1. Controller and Contact
The data controller is the actual person or legal entity operating StraweN. Its full legal identity and business details must be published in the Legal Center. For privacy enquiries, use the Reach Us form or strawengg@gmail.com. A data protection officer will be listed here if the controller is legally required to appoint one.
2. Data We May Receive
- Contact details you enter into the Reach Us form, such as name and email address.
- Message content, subject line and information you voluntarily include in an enquiry.
- Order or customer details that may be provided when arranging merchandise or other services.
- Technical information generated by the website or its hosting/CDN, such as IP address, browser and device information, where available to the operator or provider.
- Information you choose to make available through third-party platforms such as Discord, Twitch, YouTube, X, Instagram or Facebook when you interact with StraweN there.
3. Why We Process Data
- To answer enquiries, partnership requests, media requests, merch questions and other messages.
- To administer orders, payments, deliveries, returns or complaints where applicable.
- To operate, secure, maintain and improve the website and prevent abuse or fraud.
- To comply with legal obligations and establish, exercise or defend legal claims.
- To send marketing communications only where a lawful basis exists, such as consent where consent is required.
4. Legal Bases
Depending on the context, processing may rely on steps taken at your request before a contract, performance of a contract, compliance with a legal obligation, legitimate interests that do not override your rights, or consent where consent is the appropriate legal basis. The specific basis should be assessed for each processing activity.
5. Contact Form and FormSubmit
The Reach Us form uses the FormSubmit service to route your message to strawengg@gmail.com without opening a mail application. FormSubmit receives the fields you submit and states that it may process them to operate the form service. FormSubmit states that form submissions are retained for 30 days on its service. See the FormSubmit privacy information for its own processing details.
6. Sharing
Data may be shared with service providers that host, secure, deliver or support the website and contact process; payment, fulfilment or delivery providers when a purchase requires them; authorities where disclosure is required by law; and third-party platforms when you choose to use their services. We do not sell personal data.
7. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, to handle disputes, comply with legal/accounting duties and exercise or defend legal claims. Different categories may have different retention periods. The exact mailbox retention for emails received at strawengg@gmail.com depends on the operator's email system and configured retention settings.
8. International Transfers
Some service providers or platforms may process personal data in countries outside the European Economic Area. Where a transfer is subject to GDPR Chapter V, the controller should use an applicable legal transfer mechanism and appropriate safeguards.
9. Your Rights
Subject to applicable law, you may have rights to access, rectify, erase, restrict or object to processing, receive certain data in a portable format, and withdraw consent where processing relies on consent. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI). Details are available at vdai.lrv.lt.
10. Security
We use proportionate technical and organisational measures appropriate to the risk. No internet service can guarantee absolute security. Do not send passwords, payment card numbers or other highly sensitive information through the general contact form.
11. External Services
Clicking links to Discord, YouTube, Twitch, social networks, partners or other external services takes you to platforms controlled by third parties. Their own privacy and cookie policies apply there. The site also currently loads fonts from Google and Tailwind CSS from a CDN; those requests can expose standard technical connection data to those providers.
12. Changes
We may update this policy when the site's functionality, service providers, legal requirements or business operations change. The effective date will be updated when the policy is materially revised.
13. Contact
Use Reach Us for privacy questions or requests, or write to strawengg@gmail.com.