Privacy Policy

1. Introduction

We at CristaLAC take the protection of your personal data very seriously. This privacy policy informs you about the collection, processing, and use of your personal data when you visit our website www.cristalac.org in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

The responsible entity for data processing on this website is:

CristaLAC

Organic Products

CristaLAC HQ, Main Street, Marjaba, Metn, Lebanon

CristaLAC Office, 71134 Aidlingen, Germany

Phone: +49 7034 947 93 08

Contact via WhatsApp

Email: organic@cristalac.org

www.cristalac.org

3. Types of Data Collected

We collect and process the following types of personal data:

Contact Information: Name, email address, phone number
Property Preferences: Search criteria, budget, location preferences
Communication Data: Emails, messages, and call logs related to inquiries
Technical Data: IP address, browser type, access times, and website interactions

4. Purpose and Legal Basis for Data Processing

We process your personal data for the following purposes:

To provide and improve our services (Art. 6(1)(b) GDPR – Contractual necessity)
To communicate with you regarding property inquiries (Art. 6(1)(b) GDPR – Contractual necessity)
To comply with legal obligations (Art. 6(1)(c) GDPR – Legal obligation)
For marketing purposes (Art. 6(1)(a) GDPR – Consent)
To analyze website traffic and improve user experience (Art. 6(1)(f) GDPR – Legitimate interest

5. Data Retention

We store your personal data only as long as necessary to fulfill the intended purpose or as required by law.

Contact inquiries: Up to 6 months after resolution
Contract-related data: 10 years (as required by tax and commercial law)
Marketing data: Until you withdraw your consent

6. Sharing of Personal Data

We do not sell or rent your personal data. However, we may share it with trusted third parties, including:

Business Partners (e.g., real estate agents, notaries, banks)
Service Providers (e.g., IT hosting, email services)
Legal Authorities (if required by law)

All third-party processors comply with GDPR requirements and sign data processing agreements (DPA).

7. Your Rights Under GDPR

As a user, you have the following rights regarding your personal data:

Right to Access (Art. 15 GDPR) – Request a copy of your data
Right to Rectification (Art. 16 GDPR) – Correct inaccurate data
Right to Erasure (Art. 17 GDPR) – Request deletion of your data
Right to Restriction of Processing (Art. 18 GDPR)
Right to Data Portability (Art. 20 GDPR)
Right to Object (Art. 21 GDPR) – Withdraw consent at any time

To exercise your rights, contact us at organic@cristalac.org

8. Cookies and Tracking Technologies

Our website uses cookies to enhance user experience and analyze traffic. You can manage cookie preferences via your browser settings. For more details, see our [Cookie Policy].

9. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. This includes SSL encryption, access controls, and regular security audits.

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect legal changes or improvements to our services. Please check this page periodically.

11. Contact for Privacy Inquiries

If you have any questions about this privacy policy or your data protection rights, please contact us at: