At Velyon Research Labs, the security and privacy of the personal data of our users and commercial partners are handled with the highest technical and legal rigour. This Privacy Policy explains how we collect, store, process and protect your data, in strict compliance with the General Data Protection Regulation of the European Union (Regulation EU 2016/679 — GDPR).
1. Data Controller
The entity responsible for processing data collected through the website shop.velyon.eu is Velyon Research Labs.
To clarify any question about the privacy of your data or to exercise your legal rights, you may contact our data protection officer through the official email address: support@velyon.eu.
2. Data Collected and Purpose of Processing
We collect only the information strictly necessary to process your orders, ensure the security of the e-commerce platform and comply with current tax obligations.
2.1. Processing and Logistics (Performance of Contract)
When submitting an order, we collect the following data:
- Identification: Full name and Tax Identification Number (NIF) for the automatic issuance of legal invoices.
- Contact: Email address and mobile phone contact (required for DPD delivery service notifications).
- Delivery: Full billing address and physical delivery address for the goods.
2.2. Browsing and Security (Legitimate Interest and Consent)
- Traffic Data: IP address, approximate geographical location data and browser type. This information is used to automatically calculate applicable tax rates through Stripe Tax and to detect and prevent transactional fraud.
- Session Cookies: Track the products added to the shopping cart to ensure that your selection remains active while browsing.
3. Data Sharing with Third Parties
To ensure the proper functioning of our online store and the physical delivery of orders, your data is shared with the following operational partners:
- DPD Portugal (Logistics): Sharing of the name, destination address, email and mobile phone number so that the carrier can process the shipment and schedule delivery (via the Predict).
- Stripe (Payment Processing): Your card data or payment credentials are transmitted in fully encrypted form to Stripe. Velyon does not store any banking data on its servers.
- Stripe Tax (Tax Calculation): Automated processing of your geographical location to ensure that VAT is correctly calculated and settled.
- Tax Authority (Tax Office): Mandatory electronic transmission of invoices and tax data in accordance with Portuguese tax legislation.
4. Data Retention Period
Your personal information will be retained only for the period required by law or necessary for operations:
- Tax Data and Invoices: Retained for a minimum legal period of 10 years, to respond to any audits and accounting obligations of the Portuguese State.
- Account and Profile Data: Retained while you keep your reseller or customer registration active on our website. You may request deletion at any time.
5. Rights of Data Subjects
Under the GDPR, you have the following fundamental rights over your personal data:
- Right of Access and Rectification: Consult and update your data stored in our database.
- Right to Erasure (Deletion): Request the definitive deletion of your personal records (except transaction tax data that we are legally required to retain).
- Right to Object: Refuse the use of your contacts for marketing or newsletter purposes.
To exercise any of these rights, send your written request to the email address: support@velyon.eu. Our privacy team will follow up on the request within the maximum legal period of 30 days.
