Privacy Policy
Last Updated: March 19, 2024
1. Introduction
This Privacy Policy explains how Serora ("we", "our", or "us") collects, uses, and protects your personal information. We are committed to protecting your privacy and ensuring transparency in our data practices. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide
- Account information (name, email address, username)
- Profile information (biography, profile picture, interests)
- Content you post or share on our platform
- Communications with other users
- Customer support communications
2.2 Information Automatically Collected
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, time spent, interactions)
- Cookies and similar technologies (see our Cookie Policy)
- Location data (if permitted by your device settings)
3. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual Necessity: To provide our services and fulfill our contract with you
- Legitimate Interests: To improve our services, prevent fraud, and ensure security
- Legal Obligation: To comply with applicable laws and regulations
- Consent: Where you have explicitly agreed to specific data processing activities
4. How We Use Your Information
- Provide and maintain our services
- Personalize your experience
- Process your transactions
- Send service-related communications
- Improve and optimize our platform
- Detect and prevent fraud or abuse
- Comply with legal obligations
5. Data Sharing and Recipients
We may share your information with:
- Service Providers: Who help us operate our platform
- Legal Authorities: When required by law or to protect rights
- Business Partners: Only with your explicit consent
6. International Data Transfers
When we transfer data outside the EEA, we ensure appropriate safeguards are in place through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions issued by the European Commission
- Other legally approved transfer mechanisms
7. Data Retention
We retain your personal data for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
8. Your Data Protection Rights
Under the GDPR, you have the following rights:
- Right to Access: Obtain a copy of your personal data
- Right to Rectification: Correct inaccurate personal data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw previously given consent
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication
- Employee training on data protection
10. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes through our platform or via email.
12. Data Protection Officer
For privacy-related inquiries:
- Email us at info@serora.org
- Use our contact form
13. Supervisory Authority
If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection authority.