Privacy Policy

Introduction / Who We Are. Welcome to incommer.com (the “Site”, “we”, “us”). We are committed to protecting your personal data and your privacy. This Privacy Policy explains, what data we collect, how we use it, who we share it with, and your rights regarding your data.

Data Controller The data controller for your personal data is Incommer. If you have any questions about this policy, please contact us at [email@example.com]. com.

1. What Data We Collect & How

Comments: When visitors leave comments, we collect name, email, website (if entered), the content of the comment, IP address, user-agent string for spam detection. We may send an anonymized hash of your email to Gravatar to check your avatar. After approval, your profile image may be publicly visible.
Media: If you upload images, please avoid embedding location data (EXIF GPS). Visitors can download and extract data from your media. Visitors can download and extract data from your media.
Cookies & Tracking: We use cookies when you leave comments, fill forms, make purchases. Cookies may store name, email, website to simplify future visits. Other cookies help with login, screen preferences, etc.

2. Legal Basis for Processing & Purpose

We process your personal data based on the following lawful bases:

Consent — where you have given permission, e.g., to store cookies, to send newsletters.
Contract — for purchases or services you request.
Legitimate interest — for spam prevention, security, analytics, improving Site.

Purposes include: enabling comments, handling purchases, sending communications, improving user experience, security and legal compliance.

3. Data Retention

Comments and their metadata are kept indefinitely to help moderate follow-ups easily.
Registered users’ profile information is retained as long as their account exists.
For purchases or transactions: we retain data as needed for legal, tax, accounting, or warranty purposes.

4. Who We Share Data With

Third‑party service providers (e.g., payment processors, email service, analytics) They have access only as necessary and must comply with relevant data protection laws.
Legal or regulatory authorities, if required by law.

5. Security Measures

We implement reasonable technical and organizational measures to protect your personal data, including encryption, secure servers, access control, regular audits, etc.

6. Embedded Content

Articles or pages may include embedded content (e.g. videos, images). Such content behaves as if you visited the external site; those sites may collect data about your interactions.

7. Your Rights

As required under GDPR for EU citizens, you have:

Right of access to your personal data
Right to rectification (correct inaccurate data)
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object (especially for processing under legitimate interest or for direct marketing)

You may also withdraw consent at any time (where processing is based on consent).

8. Children’s Data

We do not knowingly collect personal data from children under the age of 16. If we learn that we have collected it, we will take steps to delete it.

9. Transfers Outside EU

If personal data is transferred outside the EU, we ensure appropriate safeguards (e.g., standard contractual clauses, adequacy decisions) are in place.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users via prominent notice on the Site (and/or by email if records allow) when changes are significant.

11. Where Data Is Sent

Visitor comments may be checked through an automated spam detection service Data shared with third parties is protected by appropriate contracts or legal protections.