GDPR Privacy Notice

Introduction

This GDPR Privacy Notice supplements our Privacy Policy and applies to individuals located in the European Economic Area (EEA), United Kingdom, and Switzerland. It explains how WelsSlim Storage Solutions LLC processes your personal data in compliance with the General Data Protection Regulation (GDPR) and related data protection laws.

Data Controller

WelsSlim Storage Solutions LLC is the data controller responsible for your personal data.

Legal Bases for Processing

We process your personal data based on the following legal grounds:

Contractual Necessity (Article 6(1)(b))

Processing necessary to perform our contract with you, including:

• Processing and fulfilling your orders
• Managing your account
• Providing customer support
• Processing payments and refunds
• Arranging delivery of products

Legitimate Interests (Article 6(1)(f))

Processing necessary for our legitimate interests, including:

• Improving our website and services
• Analyzing website usage and trends
• Preventing fraud and ensuring security
• Administering our business operations

Consent (Article 6(1)(a))

Processing based on your explicit consent, including:

• Sending marketing emails and newsletters
• Using non-essential cookies
• Personalized advertising

Legal Obligation (Article 6(1)(c))

Processing necessary to comply with legal obligations, including:

• Tax and accounting requirements
• Responding to lawful requests from authorities
• Fraud prevention obligations

Your Rights Under GDPR

As a data subject in the EEA, you have the following rights:

Right of Access (Article 15)

You have the right to obtain confirmation of whether we process your personal data and, if so, access to that data along with information about how we process it.

Right to Rectification (Article 16)

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including when:

• The data is no longer necessary for its original purpose
• You withdraw consent (where consent was the legal basis)
• You object to processing and there are no overriding legitimate grounds
• The data was unlawfully processed

Right to Restriction of Processing (Article 18)

You have the right to restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object (Article 21)

You have the right to object to processing based on legitimate interests or for direct marketing purposes. For direct marketing, we will stop processing upon your objection.

Right to Withdraw Consent (Article 7(3))

Where we rely on consent for processing, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement.

International Data Transfers

As we are based in the United States, your personal data will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with our service providers
• Technical and organizational security measures

You may request a copy of the safeguards we use by contacting us at support@welsslim.shop.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Our retention periods are:

• Order and transaction data: 7 years (for tax and legal compliance)
• Account information: Until you request deletion or close your account
• Marketing preferences: Until you unsubscribe or withdraw consent
• Website analytics: 26 months
• Customer service records: 3 years after last interaction

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data in transit
• Encryption of sensitive data at rest
• Access controls and authentication
• Regular security assessments
• Employee training on data protection

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

• Email: support@welsslim.shop
• Phone: +1 (469) 715-8823

We will respond to your request within one month. This period may be extended by two further months if necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receiving your request.

We may ask you to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.

Changes to This Notice

We may update this GDPR Privacy Notice from time to time. We will notify you of significant changes by posting a notice on our website or by email.

Contact Us

For questions about this GDPR Privacy Notice or to exercise your rights: