Adatvédelem

This Privacy Policy outlines how we collect, store, and use your personal data when you access or engage with our website, www.indirabijoux.com, and where we obtain or collect your data at INDIRA ART DISTRIBUTION S.R.L.

This Privacy Policy is effective from May 25, 2018.

• Summary

• Our Company Details

• What information do we collect when you visit our website

• What information do we collect when you contact us

• What information do we collect when you interact with our website

• What information do we collect when you place an order on our website

• Use of automated decision-making systems and profiling

• How we collect information about you from third parties

• Disclosure and further use of your data

• Duration of storage of your data

• Protection of your data

• Transfer of your data outside the European Economic Area

• Your rights regarding your personal data

• Your right to object to certain processing of data

• Sensitive personal data

• Changes to our privacy policy

• Protection of minors

• Copyright

This section summarizes how we collect, store, and use your data. This summary serves as a general overview of the privacy policy. It is not a complete description, and reading the additional chapters in this document is necessary for further details.

• Data Controller: INDIRA ART DISTRIBUTION S.R.L.

• How we collect or obtain information about you:

• when you provide it (e.g., contacting us, creating an account on the website, viewing our products, placing an order or purchasing, subscribing to receive marketing information, filling out online or offline forms for contests or event registrations (e.g., fairs), completing loyalty card issuance forms);

• When you visit our website, some data is collected by cookies and similar technologies, and

• occasionally from third parties as well.

• What information do we collect: IP address, Contact details: name, email, phone number, location, company name (if applicable), billing address, shipping address.

• How we use your data: for business and administrative purposes (especially for maintaining contact with you and processing orders on the website), to fulfill our contractual obligations, to promote our products and services, and related to our legal rights and obligations.

• Disclosure of your data to external parties: to the minimum extent necessary for business operations and for the fulfillment of any contractual obligations, to you, IT providers, and for compliance with legal obligations.

• We do not sell your data to third parties.

• Duration of storage of your data: no longer than necessary based on our legal obligations (e.g., maintaining accounting records) or any other legal basis for the use of information (e.g., consent, contractual obligations, legitimate interests).

• How we protect your data: by using technical and organizational solutions such as: storing data on secure servers, encrypting data during transmission using SSL technology, encrypting payment transactions on the website with SSL technology, restricting access to your personal data only as necessary, encrypting personal data, encrypting emails, and pseudonymizing and/or anonymizing personal data.

• Use of cookies and similar technologies: We use cookies and similar technologies, such as web beacons on our website, including essential, functional, analytical, and targeting cookies. For more information, please check our cookie policy here: https://www.indirabijoux.com/continut/politica-de-utilizare-cookie-uri

• Use of automated decision-making processes: We use automated decision-making processes in relation to our website, e.g., Web Analytics tools, cookies, web beacons, or targeting cookies to show ads to those visiting our site on other websites (for example, via Google AdSense network).

• Your rights regarding your personal data:

o You have the right to access your data and receive information on its use;

o You have the right to request correction and/or completion of information;

o You have the right to request deletion of data;

o You have the right to limit the use of your data;

o You have the right to receive data in a portable format;

o You have the right to object to the processing of your data;

o You have the right to withdraw your consent to data processing;

o You have the right to lodge a complaint with a supervisory authority.

• Sensitive personal data: we do not collect any information generally referred to as "sensitive personal data."

The data controller of our website is: INDIRA ART DISTRIBUTION S.R.L., located at 23 Saint Vineri Street, Block 105B, Sc. 2, Ap. 51, Sector 3, Bucharest, Romania. You can contact the data controller at the above address in writing or by email at office@indira.ro

If you have any questions regarding this privacy policy, please contact the data controller.

We collect and use information from visitors to the website in accordance with the section on your data disclosure and further use.

Web server logged information

Our website uses a server operated by a third party, called ROMARG, whose privacy policy is accessible here: https://www.romarg.ro/politica-de-confidentialitate.html. Our website server automatically logs the IP address from which you access our website, as well as other information related to your visit, such as pages visited, requested information, date and time of the request, the source of our website (e.g., the website or URL [link] directing you to our website), and your browser version and operating system.

The use of the web server log information for IT security purposes

Our service provider collects and stores server logs to ensure the security of the IT network. This includes analyzing log files to help identify and prevent unauthorized access to our network, dissemination of malicious code, predicting DDOS attacks and other cybersecurity threats by detecting unusual or suspicious activities.

If we do not investigate a suspected or potential criminal activity, we do not attempt to identify you from the information.

The legal basis for data processing: compliance with legal obligations that we are subject to (Article 6(1)(c) of the General Data Protection Regulation).

Legal obligation: keeping records of access to our website using server log files serves as a technical measure to provide an appropriate level of security for the data collected from our website, in accordance with Article 32(1) of the General Data Protection Regulation.

Cookies are data files sent to web browsers for recording user information for various purposes.

We use cookies on our website, including essential, functional, analytical, and targeting cookies and web beacons. For more information about how we use cookies, please see our cookie policy here: https://www.indira.ro/continut/politica-de-utilizare-cookie-uri

You can refuse the cookies we use on our website by changing your browser settings, or you can disable non-essential cookies through our cookie control tool, but refusing them may affect the operation of the website or certain features. For more information about cookies, including how to change your browser settings, please visit www.allaboutcookies.org or refer to our cookie policy.

We collect and use information from people who contact us in accordance with the provisions of this section and the section on your data disclosure and further use.

Email

When you send a message to our email address found on our website, we collect your email address and any other information contained in the email, such as your name, phone number, and information in your email signature block.

The legal basis for data processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: To respond to the inquiries and messages received and for record-keeping of correspondence.

The legal basis for data processing: necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Necessary for contract performance: in the case where your message is related to the provision of goods or services or steps taken to fulfill your request before providing our services (e.g., providing information about such goods and services); we do this at your request.

Your data transfer and storage

We use a third-party email service provider to store the emails we send. Our email service provider is Google Gmail. You can access their privacy policy here: https://policies.google.com/privacy

Your emails are stored within the European Economic Area, on Google servers in Ireland.

When you contact us through any contact form, we collect your name, location, email, and phone number.

If you do not provide the information requested in the contact form, you will not be able to submit it, and we will not receive your request, so we will not be able to respond.

The legal basis for data processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: To respond to the inquiries and messages received and for record-keeping of correspondence.

The legal basis for data processing: necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Necessary for contract performance: in the case where your message relates to the provision of goods or services or to steps taken to fulfill your request before providing our services (e.g., providing information about such goods and services); we do this at your request.

Your data transfer and storage

Messages you send through our contact form will be stored within the European Economic Area, on Romanian service provider servers and on Irish email service provider servers.

Our web service provider is Romarg. Their privacy policy is accessible here: https://www.romarg.ro/politica-de-confidentialitate.html.

Our email service provider is Google Gmail. Their privacy policy can be found here: https://policies.google.com/privacy

When you contact us by phone, we collect your phone number and any information you provide during the conversation.

The legal basis for data processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation)

Legitimate interest: To respond to the inquiries and messages received and for record-keeping of correspondence.

The legal basis for data processing: necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Necessary for contract performance: in the case where your message relates to the provision of goods or services or to steps taken to fulfill your request before providing our services (e.g., providing information about such goods and services); we do this at your request.

Your data transfer and storage

Information regarding your call, such as your phone number and the time and date of the call, will be processed by our telephone service provider, Orange Romania, located in Romania. Their privacy policy can be found here: https://www.orange.ro/termeni-si-conditii/#politicaconfidentialitate

Information about conversations will be stored with our telephone service provider within the European Economic Area.

If you contact us by post, we collect the information you provide in the mailings we send in order to respond to your inquiries.

The legal basis for data processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation)

Legitimate interest: To respond to the inquiries and messages received and for record-keeping of correspondence.

The legal basis for data processing: necessary for the performance of a contract or to take steps at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Necessary for contract performance: in the case where your message relates to the provision of goods or services or to steps taken to fulfill your request before providing our services (e.g., providing information about such goods and services); we do this at your request.

Information we collect when you interact with our website

The data collected from persons interacting with our website's functionalities is done in accordance with the provisions of this section and the section on your data disclosure and further use.

Newsletter

When you subscribe to our newsletter to receive updates on promotions, events, or competitions, we collect the following data: name, email, location.

The legal basis for data processing: your consent (Article 6(1)(a) of the General Data Protection Regulation).

Consent: You consent to receive our newsletter by following the steps described below to subscribe.

Your data transfer and storage

We use a third-party service to send our newsletter and manage our email list, MailChimp. Their privacy policy is available here: https://mailchimp.com/legal/privacy/

The data you send us for subscribing to the newsletter will be stored within the European Economic Area, on our service provider's server, in Switzerland.

Use of web beacons and similar technologies in emails

We use small graphic files such as web beacons to measure the effectiveness of our emails, such as delivery rates, open rates, click-through rates, unsubscribe rates, and links engaged by the customer. Web beacons are used to measure interactions with newsletters.

For more information about using web beacons in our emails, please consult the cookie policy available here: https://www.indira.ro/continut/politica-de-utilizare-cookie-uri

For more information on our newsletter providers and the use of web beacons, please refer to the available privacy policy: https://mailchimp.com/legal/privacy/

During registration on our website and creating an account, we collect the following mandatory information: name, email address, IP address.

If you do not provide the mandatory information requested in the registration form, you will not be able to register or create an account on our website.

Optional information: phone number, location, county, address. You also have the option to receive marketing communications from us and/or third parties. More information can be found when clarifying the "Marketing Communications" section.

The legal basis for data processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: facilitating registration on our website and managing accounts to enable order placement, easily handle return/exchange requests, view order history, make comments, and subscribe to newsletters - if desired.

Your data transfer and storage

The information provided through the registration form on our website will be stored within the European Economic Area on our web hosting provider's, Romarg, servers. Their privacy policy can be found here: https://www.romarg.ro/politica-de-confidentialitate.html

The information collected from persons placing orders on our website is done according to the present section and the section on your data disclosure and further use.

Order placement information

Mandatory information

When you order products on our website, we collect your name, email address, address, billing/shipping address, phone number, IP address, and if necessary: company name, unique identification code, company registration number.

If you do not provide this information, you will not be able to order goods from our website or enter into a contract with us.

The legal basis for data processing: necessary for the performance of a contract (Article 6(1)(b) of the General Data Protection Regulation).

Necessary for contract performance: we require the mandatory information to determine the contracting party and to maintain contact with you to fulfill our contractual obligations, including issuing invoices, deliveries, and order confirmations.

The legal basis for data processing: compliance with legal obligations (Article 6(1)(c) of the General Data Protection Regulation).

Legal obligation: we are legally obliged to issue an invoice for the goods or services you purchase, if you are registered for VAT, and we require the mandatory information gathered on the payment form for this purpose.

Optional information

We also collect optional information from you, such as the delivery time slot for your order or any other information you wish to provide.

The legal basis for data processing: our legitimate interests (Article 6(1)(b) of the General Data Protection Regulation).

Legitimate interests: to ensure effective business operations and to be able to deliver your order within the requested time slot.

The legal basis for data processing: your consent (Article 6(1)(a) of the General Data Protection Regulation).

Legitimate interests: you consent to the processing of optional information when you submit this information to us.

After placing an order on our website, you must pay for the goods or services you ordered. Payments are processed by third-party payment processors: MobilePay Netopia. Payment will be processed by the aforementioned. Payment can also be made by bank transfer or payment instruction.

PayU and MobilePay Netopia collect, use, and process your data, including payment data, according to their privacy policies. You can access the privacy policies at the following links: https://www.mobilpay.ro/public/politica-de-confidientialitate/ and

https://www.payu.ro/politica-de-confidentialitate

Your data transfer and storage

PayU is located in Romania. Data related to your payment processing will be stored within the European Economic Area, on PayU servers in Romania

MobilePay Netopia is located in Romania. Data related to your payment processing will be stored within the European Economic Area, on MobilePay Netopia servers in Romania.

The legal basis for data processing: necessary for the performance of a contract (Article 6(1)(b) of the General Data Protection Regulation).

Necessary for contract performance: to fulfill your contractual obligation to pay for the goods or services ordered from us.

Automated marketing RETARGETING.BIZ

We use Retargeting.biz (Address: Str. Vasile Lascar, Nr. 178, Sector 2, Bucharest, Unique Identification Code: RO34270947, Registration number: J40/3525/23.03.2015, Email: info@retargeting.biz, Phone number: +40-727-383-165), an automated marketing software designed for online stores, to send personalized communications and offers.

These activities do not have a legal or similarly significant effect on users. The consequences of these profiles manifest in personalized marketing discounts and offers that are displayed or reach users of www.indira.ro. Methods used by Retargeting.biz to notify users: pop-up windows on www.indira.ro or emails containing personalized content. Users have the option to opt-out of profiling or receiving commercial communications without any other impact except avoiding personalized marketing discounts or offers. To do so, it is sufficient to send a request to: office@indira.ro

The data processing, activity tracking (profiling), and interactions with the website are performed by Retargeting.biz collecting automatically recorded and stored data: email, phone number, name, gender, date of birth, city, county, IP address (including possible location), browser, referral ID, discount code, discount value, shipping cost, total order value, unit price of ordered products, product variations, products, device, operating system, IP location, timestamps related to site visits, page views, category views, brand views, image clicks, mouse movement over the cart, mouse over the price, scrolling up and down.