force, FERE STYLING SRL assumes the legislative provisions and undertakes to administer in safe conditions and only for declared purposes, the personal data that
are provided by you through our forms, emails or web applications.
We are committed to complying with the current regulations in force regarding the protection of personal data, in particular the following: pRINCIPLES what governs the processing:
- The principle of lawful, fair and transparent data processing
- The principle of processing personal data for specific purposes;
- The principle of collecting adequate, pertinent and non-excessive data for the purpose of processing;
- The principle of informing the natural person concerned;
- The principle of data storage limitation;
- The principle of protection and security of personal data.
PURPOSE
The purpose of data processing is:
- Processing the orders you place, confirming them, informing you about their progress and delivery;
- Communicating offers, promotions or marketing messages
- Sending notifications and newsletters, with your consent
- Receiving and processing payments
- Providing support if problems arise using the site
- Production of statistical data/analysis
- Resolving cancellations or complaints regarding the order, services or products purchased.
- To ensure access to restricted sections of the site.
WHAT DATA DO WE PROCESS?
The categories of data we collect directly from you, by completing
the form for creating a customer account and placing an order on the site:
- Name and Surname
- email address
- Phone number
- Delivery address
- Billing address
- Social media profiles
- Banking information
- Interests and preferences
Categories of automatically processed data:
- IP
- Cookies
- Browser
- Location
- Ads you clicked on
- Pages you visited
LEGAL BASIS
Personal data may be processed in accordance with Article 6 of the GDPR if:
- The data subject/User has given consent to the processing of his/her personal data for one or more specific purposes;
- The processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject to enter into a contract;
- Fulfillment of a legal obligation of the data controller (for example, issuing an invoice).
STORAGE PERIOD
The storage period of personal data is 10 years from the last interaction with us. After this period, the data will be anonymized.
DATA DESTINATION
The recorded information is intended for use by the operator and is communicated only to the following recipients:
- Hosting or Developers
- Couriers
- Payment processors
- Marketing providers (Newsletter, Retargeting, Adwords, Facebook, Instagram, Analytics, WEB Agency, Hotjar)
- Billing system (SmartBill)
- Accounting Firm
- State Authorities (in case of control)
PERSONAL DATA SECURITY
Personal data security measures:
- The site uses appropriate security measures (SSL Software) to protect personal data against accidental destruction, loss, modification, disclosure, unauthorized access or misuse of the information in our database.
- Implementing antivirus protection
- Taking necessary legal, organizational and technical measures to protect personal data against unauthorized access
- Maintaining the security of processing by employees (contractual clauses)
- Backing Up
- Pseudonymization and encryption of personal data (it is recommended that users use a password consisting of several characters, numbers and letters when creating an account)
- The site administration has the right to make changes and additions to this Privacy Policy without the user's consent.
RIGHTS OF THE DATA SUBJECT
According to the legislation in force, you benefit from the following rights:
- Right to information – you can request information regarding the processing activities of your personal data;
- Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time. Withdrawal of consent will only have effect for the future, with processing carried out prior to withdrawal remaining valid;
- Right of access - to data, he/she may request and obtain confirmation of whether or not his/her personal data is being processed by SC I AM IZA SHOP SRL and, if so, he/she may request access to it, as well as certain information;
- The right to intervention/rectification of data – you can rectify inaccurate personal data or complete it;
- The right to object to data processing – you may object, in particular, to data processing based on our legitimate interest. You can exercise this right online or by emailing office@iamiza.com. We will also consider your objection if the processing of your information has an undue impact on you that requires the cessation of data processing.
You can also opt out of receiving personalized commercial messages from us. When you become a customer, we may ask you if you would like to receive personalized offers. If you later change your mind, you can opt out of receiving messages by using the “unsubscribe” link at the bottom of each commercial email. - The right to seek legal advice – you can file a complaint regarding the processing of personal data with the National Supervisory Authority for Personal Data Processing.
- The right to erasure of data ("right to be forgotten") - you can obtain the deletion of data if their processing was not lawful or in other cases provided by law;
- The right to restrict processing – you can request the restriction of processing if you dispute the accuracy of the data, as well as in other cases provided by law;
- The right to data portability – you can receive, under certain conditions, the personal data you have provided to us, in a machine-readable format or you can request that the data be transmitted to another operator;
To exercise these rights, you can send a written, dated and signed request to the email address office@iamiza.com.
If you find that some of the data you provided is incorrect, please inform us as soon as possible, so that we can honor your orders and send you any announcements or information regarding those orders.