1. Data Collection & Processing
2. Data Uses & Lawful Bases
3. Data Location & Retention
4. Data Disclosure
5. Cookies and Tracking Technologies
7. Data Security
8. Data Subject Rights
9. Data Controller/Processor
10. Requirements under US State Privacy Laws
11. Additional Notice & Contact Details
You are not legally required to provide us with any personal data, and may do so (or avoid doing so) at your own free will. If you do not wish to provide us with your personal data, or to have it processed by us or any of our Service Providers (defined below), please avoid any interaction with us including visiting our Sites or using our Services.
We collect or generate the following categories of personal data in relation to the Services:
-Member Data: personal data concerning our Members, including contact, contractual and billing details of internal focal persons who directly engage with us (e.g., billing contacts and authorized signatories on behalf of our Members), details concerning their needs and preferences relevant to our existing engagement with them, as well as the type of ehouse services purchased. We may also collect information about the Member’s picking address if the package is not delivered from our warehouse.
-User Data: personal data we collect and generate about Users, which may include:
•User account information (e-mail address and, when applicable, hashed password);
•Platform usage information (connectivity, technical and aggregated usage data, such as user agent, IP addresses, device data (like type, OS, device id, browser version, locale and language settings used), activity logs, session recordings, and the cookies installed or utilized on their device);
•Direct interactions and communications with us (e.g., for support).
-Receiver Data: personal data we collect about Receivers, which may include their full name, shipping address, and order details (including items ordered and status). We collect, process, and manage such data solely on behalf and under the instructions of our Members as their Data Processor, in accordance with our Data Processing Addendum with them. For more information, please refer to Section 9 below.
-Prospect Data: personal data we collect and generate about our Prospects, which may include:
•Contact and business details, as well as any needs, preferences, attributes, and insights relevant to our potential engagement;
•Site usage information (connectivity, technical and aggregated usage data, such as user agent, IP addresses, device data (such as type, OS, device id, browser version, locale and language settings used), activity logs, session recordings, and the cookies and pixels installed or utilized on their device);
•Direct interactions and communications with us.
We collect such data either automatically, through the data subject’s interaction with us or with our Services; or through third-party services, social media, analytics tools, and other business initiatives.
2. Data Uses & Lawful Bases
We use personal data as necessary for the performance of our Services (“Performance of Contract”); to comply with our legal and contractual obligations (“Compliance with Legal Obligations”); and to support our legitimate interests in maintaining and improving our Services, e.g. in understanding how our Services are used and how our campaigns are performing, and gaining insights which help us dedicate our resources and efforts more efficiently; in marketing, advertising and selling our Services to you and others; providing customer services and technical support; and protecting and securing our Users, Members, Prospects, ourselves and our Services (“Legitimate Interests”).
Specifically, we use personal data for the following purposes (and in reliance on the legal bases for processing noted next to them, as appropriate):
Data Location & Retention
We and our authorized Service Providers (defined below) maintain, store and process personal data in Israel, Europe, the UK, the US and other locations as reasonably necessary for the proper performance and delivery of our Services, or as may be required by applicable law.
ehouse is headquartered in Israel, a jurisdiction which is considered by the European Commission, the United Kingdom Secretary of State, and the Swiss Federal Data Protection and Information Commissioner (FDPIC), to be offering an adequate level of protection for personal data of individuals residing in the European Economic Area (EEA), the UK and Switzerland, respectively. We transfer data from the EEA, the UK and Switzerland to Israel on this basis.
We may retain your personal data for as long as it is reasonably needed in order to maintain and expand our relationship and provide you with our Services and offerings; in order to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (i.e. as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use), all in accordance with our data retention policy and at our reasonable discretion. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of such data, the potential risk of harm from unauthorized use or disclosure of such data, the purposes for which we process it, and the applicable legal requirements. If you have any questions about our data retention policy, please contact us by email at firstname.lastname@example.org.
4. Data Disclosure
We may disclose personal data in the following instances:
We may engage selected third-party companies and individuals to perform services on our behalf or complementary to our own. Such service providers include logistics service providers (including for storage, packaging, transportation or payment), hosting services, data security services, billing and payment processing services, fraud detection and prevention services, web and product analytics, e-mail distribution and monitoring services, session or activity recording services, remote access services, performance measurement, data optimization and marketing services, social and advertising networks, voicemails, support, enablement and customer relation management systems, and our legal, financial and compliance advisors (collectively, “Service Providers“). Our Service Providers may have access to personal information, depending on each of their specific roles and purposes in facilitating and enhancing our Services, and may only use the data as determined in our agreements with them.
You may choose to integrate third-party services with our Services such as eCommerce platforms or payment solutions (provided that such integration is supported by our Services). The provider of this integrated third-party service may receive certain relevant data (that may include personal data) from our Services, or share certain relevant data from such third-party provider’s service with our Services, depending on the nature and purpose of such integration. Note that we do not receive or store your passwords for any of these third-party services (but do typically require your API key in order to integrate with them).
We may disclose or allow government and law enforcement officials access to your personal data, in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; or (c) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and services.
Protecting Rights and Safety:
We may share personal data with others if we believe in good faith that this will help protect the rights, property or personal safety of ehouse, any of our Users or Members, or any members of the general public.
ehouse Subsidiaries and Affiliated Companies:
For the avoidance of doubt, ehouse may share personal data in additional manners, pursuant to your explicit approval, or if we are legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous. We may transfer, share or otherwise use non-personal and non-identifiable data at our sole discretion and without the need for further approval.
5. Cookies and Tracking Technologies
You can manage your cookies preferences, and accept, remove or entirely block cookies, through your browser settings. If you choose to opt-out of certain cookies, this will typically generate a new cookie which will preserve your choice, and indicate it to our Services in your next visits so that the cookies you opted-out of will not be utilized.
Certain web browsers may transmit “Do Not Track” signals to websites with which the browser communicates. However, due to differences in how web browsers interpret this feature and send those signals, and lack of standardization, we do not change our practices in response to such “Do Not Track” signals.
We engage in Services and promotional communications, through email, phone, SMS and notifications.
We may contact you with important information regarding our Services. For example, we may send you notifications (through any of the means available to us) of changes or updates to our Services, billing issues, log-in attempts or password reset notices, etc.
We may also notify you about new features, additional offerings, and special opportunities or any other information we think you will find valuable. We may provide such notices through any of the contact means available to us (e.g. phone, mobile or email), through the Services, or through our marketing campaigns on any other sites or platforms. If you do not wish to receive such promotional communications, you may notify us at any time by sending an email to email@example.com, or by following the “unsubscribe”, “stop”, “opt-out” or “change email preferences” instructions contained in the promotional communications you receive.
In order to protect your personal data held with us, we use industry-standard physical, procedural and technical security measures, including encryption as appropriate. However, please be aware that regardless of any security measures used, we cannot and do not guarantee the absolute protection and security of any personal data stored with us or with any third parties as described in Section 4 above.
Data Subject Rights
Individuals have rights concerning their personal data. Please contact us by e-mail at firstname.lastname@example.org if you wish to exercise your privacy rights under any data protection law applicable to you, including the EU or UK General Data Protection Regulation (GDPR).
Such rights may include – the right to request access to (specific pieces of personal data collected; categories of personal data collected; categories of sources from whom the personal data was collected; purpose of collecting personal data; categories of third parties with whom we have shared personal data), rectification or erasure of your personal data held with ehouse, to restrict or object to the processing of such personal data, or to port such personal data. If you are a GDPR-protected individual, you also have the right to lodge a complaint with the relevant supervisory authority in the EU or the UK, as applicable.
If you are a Receiver and would like to make any requests or queries regarding your personal data that we process as a Data Processor on our Member’s behalf, including exercising your right to access, correct, or delete your data, please contact your merchant directly, which is the Data Controller of such data.
Certain data protection laws and regulations, such as the GDPR, typically distinguish between two main roles for parties processing personal data: the “Data Controller”, who determines the purposes and means of processing; and the “Data Processor”, who processes such data on behalf of the data controller. Below we explain how these roles apply to our Services, to the extent that such laws and regulations apply.
Ehouse is the “Data Processor” of Receiver Data that we process on behalf of our Members (who are the Data Controllers of such data) and in accordance with their reasonable instructions, subject to our Terms, our Data Processing Addendum (to the extent applicable) and other commercial agreements with them. Therefore, our Members are responsible for handling requests to exercise privacy rights from Receivers or other individuals whose data they process through the Services.
If you have any questions or would like to exercise your rights under any applicable US State privacy laws, you can contact email@example.com.
Additional Notices & Contact Details
Updates and Amendments:
Third Party Websites and Services:
Our Services are not directed to children under the age of 16:
We do not knowingly collect personal data from children and do not wish to do so. If we learn that a person under the age of 16 is using the Services, we will attempt to prohibit and block such use and will make our best efforts to promptly delete any personal data stored with us with regard to such child. If you believe that we might have any such data, please contact us by email at firstname.lastname@example.org.
EU Representative: eHouse Space GmbH has been designated as ehouse’s representative in the EU/EEA for data protection matters pursuant to Article 27 of the GDPR. eHouse Space GmbH may be contacted on matters related to the processing of personal data of residents of the EU/EEA by email at email@example.com or by post at Charlottenburger Str. 62, Berlin.
UK Representative: JOIN EHOUSE LTD has been designated as ehouse’s representative in the EU/EEA for data protection matters pursuant to Article 27 of the UK GDPR. JOIN EHOUSE LTD may be contacted on matters related to the processing of personal data of UK residents by email at firstname.lastname@example.org or by post at 95A Rye Ln, London
Last updated: July 2023
Social Media Giveaway Terms & Conditions
Mit der Teilnahme am Gewinnspiel erklären Sie sich mit diesen Bedingungen einverstanden.
Die Gewinnspiele des Veranstalters mit Teilnahme über Instagram und/oder Facebook sind nur für Einwohner von Berlin, Deutschland, zugänglich.
Kein Kauf erforderlich.
Die Gewinner müssen für die Teilnahme am Gewinnspiel nichts bezahlen.
Die Teilnehmer müssen zum Zeitpunkt der Teilnahme über 18 Jahre alt sein.
Mitarbeiter des Veranstalters sind nicht teilnahmeberechtigt.
Instagram oder Facebook sind in keiner Weise mit dem Gewinnspiel verbunden oder daran beteiligt.
Es wird nur eine Teilnahme pro Person und Gewinnspiel akzeptiert.
Der Preis wird an einen zufällig ausgewählten Gewinner vergeben, der über Facebook/Instagram teilgenommen hat.
Der Veranstalter kann nicht haftbar gemacht werden, wenn der genannte Preis nicht verfügbar ist oder nicht erfüllt werden kann.
Der Veranstalter kann nicht für den Nichteingang von Einsendungen verantwortlich gemacht werden.
Der Veranstalter übernimmt keine Verantwortung für verlorene, verspätete, unleserliche, beschädigte, unvollständige oder anderweitig ungültige Einsendungen.
Soweit gesetzlich zulässig, ist die Haftung des Veranstalters im Rahmen oder in Verbindung mit dem Gewinnspiel oder diesen Teilnahmebedingungen auf den Selbstkostenpreis des betreffenden Preises beschränkt.
Soweit nach geltendem Recht zulässig, haftet der Veranstalter im Rahmen oder in Verbindung mit diesen Teilnahmebedingungen, dem Gewinnspiel oder einem Preis nicht für indirekte, besondere oder Folgekosten, -ausgaben, -verluste oder -schäden, die ein Teilnehmer erleidet, selbst wenn solche Kosten, Ausgaben, Verluste oder Schäden vernünftigerweise vorhersehbar waren oder von dem Teilnehmer und dem Veranstalter vernünftigerweise hätten in Betracht gezogen werden können und unabhängig davon, ob sie aus Vertragsbruch, unerlaubter Handlung, Fahrlässigkeit, Verletzung gesetzlicher Pflichten oder anderweitig entstanden sind.
Preise sind nicht übertragbar und nicht rückzahlbar.
Eine Barauszahlung ist nicht möglich. Sollte ein Preis aus irgendeinem Grund nicht mehr verfügbar sein, behält sich der Veranstalter das Recht vor, diesen Preis durch einen Preis von gleichem oder höherem Wert zu ersetzen.
Der Name, die Adresse, die E-Mail-Adresse und die Telefonnummer des Gewinners sind dem Veranstalter auf Anfrage mitzuteilen und werden weitergegeben, um die Durchführung des Preises zu ermöglichen.
Im Falle unvorhergesehener Umstände, die sich der Kontrolle des Veranstalters entziehen, behält sich der Veranstalter das Recht vor, das Gewinnspiel oder diese Teilnahmebedingungen ganz oder teilweise mit oder ohne vorherige Ankündigung zu stornieren, zu beenden, zu ändern oder auszusetzen.Die Entscheidung des Veranstalters ist endgültig. Die Entscheidung des Veranstalters ist endgültig. Es wird keine Korrespondenz geführt. Der Name des Gewinners und sein Benutzername in den sozialen Medien können nach der Auswahl des Gewinners auf den Social-Media-Profilen des Veranstalters veröffentlicht werden.