Effective Date: January 1, 2025
Last Updated: January 1, 2025
1. Introduction
ShowGear.Grapeman ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our equipment rental services and website.
2. Information We Collect
2.1 Personal Information
- Contact Information: Name, email address, phone number, physical address
- Account Information: Username, password (encrypted), preferences
- Rental Information: Equipment rented, rental dates, billing information
- Communication: Messages sent through our contact forms or support
2.2 Automatically Collected Information
- Usage Data: Pages visited, time spent on site, click patterns
- Device Information: IP address, browser type, device type, operating system
- Cookies: Session data, preferences, analytics information
3. How We Use Your Information
We use your personal information to:
- Provide Services: Process rentals, manage bookings, customer support
- Communication: Send booking confirmations, updates, promotional emails
- Improve Services: Analyze usage patterns, enhance user experience
- Legal Compliance: Meet legal obligations, resolve disputes
- Security: Protect against fraud, unauthorized access
4. Information Sharing
We do not sell your personal data. We may share your information with:
4.1 Service Providers
- Payment processors (for secure transactions)
- Email service providers (for communications)
- Analytics services (Google Analytics, etc.)
- Hosting providers (for website operation)
4.2 Legal Requirements
- When required by law, court order, or government request
- To protect our rights, safety, or property
- In case of business transfer or merger
5. Data Security
We implement appropriate security measures to protect your personal information:
- Encryption: SSL/TLS encryption for data transmission
- Access Controls: Limited access to authorized personnel only
- Regular Updates: Security patches and system updates
- Monitoring: Ongoing monitoring for security threats
6. Your Rights (GDPR)
As we operate in Estonia and the European Union, you have the right to:
✅ Your Rights
- Access: Request copies of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive data in structured format
🛡️ Additional Rights
- Objection: Object to data processing
- Restriction: Request processing limitation
- Complaint: Lodge complaint with authorities
- Withdraw: Withdraw consent anytime
To exercise these rights, contact us at info@grapeman.eu
7. Cookies Policy
7.1 What Are Cookies
Cookies are small text files stored on your device when you visit our website.
7.2 Types of Cookies We Use
Essential Cookies
Required for website functionality
Analytics Cookies
Help us understand site usage
Preference Cookies
Remember your settings
Marketing Cookies
Show relevant advertisements
You can control cookies through your browser settings. For more details, see our detailed Cookies Policy.
8. Data Retention
We retain your personal data for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Typical Retention Periods:
- Account Data: While account is active plus 3 years
- Rental History: 7 years for business and tax purposes
- Marketing Data: Until you unsubscribe
- Website Analytics: 26 months (Google Analytics default)
9. Third-Party Services
Our website may contain links to third-party websites or use third-party services:
- External Links: We are not responsible for privacy practices of external sites
- Google Analytics: Website traffic analysis (anonymized data)
- Payment Processors: Secure payment handling
- Social Media: Social sharing functionality
10. Children's Privacy
Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.
11. International Transfers
Your data may be transferred to and processed in countries other than Estonia. We ensure appropriate safeguards are in place for such transfers in accordance with GDPR, including adequacy decisions and standard contractual clauses.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the updated policy on our website
- Sending email notification for material changes
- Updating the "Last Updated" date
- Providing prominent notice on our website
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us:
🏛️ Data Protection Authority
For EU residents, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local data protection authority.
This privacy policy complies with GDPR and Estonian data protection laws. Last reviewed by legal counsel January 2025.