PRIVACY POLICY

1. General information

This privacy policy explains how personal data is processed on our website in accordance with the GDPR.

2. Data controller

Serenity Mail LLC
18 Sholom-Aleichem Street, Office 2/1
02156 Kyiv, Ukraine

Email: sales@serenity-mail.com

Telephone: +380 50 308 90 39

3. Hosting

Our website is hosted on servers within the European Union (AWS Europe).

When you visit the website, the server automatically collects the following data:

• IP address
• Date and time of the request
• Browser type and version
• Operating system
• Referrer URL

This data is technically necessary to provide the website and ensure its stability and security.

Legal basis: Article 6(1)(f) GDPR (legitimate interest)

4. Contact by email

If you contact us by email, your details will be used to process your enquiry and stored as part of our email correspondence.

Legal basis: Article 6(1)(b) GDPR (contract / pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interest in processing enquiries).

5. Contact form

If you send us enquiries using the contact form, your details will be used exclusively to process your enquiry by email. These include your name, email address, telephone number, message and any files you choose to upload.

The information submitted is not stored in a database or disclosed to third parties unless this is necessary to process your enquiry. Attachments are sent to us by email together with your message only.

To protect the form against spam, we use technically necessary checks, including a form session cookie and short-term counters in Redis based on the IP address and form session. This data is automatically deleted after a short time.

Processing is based on Article 6(1)(b) GDPR or our legitimate interest in handling enquiries under Article 6(1)(f) GDPR.

You have the right at any time to access, rectify or erase your personal data within the limits of the applicable legal provisions.

6. Registration and processing as part of our services

When you use the registration form or our services, we process and store the data needed to set up access, communicate with you and provide the service. This may include:

• Company details
• Contact details (e.g. name, email)
• Content of communications

Data is processed exclusively for our own purposes and to provide our services. It is not sold or disclosed for third-party purposes. At the customer's request, we delete this data unless statutory retention obligations prevent us from doing so.

Legal basis: Article 6(1)(b) GDPR

7. Server log files

The hosting provider automatically collects and stores information in server log files that your browser automatically transmits.

This data is not combined with other data sources.

8. Cookies

Our website currently uses only technically necessary cookies. They are used for language and cookie settings, form protection and the functioning of the website.

The consent cookie stores your selection for up to 12 months. You can reopen the cookie settings at any time.

Legal basis for necessary cookies: Section 25(2) TDDDG, Article 6(1)(f) GDPR.

9. Transfer of data to third countries

Personal data is not transferred to third countries unless this is necessary to perform a contract or required by law.

10. Retention period

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention periods.

11. Your rights

You have the following rights:

• Access (Article 15 GDPR)
• Rectification (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing (Article 21 GDPR)

You also have the right to lodge a complaint with a supervisory authority.

12. Data security

We take appropriate technical and organisational measures to protect your data against loss, manipulation or unauthorised access.

13. Changes

This privacy policy may be updated as necessary.