Privacy policy
1. Who is responsible
The controller is E Galactic e.U, Alxingergasse 105/39, FN 472528 w. Email for privacy questions: [email protected].
2. What we collect
- Account: your name, email address, optional profile photo and optional birthday (day and month only). You sign in with a code sent to your email; we do not store a password.
- Purchases: what you bought, when, the amount and the VAT country. Card details go directly to our payment processor; we never see the full card number.
- Your eSIMs: ICCID, status (installed, active, ended), data used and days left, and for plans with a number, the number.
- Family, gifts and referrals: names and emails of people you invite, gifts you send and the codes you use.
- Support: your messages, screenshots you attach and your phone model.
- Site and app use: technical data needed to run the service (IP address, device, language). Visit statistics only if you agree to measurement cookies.
3. Why we use it, and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Selling and delivering your eSIM, running your account, top-ups, Family Connect, gifts | Contract, Art. 6(1)(b) |
| Invoices, tax and accounting records | Legal obligation, Art. 6(1)(c) |
| Preventing fraud and abuse, keeping the service secure | Legitimate interest, Art. 6(1)(f) |
| Answering support requests | Contract, or legitimate interest |
| Visit statistics, offers and news by email, birthday offers | Your consent, Art. 6(1)(a), which you can withdraw at any time |
4. Who we share it with
Only as far as needed to provide the service:
- Our payment processor, for card payments.
- Our network partners and their mobile operators, who issue the eSIM profile and carry your data, calls and SMS.
- Hosting, email and push notification providers that run our systems on our behalf, under data processing agreements.
- Our analytics provider, only if you accept measurement cookies.
- Authorities, when the law requires it.
If you came through a partner, the partner sees your order (plan, date, amount), not your card or your usage. We do not sell your personal information.
5. Transfers outside the EU
Some providers process data outside the European Economic Area, for example in the United States. We use them only with the safeguards the GDPR requires, such as the EU-US Data Privacy Framework or the EU standard contractual clauses.
6. How long we keep it
| Data | Kept |
|---|---|
| Account and eSIMs | Until you delete your account |
| Invoices and payment records | 7 years, as Austrian tax law requires |
| Support requests | 12 months after the request is closed |
| Partner applications we do not accept | 6 months |
| Data export files | The download link works for 7 days |
| Visit statistics | 14 months |
7. Cookies
The site works without measurement cookies. Necessary cookies keep you signed in and remember your language and currency. We count visits with an analytics service only if you accept it in the cookie banner. You can change your choice at any time in Cookie settings.
8. Security
All connections are encrypted. Card payments are handled by our payment processor. Access to customer data in our admin is limited to staff who need it, and every sign-in uses a one-time code.
9. Your rights
You can see and change your details in your account, download a copy of your data and delete your account from Profile. You also have the right to access, correction, deletion, restriction, data portability and to object, and you can withdraw a consent at any time. Write to [email protected]; we reply within 7 days and at the latest within one month.
You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde, www.dsb.gv.at), or to the authority in the country where you live.
10. Children
Our services are not for children under 14 on their own. A parent or guardian can add a child as a Family Connect member, buys the plans and is responsible for the child's use.
11. Changes
When we change this policy we update the date above and, if the change matters for you, tell you by email.