Privacy Policy

Aromelis respects the privacy of its customers and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR).

1. What data we collect

• Identification and contact data: first name, last name, email, phone.
• Delivery address and, where applicable, company billing details.
• Order details and, for account holders, order history.
• Anonymous technical data for aggregate statistics (no cookies, no identification of you).

2. Purpose of processing

We use this data solely to process and deliver orders, issue invoices, communicate about your order and, with your consent, to provide support.

3. Legal basis

Processing is based on the performance of the contract (your order), legal obligations (e.g. accounting/tax) and, where applicable, your consent.

4. Data sharing

We do not sell your data. We only share it with strictly necessary partners: the courier company (for delivery), the NETOPIA payment processor and the invoicing provider. They process the data according to their own policies and legal obligations.

5. Retention period

We keep the data for as long as needed to fulfil these purposes and in line with legal obligations (e.g. tax documents are kept as required by law).

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. You can exercise your rights by writing to contact@aromelis.net. You also have the right to lodge a complaint with the competent data protection authority.

7. Security

We apply technical and organizational measures to protect your data. The connection to the site is secured (SSL), and card details are never stored by us.