Privacy Policy

1. Who we are (Controller)

This website and our services are operated by viron Compliance Ltd (“viron”, “we”, “us”). We determine the purposes and means of processing your personal data and are the data controller for the processing described in this privacy policy.

Contact (privacy enquiries)

Email: info@viron.eco Phone: +49 160 97043763

2. What this Privacy Policy covers

This Privacy Policy explains how we collect, use, share, and protect personal data when you:

• visit our website,
• contact us (e.g., via forms, email, or phone),
• book and receive our services (e.g., EPR registration support, authorized representative services, take-back & recycling coordination),
• interact with us via social media links on our website.

When we process personal data on behalf of a business customer as a data processor (e.g., within the framework of a service contract), the respective contract and, if applicable, a data processing agreement (DPA) apply to this processing.

3. Personal data we collect

We may collect the following categories of personal data, depending on how you interact with us:

A. Data you provide to us

• Contact details (e.g., name, company, job title, email, phone number)
• Account and service details (e.g., purchase/order details, service requests, communications)
• Content of your communications (e.g., messages, attachments, enquiries)

B. Data collected automatically

• Device and log data (e.g., IP address, browser type, device information, pages viewed, timestamps)
• Usage data (e.g., interaction with our site, referrer URL)
• Cookie and similar technology data (see Section 10)

4. Why we process your personal data (Purposes)

We process personal data for the following purposes:

• to provide and deliver our services,
• to communicate with you and respond to enquiries,
• to manage customer relationships and contracts,
• to improve our website and services,
• to comply with legal obligations,
• to protect our rights and prevent fraud or misuse.

5. Legal bases for processing (GDPR/UK GDPR)

Where GDPR/UK GDPR applies, we rely on the following legal bases:

• Contract (Art. 6(1)(b)) — to perform a contract with you or take steps at your request before entering a contract,
• Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve our business and services,
• Legal obligation (Art. 6(1)(c)) — to comply with applicable laws,
• Consent (Art. 6(1)(a)) — for optional cookies/marketing where required.

6. Who we share your personal data with

We may share personal data with:

• service providers and processors (e.g., hosting, IT, analytics, CRM, communication tools),
• professional advisers (e.g., legal, accounting),
• public authorities where required by law,
• business partners involved in delivering services (where relevant).

We require processors to protect personal data and act only on our instructions.

7. International data transfers

We may transfer and store personal data in countries outside the EEA/UK, depending on where we and our service providers are located and in which countries the Services are provided. Where required, we use appropriate safeguards such as:

• EU Standard Contractual Clauses (SCCs),
• UK International Data Transfer Addendum, and/or
• adequacy decisions.

8. Data retention

We keep personal data only as long as necessary for the purposes described above, including to comply with legal, tax, or accounting requirements. Retention periods depend on the nature of the data and our obligations.

9. Your rights

Depending on your location and applicable law, you may have rights to:

• access your personal data,
• rectify inaccurate data,
• erase data,
• restrict processing,
• object to processing,
• data portability,
• withdraw consent (where processing is based on consent),
• lodge a complaint with a supervisory authority.

To exercise rights, contact us using the details in Section 1.

10. Cookies and similar technologies

We use cookies and similar technologies to operate our website, analyze traffic, and support security and performance (see Section 10).

Types of cookies

• Necessary cookies — required for core functionality
• Analytics cookies — help us understand how the site is used
• Functional cookies — remember preferences
• Marketing cookies — used for advertising/retargeting (where applicable)

You can control cookies through:

• cookie banner settings (where available), and
• your browser settings (block/delete cookies, manage permissions).

Note: blocking certain cookies may impact site functionality.

11. Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. No internet-based service is 100% secure; we cannot guarantee absolute security.

12. Children

Our website and services are not directed to children. We do not knowingly collect personal data from children.

13. Third-party links

Our website may contain links to third-party websites (e.g., social media). Their privacy practices are governed by their own policies; we are not responsible for the content or processing of data on these sites.

14. Changes to this Privacy Policy

We may update this privacy policy from time to time. We will publish the latest version on this page and adjust the "Last updated" date above accordingly.