Introduction

Version 1.0. Effective Apr 29, 2021

At Your Company Name we handle your data so that neither we nor anyone else can use them to harm your interests and rights, such as your right to privacy. We attach great importance to it as experts and opinion leaders in the field of personal data protection.

The policy extends to:

Who are we and how can you contact us?

This privacy notice aims to give you information on how your personal data is processed by Your Company Name. In this notice, we refer to ourselves as 'we', 'us' and 'our'.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us using:

What data, for what purposes, based on what grounds, and how long we process the data?

Purpose Legal ground Data Storage period
πŸ‘¨πŸΌβ€πŸ¦° To create user accounts and allow to use our services 🀝 Contract πŸ’« Date of birth, πŸ‘± Name, πŸ“§ Email address for as long as you have your account, or as long as is needed to be able to provide the services
πŸ’πŸ½ To provide requested services or answer questions 🀝 Contract πŸ‘± Name, πŸ“ Information about the service you ordered, πŸ“§ Email address 6 months after providing the service and, if a contract is concluded, for the period prescribed by law
πŸ’΅ To process a customer's transaction 🀝 Contract πŸ‘± Name, πŸ–₯️ Bank account, πŸ’³ Card information no longer than it takes to process your transaction
🏷️ To manage orders 🀝 Contract πŸ‘± Name, ☎️ Contact information, πŸ“‘ Payment details of the order, 🎁 Delivery address, πŸ“¦ Customer orders for the duration of the contractual relation
πŸ“¦ To manage deliveries and other related activities: notification of delivery, etc 🀝 Contract ☎️ Contact information, πŸ“© Postcode, 🎁 Delivery address 6 years after they cease being customers for tax purposes
πŸ’― To optimize customer experience by improving our knowledge of our customers πŸ€ΉπŸΏβ€β™€οΈ Legitimate interest to improve the quality of our goods and services 🧐 Visitor behaviour information, πŸ“‘ Information on your purchases, orders and returns, 😍 Tastes and preferences 3 months after the last interaction
πŸ›’ To offer a service to a customer based on services she/he previously purchased πŸ€ΉπŸΏβ€β™€οΈ Legitimate interest to develop our business and satisfy our clients’ needs πŸ‘± Name, πŸ“‘ Information on your purchases, orders and returns, πŸ“ Information about the service you ordered 2 years after your last communication with our company, unless you have objected to such processing
πŸ› οΈ To help spam detection πŸ€ΉπŸΏβ€β™€οΈ Legitimate interest to properly defend ourselves, be able to personalise and optimise our offers and websites, and ensure the surveillance of our establishments, security and the regularity of our goods and services πŸ’¬ Data shown in the comments form, 🌐 IP address, πŸŒ€ Browser user agent string 2 weeks after leaving a comment
πŸ‘©πŸΌβ€πŸ’» To offer our clients personalized marketing and advertising βœ… Consent 🧐 Visitor behaviour information, 🎎 Social network profile, πŸ‘± Name, βœ… Subscriptions, πŸ“§ Email address until you opt-out of the marketing communication or our services
πŸ’³ To provide and manage our loyalty card program βœ… Consent πŸ’« Date of birth, πŸ‘± Name, πŸ“‘ Information on your purchases, orders and returns, πŸ“§ Email address for the period until you withdraw your consent
βš–οΈ To prevent violation of and to supervise compliance with laws and regulations βš– Legal obligation ☎️ Contact information, πŸ’« Date of birth, πŸ’΅ Transactions, πŸ‘± Name we will keep your data as long as it's required by law
πŸ’‘ To inform our clients of changes to the document βš– Legal obligation πŸ“§ Email address until you are our customer
Read more

Personal data that we process to enter into a contract are necessary to provide you with our services. So, you may face the following consequences if you choose not to give your data:

When the data is processed πŸ‘¨πŸΌβ€πŸ¦° To create user accounts and allow to use our services, you would not be registered

When the data is processed πŸ’πŸ½ To provide requested services or answer questions, we would not be able to provide requested services or answer the questions.

When the data is processed πŸ’΅ To process a customer's transaction, we would not be able to provide you with the service

When the data is processed 🏷️ To manage orders, we would not be able to process your orders

When the data is processed πŸ“¦ To manage deliveries and other related activities: notification of delivery, etc, we would not be able to deliver your orders and notify you about that

Personal data that we process to comply with a legal obligation are necessary to provide you with our services. So, you may face the following consequences if you choose not to give your data:

When the data is processed βš–οΈ To prevent violation of and to supervise compliance with laws and regulations, we could breach one or more obligations under applicable laws

When the data is processed πŸ’‘ To inform our clients of changes to the document, we could breach one or more obligations under applicable laws

Where did we get your data from?

    Browser
    Your internet browser (such as Mozilla Firefox, Google Chrome, or Microsoft Internet Explorer) automatically transmits some information to us every time you access content on one of our internet domains. Examples of such information include the URL of the particular Web page you visited, the IP (Internet Protocol) address of the computer you are using, or the browser version that you are using to access the website.
    Directly from you
    We may obtain personal data directly from you.

Who do we share your personal data with?

Information about these companies and their data protection practices :

Analytics
We use analytics services to evaluate the usage of our website and frequently improve it. By using generated statistics, we are able to perfect our services and make them more appealing to you as a user.
Google Analytics
The service is provided by Google LLC. Address: Google LLC, Google Data Protection Office, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Relevant privacy policy of Google. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Google to ensure that they are properly protected. For more information: click on this link.
Email services
We may share your data with email services that provide us with tools to send bulk emails and implement email marketing.
Mailchimp
The service is provided by The Rocket Science Group LLC. Address: Rocket Science Group, LLC, 675 Ponce De Leon Ave # 5000, Atlanta, GA 30308, USA. Relevant privacy policy of Mailchimp. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Mailchimp to ensure that they are properly protected.
Payment services
We may share payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction.
Apple Pay
The services are provided by Apple Inc. Address: One Apple Park Way, Cupertino, California, USA, 95014. Relevant privacy policy of Apple. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Apple Pay to ensure that they are properly protected.
Maps
We use interactive map services to visually display geographic information. Using this service lets you view our location and makes it easier for you to reach us.
Google Maps
The service is provided by Google LLC. Address: Google LLC, Google Data Protection Office, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Relevant privacy policy of Google. Unfortunately, the country of data recipient doesn’t ensure an adequate level of protection of your personal data. Standard Contractual Clauses are used to transfer your data to Google to ensure that they are properly protected. For more information: click on this link .

Automated decisions

We neither use automated decision-making nor your personal data to automatically assess aspects of your personality (automated profiling).

Your rights

information about the processing of your personal data

obtain access to the personal data held about you

Under Article 15 of the GDPR, individuals have a right of access that gives them the right to obtain a copy of their personal data, as well as other supplementary information. It helps individuals to understand how and why companies are using their data, and check the lawfulness of the processing.

ask for incorrect, inaccurate or incomplete personal data to be corrected

Under Article 16 of the GDPR, individuals have the right to have inaccurate personal data rectified. An individual may also be able to have incomplete personal data completed – although this will depend on the purposes for the processing.

request that personal data be erased when they are no longer needed or if processing is unlawful

Under Article 17 of the GDPR, individuals have the right to have personal data erased. This is also known as the 'right to be forgotten'. The right is not absolute and only applies in certain circumstances.

request the restriction of the processing of your personal data in specific cases

Article 18 of the GDPR gives individuals the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organisation uses their data. This is an alternative to requesting the erasure of their data.

receive your personal data in a machine-readable format and send them to another controller ('data portability')

Under Article 20 of the GDPR, individuals have the right to data portability that gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits those data directly to another controller.

object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation

Article 21 of the GDPR gives individuals the right to object to the processing of their personal data at any time. This effectively allows individuals to stop or prevent you from processing their personal data.

request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers. You also have the right in this case to express your point of view and to contest the decision

withdraw your consent at any time

The GDPR gives a specific right to withdraw consent. You need to tell people about their right to withdraw, and offer them easy ways to withdraw consent at any time..

If you have any questions about the protection of your personal data, you can contact us by using our contact details

Icons: "DaPIS (Data Protection Icon Set)" created by CIRSFID, UniversitΓ  di Bologna and Accademia di Belle Arti di Bologna.

Powered by