PRIVACY POLICY

Kythira Corporation OÜ

1. INTRODUCTION

Kythira Corporation OÜ, Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50−212, 10 152, Estonia (the "Company," "We," "Us," or "Our"), we are committed to protecting your privacy and ensuring that your personal data is processed lawfully, fairly, and transparently. This Privacy Policy ("Policy") explains how we collect, use, store, disclose, and otherwise process personal data when you:
- visit our website;
- contact us by email, telephone, social media, or messaging applications;
- book or participate in one of our photo tours, workshops, expeditions, or other travel experiences;
- subscribe to our newsletter or marketing communications;
- interact with us before, during, or after a tour.
This Privacy Policy also explains your rights under the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable Estonian data protection legislation, and, where applicable, certain privacy laws of the United States.
This Privacy Policy applies regardless of where you are located. However, some rights described herein may only apply to residents of particular jurisdictions.
By accessing or using our website or our services, you confirm that you have read, understood, and agree to the terms of this Policy.
"Personal Data" refers to any information relating to an identified or identifiable individual. This includes data that, alone or in combination with other information, could be used to identify you.

2. DEFINITIONS

For the purposes of this Privacy Policy:
Personal Data means any information relating to an identified or identifiable natural person.
Processing means any operation performed on personal data, whether by automated means or not, including collection, recording, organization, storage, use, consultation, disclosure, transfer, restriction, erasure, or destruction.
Data Subject means any identified or identifiable individual whose personal data we process.
Controller means the entity that determines the purposes and means of processing personal data.
Processor means any third party that processes personal data on behalf of the Company.
GDPR means Regulation (EU) 2016/679 of the European Parliament and of the Council.
Services means all photography tours, workshops, educational programs, travel experiences, consultations, online products, digital content, and related services offered by the Company.
Website means the Company's official website and any associated webpages operated by us.
Cookies mean small text files stored on your device that help websites function properly, remember user preferences, improve user experience, and collect analytical information.

3. WHO CONTROLS YOUR PERSONAL DATA AND HOW TO CONTACT US

The Controller responsible for processing your personal data is Kythira Corporation OÜ, registered under company number 16 684 153, with its registered office at: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50−212, 10 152, Estonia.
If you have any questions regarding the processing of your personal data or wish to exercise your rights under applicable data protection laws, you can contact our Company at:
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Vesivärava tn 50−212, 10 152, Estonia.
Email : info@tuscany-photo-tours.com

4. PERSONAL DATA WE COLLECT
This section outlines the categories of personal data we process. If we collect personal data from sources other than you directly, we also specify the origin and type of such data.
This Privacy Policy applies to personal data collected through:
- our official website;
- booking forms;
- email correspondence;
- customer support;
- online consultations;
- photo tour registrations;
- workshop registrations;
- social media pages operated by us;
- newsletters;
- surveys;
- promotional campaigns;
- mobile communications;
- any other services offered by the Company.

This Privacy Policy does not apply to third-party websites that may be linked from our website. We encourage you to review the privacy policies of those third parties before providing any personal data.

Contact information: We may process data that enables us to contact you, including your name, email address, telephone number. This data is provided by you. If you log into our website via a social media account, we may receive elements of Contact Data from the relevant social media provider.

Profile Data: We may process the personal information you provide in your website profile, including name, address, telephone number, email address, profile pictures, gender, date of birth, relationship status, interests, hobbies, education, and employment details. This data is collected from you, but elements may also be obtained from your linked social media account.

Identification Information: We may collect full name; date of birth (where required for travel arrangements);
nationality; passport details, visa information, or other government-issued identification documents where necessary for booking transportation, accommodation, obtaining permits, or complying with legal obligations.
We only collect identity documents where they are reasonably necessary for providing the requested services.

Booking Information: When you book one of our photo tours or travel services, we may collect: booking history; selected destination; travel dates; accommodation preferences; roommate preferences (where applicable); transportation arrangements; payment status; invoices; communications regarding your booking.

Customer Relationship Data: We may process information related to our interactions with you as a customer, including your name, contact details, classification within our customer relationship system, and records of communications between us. This data is provided by you.

Service Data: We may process personal data provided and generated through your use of our services, including records of previous purchases. This data originates from you and/or our systems.

Transaction Data: Payments are processed by independent payment service providers. We do not store complete payment card numbers or card security codes on our systems. Depending on the payment method selected, payment processing may be performed by third-party providers such as Stripe, PayPal, Wise, banks, or other licensed payment institutions. These providers process payment information under their own privacy policies.

Communication Data: We may process data contained in or related to communications between you and us, including message content and associated metadata. Metadata from website contact forms is generated automatically.

Travel Information: To organize and provide our services, we may process information relating to: international travel itineraries; flights; hotel reservations; transfers; local transportation; travel companions (where applicable); arrival and departure information.

Health and Accessibility Information: Where strictly necessary for participation in a tour, we may process limited information concerning: dietary requirements; food allergies; accessibility needs; mobility limitations; emergency medical information voluntarily provided by you. We request that you provide only information that is necessary for us to safely organize your participation. Where health information constitutes a special category of personal data under Article 9 GDPR, it will only be processed with your explicit consent or where another lawful basis under Article 9 GDPR applies.

Photography and Video: As our services involve photography experiences, we may create photographs and video recordings during tours. Such images may include participants.
Photographs may be taken by: Company staff; tour leaders; instructors; professional photographers engaged by the Company; other tour participants.
The processing of photographs is described in more detail in the Photography and Media section of this Privacy Policy.

 Usage Data: We may process data related to how you interact with our website and services, including IP address, geographical location, browser type and version, operating system, referral source, visit duration, page views, navigation paths, and usage patterns. This data is collected through our analytics tracking system.

Third-Party Data: We may receive personal data from: travel agents; booking partners; payment providers;
accommodation providers; transportation providers; business partners; publicly available sources where permitted by law.
Please do not provide us with personal data belonging to other individuals unless we explicitly request it.

You are not obligated to provide us with any personal data about you. However, in some instances, not providing such personal data will prevent us from providing uou with the Services you requested us to provide you and will prevent your use of the Services or a part thereof.

Personal Data of Minors
Our Services are not intended for individuals under the age of 18. We do not knowingly collect or solicit personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately so we can delete the information from our records.

5. PURPOSES OF PROCESSING AND LEGAL BASES

We process Your Personal Data for one or more of the purposes outlined in this section and according to the appropriate legal basis. We will not process personal data about you unless there is a legal basis for such processing.

The legal bases according to which the Company may process personal data about you are as follows:
- Performance of a Contract: We process personal data where necessary to: process bookings; arrange photo tours; organize accommodation; coordinate transportation; communicate regarding booked services;
provide customer support; process payments; issue invoices; administer cancellations and refunds. Without this information we may be unable to provide the requested services.
- Compliance with Legal Obligations: We process personal data where required by applicable law, including obligations relating to: accounting; taxation; anti-money laundering requirements; consumer protection legislation; travel regulations; immigration requirements; responding to lawful requests from competent authorities.
- Legitimate Interests: Where permitted by law, we process personal data for our legitimate interests, provided such interests are not overridden by your rights and freedoms. These interests include: improving our services; managing our business operations; fraud prevention; cybersecurity; protecting our legal rights;
responding to complaints; maintaining internal records; improving customer experience; website analytics;
ensuring the safety of participants during tours. Before relying on legitimate interests, we assess whether such processing is fair, proportionate, and does not unduly affect your rights.
- Consent. Your consent that the Company will process personal data about you for one or more specific purposes. We rely on your consent where required by law, including for: email marketing communications where consent is required; non-essential cookies and similar tracking technologies; use of photographs for promotional purposes where consent is the appropriate legal basis; processing of special categories of personal data where applicable.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
- Protection of Vital Interests: In exceptional situations, we may process personal data where necessary to protect the vital interests of a participant or another individual, including medical emergencies occurring during our tours.
- Public Interest: Where required by law, we may process personal data for reasons of substantial public interest or to comply with requests made by competent governmental authorities.
- Special Categories of Personal Data: We generally do not request special categories of personal data.
Where such information is necessary—for example, to accommodate dietary requirements, medical conditions, accessibility needs, or emergency assistance—we process it only where: you have provided explicit consent; processing is necessary to protect your vital interests; processing is otherwise permitted under Article 9 GDPR.
We request that you do not provide health information unless it is necessary for your participation in our services.

6. PHOTO, VIDEO and MEDIA CONTENT

Nature of Our Services
Photography is an essential component of the services provided by the Company.
By participating in our photo tours, photo workshops, expeditions, and related travel experiences, you acknowledge that photography and video recording may occur throughout the tour.

Images and video recordings may be created by:
- Company employees;
- tour leaders;
- instructors;
- professional photographers engaged by the Company;
- independent contractors acting on behalf of the Company;
- other participants attending the tour.
The Company cannot guarantee that participants will not appear incidentally in photographs or videos captured during group activities.

Purpose of Photography
Photographs and videos may be created for purposes including:
- documenting the tour experience;
- providing photography instruction;
- creating educational materials;
- internal quality assurance;
- customer support;
- maintaining historical records of tours;
- marketing and promotional activities where permitted by applicable law.

Promotional Use of Images (photos and videos)

Where photographs or videos clearly identify an individual participant and are intended to be used for advertising, marketing, social media promotion, printed publications, newsletters, or other promotional purposes, the Company will obtain an appropriate legal basis as required under applicable law.
Where consent is required by GDPR or other applicable legislation, we will request your consent before using identifiable images for promotional purposes.
You may withdraw your consent at any time. Withdrawal of consent will not affect processing that occurred prior to its withdrawal.
Where another lawful basis applies under applicable law, the Company may rely upon that basis after conducting an appropriate balancing assessment.

Group Photographs
Group photographs taken during tours may incidentally include multiple participants.
Where publication of such photographs is based on legitimate interests under Article 6(1)(f) GDPR, the Company will ensure that:
- publication is proportionate;
- participants would reasonably expect such use;
- publication does not override the rights and freedoms of any participant;
- individuals may object where applicable under GDPR.
Where consent is required under applicable law, consent will be obtained before publication.

Participant Photography
Participants are responsible for ensuring that photographs they take of other participants comply with applicable privacy, publicity, and data protection laws.
The Company is not responsible for photographs, videos, or other content independently created, published, or distributed by participants.

Social Media
The Company may publish photographs or videos on:
- its official website;
- Instagram;
- Facebook;
- YouTube;
- LinkedIn;
- other official communication channels.
Where publication requires consent under applicable law, such consent will be obtained beforehand.

Your Rights Regarding Images (from photo and videos)
Subject to applicable law, you may request:
- access to photographs containing your image;
- restriction of processing;
- deletion of photographs where legally required;
- withdrawal of consent;
- objection to processing based on legitimate interests.
Each request will be assessed individually, taking into account the rights of other individuals, freedom of expression, contractual obligations, and legal requirements.

7. SHARING and DISCLOSURE of YOUR PERSONAL DATA

We disclose personal data only where necessary for providing our services, complying with legal obligations, protecting legitimate business interests, or where otherwise permitted by applicable law.

Third-party service providers
We may share personal data with trusted third-party service providers assisting us in operating our business.
These may include providers of:
- payment processing;
- website hosting;
- cloud storage;
- email services;
- customer relationship management (CRM);
- accounting;
- customer support;
- booking management;
- cybersecurity;
- IT infrastructure;
- analytics services.
All processors are required to process personal data only on our documented instructions and to implement appropriate security measures.

Travel Partners
Where necessary for organizing your trip, we may share relevant personal data with:
- hotels;
- lodges;
- transportation providers;
- airlines;
- local guides;
- destination management companies;
- local tour operators;
- visa support providers;
- governmental authorities responsible for travel permits;
- insurance providers where requested by you.
Only information necessary for providing the requested services will be disclosed.

Payment Providers
Payments are processed by independent payment institutions.
Depending on the payment method selected, your payment information may be processed by providers such as:
- Stripe;
- PayPal;
- Revolute;
- Wise;
- banks;
- other licensed financial institutions.
These providers act as independent controllers or processors, depending on the circumstances, and process your information in accordance with their own privacy policies.

Professional Advisers
Where necessary, we may disclose personal data to:
- lawyers;
- auditors;
- accountants;
- tax advisers;
- insurance advisers;
- regulatory consultants.
Such disclosures are limited to information necessary for the relevant professional services.

Legal Requirements
We may disclose personal data where required to:
- comply with applicable law;
- respond to lawful requests by public authorities;
- comply with court orders;
- protect legal rights;
- investigate fraud;
- enforce contractual rights;
- protect the safety of participants or third parties.

International Service Providers
Some of our service providers may be located outside the European Economic Area (EEA).
Where personal data is transferred internationally, appropriate safeguards described in the International Data Transfers section of this Privacy Policy will apply.
Safeguards are implemented to ensure the security and integrity of your data, particularly during international transfers. These measures encompass encryption, pseudonymization and contractual agreements with recipients to uphold data protection standards.

No Sale of Personal Data
The Company does not sell personal data.
We also do not share personal data for cross-context behavioural advertising in a manner that constitutes a "sale" or "sharing" under applicable U.S. state privacy laws unless explicitly disclosed and permitted by applicable law.

8. INTERNATIONAL TRANSFERS OF PERSONAL DATA

As an international provider of photo tours and travel experiences, we may need to transfer personal data to countries inside the EEA and outside the EEA.
Such transfers may occur where necessary to:
- arrange accommodation;
- organize transportation;
- coordinate with local tour operators and guides;
- process payments;
- provide customer support;
- host our website and business systems;
- use cloud-based service providers;
- comply with legal obligations;
- ensure the safety of tour participants.
Depending on the destination selected by you, personal data may be transferred to countries where our tours are organized or where our service providers operate.
These countries may include jurisdictions that have not been recognized by the European Commission as providing an equivalent level of data protection.

Safeguarding Protocols
Where personal data is transferred outside the EEA, we implement appropriate safeguards as required by Chapter V GDPR.
Depending on the circumstances, these safeguards may include:
- European Commission Adequacy Decisions;
- Standard Contractual Clauses ("SCCs");
- approved Codes of Conduct;
- approved Certification Mechanisms;
- supplementary contractual, technical, and organizational measures where appropriate.
Where required, we assess whether the laws of the recipient country may affect the effectiveness of the safeguards implemented.

Transfers Necessary for Performance of a Contract
Certain transfers outside the EEA may be necessary to perform our contract with you.
Examples include:
- booking hotels;
- arranging local transportation;
- organizing safari permits;
- securing access to protected areas;
- arranging domestic flights;
- coordinating with local guides.
Such transfers are limited to information necessary for providing the requested services.

You may request additional information regarding international transfers of your personal data, including information about the safeguards we rely upon.
Where permitted by law, you may obtain a copy of the relevant transfer mechanism by contacting us.

9. RETAINING AND DELETING PERSONAL DATA

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
We will retain your personal data for a maximum of 7 years from the end of your last contract with us or until you object or unsubscribe from the business communications; if we need to fulfill our legal obligations, we keep your personal data for the period set out by the relevant law.
Personal data is stored on computers and other devices in an encrypted database. Organisational and technical safeguards have been put in place to protect the data that we collect and handle from unauthorised access, modification, disclosure, or destruction. We may store your data on servers provided by third-party hosting vendors with whom we have contracted.
Where your personal data is no longer required by us, we will either securely delete or anonymise the personal data in question.

10. DATA SECURITY

We have implemented appropriate technical and organisational precautions and security policies, rules and procedures to secure your personal data under our control from unauthorised access, improper use or disclosure, unauthorised modification, or unlawful destruction, and to prevent the loss, misuse or alteration of your personal data.
To comply with the law, we employ industry-standard encryption techniques to encrypt data during transit and at rest, always ensuring confidentiality and integrity.
In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a need-to-know business requirements. They will only process your personal data on our instructions or subject to a lawful ground, as well as their duty of confidentiality.
You acknowledge that the transmission of unencrypted (or inadequately encrypted) data over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.
We cannot provide absolute assurance of safeguarding against unauthorised access or breaches. In the event of a data breach, we will conduct a thorough risk assessment and notify impacted individuals in accordance with applicable local laws.

11. COOKIES and TRACKING TECHNOLOGIES

Cookies are small text files that are stored on your computer, smartphone, tablet, or other device when you visit our Website.
Cookies enable websites to recognize your device, remember your preferences, improve user experience, analyze website traffic, and provide certain website functionalities.
In addition to cookies, we may use similar technologies such as web beacons, pixels, tags, local storage, and software development kits (SDKs), collectively referred to as "Cookies" in this Privacy Policy.

Cookies are essential for the operation of the Website and cannot be disabled in our systems.
They enable core functionality such as:
- website security;
- authentication;
- session management;
- shopping cart functionality (where applicable);
- fraud prevention;
- network management.
These Cookies do not require consent under applicable law.
Cookies allow the Website to remember choices you make, including:
- preferred language;
- region;
- saved preferences;
- accessibility settings.
These Cookies improve user experience but are not strictly necessary for the Website to function.
Where required by law, they will only be activated after your consent.

We may use analytics technologies to understand how visitors interact with our Website.
Analytics information may include:
- pages visited;
- session duration;
- referral sources;
- browser type;
- device type;
- country or region;
- approximate location;
- user interactions.
Where required by law, analytics Cookies are activated only after obtaining your consent.
Examples of analytics providers may include: Google Analytics; Microsoft Clarity; other similar analytics services.
Where Cookies are not strictly necessary for the operation of the Website, we rely on your consent in accordance with:
- Article 6(1)(a) GDPR;
- the ePrivacy Directive;
- applicable national legislation implementing the ePrivacy Directive.
You may withdraw your consent at any time without affecting previous lawful processing.

Some Cookies are placed by third-party service providers acting on our behalf.
These providers may include:
- analytics providers;
- advertising partners;
- payment providers;
- embedded content providers;
- social media platforms.
Their processing of personal data is governed by their respective privacy policies.

Managing Cookies
You may:
- accept all Cookies;
- reject non-essential Cookies;
- customize your Cookie preferences;
- delete Cookies through your browser settings.
Please note that disabling certain Cookies may affect the functionality of the Website.
Cookie Retention
Different Cookies remain on your device for different periods.
Session Cookies are deleted automatically when you close your browser. Persistent Cookies remain stored until they expire or are manually deleted.

12. MARKETING COMMUNICATIONS

Where required by applicable law, we will send electronic marketing communications only after obtaining your prior consent.
Where applicable legislation permits marketing based on our legitimate interests (for example, existing customer relationships), we will ensure that such communications comply with applicable legal requirements and that you have the opportunity to opt out at any time.

We may send information regarding:
- photography tours;
- workshops;
- expeditions;
- travel experiences;
- educational content;
- newsletters;
- promotions;
- special offers;
- company news.

Unsubscribe
You may unsubscribe from marketing communications at any time by:
- clicking the "Unsubscribe" link included in our emails;
- contacting us directly;
- updating your communication preferences where available.
Unsubscribing from marketing messages does not affect transactional communications relating to your bookings or contractual relationship with us.

Even if you unsubscribe of marketing communications, we may continue to send messages necessary for:
- booking confirmations;
- payment confirmations;
- invoices;
- itinerary updates;
- travel documentation;
- safety information;
- customer support;
- legal notices.
These communications are necessary for the performance of our contract or compliance with legal obligations.

13. YOUR RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION (“GDPR”)

In accordance with the GDPR, you have the right to request confirmation from us regarding the processing of your personal data and we will provide you with access to the following information with reasonable intervals:
- what personal data we have about you;
- the reasons why we are processing your data;
- the recipients to whom your data may have been disclosed;
- the duration for which we intend to keep your data (if possible);
- whether we transfer your data and the safeguards we have to protect your data;
- your rights with respect to your personal data;
- the process for making a complaint;
- the source of your personal data;
- whether we have used any automated decision-making or profiling and any related information.

Right to Rectification – Although all reasonable efforts will be made to keep your personal data updated, you are kindly requested to inform us of any changes. With respect to your residential address and phone number, you can notify us of the change by amending your profile of any changes to your personal data. If the change pertains to data that cannot be amended by changing your profile, please contact us. To this end you have the right to ask us to rectify inaccurate personal data and to complete incomplete personal data concerning you. We may seek to verify the accuracy of the data before rectifying it.

Right to Erasure – You have the right to ask us to delete your personal data and we shall comply without undue delay but only where:
- the personal data are no longer necessary for the purposes for which they were collected; or
you have withdrawn your consent (in those instances where we process on the basis of consent) and we have no other legal ground to process your personal data; or
- you have successfully exercised your right to object (as explained below); or
- your personal data have been processed unlawfully; or
- there exists a legal obligation to erase the data to which we are subject.

Right to Data Restriction – You have the right to ask us to restrict (that is, store but not further process) your personal data but only where:
- the accuracy of your personal data is contested (see the right to data rectification above), for a period enabling us to verify the accuracy of the personal data; or
- the processing is unlawful and you oppose the erasure of your personal data; or
- we no longer need the personal data for the purposes for which they were collected but you need the personal data for the establishment, exercise or defense of legal claims; or
- you exercised your right to object and verification of our legitimate grounds to override your objection is pending.

Following our request for restriction, except for storing your personal data, we may only process your personal data:
- where we have your consent; or
- for the establishment, exercise or defense of legal claims; or
- for the protection of the rights of another natural or legal person; or
- for reasons of important public interest.

Right to Data Portability – You can request us to give you your personal data in a format that is easy to read by machines, or directly transfer it to another data controller if possible without harming others’ rights and freedoms. This right only applies if: a) the processing is based on your consent or on the performance of a contract with you; and b) the processing is carried out by automated means.

Right to Object to Certain Processing – In those cases where we process your personal data for the performance of a task carried out in the public interest or when processing is necessary for the purposes of the legitimate interest pursued by us or by a third party, you shall have the right to object to processing of your personal data by us.

When your data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data, which includes profiling to the extent that it is related to such direct marketing.

Right to Withdraw Consent – In situations where we handle your personal data based on your consent, we will never assume your consent but rather obtain it from you in a clear and explicit way. You have the right to withdraw your consent at any time and the process of doing so should be the same as providing it. If you decide to withdraw your consent, we will check if we have an alternative legal basis for processing your personal data, such as a legal obligation. If we do, we may still process your data without your consent and will inform you accordingly.

Right to lodge a Complaint – You are entitled to file complaints with the relevant Data Protection Supervisory Authority. If you reside in an EU member state, you can file a complaint with the Data Protection Authority of that particular state. However, we request that you first attempt to resolve any issues with us before contacting the competent authority, even though you have the right to do so at any time, as mentioned above.

14. U.S. STATE PRICACY RIGHTS

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and similar legislation in Virginia, Colorado, Connecticut, Utah, and other jurisdictions.
Where these laws apply, you may have the right to:
- know what categories of personal information we collect;
- access personal information;
- request correction of inaccurate information;
- request deletion of personal information;
- receive a portable copy of personal information;
- opt out of certain types of targeted advertising where applicable;
- opt out of the sale or sharing of personal information where applicable;
- limit the use of sensitive personal information where required by law;
- not be discriminated against for exercising your privacy rights.
The Company does not sell personal information as that term is commonly understood.
Requests may be submitted using the contact information provided in this Privacy Policy.
We may verify your identity before responding to your request.

15. CHANGES TO THE POLICY

We may amend the terms of this Policy, from time to time. Whenever we amend this Policy, we will notify you of such amendments by publishing the updated Policy on our website.
In addition, when we make significant amendments to this Policy, we will strive to inform you about such amendments via means of communication we believe are reasonably appropriate to inform you of such amendments and by publishing a notice about such amendments on our website. Unless stated otherwise, all amendments will enter into force upon publication of the updated Policy on our website or the designated page on the website.

16. CONTACT US

For inquiries pertaining to the retention period of the data you provide to us or for any other questions related to data privacy, please direct your correspondence to our customer support at info@tuscany-photo-tours.com.
Where applicable, we will respond to requests concerning your personal data within one month of receipt, unless a longer period is permitted by applicable law.
If you remain dissatisfied with our response, you may lodge a complaint with the competent supervisory authority.

By using our website and services, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy.