Privacy Policy

Privacy Policy for www.necalliperfumes.com

 

Last Updated: December 1st, 2023

 

  1. Operator identification

 

This website (hereinafter referred to as "we”, ”us”, ”website”") is owned and managed by BALKAN SCENTS S.R.L. (hereinafter referred to as BALKAN SCENTS SRL), with headquarters in Bucharest, Intrarea Parului 30.

 www.necalliperfumes.com is committed to protecting the privacy and security of our customers' personal information. This GDPR policy outlines how we collect, process, store, and protect your data in accordance with the General Data Protection Regulation.

 

  1. Definitions

 

  • According to Regulation (EU) 679/2016 (applicable in Romania from May 25, 2018), BALKAN SCENTS SRL is an "operator" of personal data.

 

  • "GDPR" – Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

 

  • "operator" means the natural or legal person who establishes the purposes and means of processing personal data.

 

  • "personal data" means any information relating to an identified or identifiable natural person ("data subject");

 

  • "data subject" means an identified or identifiable natural person. An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more many specific elements, specific to its physical, physiological, genetic, psychological, economic, cultural or social identity;

 

  • ”consent” – Art. 4, p. 11, Regulation (EU) 679/2016;

 

  • ”recipient” - Art. 4, p. 9, Regulation (EU) 679/2016.

 

  1. Change

 

We reserve the right to modify this document whenever necessary. If changes are made to this material, customers will be notified by email or through the website before the changes take effect. We encourage customers to check this page periodically to stay informed of the latest developments regarding our privacy practices.

 

  1. Information we collect

 

  1. a) Information provided voluntarily

 

When you use the form on the website, when you contact us by phone or e-mail or communicate with us in any way, you voluntarily give us the information that we process. This information includes name, surname, e-mail address, telephone number, delivery / mailing / residential addresses, company data for issuing invoices, payment information (credit card details), purchase history and preferences.

 

By giving us this information, we keep it secure and confidential in our database. We do not disclose or transfer information to third parties.

 

  1. b) Information collected automatically

 

When you browse our site, we may collect information about your visit to the site. This information may include your IP address, operating system, browser, browsing activity and other information about how you interacted with the site. We can collect this information through the use of cookies or other similar technologies and only with your consent.

 

 

  1. 5. How We Use Your Information

 

We use your information for the following purposes:

 

  • To register and manage your personal account on the website;
  • To process your orders and returns through our online services;
  • To send you email notifications about delivery status;
  • To contact you in the event of any problems with the delivery of your items;
  • To respond to your requests and inform you about new or changed services
  • To send you marketing offers/promotional messages, such as newsletters and catalogs (only if you have expressly requested this by subscribing to our newsletter) – To stop receiving marketing offers/promotional messages, you can follow the unsubscribe instructions included in each email or by email to office@necalliperfumes.com;
  • We will keep your data as long as necessary to fulfill the above purposes or as long as the law requires us, but at least for a period of 3 years from the date of your last interaction with us. After that, your personal data will be deleted.

 

  1. Your rights

 

You have the right to request information about the personal data we hold about you. If your data is incorrect, incomplete or irrelevant, you can request that this information be corrected or removed. We cannot remove your data when there is a legal requirement to retain it, such as accounting rules, or when there are other legal grounds for retaining data, such as unpaid debts. You can withdraw your consent to our use of data for marketing purposes at any time. You can contact us by email at office@necalliperfumes.com

 

The right to withdraw consent;

 

If the processing is based on consent, you can withdraw your consent at any time, free of charge, by sending an email to office@necalliperfumes.com with the subject "withdrawal of consent".

 

The right to lodge a complaint with a supervisory authority;

 

In the unlikely event that customers have suffered damages due to the violation of rights according to the personal data protection policy and we have not handled the complaint properly, there is the possibility of sending a complaint to the higher authority, namely the National Authority for the Supervision of the Processing of Personal Data (www.dataprotection.ro)

 

The right to go to court;

 

The right of access;

 

You have the right to obtain from us a confirmation that personal data concerning you is being processed or not and, if so, you have the right of access to that data.

 

The right to rectification;

 

You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data were processed, you have the right to obtain the completion of personal data that are incomplete, including by providing an additional statement.

 

The right to data deletion ("the right to be forgotten");

 

In situations where (1) the data is no longer necessary to fulfill the purposes, (2) consent has been withdrawn and there is no other legal basis for the processing, (3) you object to the processing and there are no legitimate reasons that prevail with regard to processing or (4) the personal data has been processed illegally, you have the right to obtain the deletion of the data concerning you, without undue delay.

 

The right to restrict processing;

 

You have the right to obtain from us the restriction of processing if one of the following cases applies:

 

(a) dispute the accuracy of the data, for a period that allows us to verify the accuracy of the data;

 

(b) the processing is unlawful and you will object to the deletion of the personal data, requesting instead the restriction of its use;

 

(c) we no longer need the personal data for the purpose of processing, but you request it for establishing, exercising or defending a right in court;

 

(d) you have objected to the processing in accordance with Article 21(1) of the GDPR, for the period of time in which it is checked whether our legitimate rights prevail over your rights.

 

The right to data portability

 

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another operator, without obstacles from our part, if:

 

(a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) from GDPR; and

 

(b) the processing is carried out by automated means.

 

The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that concern you or similarly affect you to a significant extent

 

You do not have this right if the decision:

 

(a) is necessary for the conclusion or performance of a contract between you and a data controller;

 

(b) is authorized by Union law or domestic law that applies to the operator and that also provides for appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or

 

(c) is based on your explicit consent.

 

 

  1. Who has access to your data and how it is protected

 

We do not pass on, sell or give your data to third parties for marketing purposes. The data that is transferred to third parties is used only to provide you with the services mentioned above, as follows:

 

Service providers. We may disclose your information to other companies that provide services to us and act as our proxy, such as companies that assist us with invoicing or that send emails on our behalf, courier/shipping companies, companies to whom we outsource accounting services. These entities are selected with particular care to ensure that they meet the specific requirements for the protection of personal data. These entities have a limited ability to use your information for purposes other than providing services to us;

 

Courts, prosecutors or other public authorities to comply with the law or in response to a mandatory legal process (such as a search warrant or court order);

 

To other parties with your consent or instructions. In addition to the disclosures described in this Privacy Policy, we may disclose information to third parties to whom you consent or request that we make such disclosure.

 

We have taken technical and organizational measures to protect your data against loss, manipulation or unauthorized access. We continuously adapt our security measures in line with technological progress and developments.

 

All card payment details on the Site are retrieved and processed directly and encrypted, in accordance with international security standards, by the payment processor displayed on the Site, we never interact with your data at any time.

 

  1. Legal basis

 

Regarding the data that you voluntarily provide us by completing and sending the related form or by contacting us in any way, the legal basis is provided in art. 6 para. (1) lit. b of Regulation (EU) 679/2016), respectively "to take steps at the request of the data subject before concluding a contract". With regard to the data you voluntarily provide us by posting a comment on a blog article, the basis for processing is our legal obligation to support the exercise of the right to information, but also our legitimate interest in providing transparency and information to blog readers.

 

Both according to the current legislation and according to the GDPR (applicable from 25 May 2018), your consent is not required in the situation where the processing is necessary to take steps to conclude a contract, fulfill a legal obligation or legitimate interest.

 

Regarding data that we collect automatically through the use of cookies or other similar technologies, the basis for processing is consent. By accessing the site and accepting the cookie policy, you validly give your consent to the processing. Not accepting the cookie policy will not affect in any way your access to the site / to the information presented on it and/or to the order of products.

 

  1. Transfer data to other countries

 

We currently do not transfer your data to countries outside the European Union. If we change the policy, we will inform you accordingly, show you the related guarantees and ask for your consent.

 

 

Please keep in mind:

 

Time frame: We will try to respond to your requests within 14 working days. However, the deadline may be extended for specific reasons related to the specific legal right or the complexity of your request.

 

Access restriction: In certain situations, we may not be able to provide you with access to all or some of your personal data due to legal requirements. If we refuse your access request, we will inform you of the reason for the refusal.

 

The impossibility of identifying you

 

In some cases, we may not be able to search your personal data because of the identifiers provided in your request. An example of personal data that we cannot look up when you provide us with your name and email address is data collected through browser cookies.

 

In such cases, if we are unable to identify you as a data subject, we are unable to comply with your request unless you provide additional information to enable identification.

 

Questions and requests

 

If you have any questions or concerns about the processing of your data, or wish to exercise your legal rights in relation to the data we hold, or if you have concerns about how we handle any privacy issue, you can write to us at - email: office@necalliperfumes.com.

We inform you that you can access the website https://gdpr-info.eu dedicated to the protection of personal data. In Romania, the National Authority for the Supervision of Personal Data ("ANSPDCP") operates - address: Bulevardul Gheorghe Magheru no 28-30, sector 1, postal code 010336, Bucharest and you have the right to file a complaint when you consider that your data has been violated rights, accessing www.dataprotection.ro. This information document can be modified depending on the legislative events regarding the protection of personal data.