutes your acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this GDPR Compliance Policy or our data processing practices, please contact us: