1. Data Controller Identification

iRemex operates as the Data Controller responsible for personal data collected through the online storefront, customer account systems, technical support channels, and companion software utilities, including the Liter app and firmware update distribution services.

+ Contact point for data protection inquiries:Email: support@iremex.com

+ Portal: iRemex Support and Documentation Center

‍

2. Legal Bases for Data Processing

iRemex processes personal data strictly under valid lawful bases established by Article 6 of the GDPR:

+ Performance of a Contract (Article 6(1)(b))

+ Processing necessary to fulfill hardware purchases, process payments, manage order logistics, execute worldwide shipping, process warranty claims, and deliver required firmware maintenance updates to connected hardware.

+ Legitimate Interests (Article 6(1)(f))

+ Processing necessary to secure storefront transactions against fraud, maintain platform reliability, provide technical troubleshooting, resolve hardware readout anomalies, and improve device firmware performance, provided these interests do not override individual privacy rights.

+ Compliance with Legal Obligations (Article 6(1)(c))

+ Processing and retaining tax, invoicing, accounting, and sales records to comply with applicable statutory and regulatory mandates.

+ Consent (Article 6(1)(a))

+ Processing based on explicit consent for optional features, including marketing communications, non-essential analytical cookies, and optional telemetry collected via the companion Liter app. Consent may be withdrawn at any time.

‍

3. Categories of Personal Data Processed

Direct Customer Data

+ Identification and transaction details such as full name, billing address, shipping address, email address, telephone number, and payment confirmation tokens.

+ Support and Diagnostic Communications

+ Correspondence, fault descriptions, hardware serial identifiers, and troubleshooting logs submitted via email, contact forms, or live chat.

+ Technical and Firmware Telemetry

+ Hardware version numbers, firmware build identifiers, and connection negotiation states exchanged when checking for or applying firmware updates to the Liter cable display module. iRemex does not inspect, collect, or store personal files, media, or data traffic transmitted across the physical cable between host and connected devices.

+ Automated Digital Data

+ Standard connection records, including IP address, browser type, device operating system, and essential session cookies required for storefront navigation and checkout security.

‍

4. International Data Transfers

Where personal data originates in the EEA or UK and is transferred to servers or service providers outside those regions, iRemex ensures appropriate safeguards are in place. These safeguards include European Commission Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTAs), or reliance on jurisdictions recognized as providing an adequate level of data protection.

‍

5. Data Retention Periods

Personal data is retained only as long as necessary to fulfill the purposes for which it was gathered:

Order and Transaction Records

Retained for the duration of the hardware warranty period and subsequently for the statutory retention periods mandated by applicable tax and accounting laws.

Customer Support Inquiries

Retained for up to two years following the resolution of the ticket to ensure continuity of hardware support and warranty claim verification.

Companion App and Firmware Logs

Maintained in non-identifiable or aggregated formats where feasible, and deleted upon account closure or verified deletion requests.

‍

6. Your Rights Under the GDPR

Individuals located in the EEA and UK possess specific statutory rights regarding their personal data:

+ Right of Access (Article 15)

+ The right to obtain confirmation as to whether your personal data is being processed and to receive a copy of that data.

+ Right to Rectification (Article 16)

+ The right to have inaccurate or incomplete personal data corrected without undue delay.

+ Right to Erasure / Right to Be Forgotten (Article 17)

+ The right to request the deletion of personal data where it is no longer necessary for the original collection purposes, consent has been withdrawn, or processing is unlawful, subject to statutory retention obligations.

+ Right to Restriction of Processing (Article 18)

+ The right to limit the processing of personal data under certain conditions, such as during the verification of data accuracy.

+ Right to Data Portability (Article 20)

+ The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

+ Right to Object (Article 21)

+ The right to object at any time to processing based on legitimate interests or for direct marketing purposes.

+ Right to Withdraw Consent

+ Where processing relies on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

‍

7. Exercising Your Rights and Supervisory Complaints

To exercise any GDPR rights, submit a written request to support@iremex.com with the subject line "GDPR Data Subject Request." Requests are verified and responded to within one calendar month.

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory data protection authority in your EU member state of habitual residence, place of work, or place of the alleged infringement.

‍