UK
FR
DEEffective date: [Confirm date]
At a glance
- Contact us at contact@eurava.net about your information.
- Newsletter sign-up is optional and separate from browsing or contacting us.
- We do not take payment or receive card details for retailer purchases.
Who is responsible?
Eurava is operated by [Confirm: full legal name, legal form and registered address of the data controller]. You can contact us at contact@eurava.net or at the address in our Legal notice. [Confirm: add a data protection officer or EU/UK representative and contact details if required; otherwise remove this placeholder].
Information we use and why
| Activity and information | Purpose and legal basis |
|---|---|
| Visiting the website: IP address, request time, pages requested, browser and device details, error or security records. | Deliver and protect the service. Legitimate interests in a functioning, secure website; exact log fields and retention [Confirm: confirm with host]. |
| Enquiries: name, email, topic, message, optional source link and correspondence. | Answer questions, handle feedback and investigate corrections. Legitimate interests in assisting visitors and maintaining accurate information. Legal obligations apply to privacy-rights requests. |
| Newsletter: email address, subscription status, confirmation and consent records. | Send the weekly Postcards from Europe newsletter with consent. Keep limited evidence of consent and opt-outs to respect your choices and demonstrate compliance. |
| Company research: relevant public information about owners, directors or business contacts, including names, professional roles, ownership and relevant country information. | Explain company ownership and operations. Legitimate interests in accurate public-interest company information, balanced against the people concerned. |
| Store preference: UK, FR or DE selection. | Show the store you request and remember your choice. Legitimate interests in usability; device-storage consent or an exemption is assessed separately. |
| Referral reporting, optional analytics and email engagement. | Only if enabled and described below. [Confirm: identify the actual data, purpose and GDPR basis for each system; obtain separate device-access consent where required]. |
Required fields are marked on our forms. Without an email address we cannot reply by email or send the newsletter. Optional information is your choice. Please do not send card details, passwords, identity documents or sensitive personal information unless we specifically need it and arrange a suitable channel.
Company research and information from others
We use company registries, company websites and statements, reliable public sources and information submitted by visitors or business representatives. We aim to use professional information relevant to our assessments, not unrelated private details. Our method explains the scope.
If a profile contains information about you, you may ask about its source, challenge its accuracy or exercise the rights below. [Confirm: put in place the individual-notification process for indirectly collected personal data under GDPR Article 14; document any applicable exception rather than relying only on this page].
Retailer links, analytics and location
When you follow a retailer link, the destination may receive your IP address, browser details, referrer and referral identifier. A network may return a transaction reference, date, value, commission or status to us. [Confirm: replace this description with each active network’s actual reporting fields and controller/processor roles]. We do not need your payment-card details to receive commission.
Who receives information?
Access should be limited to authorised Eurava personnel and suppliers needed to host the site, deliver email, handle support and protect the service. We may also disclose relevant records to professional advisers or authorities when necessary for a legal obligation or claim. Our proposed policy is not to sell mailing lists or share subscribers with retailers for their own marketing.
| Service | Provider and details to confirm |
|---|---|
| Website hosting and backups | [Confirm: contracted legal entity, privacy link, server/back-up countries, access and deletion terms; Raidboxes remains a plan, not a confirmed host] |
| Contact mailbox and newsletter delivery | [Confirm: mailbox provider and SMTP/delivery provider, legal entities, privacy links and processing locations] |
| Newsletter management | The Newsletter Plugin within WordPress. [Confirm: confirm add-ons, external connections and access; a plugin vendor is not automatically the recipient of subscriber data] |
| Affiliate networks, analytics, anti-spam or consent tools | [Confirm: list only systems actually enabled; identify recipients and purposes, or state none] |
Where information is processed
We aim to use European providers, but this does not by itself mean all processing stays in the EEA or UK. International support access and subcontractors also matter. Where relevant, transfers need an applicable adequacy decision or appropriate safeguards, such as approved contractual clauses and additional protections. You can request information about the safeguards we use.
[Confirm: list actual destination countries, transfer mechanisms and how to obtain a copy; complete EU and UK requirements as applicable]
How long we keep information
We keep information for its stated purpose and any necessary legal obligations or claims, then delete or anonymise it. Longer retention must have a specific reason. The following is a proposed schedule, not a statement that deletion settings are already configured.
| Record | Proposed period — confirm before launch |
|---|---|
| Routine enquiries | 12 months after the enquiry closes, unless an unresolved complaint or claim requires longer. |
| Newsletter list | Until unsubscribe or inactivity review. [Confirm: choose an inactivity period; proposed 24 months]. Keep a minimal suppression record while needed to prevent further mail, reviewed annually. |
| Consent evidence and privacy requests | [Confirm: set a justified period for compliance evidence, including after withdrawal, without keeping unnecessary message content] |
| Access and security logs | Proposed 30 days for routine logs; isolate evidence of an incident only while needed. [Confirm: verify provider defaults]. |
| Company research and corrections | While needed to support an active profile, reviewed at least annually; [Confirm: define archive/deletion periods for superseded evidence and personal data]. |
| Affiliate accounts, transaction reports and backups | [Confirm: confirm statutory accounting periods by operator country; minimise personal referral data and set a backup deletion cycle] |
Your choices and rights
Depending on the circumstances, you can ask to access, correct, erase or restrict use of your information, and receive portable data where that right applies. You can object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time. Where we rely on consent, you can withdraw it.
Write to contact@eurava.net with enough detail to identify your request. We may need proportionate confirmation of identity. We normally respond within one month; if a permitted extension is necessary, we will explain why within that month. Rights can be subject to legal exceptions, which we will explain.
You can complain to your local data protection authority, including the CNIL in France or the ICO in the UK. [Confirm: confirm the competent lead authority for Eurava’s establishment].
Security, children and updates
We aim to limit access, keep systems updated and use appropriate security and supplier controls. No website or email system can guarantee absolute security. [Confirm: verify access controls, backups, processor contracts and incident procedures].
Eurava is intended for a general adult shopping audience. We do not seek children’s personal information or offer a children’s newsletter. Please contact us if you believe a child has supplied personal data that should be removed.
Product images and external content
Some product images load directly from a retailer or feed provider. To deliver an image, that server receives technical information such as your IP address and browser request. Eurava asks browsers not to send a page referrer with merchant product images. This does not hide your IP address from the image server. We do not embed social feeds by default.