Diavolana
Subscribe

Privacy Policy

This privacy policy explains how Diavolana collects, processes, and protects your personal data in compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Diavolana
Antananarivo, Madagascar
contact@diavolana.mg

2. Data We Collect

We collect the following personal data:

  • Name and email address (account registration)
  • Delivery address (shipping)
  • Payment information (processed by PayPal — we do not store card details)
  • Order history and subscription status
  • Technical data (IP address, browser, device — for security and analytics)

3. Legal Basis

We process your data based on:

  • Contract performance (Art. 6(1)(b) GDPR) — to fulfill your subscription and deliver products
  • Legal obligation (Art. 6(1)(c) GDPR) — tax and commercial record-keeping
  • Legitimate interest (Art. 6(1)(f) GDPR) — fraud prevention, service improvement
  • Consent (Art. 6(1)(a) GDPR) — marketing communications (revocable at any time)

4. Data Retention

We retain your data for as long as your account is active. After account deletion, we may retain data required by tax law (10 years in Germany) and commercial law (6 years). Technical logs are deleted after 90 days.

5. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Request deletion of your data (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Lodge a complaint with a supervisory authority (Art. 77)

6. Third-Party Services

PayPal processes payments. PayPal's privacy policy applies to payment data.
Resend delivers transactional emails. No personal data is used for marketing purposes through Resend.
Neon (S3-compatible storage) hosts uploaded files (avatars, invoice PDFs).

7. Data Transfer

Our servers are hosted in the European Union. Some data may be transferred to Madagascar for operational purposes, with appropriate safeguards under Art. 46 GDPR.

8. Contact

For privacy-related inquiries, contact us at contact@diavolana.mg.

Last updated: September 22, 2026