This Privacy Policy sets out how vaultframecase collects, uses, retains, and protects personal data provided by users when visiting or purchasing from www.vaultframecase.com. We are committed to processing personal data in full accordance with applicable European data protection laws, including the General Data Protection Regulation (GDPR) and the ePrivacy Directive.

1. Data Controller

For the purposes of applicable European data protection legislation, the Data Controller responsible for your personal information is:

• Brand Name: vaultframecase
• Official Website: www.vaultframecase.com
• Registered Address: Friedrichstraße 128, 10117 Berlin, Germany
• Contact Email: eyeglass@vaultframecase.com
• Telephone: +49 151 23456789

If you have any questions regarding how your data is handled or wish to exercise your statutory privacy rights, please contact our data protection operational team using the contact details provided above.

2. Information We Collect

We collect and process personal information necessary to fulfill standard commercial transactions, ensure security, and satisfy legal obligations:

• Identity & Contact Data: Name, postal shipping address, billing address, email address, and telephone number.
• Transaction Data: Details regarding products purchased, order history, invoice records, and communication history associated with your purchases.
• Technical & Usage Data: IP address, browser type, operating system, standard server log files, and technical diagnostics collected during your visit to maintain essential operational functionality and store security.

3. Legal Basis & Purpose of Processing

We process your personal data strictly under the following lawful bases under GDPR:

• Performance of a Contract (Art. 6(1)(b) GDPR): To process, package, and deliver your order, manage customer care inquiries, and handle transaction-related communications.
• Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To comply with statutory commercial directives, mandatory tax reporting, and statutory bookkeeping requirements in Europe.
• Legitimate Interests (Art. 6(1)(f) GDPR): To maintain the technical integrity, security, and performance of our online store, prevent fraudulent transactions, and safeguard our business operations.

4. Third-Party Payment Processing & Data Transfers

Payment transactions on our website are managed directly through our integrated payment service provider, Stripe.

When completing a purchase:

• Financial details (such as credit/debit card numbers and authentication data) are transmitted directly to and processed by Stripe using industry-standard encryption protocols (SSL/TLS).
• vaultframecase does not store, process, or retain sensitive payment card or banking details directly on our servers.
• Data transmitted to Stripe is handled strictly for payment authorization, risk assessment, and fraud prevention in accordance with Stripe’s Privacy Policy and regulatory obligations.
• Where data processing involves transmission outside the European Economic Area (EEA), such transfers are safeguarded under Standard Contractual Clauses (SCCs) and legally recognized adequacy mechanisms (including the EU-U.S. Data Privacy Framework).

5. Cookies & Tracking Technologies

Our website utilizes necessary operational cookies to enable essential functionalities, such as cart management and secure checkout session handling.

• Essential Cookies: Required for basic navigation, security, and checkout processes. These do not require explicit user consent.
• Analytical/Performance Cookies: May be used to analyze anonymized site usage patterns to improve performance, strictly subject to user consent preferences where applicable. Users can manage or disable cookie preferences directly through their internet browser settings.

6. Data Retention Period

We retain personal information only for as long as necessary to fulfill the operational purposes for which it was collected, or as required by statutory law:

• Transaction & Accounting Records: Personal data associated with completed orders, invoicing, and tax documentation is retained for up to 10 years, as mandated by European commercial and tax regulations.
• Customer Support Records: General communication logs and support inquiries are retained for up to 2 years from the date of resolution to maintain service continuity.
• Data Erasure: Upon expiration of applicable statutory retention periods, personal data is securely erased or permanently anonymized.

7. Your Statutory Data Protection Rights

Under European data protection law (GDPR), individuals maintain full legal rights regarding their personal data:

• Right of Access (Art. 15 GDPR): Request confirmation and copies of your personal data held by us.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): Request deletion of personal data where statutory retention obligations no longer apply.
• Right to Restriction of Processing (Art. 18 GDPR): Request the restriction of data processing under specific statutory conditions.
• Right to Data Portability (Art. 20 GDPR): Request a structured, machine-readable copy of personal data provided under contract.
• Right to Object (Art. 21 GDPR): Object to data processing conducted on the basis of legitimate interests.
• Right to Lodge a Complaint: You maintain the right to lodge a complaint regarding data protection with a European supervisory authority (such as the competent Data Protection Officer in Germany).

To exercise any of these rights, please submit a written request to eyeglass@vaultframecase.com.

8. Updates to This Policy

We reserve the right to update this Privacy Policy periodically to reflect legal or operational adjustments. Any revised version will be published on this page with an updated effective date.