Zakana is committed to protect and respect your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, https://zakana.org, in compliance with the General Data Protection Regulation (GDPR).
Information We Collect
Personal Data
We may collect, store, and use the following kinds of personal data:
- Identity Data: Includes first name, last name, username, or similar identifier.
- Contact Data: Includes email address, phone number, and mailing address.
- Technical Data: Includes IP address, browser type, time zone setting, and location data.
- Profile Data: Includes your username and password, purchases or orders made by you, and feedback.
- Usage Data: Includes information about how you use our website, products, and services.
- Marketing and Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.
Non-Personal Data
We may also collect non-identifiable data, such as browser information, device type, and pages visited.
How We Collect Your Data
-Direct Interactions: You may provide data by filling in forms or by corresponding with us by post, phone, email, or otherwise.
- Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns.
- Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties, including analytics providers or search information providers.
How We Use Your Data
We use your personal data for the following purposes:
- To provide and maintain our services.
- To manage your account.
- To process and deliver your orders.
- To communicate with you regarding your orders or inquiries.
- To improve our website, products, and services.
- To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
- To deliver relevant website content and advertisements to you.
- To comply with legal obligations.
Legal Basis for Processing Your Data
We process your personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request before entering such a contract.
- Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided these are not overridden by your interests or rights.
Data Sharing and Disclosure
We may share your data with third parties only under the following circumstances:
- Service Providers: We may share your data with third-party service providers who perform services on our behalf.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.
- Legal Requirements: We may disclose your data if required by law or in response to valid requests by public authorities.
International Transfers
Your data may be transferred to and processed in countries outside of the European Economic Area (EEA). We ensure that any transfers of your personal data to countries outside the EEA are protected by appropriate safeguards, such as the use of standard data protection clauses approved by the European Commission.
Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. We also limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Your Data Protection Rights
Under GDPR, you have the following rights:
- Right to Access: You have the right to request copies of your personal data.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe