Instar

Privacy Policy for [[PlaceHolder]]

Last updated: [[LastUpdated]]

1. Controller and Contact

Controller: [[CompanyName]] · [[CompanyAddress]] · Email: [[PrivacyEmail]]
Data Protection Officer (if applicable): [[DPOContact]]

2. What We Collect

  • Account and session data (e.g., email, password hash, session identifiers)
  • Technical and security data (e.g., IP address, device/browser info, processed transiently)
  • Anonymized usage metrics (aggregate, non-identifying, strictly on-site)

3. Purposes and Legal Bases

4. Cookies and Similar Technologies

We use cookies and similar technologies to provide essential functionality and enhance your experience on our website.

Types of Cookies We Use

  • Strictly Necessary Cookies: These cookies are essential for the website to function properly. They enable basic functions like page navigation, secure areas of the website, and authentication. The website cannot function properly without these cookies.
  • Preference Cookies: These cookies allow the website to remember choices you make (such as your dark mode preference) and provide enhanced, more personal features.
  • Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously.

Cookie Consent

By using our website, you consent to the use of cookies as described in this policy. You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Managing Cookies

You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit our site.

5. Analytics and Metrics

We use anonymized, aggregate metrics to measure on-site traffic and performance. We do not identify users and do not track users off-site.

6. Data Storage Location

All customer data is stored and processed in the European Union (EU). We use EU-based providers under appropriate data processing agreements.

7. Sharing and Recipients

We may share data with EU-based processors (e.g., hosting, email) under contract, and public authorities when legally required.

8. International Transfers

We do not intentionally transfer personal data outside the EU. If needed, appropriate safeguards (e.g., SCCs) will be implemented and, where required, you will be informed. See Art. 44, Art. 46, and Art. 49 GDPR.

9. Retention

  • Session data: retained only for active sessions and short security windows.
  • Account data: retained for the life of the account; deleted/anonymized upon closure subject to legal requirements.
  • Logs/security records: retained for limited periods as needed.
  • Anonymized metrics: retained without personal identifiers.

10. Your Rights

You have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing (Art. 18), data portability (Art. 20), object (Art. 21), and withdraw consent (Art. 7(3)). You may also lodge a complaint with a supervisory authority (Art. 77). Contact: [[PrivacyEmail]].

11. Security

We use appropriate technical and organizational measures (encryption in transit, access controls, least‑privilege, regular reviews). See Art. 32 GDPR.

12. Children’s Privacy

Our Services are not directed to children under the age requiring parental consent under local law. If you believe we collected data from a child, contact [[PrivacyEmail]] for prompt removal. See Art. 8 GDPR.

13. No Sale or Profiling

We do not sell personal data or engage in automated decision-making with legal or similarly significant effects. No cross-site profiling.

14. Changes

We may update this policy to reflect changes in law or our Services. We will post updates here and notify you where appropriate.

15. Contact

[[CompanyName]] · [[CompanyAddress]] · [[PrivacyEmail]] · DPO: [[DPOContact]]