Privacy Policy
This is a statement on the processing of your personal data pursuant to the EU's General Data Protection Regulation (679/2016).
Controller
Paloina (throughout the site the terms ''we'', ''our'' and ''us'' refer to Paloina)
Business ID: 3089402-5
Communication regarding privacy matters
We request that data subjects contact the controller listed above for all questions related to the processing of personal data and situations related to the exercising of your rights.
Basis and purpose of processing personal data
The legal basis for the processing of personal data is the contractual relationship between the data subject and controller.
Personal information submitted to us through our website will be used for the purposes specified in this policy.
We may use your personal information for the following:
1. Administering our website and business.
2. Personalizing our website for you.
3. Enabling your use of the services available on our website.
4. Processing, confirming and delivering orders. Personal data may also be used in situations concerning product's reclamation.
5. Dealing with inquiries, customer service and communication in general. If you contact our customer service, we will use the given data to response to questions and solve possible problems.
6. Keeping our website secure and prevent fraud.
7. Verifying compliance with the terms and conditions governing the use of our website.
8. Providing third parties with statistical information about our users.
9. If you have ordered our newsletter or in any other way expressed you want to receive direct marketing material, we may process your personal data in order to send you direct marketing material such as information about our products and current offers. You always have a right to prohibit electronic direct marketing any time.
10. For other uses
Personal data being collected
The controller only collects personal data concerning the data subjects that is essential and relevant for the purposes explained in this privacy statement.
The following personal data concerning the data subjects is processed:
-
first and last name
-
email address
-
postal address
-
phone number
-
order and delivery history
-
payment method
-
possible communication history
-
returns, complaints or claims
Retention period of personal data
We do not store personal data longer than is legally permitted or as it is necessary to meet the purposes of use above. The storage period depends on the nature of the information and the purposes of processing. The maximum period may therefore vary per use.
Storage periods reflect the time reasonably necessary for our legitimate interests for example for claims handling, internal reporting, marketing and reconciliation purposes.
Due to accounting legislation we are also required to store all material relating to our transactions for the period as defined by the law.
The controller may have an obligation to process some personal data belonging to the filing system for longer than stated above in order to comply with the legislation or authority requirements.
Rights of the data subject
Right to request access to personal data
The data subject has the right to receive confirmation regarding whether personal data concerning them is being processed and, if it is, the right to receive a copy of their personal data.
Right to rectification
The data subject has the right to request that inaccurate and erroneous personal data concerning them be rectified. The data subject also has the right to supplement incomplete personal data by submitting the required additional information.
Right to erasure
The data subject has the right to request erasure of personal data concerning them if
a. the personal data is no longer required for the purposes for which they were collected;
b. the personal data has been unlawfully processed.
Right to restriction of processing
The data subject has the right to restrict the processing of personal data concerning them if
a. the data subject contests the accuracy of their personal data;
b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead; or
c. the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims.
Right to object
The data subject has the right to object, on grounds relating to their particular situation, at any time, to processing of personal data concerning them.
The controller shall no longer process the data subject’s personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Right not to be subject to a decision based solely on automated processing
The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
The above shall not apply if the decision is necessary for the creation or execution of an agreement between the data subject and the controller, or if it is based on the explicit consent of the data subject.
Right to data portability
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller.
Amending privacy policies
The controller is continuously developing its activities and may therefore be required to amend and update its privacy policies when necessary. The amendments may also be based on changes in the legislation concerning data protection.
If the amendments include new purposes for the processing of personal data or otherwise introduce substantial changes, the controller will provide an advance notification of them and, if necessary, request consent.
Cookies
We use cookies and similar technologies such as beacons to improve the usability and functionality of our website.
We also use third party cookies to collect analytics data and to integrate our social media account to our website.
A cookie is a small text file saved in the user’s computer. If you don’t want to save cookies on your computer, you can prevent cookies in your browser settings. In that case we cannot guarantee that our site will functions in the best way possible.
Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
Our site uses also Google Analytics. More information regarding the privacy of Google Analytics’ is available on Google Analytics’ Privacy Policy.
Privacy policy on payments
We accept payments through Stripe credit card services. When processing payments, some of your data will be passed to Stripe including information required to process or support the payment, such as the purchase total and billing information.
Please see the Stripe Privacy Policy for more details.
Note: We never receive or hold any of your credit card numbers. They are encrypted and passed directly to our credit card payment provider (Stripe).