GDPR Privacy Policy

1. Data Controller

Elandar Solutions is the data controller for your personal data. We are responsible for determining how and why your personal data is processed.

2. Legal Basis for Processing (Art. 6 GDPR)

You need to state your legal grounds for processing personal data (legitimate interest, contract, legal obligation, consent, etc.).

3. Data We Collect

We collect and process the following types of personal data:

• Account information (name, email, password)
• Contact details (phone number, address)
• Payment information (processed securely through our payment providers)
• Usage data (how you interact with our service)
• Customer data that you upload to our platform

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a contract – to provide and manage your account and services
• Legal obligation – for tax, accounting, and regulatory requirements
• Legitimate interests – to improve our services and communicate important updates
• Consent – where explicitly given, such as for marketing communications

4. How We Use Your Data

We use your personal data for the following purposes:

• To provide and maintain our service
• To process your payments and manage your subscription
• To communicate with you about our service
• To improve and personalize your experience
• To comply with legal obligations

If you believe we have violated your data protection rights, you have the right to lodge a complaint with your local Data Protection Authority.

5. Your Data Rights

Under GDPR, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

9. Role as Data Processor

When you (as a user) upload or enter your customers' personal data into our CRM platform, we act as a data processor on your behalf. You remain the data controller for that data and are responsible for ensuring it is collected and processed in compliance with applicable data protection laws.

We will only process your customer data in accordance with your instructions and our Data Processing Agreement (DPA).

10. Cookies and Tracking Technologies

We use cookies and similar technologies to provide core functionality and analyze usage of our platform. You can manage your cookie preferences via your browser settings. For more details, please see our Cookie Policy.

11. Data Sharing

We may share your data with trusted service providers (subprocessors) who assist in delivering our service (e.g., Stripe for payments, AWS for hosting). These third parties are contractually obligated to protect your data and only act on our instructions.

12. Children's Data

Our service is not intended for children under 16, and we do not knowingly collect personal data from minors.

13. Contact Information