This Privacy Policy outlines the types of personal information that is received and collected by Gromstar and how it is used. Gromstar is committed to safeguarding the privacy of its customers and ensuring that personal data is handled in compliance with applicable data protection laws.

When you visit our website, we may collect certain information about you, including but not limited to your name, email address, postal address, phone number, and payment information. This information is collected when you make a purchase, subscribe to our newsletter, or interact with our website in any other way.

We utilise this information to process your orders, communicate with you regarding your purchases, and improve our services. Specifically, we may use your personal information for the following purposes:

- To process and fulfil your orders efficiently.
- To send you order confirmations and updates.
- To respond to your inquiries and provide customer support.
- To send you promotional materials and newsletters, if you have opted in to receive them.
- To analyse website usage and improve our website and services.

Gromstar employs various security measures to protect your personal information. These measures include encryption, secure servers, and access controls to prevent unauthorised access to your data. However, it is important to note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

We do not sell, trade, or otherwise transfer your personal information to outside parties without your consent, except as required by law or to provide services on our behalf. This may include sharing your information with trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.

You have the right to access, correct, or delete your personal information at any time. If you wish to exercise these rights, please contact us using the contact information provided on our website.

Additionally, you may opt out of receiving future promotional communications from us by following the unsubscribe instructions included in those communications.

Gromstar reserves the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Circuly Software

Description and purpose

On this website we use the circuly checkout and subscription management software. circuly is a software company based in Germany, headquartered at 33602 Bielefeld, Obernstr. 50, phone: +49 176 552 884 77. This is an integrated software solution that we use to cover various aspects of our Subscription Management. These include: Checkout, customer login, invoices and payment processing, communication, return management and reporting.

This information is stored on servers run by our software partner circuly. It may be used by us to contact our customers and provide our subscription services. All information we collect is subject to this Privacy Policy. We use all information collected exclusively for processing the (subscription) order.

Legal basis

The legal basis for the use of circuly services is Art. 6 para. 1 lit. f) DSGVO (legitimate interest). Our legitimate interest in using this service is the efficient and customer-friendly processing of subscription contracts.

Recipient

The recipient is circuly GmbH, Obernstr. 50, 33602 Bielefeld, Germany.

Transfer to Third Countries

Through the use of the service, personal data may be transferred to a third country. In the event of a transfer of personal data, the Provider shall ensure the level of protection of the DSGVO by complying with Art. 44 et seq. DSGVO. If there is no adequacy decision with the third country in which the data importer is based, the transfer is subject to appropriate safeguards. If you have any queries, please contact our data protection officer.

Duration of data storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you revoke your consent or request the deletion of the personal data.

Possibility of objection

In accordance with Art. 21 (1) DSGVO, you have the right to object to the processing of your personal data at any time. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found above in our data protection declaration under "Rights of data subjects".

Contractual or legal obligation

There is no contractual or legal obligation to provide the data.

Further data protection information

Further data protection information via link.

• https://www.circuly.io/data-privacy
• https://www.circuly.io/data-processing-agreement

By using our website, you consent to our Privacy Policy and agree to its terms. If you do not agree with the terms of this Privacy Policy, please do not use our website.