I. Privacy Policy
Preamble
AMI BY AMALIA S.R.L., with registered office in Calea Clujului 207C, Oradea, Bihor, 410553, Romania, registered with the Romanian Trade Office under number J20/164/21.02.2017, with CUI RO 37073958, undertakes to comply with the legal regulations set out in Regulation (EU) 679/2016 on the protection of personal data of amiamalia.com users.
By making an online purchase, creating an account and/or subscribing to our newsletter on the amiamalia.com website you agree to our privacy policy.
Simply browsing amiamalia.com is possible without indicating personal data.
AMI BY AMALIA S.R.L. also offers you the option of placing your order as a simple user without registering by creating an account.
AMI BY AMALIA S.R.L. has implemented technical and organizational measures to ensure the most complete protection of personal data processed through amiamalia.com. However, data transmissions over the Internet may, in principle, have security gaps, so that absolute protection cannot be guaranteed.
For further information or requests you can contact AMI BY AMALIA S.R.L. at the following e-mail address:
info@amiamalia.com.
1.Definitions
In this document the following terms are defined as follows:
Personal data = any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to his physical, physiological, genetic, mental, economic, cultural or social identity;
The data subject = the customer whose personal data are processed by AMI BY AMALIA S.R.L. as the controller responsible for processing in order to process the order placed on the site amiamalia.com.;
Data processing = means any operation or set of operations performed on personal data or on sets of personal data collected for the purpose of processing the order, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Data controller = AMI BY AMALIA S.R.L. as a legal entity, which processes the customer’s personal data as a result of the purchase and order on the amiamalia.com website;
Consent = any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which the data subject signifies his or her agreement, by means of a statement or unequivocal action, to the processing of personal data relating to him or her;
2.What personal data do we collect?
By creating an account on the amiamalia.com website, you consent to AMI BY AMALIA S.R.L. collecting and processing the following data:
– Name, surname;
– e-mail address;
– telephone number;
– geographical location data;
– delivery/billing address;
– bank account;
– social media profiles link;
– cookies;
– date & time of accessing the site;
– access history;
– IP address;
Purpose & legal basis for collecting personal data
The purposes for which we collect this personal data are:
–
Contractual purposes – for the sale of AMI AMALIA products on the amiamalia.com website, including: deliveries, returns, warranty, payments, custom orders, newsletter service if you have subscribed to it;
–
Marketing purposes – for the correct delivery of our website content; sales statistics, to identify content relevant to each data subject; to optimise our website content, as well as its advertising;
–
Security purposes – to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack; to increase the protection and security of the data collected and to ensure an optimal level of protection for the personal data we process.
Legal grounds for collecting your personal data
–
Performance of the contract according to Art. 6 para. (1)(b) of Regulation 679/27-Apr-2016 on the protection of individuals with regard to the processing of personal data – for the sale of AMI AMALIA products on the amiamalia.com website, including: deliveries, returns, warranty, payments, custom orders, for the newsletter service if you have subscribed to it;
–
Consent according to art 6 para. (1)(a) of Regulation 679/27-Apr-2016 on the protection of individuals with regard to the processing of personal data concerning data used for marketing for newsletter subscription, cookies and others;
–
Legal obligations of the controller under Art. 6 para. (1)(c) of Regulation 679/27-Apr-2016 on the protection of individuals with regard to the processing of personal data concerning data required for issuing the tax invoice;
–
Legitimate interest according to Art 6 para. (1)(f) of Regulation 679/27-Apr-2016 on the protection of individuals with regard to the processing of personal data concerning data used for marketing to data subjects became.
The rights of the data subject with regard to personal data
In accordance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) you, as a data subject, have the following rights:
The right of access to personal data
Every data subject has the right granted by the European legislator to obtain from the controller, free of charge, information about his/her personal data stored at any time and a copy of this information.
The right to rectification/updating of data when inaccurate/incomplete
Every data subject has the right granted by the European legislator to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to obtain the completion of incomplete personal data, including by providing an additional statement.
The right to erasure of data (right to be forgotten)
Every data subject has the right granted by the European legislator to obtain from the controller the erasure of personal data relating to him or her without undue delay, and the controller has the obligation to erase personal data without undue delay as long as the processing is not necessary.
The right to restrict data processing
The data subject shall have the right to obtain from the controller the restriction of processing if one of the following applies:
(a) the data subject disputes the accuracy of the data for a period allowing the controller to verify the accuracy of the data;
b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use;
(c) the controller no longer needs the personal data for the purpose of the processing, but the data subject requests it for the establishment, exercise or defence of legal claims; or
(d) the data subject has objected to the processing for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
The right to data portability
The data subject shall have the right to receive personal data relating to him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and shall have the right to transmit such data to another controller without hindrance from the controller to whom the personal data were provided, if:
(a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) of the GDPR; and
(b) processing is carried out by automatic means.
The right to object to processing
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing under Article 6(1)(e) or (f) of the GDPR of personal data relating to him or her, including profiling on the basis of those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Where personal data are processed for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning him or her for that purpose, including profiling, insofar as it relates to such direct marketing.
If the data subject objects to the processing for direct marketing purposes, the personal data shall no longer be processed for that purpose.
The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing
The right to withdraw your consent at any time to the processing of personal data to which you have previously consented
Every data subject has the right granted by the European legislator to withdraw at any time his/her consent to the processing of his/her personal data.
The right to be notified in case of data security breaches by the controller.
You can exercise all these rights at any time by contacting the amiamalia.com website at the following e-mail address:
info@amiamalia.com.
Duration of data storage
Your personal data will be stored for a period not exceeding the period necessary to fulfil the purposes for which the data are processed, and in cases where AMI BY AMALIA S.R.L has a legal obligation to keep personal data for a certain period of time, the retention period will be that provided by the applicable law depending on the specific situation.
Subscription to the newsletter
Users who have created an account have the opportunity to subscribe to the newsletter through which AMI AMALIA informs its customers and business partners regularly about offers, events, upcoming collections. A confirmation e-mail will be sent to the e-mail address registered by a person who is first registered to receive the newsletter, for legal reasons, under the double opt-in procedure. This confirmation e-mail is used to prove that the owner of the e-mail address, as a data subject, is authorised to receive the newsletter.
During registration for the newsletter, we also store the IP address of the computer system assigned by the Internet Service Provider (ISP) and used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary to understand the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves the purpose of legal protection of the controller.
Personal data collected as part of a newsletter registration will only be used to send our newsletter. In addition, newsletter subscribers may be informed by e-mail as long as this is necessary for the operation of the newsletter service or a registration in question, such as in case of changes to the newsletter offer or in case of a change in technical circumstances. There will be no transfer of personal data collected through the newsletter service to third parties. Consent to the storage of personal data, which the data subject has given for the mailing of the newsletter, may be revoked at any time. It is also possible to unsubscribe from the newsletter at any time directly from the website of the controller or to notify the controller by e-mail:
info@amiamalia.com.
Newsletter tracking
The AMI AMALIA S.R.L. newsletter contains so-called tracking pixels. A tracking pixel is a thumbnail graphic embedded in such emails, which are sent in HTML format to allow log files to be recorded and analysed. This allows statistical analysis of our online marketing campaigns. Based on the embedded tracking pixel, it is possible to see if and when an email was opened by a targeted person and which links in the email were accessed by the targeted persons.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analysed by AMI AMALIA S.R.L. in order to optimise the sending of the newsletter as well as to further tailor the content of future newsletters to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects have at any time the right to revoke the respective separate statement of consent issued through the double-opening procedure. After a revocation, these personal data will be deleted by AMI BY AMALIA S.R.L.
Where the controller has made personal data public and is required by law to erase personal data, the controller shall, taking into account available technology and implementation costs, take reasonable steps, including technical measures, to inform other controllers processing personal data that the data subject has requested the erasure by those controllers of any links to those personal data or any copies or reproductions thereof, insofar as the processing is unnecessary. An employee of AMI BY AMALIA S.R.L. will arrange the necessary measures in individual cases.
