Privacy Policy
Last Updated: 28-10-2024
Introduction
Welcome to redecorly.com (“we”, “our”, “us”). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, store, and protect your information when you use our application (“App”). By using our App, you agree to the terms outlined in this Privacy Policy.
1. Data Controller Information
Company Name: Redecorly
Address: Vlaardingerstraat 18, 3111BP, Schiedam
Email: info@redecorly
Phone: +31633247905
Data Protection Officer (DPO):
Name: Jasper Schoormans and Amey Vasulkar
Email: [email protected]
2. Types of Data We Collect
Personal Data
- Identity Data: Name, username, date of birth
- Contact Data: Email address, postal address, phone number
- Financial Data: Payment information (processed securely by our payment partner Stripe)
- Account Data: Username, password, subscription details
- Usage Data: IP address, device information, browser type, operating system, interaction with the App
Image Data
Users may upload images for AI-based interior design suggestions. These images are processed to generate design recommendations.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. For more details, please refer to our Cookie Policy.
3. Purpose of Data Processing
- Service Provision: To provide and maintain our App and its features.
- Subscription Management: To manage your subscription, billing, and payments.
- Personalization: To tailor content and recommendations based on your preferences.
- Communication: To send updates, newsletters, and respond to your inquiries.
- Improvement: To analyze usage data and improve our services.
- Security: To protect against fraud and ensure the security of our App.
4. Purpose of Data Processing
- Service Provision: To provide and maintain our App and its features.
- Subscription Management: To manage your subscription, billing, and payments.
- Personalization: To tailor content and recommendations based on your preferences.
- Communication: To send updates, newsletters, and respond to your inquiries.
- Improvement: To analyze usage data and improve our services.
- Security: To protect against fraud and ensure the security of our App.
5. Legal Basis for Processing
- Consent: When you provide explicit consent for specific data processing activities.
- Contractual Necessity: To fulfill our contractual obligations with you.
- Legal Obligation: To comply with legal requirements.
- Legitimate Interests: For purposes such as improving our services and ensuring security.
6. Data Sharing and Third Parties
6.1 Service Providers
We may share your data with trusted third-party service providers who assist us in operating our App, such as:
- Payment Processors: To handle transactions securely.
- Hosting Providers: To store and manage our servers located in Germany.
- Analytics Services: To monitor and analyze App performance.
All third-party providers are GDPR-compliant and are contractually obligated to protect your data.
6.2 AI Model Processing
Our AI model is hosted on Replicate servers, which may be located outside the European Union. However, only plain image data is transmitted to these servers for AI inference. No other personal or sensitive data is sent outside the EU. We believe Replicate complies with GDPR requirements and implements appropriate safeguards for data protection.
6.3 Legal Requirements
We may disclose your data if required to do so by law or in response to valid requests by public authorities based in EU.
7. International Data Transfers
Your data is stored and processed within the European Union, specifically on servers located in Germany, ensuring compliance with GDPR. For AI inference, only plain image data is sent to Replicate servers, which may be outside the EU. These transfers are conducted in accordance with GDPR requirements, ensuring that appropriate safeguards are in place to protect your data.
8. Data Storage and Retention
8.1 Storage Location
All personal data is stored on secure servers located within the EU, primarily in Germany.
8.2 Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention periods are determined based on the type of data and its purpose.
9. Data Security
We implement robust security measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: Data is encrypted both in transit and at rest.
- Access Controls: Strict access controls to limit data access to authorized personnel only.
- Regular Audits: Periodic security assessments and audits to identify and mitigate vulnerabilities.
10. Your Rights
Under GDPR, you have the following rights regarding your personal data:
10.1 Right to Access
You can request access to your personal data that we hold.
10.2 Right to Rectification
You can request correction of inaccurate or incomplete data.
10.3 Right to Erasure (Right to be Forgotten)
You can request the deletion of your personal data under certain conditions.
10.4 Right to Restrict Processing
You can request the limitation of processing your data under certain circumstances.
10.5 Right to Data Portability
You can request the transfer of your data to another service provider in a structured, commonly used, and machine-readable format.
10.6 Right to Object
You can object to the processing of your data for specific purposes, such as direct marketing.
10.7 Right to Withdraw Consent
If you have provided consent for data processing, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights
To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request within one month.
11. Cookie Policy
For detailed information about our use of cookies and similar technologies, please refer to our Cookie Policy.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new Privacy Policy on our App and updating the “Last Updated” date. Your continued use of the App after such changes constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
14. Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
Autoriteit Persoonsgegevens Contact Information:
Website: Autoriteit Persoonsgegevens
Address: Postbus 93307, 2509 BT The Hague, Netherlands
Phone: +31 (0)88 155 1555