General Data Protection Regulation (GDPR) Compliance Policy
​

This GDPR Compliance Policy outlines how Eitan Doron (“we”, “our”, or “us”) collects, processes, and protects personal data of individuals located in the European Union (“EU”) in accordance with the General Data Protection Regulation (GDPR). We are committed to safeguarding your personal data and ensuring your rights are upheld in compliance with GDPR standards. This policy applies to all products and services, including the Event Master Pack and associated digital content, that we provide to users within the EU.

1. Data Controller and Contact Information
Eitan Doron is the data controller responsible for the processing of personal data under this policy. For any GDPR-related inquiries, data access requests, or concerns, please contact us at [Your Email/Support Contact Information].

2. Legal Basis for Data Processing
We process personal data only if we have a lawful basis to do so, which includes:

Consent: When you have given clear and explicit consent for us to process your personal information for a specific purpose (e.g., subscribing to newsletters).
Contractual Necessity: When processing is necessary for the performance of a contract with you or to take steps to enter into a contract (e.g., processing payments and delivering digital products).
Legal Obligation: When we are legally required to process your personal data.
Legitimate Interests: When processing is necessary for our legitimate business interests, provided that these interests do not override your rights and freedoms (e.g., using data to improve our products and services).
3. Types of Data Collected
We may collect and process the following categories of personal data:

Contact Information: Name, email address, and phone number.
Transaction Data: Details about payments made and orders placed.
Technical Data: IP address, browser type, and browsing behavior for analytics and user experience enhancement.
Marketing Preferences: Information on how you wish to receive communications from us.
4. Your Rights Under GDPR
You have the following rights in relation to your personal data:

Right to Access: You have the right to request access to your personal data and obtain information on how it is being used.
Right to Rectification: You can request corrections if your personal data is incomplete or inaccurate.
Right to Erasure (Right to be Forgotten): You have the right to request that we delete your personal data when it is no longer necessary for the purposes it was collected, or if you withdraw your consent.
Right to Restrict Processing: You can ask us to limit the processing of your data under certain circumstances.
Right to Data Portability: You have the right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your data where it is based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us at [Your Email/Support Contact Information]. We will respond to your request within the timeframe specified by GDPR regulations (typically 30 days).

5. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or contractual obligations. When your data is no longer needed, we will ensure that it is securely deleted or anonymized.

6. Data Security Measures
We implement robust technical and organizational security measures to protect your personal data from unauthorized access, misuse, disclosure, or alteration. These measures include encryption, secure server storage, access controls, and regular security audits. While we strive to protect your information, please be aware that no security system is infallible.

7. Sharing and Transfer of Personal Data
We do not sell, rent, or trade your personal data to third parties. We may share your information with trusted third-party service providers who assist us in delivering our services (e.g., payment processors, email marketing platforms). These providers are bound by strict confidentiality agreements and are only allowed to process your data according to our instructions.

If we transfer your personal data outside the EU, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or other legally recognized mechanisms, to protect your data.

8. Automated Decision-Making and Profiling
We do not engage in any form of automated decision-making or profiling that would have a legal or significant impact on you.

9. Consent for Marketing and Communication
If you have opted in to receive marketing communications, we will use your personal data to send you relevant updates, offers, and news. You can opt out at any time by clicking the "unsubscribe" link in any of our emails or by contacting us directly.

10. Changes to This Policy
We reserve the right to update or modify this GDPR policy at any time. Changes will be effective immediately upon posting to our website. We encourage you to review this policy periodically to stay informed about how we handle your data and ensure ongoing compliance with GDPR regulations.

11. Legal Disclaimer and Liability
Eitan Doron will not be held liable for any direct or indirect damages resulting from the misuse or mishandling of personal data by third-party providers, unauthorized access due to user negligence, or force majeure events. By using our services, you acknowledge and accept these limitations and agree to take appropriate measures to protect your own data.

If you have any questions or concerns about this GDPR policy or your rights, please contact us at services@eitandoron.com. Your continued use of our services constitutes acceptance of these terms.