// legal
Privacy policy
Template - please complete and have it checked before going live.
1. Controller
Kurilux Electronics, [address], support@kurilux.com
2. Data we process
- Orders: name, email, shipping address and order contents to fulfil your purchase (Art. 6(1)(b) GDPR). Retained as required by commercial and tax law.
- Support requests: name, email, optional serial number and message to answer your request (Art. 6(1)(b)/(f) GDPR).
- Device registration: serial numbers are linked to your order to provide warranty and support. The public device lookup never shows personal data.
- Server logs: our hosting provider stores technical access logs (IP address, time, requested page) for security purposes.
3. Cookies
We only use one technically necessary session cookie (for your cart and security tokens). No tracking, no analytics, no third-party fonts.
4. Web flasher (firmware updates over USB)
Only on the device page with the browser flasher, the open-source tool "ESP Web Tools" is loaded from the jsDelivr CDN (cdn.jsdelivr.net). Your browser transmits your IP address to jsDelivr to download it (Art. 6(1)(f) GDPR - providing the update function). The connection to your device happens locally in your browser via Web Serial; no data from your device is sent to us or to third parties.
5. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority.
