GDPR Policy & Personal Data Protection

Last updated: 18.07.2025

This policy describes how we collect, use, and protect your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").

1. What data do we collect?

We only collect the data you enter in the payment form, which is necessary to process your transaction and issue an invoice:

First and last name

Full address

Email address

Billing details

2. How do we use your data?

Your data is used exclusively for the following purposes:

Processing payments via Stripe

Issuing electronic invoices

This information is sent directly to Stripe via a secure connection and is not stored or processed on our servers.

We do not use your data for marketing purposes and we do not share it with third parties.

3. Data storage

We do not store any of your personal data (such as name, address, or email) locally.

All information is used solely for forwarding to Stripe, which processes the data securely in accordance with its own privacy policies and GDPR compliance.

4. Who has access to your data?

The only entity that receives and processes your data is:

Stripe – our payment processor, solely for completing the transaction and issuing the invoice.

We do not share your data with any other third parties.

5. Your rights

Under GDPR, you have the following rights:

Right to access your personal data

Right to rectify any inaccurate or incomplete data

Right to erasure ("right to be forgotten") — unless this conflicts with legal obligations

Right to information about how your data is collected and used

If you have questions regarding data processed by Stripe, please contact Stripe directly via their official channels.

6. Security

Your data is transmitted exclusively through a secure (SSL/TLS) connection.

We do not store any copies of your personal data on our servers.

7. Contact

For any questions regarding your personal data or data protection, feel free to contact us at:

Email: office@sidra2.com