RGPD

Privacy Notice – Personal Data Protection (GDPR)

HQ Picture is committed to safeguarding your personal data. As the data controller, HQ Picture ensures that your information is processed lawfully, transparently, and in accordance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).


1. Purpose of Data Processing

We collect and process personal data for the following purposes:

  • To handle and fulfill orders placed via our website or app (legal basis: performance of a contract)

  • To maintain and improve customer relationships (legal basis: legitimate interest or contract)

  • To send promotional offers and newsletters (legal basis: explicit consent)

  • To generate internal performance and usage statistics (legal basis: legitimate interest)

  • For HR-related matters, when relevant (legal basis: legal obligation or contractual relationship)


2. Types of data collected

The personal data we may collect includes:

  • Name and surname
  • Postal and billing address
  • Email address
  • Phone number
  • Order and transaction history
  • Payment information (processed via secure third parties)
  • IP address and device data
  • Communication and marketing preferences

3. Who Has Access to Your Data

We do not sell your personal data. It may be shared only with trusted service providers, including:

  • Web hosting and IT infrastructure partners

  • Payment processors

  • Third-party vendors who process data on our behalf, under strict GDPR-compliant contracts

Your data is stored within the European Economic Area (EEA). If international transfer is ever required, it will be done under appropriate safeguards such as the European Commission’s standard contractual clauses.


4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes stated above or to comply with legal obligations (e.g. for tax, accounting, or audit requirements).


5. Your Rights Under GDPR

You have the right to:

  • Request access to your personal data

  • Correct or update inaccurate information

  • Request erasure (“right to be forgotten”)

  • Restrict processing under certain conditions

  • Object to processing, especially for direct marketing

  • Request data portability to another provider

  • Withdraw your consent at any time (this does not affect processing already carried out)

To exercise your rights, please contact our team


CLOSE