Privacy Policy
1. Data controller
Name: Beáta Teréz Durnea
Place of residence: 535600, Székelyudvarhely, 1 December 1918 3/5
Address for correspondence, complaints: 535600, Székelyudvarhely, 1 December 1918 3/5
E-mail: the.berberis.shop@gmail.com
Phone number: +36 70 571 70 72, +40 727 346 189
Website: www.theberberis.com
32 Details of the hosting provider
Name: Shopify International Limited
Registered office: 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
E-mail address: support@shopify.com
3. Concept definitions
Enterprise: natural or legal persons engaged in an economic activity, whatever its legal form, including partnerships and associations engaged in a regular economic activity.
Personal data: any information relating to an identified or identifiable living person (“data subject”). For example: name, number, location data, online identifier or information that can be identified based on one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.
Processing: any operation or set of operations performed on personal data or files, whether automated or manual: recording, organization, collection, storage, alteration or amendment, retrieval, consultation, use, communication, transmission, dissemination, making available, alignment or combination, restriction, erasure or destruction.
Controller: means any natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; the purposes and means of the processing may be determined by Union or Member State law.
Profiling: Any form of automated processing of personal data in which personal data are used to evaluate certain personal characteristics relating to a natural person, in particular to analyze or predict characteristics related to job performance, economic situation, interests, health, personal preferences, behavior, location, movement.
Pseudonymisation: Processing of personal data in such a way that, without the use of additional information, it can no longer be established which specific natural person the personal data relate to, provided that such additional information is stored separately, technical and organisational measures are taken to ensure that this personal data cannot be linked to identified or identifiable natural persons.
Registration system: A file of personal data in any way - centralized, decentralized, functional or geographical - that is accessible on the basis of specific criteria.
Recipient: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
Third party: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent of the data subject: means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
Data breach: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.
4. Description of data processing during the operation of the webshop
Information about the use of cookies
What is a cookie?
The Data Controller uses so-called cookies when you visit the website. A cookie is an information package made up of letters and numbers, which is sent by our website to your browser with the aim to save certain settings, to facilitate the use of our website, and to assist collecting certain relevant statistical information on our visitors.
Some of the cookies do not contain personal information and are not suitable for the identification of the individual user, but some of them contain a unique identifier - a secret, accidentally generated sequence of numbers - that is stored by your device, thus ensuring your identification. The duration of each cookie is described in the relevant description of each cookie.
The main attributes of the cookies used for the website:
-
Google Analytics cookie
-
Remarketing cookies-k
-
Strictly necessary cookies for operation
-
Cookies used for improving user experience:
-
Facebook pixel (Facebook cookie)
5. Data processed for the purpose of concluding and fulfilling a contract
Several data processing cases may occur for the purpose of concluding and fulfilling a contract. We would like to inform you that data processing related to complaint handling and warranty administration will only take place if you exercise one of the aforementioned rights.
If you do not make a purchase through the webshop, but are a visitor to the webshop, then the data processing for marketing purposes may apply to you if you give us your consent for marketing purposes.
Data processing in order to conclude and fulfill contracts:-
Contact
For example, if you contact us by email, contact us by submitting a form or phone with questions about a product. Prior personal contact is not necessary, you can leave it out in case of placing an order.
Duration of data processing: The data will only be processed until the end of the contact.
Legal basis for data processing: Your voluntary consent that you give to the Data Controller by contacting us.
-
Registration on the website
Data processed: During the data processing, the Data Controller shall process your name, address, phone number, e-mail address, as well as the features of the purchased product and the date of purchase.
Duration of data processing: Until consent is withdrawn.
Legal basis for data processing: Your voluntary consent that you provide to the Controller by registering.
-
Processing of orders
Data processed: During the data processing, the Data Controller shall process your name, address, phone number, e-mail address, as well as the features of the purchased product and the date of purchase.
If you have placed an order in the webshop, data management and the provision of data are essential for the performance of the contract.
Duration of data processing: We process data for a period of 5 years according to the civil limitation period.
Legal basis for data processing: Performance of the contract.
-
Issuing the invoice
-
Data processing related to the delivery of goods
-
Handling Consumer Union complaints
-
Data processed in connection with the verification of the consent
During the registration, ordering and subscription to the newsletter, the IT system stores the IT data related to the consent in order to prove it later.
6. Data processing for marketing purposes
-
Data processing in connection with the sending of newsletters
Duration of data processing: Until withdrawn by the Data Subject.
Legal basis for data processing: Your voluntary consent to the Data Controller by subscribing to the newsletter.
-
Data processing in connection with the sending and display of personalized advertisements
Duration of data processing: Until consent is withdrawn.
Legal basis for data processing: Your voluntary consent that you provide to the Controller by registering.
-
Remarketing
The data management as a remarketing activity is carried out with the help of cookies.
Duration of data processing: The data storage period of the given cookie, more information is available here:
-
Google general cookie notice: https://www.google.com/policies/technologies/types/
-
Google Analitycs notice: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=en
-
Facebook notice: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
7.About the use of data processors and their activities related to data management
-
Processing for the storage of personal data
Registered office: 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
E-mail address of the data processor: support@shopify.com
The Data Processor performs the storage of personal data on the basis of a contract with the Data Controller. It shall not be entitled to access personal data.
-
Data processing activities related to the transport of goods
Registered office of the data processor: Str. Calusei, nr.21A, sector 2, București
E-mail address of the data processor: info@packeta.ro
The Processor participates in the delivery of the ordered goods on the basis of a contract with the Controller. In doing so, the Processor may process the name, address and telephone number of the recipient until the end of the calendar year following the dispatch of the postal mail, after which it shall immediately delete it.
-
Data processing in connection with invoicing
Registered office of the data processor: Constanta, Str. Grigore Tocilescu, nr. 1A
Phone number of the data processor: +40 800 831 333
E-mail address of the data processor: contact@oblio.eu
Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to subpoenas, search warrants or other lawful requests for information, or to protect our rights.
If you are a European resident, you have the right to access the personal data we hold about you and to request that your personal data be corrected, updated or deleted. To exercise this right, please contact us at the.berberis.shop@gmail.com.
In addition, if you are a European resident, please note that we process your data for the purposes of performing contracts with you (for example, when you place an order through the website) or for the legitimate business interests listed above.
The controller will respond to complaints about the processing within 30 days at the latest.
9. Changes
We may update this Privacy Policy from time to time, for example, to reflect changes in our practices or for other operational, legal or regulatory reasons.
10. Contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us at the.berberis.shop@gmail.com.