1. Definitions
In this Privacy Policy (hereinafter referred to as "Policy"), the following terms and definitions are used:

• Personal Data – any information related to an identified or identifiable natural person ("Data Subject"), including but not limited to name, contact details (phone, email, postal address), location (country, city, region, etc.), date of birth, photographs, links to personal websites, social media profiles, and payment details (card number, expiration date, security code).
• Data Controller – the administrator of the website https://adaurum.net, which alone or jointly with others determines the purposes and means of processing Personal Data.
• Data Subject (User) – an individual to whom Personal Data relates.
• Website – the website owned by the Data Controller, located at https://adaurum.net.
• Processing of Personal Data – any operation or set of operations performed on Personal Data, whether by automated or non-automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure, or destruction.
• Third Party – a natural or legal person, public authority, agency, or body other than the Data Subject, Controller, or Processor who is authorized to process Personal Data under direct authority.
• Consent – any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which they, by a statement or clear affirmative action, signify agreement to the processing of their Personal Data.

2. General Provisions
2.1. This Policy is issued in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applies to all Personal Data processing activities conducted by the Data Controller.
2.2. The purpose of this Policy is to establish rules for processing Personal Data, ensure compliance with applicable regulations, and protect the rights of Data Subjects.
2.3. The Data Controller processes Personal Data based on the following legal grounds:

• Performance of a contract with the Data Subject
• Compliance with legal obligations
• Legitimate interests pursued by the Data Controller or a third party
• Explicit consent provided by the Data Subject

3. Data Collection and Use
3.1. The Data Controller may collect and process the following categories of Personal Data:

• Full name
• Contact details (phone number, email address, postal address)
• Location (country, city, region, etc.)
• Date of birth
• Social media profiles
• Payment details (excluding CVV or other security codes)

3.2. The Data Controller processes Personal Data for the following purposes:

• Providing access to the Website and its services
• Customer support and communication
• Processing payments for services
• Marketing and promotional communications (with consent)
• Website analytics and service improvements

3.3. Personal Data is processed using automated and manual methods and stored securely for a period of up to 3 years from the last activity on the Website, unless required otherwise by law.

4. Data Subject Rights
Under the GDPR, Data Subjects have the following rights regarding their Personal Data:

• Right to Access – obtain confirmation of whether their data is being processed and access the data.
• Right to Rectification – request corrections to inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten) – request deletion of their data under certain conditions.
• Right to Restriction of Processing – request limited processing of their data.
• Right to Data Portability – receive their data in a structured, commonly used format.
• Right to Object – object to processing based on legitimate interests.
• Right to Withdraw Consent – withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint – file a complaint with the relevant data protection authority.

5. Data Transfers and Security
5.1. The Data Controller ensures appropriate security measures are implemented to prevent unauthorized access, disclosure, alteration, or destruction of Personal Data.
5.2. Personal Data may be transferred outside the European Economic Area (EEA) only if adequate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision from the European Commission.
5.3. The Data Controller does not sell or share Personal Data with third parties except as required by law or necessary for service provision.

6. Changes to the Privacy Policy
6.1. The Data Controller reserves the right to update this Policy periodically to reflect changes in data protection regulations or business practices. The latest version will be published on the Website.

7. Contact Information
For any inquiries regarding this Privacy Policy or data protection rights, please contact us at:
Email: e.lis@adaurum.net