1. Data Collection & Processing
2. Data Uses & Lawful Bases
3. Data Location & Retention
4. Data Disclosure
5. Cookies and Tracking Technologies
7. Data Security
8. Data Subject Rights
9. Data Controller/Processor
10. Requirements under US State Privacy Laws
11. Additional Notice & Contact Details
You are not legally required to provide us with any personal data, and may do so (or avoid doing so) at your own free will. If you do not wish to provide us with your personal data, or to have it processed by us or any of our Service Providers (defined below), please avoid any interaction with us including visiting our Sites or using our Services.
We collect or generate the following categories of personal data in relation to the Services:
-Member Data: personal data concerning our Members, including contact, contractual and billing details of internal focal persons who directly engage with us (e.g., billing contacts and authorized signatories on behalf of our Members), details concerning their needs and preferences relevant to our existing engagement with them, as well as the type of ehouse services purchased. We may also collect information about the Member’s picking address if the package is not delivered from our warehouse.
-User Data: personal data we collect and generate about Users, which may include:
•User account information (e-mail address and, when applicable, hashed password);
•Platform usage information (connectivity, technical and aggregated usage data, such as user agent, IP addresses, device data (like type, OS, device id, browser version, locale and language settings used), activity logs, session recordings, and the cookies installed or utilized on their device);
•Direct interactions and communications with us (e.g., for support).
-Receiver Data: personal data we collect about Receivers, which may include their full name, shipping address, and order details (including items ordered and status). We collect, process, and manage such data solely on behalf and under the instructions of our Members as their Data Processor, in accordance with our Data Processing Addendum with them. For more information, please refer to Section 9 below.
-Prospect Data: personal data we collect and generate about our Prospects, which may include:
•Contact and business details, as well as any needs, preferences, attributes, and insights relevant to our potential engagement;
•Site usage information (connectivity, technical and aggregated usage data, such as user agent, IP addresses, device data (such as type, OS, device id, browser version, locale and language settings used), activity logs, session recordings, and the cookies and pixels installed or utilized on their device);
•Direct interactions and communications with us.
We collect such data either automatically, through the data subject’s interaction with us or with our Services; or through third-party services, social media, analytics tools, and other business initiatives.
2. Data Uses & Lawful Bases
We use personal data as necessary for the performance of our Services (“Performance of Contract”); to comply with our legal and contractual obligations (“Compliance with Legal Obligations”); and to support our legitimate interests in maintaining and improving our Services, e.g. in understanding how our Services are used and how our campaigns are performing, and gaining insights which help us dedicate our resources and efforts more efficiently; in marketing, advertising and selling our Services to you and others; providing customer services and technical support; and protecting and securing our Users, Members, Prospects, ourselves and our Services (“Legitimate Interests”).
Specifically, we use personal data for the following purposes (and in reliance on the legal bases for processing noted next to them, as appropriate):
Data Location & Retention
We and our authorized Service Providers (defined below) maintain, store and process personal data in Israel, Europe, the UK, the US and other locations as reasonably necessary for the proper performance and delivery of our Services, or as may be required by applicable law.
ehouse is headquartered in Israel, a jurisdiction which is considered by the European Commission, the United Kingdom Secretary of State, and the Swiss Federal Data Protection and Information Commissioner (FDPIC), to be offering an adequate level of protection for personal data of individuals residing in the European Economic Area (EEA), the UK and Switzerland, respectively. We transfer data from the EEA, the UK and Switzerland to Israel on this basis.
We may retain your personal data for as long as it is reasonably needed in order to maintain and expand our relationship and provide you with our Services and offerings; in order to comply with our legal and contractual obligations; or to protect ourselves from any potential disputes (i.e. as required by laws applicable to log-keeping, records and bookkeeping, and in order to have proof and evidence concerning our relationship, should any legal issues arise following your discontinuance of use), all in accordance with our data retention policy and at our reasonable discretion. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of such data, the potential risk of harm from unauthorized use or disclosure of such data, the purposes for which we process it, and the applicable legal requirements. If you have any questions about our data retention policy, please contact us by email at firstname.lastname@example.org.
4. Data Disclosure
We may disclose personal data in the following instances:
We may engage selected third-party companies and individuals to perform services on our behalf or complementary to our own. Such service providers include logistics service providers (including for storage, packaging, transportation or payment), hosting services, data security services, billing and payment processing services, fraud detection and prevention services, web and product analytics, e-mail distribution and monitoring services, session or activity recording services, remote access services, performance measurement, data optimization and marketing services, social and advertising networks, voicemails, support, enablement and customer relation management systems, and our legal, financial and compliance advisors (collectively, “Service Providers“). Our Service Providers may have access to personal information, depending on each of their specific roles and purposes in facilitating and enhancing our Services, and may only use the data as determined in our agreements with them.
You may choose to integrate third-party services with our Services such as eCommerce platforms or payment solutions (provided that such integration is supported by our Services). The provider of this integrated third-party service may receive certain relevant data (that may include personal data) from our Services, or share certain relevant data from such third-party provider’s service with our Services, depending on the nature and purpose of such integration. Note that we do not receive or store your passwords for any of these third-party services (but do typically require your API key in order to integrate with them).
We may disclose or allow government and law enforcement officials access to your personal data, in response to a subpoena, search warrant or court order (or similar requirement), or in compliance with applicable laws and regulations. Such disclosure or access may occur if we believe in good faith that: (a) we are legally compelled to do so; (b) disclosure is appropriate in connection with efforts to investigate, prevent, or take action regarding actual or suspected illegal activity, fraud, or other wrongdoing; or (c) such disclosure is required to protect our legitimate business interests, including the security or integrity of our products and services.
Protecting Rights and Safety:
We may share personal data with others if we believe in good faith that this will help protect the rights, property or personal safety of ehouse, any of our Users or Members, or any members of the general public.
ehouse Subsidiaries and Affiliated Companies:
For the avoidance of doubt, ehouse may share personal data in additional manners, pursuant to your explicit approval, or if we are legally obligated to do so, or if we have successfully rendered such data non-personal, non-identifiable and anonymous. We may transfer, share or otherwise use non-personal and non-identifiable data at our sole discretion and without the need for further approval.
5. Cookies and Tracking Technologies
You can manage your cookies preferences, and accept, remove or entirely block cookies, through your browser settings. If you choose to opt-out of certain cookies, this will typically generate a new cookie which will preserve your choice, and indicate it to our Services in your next visits so that the cookies you opted-out of will not be utilized.
Certain web browsers may transmit “Do Not Track” signals to websites with which the browser communicates. However, due to differences in how web browsers interpret this feature and send those signals, and lack of standardization, we do not change our practices in response to such “Do Not Track” signals.
We engage in Services and promotional communications, through email, phone, SMS and notifications.
We may contact you with important information regarding our Services. For example, we may send you notifications (through any of the means available to us) of changes or updates to our Services, billing issues, log-in attempts or password reset notices, etc.
We may also notify you about new features, additional offerings, and special opportunities or any other information we think you will find valuable. We may provide such notices through any of the contact means available to us (e.g. phone, mobile or email), through the Services, or through our marketing campaigns on any other sites or platforms. If you do not wish to receive such promotional communications, you may notify us at any time by sending an email to email@example.com, or by following the “unsubscribe”, “stop”, “opt-out” or “change email preferences” instructions contained in the promotional communications you receive.
In order to protect your personal data held with us, we use industry-standard physical, procedural and technical security measures, including encryption as appropriate. However, please be aware that regardless of any security measures used, we cannot and do not guarantee the absolute protection and security of any personal data stored with us or with any third parties as described in Section 4 above.
Data Subject Rights
Individuals have rights concerning their personal data. Please contact us by e-mail at firstname.lastname@example.org if you wish to exercise your privacy rights under any data protection law applicable to you, including the EU or UK General Data Protection Regulation (GDPR).
Such rights may include – the right to request access to (specific pieces of personal data collected; categories of personal data collected; categories of sources from whom the personal data was collected; purpose of collecting personal data; categories of third parties with whom we have shared personal data), rectification or erasure of your personal data held with ehouse, to restrict or object to the processing of such personal data, or to port such personal data. If you are a GDPR-protected individual, you also have the right to lodge a complaint with the relevant supervisory authority in the EU or the UK, as applicable.
If you are a Receiver and would like to make any requests or queries regarding your personal data that we process as a Data Processor on our Member’s behalf, including exercising your right to access, correct, or delete your data, please contact your merchant directly, which is the Data Controller of such data.
Certain data protection laws and regulations, such as the GDPR, typically distinguish between two main roles for parties processing personal data: the “Data Controller”, who determines the purposes and means of processing; and the “Data Processor”, who processes such data on behalf of the data controller. Below we explain how these roles apply to our Services, to the extent that such laws and regulations apply.
Ehouse is the “Data Processor” of Receiver Data that we process on behalf of our Members (who are the Data Controllers of such data) and in accordance with their reasonable instructions, subject to our Terms, our Data Processing Addendum (to the extent applicable) and other commercial agreements with them. Therefore, our Members are responsible for handling requests to exercise privacy rights from Receivers or other individuals whose data they process through the Services.
If you have any questions or would like to exercise your rights under any applicable US State privacy laws, you can contact email@example.com.
Additional Notices & Contact Details
Updates and Amendments:
Third Party Websites and Services:
Our Services are not directed to children under the age of 16:
We do not knowingly collect personal data from children and do not wish to do so. If we learn that a person under the age of 16 is using the Services, we will attempt to prohibit and block such use and will make our best efforts to promptly delete any personal data stored with us with regard to such child. If you believe that we might have any such data, please contact us by email at firstname.lastname@example.org.
EU Representative: eHouse Space GmbH has been designated as ehouse’s representative in the EU/EEA for data protection matters pursuant to Article 27 of the GDPR. eHouse Space GmbH may be contacted on matters related to the processing of personal data of residents of the EU/EEA by email at email@example.com or by post at Charlottenburger Str. 62, Berlin.
UK Representative: JOIN EHOUSE LTD has been designated as ehouse’s representative in the EU/EEA for data protection matters pursuant to Article 27 of the UK GDPR. JOIN EHOUSE LTD may be contacted on matters related to the processing of personal data of UK residents by email at firstname.lastname@example.org or by post at 95A Rye Ln, London
Last updated: July 2023
Social Media Giveaway Terms & Conditions
By entering the competition you agree to be bound by these terms and conditions.
The Promotors competitions with entry via Instagram and/or Facebook are open only to residents of Berlin, Germany.
No purchase necessary.
Winners will not be required to pay to enter the competition.
Entrants must be over 18 years old on the date of their entry.
Employees of The Promoter are not eligible to enter.
Instagram or Facebook are not in any way affiliated or involved in the competition.
Only one entry per person per competition will be accepted.
The Prize will be awarded to a randomly selected winner who has entered on Facebook/Instagram.
The Promoter will not be held liable if the named prize becomes unavailable or cannot be fulfilled.
The Promoter will not be help liable for any failure of receipt of entries.
The Promoter takes no responsibility for any entries which are lost, delayed, illegible, corrupted, damaged, incomplete or otherwise invalid.
To the extent permitted by applicable law, The Promoter’s liability under or in connection with the competition or these terms and conditions shall be limited to the cost price of the Prize in question.
To the extent permitted by applicable law, The Promoter shall not be liable under or in connection with these terms and conditions, the competition or any Prize for any indirect, special or consequential cost, expense, loss or damage suffered by a participant even if such cost, expense, loss or damage was reasonably foreseeable or might reasonably have been contemplated by the participant and the promoter and whether arising from breach of contract, tort, negligence, breach of statutory duty or otherwise.
Prizes are non-negotiable, non-transferable and non-refundable.
No cash alternative is available. Where a Prize becomes unavailable for any reason, the promoter reserves the right to substitute that prize for a prize of equal or higher value.
The name, address, email address and phone number of the winner must be provided to The Promoter if requested and will be shared to enable fulfilment of the Prize.
In the event of unforeseen circumstances beyond The Promoter’s reasonable control, the promoter reserves the right to cancel, terminate, modify or suspend the competition or these terms and conditions, either in whole or in part, with or without notice.The Promoter's decision is final. No correspondence will be entered into.The winner’s name and social media username may be posted on the social media profiles of The Promotor after the winner has been selected.