Privacy Policy on the processing of personal data

 

We consider ensuring the right to protection of personal data as a fundamental commitment Potterygems.com. Therefore, we will devote all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as any other applicable legislation in Romania. As one of the key principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer and protect your personal data when you interact with us in relation to our products and services, including through our website or mobile apps.

 

We reserve the right to periodically update and amend this Privacy Policy to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such changes, we will post the amended version of the Privacy Policy on our website, so please check the contents of this Privacy Policy periodically.

Â

 

Who are we and howcan you contactus?

 

https://Potterygems.com– This site isownedand operated by S.C. AISURU S.R.L., a legal entity of Romanian nationality (operating in accordance with Romanian law),having its registered office inBucharest, Samuil Vulcan Street, nr.12D, Block A, 2nd floor, room 12, sector 5, zip code 051701,with order number in the Trade Register J40/8004/2021, unique fiscal registration code 44219828, e-mail address (hereinafter“Potterygems.com” or“we” or“us“). For the purposes of data protection legislation, we are a controller when processing your personal data.

As we are always open to hearing your views, as well as providing you with any further information you may need regarding the processing of your personal data, we encourage you to contact us at the following e-mail addresscontact@Potterygems.com

Â

Â

What categories of personal data do we process?

 

Ingeneral, wecollect your personal data directly from you so that you have control over the type of information you give us. By way of example, we receive information from you as follows:

 

• Whenyou createa Potterygems.com account, youprovide us with: your e-mail address, first and last name;
• Within your personal page (My Account) on the Potterygems.com platform you can add additional information such as: mobile phone number, delivery addresses, alternative e-mail address, payment methods, etc.;
• When you placeanorder, you provide us with information such as the product you want, your first and last name, delivery address, billing details, payment method,telephone number, credit card details, etc.

 

We may also collect and further process certain information about your behavior while visiting our website in order topersonalizeyouronline experienceand provide you with offers tailored to your profile.

On our website we may store and collect information in cookies and similar technologies, in accordance with our Cookie Policy.

We do not collect or otherwise process sensitive data included by the General Data Protection Regulation in special categories of personal data. We also do not wish to collect or process data from minors under the age of 18.

 

 

What are the purposes and grounds for processing?

 

We will use your personal data for the following purposes:

 

• To provide Potterygems.com services for your benefit
  This general purpose may include, as applicable, the following:

1. a) Account creation and management within the Potterygems.com platform;
2. b) Order processing, including order taking, validation, dispatch and invoicing;
3. c) Resolving cancellations or problems of any kind relating to an order, goods or services purchased;
4. d) Returning products according to the legal provisions;
5. e) Reimbursement of the value of the products according to the legal provisions;
6. f) Providing support services, including providing answers to your questions about your orders or Potterygems.com goods and services.

The processing of your data for these purposes is, in most cases, necessary for the conclusion and performance of a contract between Potterygems.com and you.

 

• To improve our services
  We always want to give you the best online shopping experience. To do this, we may collect and use certain information about your Customer/Buyer behavior, we may invite you to complete satisfaction questionnaires following the completion of an order, or we may conduct, directly or with the help of partners, surveys and market research.

We base these activities on our legitimate interest in doingbusiness,always taking care that yourfundamentalrightsandfreedoms are not affected.

 

• For marketing

We want to keep you up to date with the best offers on the products/services that interest you. To this end, we may send you any type of message (such as: e-mail/SMS/telephone/mobile push/webpush/etc.) containinggeneral and thematicinformation,information on products similar or complementary to the ones you have purchased, information on offers or promotions, information on products you have added to your“Account/My Cart” or“Account/Favorites” section or have shown interest in purchasing, as well as other commercial communications such as market research and opinion polls, and we may display personalized recommendations on the Website.

 

In order toprovideyouwithinformation of interest to you, we may use certain data about your shopping behavior (e.g. products viewed / added to Favorites / purchased) to create a profile of you. We always ensure that these processing operations are carried out with respect for your rightsandfreedomsandthat the decisions taken on the basis of these processing operations do not have legal effects on you and do not affect you in asimilar way toa significant extent.

 

In most cases, we base our marketing communications on your prior consent. You canchangeyour mindand withdraw yourconsent at any time by:

            – By accessing the unsubscribe link displayed within the messages you receive from us; or by

            – Contact Potterygems.com using the contact details described above.

 

In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business. In anysituationwhere we use information about you for our legitimate interest, we take careandtake all necessary steps to ensure that yourfundamentalrightsandfreedoms are not affected. However, you may at any time request us, by the means described above, to stop the processing of your personal data for marketing purposes and we will comply with your request

 

• In defense of our legitimate interests

There may be situations where we will use or disclose information to protect our rights and business. These may include:

            – Measures to protect the website and users of the Potterygems.com platform from cyber attacks:

            – Measures to prevent and detect fraud attempts, including transmission of informationto thecompetent public authorities;

            – Measures to manage various other risks.

 

The general basis for these types of processing is our legitimate interest in defending our business, with theunderstandingthat we ensure that any measures we take strike a balance between our interests and yourfundamentalrightsandfreedoms.

Also, in certain cases we base our processing on legal provisions such as the obligation to ensure the security of goods and valuables provided for by the applicable legislation.

 

 

How long do we keep your personal data?

Â

As a general rule, we will store your personal data whileyou have an accounton the Potterygems.com platform. You may at any time request that we delete certain information or close your account, and we will comply with such requests, subject to retaining certain information even after your account is closed, where required by applicable law or our legitimate interests.

Â

Â

To whom do we share your personal data?

 

Where appropriate, we may transmit or provide access to certain of your personal data to the following categories of recipients:

 

• companies within the same group of companies as Potterygems.com;
• courier service providers;
• payment/banking service providers;
• marketing / telemarketing service providers;
• market research service providers;
• insurance companies;
• IT service providers;
• other companies with whom we can develop joint programs to market our goods and services.

 

We may also disclose certain personal data to public authorities where we are under a legal obligation to do so or ifnecessaryto protect a legitimate interest.

We ensure that access to your data by third parties,legal entities under private law, is carried out in accordance with the legal provisions on data protection and confidentiality of information, on the basis of contracts concluded withthem.

Â

Â

How do we protect the security of your personal data?

Â

We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures according to industry standards.

Your personal data is transmitted using state-of-the-art encryption algorithms and stored on secure servers, while ensuring data redundancy.

To make payments, we use the services of the payment processoreuplatesc.ro.

 

EuPlătesc.ro is an online paymentsande-commercesolutiondeveloped by EuroPayment Services S.R.L. EuPlătesc.ro is ane-commerce solutions integrator, which has a system for managing electronic payments made by different payment methods, including bank cards, issued anywhere in the world under the Visa or MasterCard logo. The proprietary transaction system developed by EuroPayment Services uses advanced anti-fraud solutions which, together with VISA’s “Verified by Visa” and MasterCard’s “MasterCard SecureCode”, mitigate the risks associated with attempted electronic fraud. The payment system is endorsed and verified daily to comply with the security requirements of the Payment Card Industry Data Security Standard (PCI DSS), with all pages secured using the most powerful Extended Validation SSL Certificate with 2048bit signature.
All transactions are verified using automated filters to detect high-risk transactions as well as by a human operator. These mechanisms allow us to ensure that the beneficiary has a very low risk of rejected transactions. Each transactioncontains unique controland authenticity validationelementsthat ensure transaction security. Automated pre- and post-processing filters, coupled with human operator monitoring of all transactions, allow the identification and elimination of high-risk transactions. These transactions can be validated by telephone. The existence ofredundant,time-shifted information flows makes it possible to ensure the accuracy of information on payments made. Access to the system by accredited persons is made using encrypted connections only. Penetration tests carried out daily in accordance with the PCI DSS standard allow early identification of possible security problems and the application of recommended patches. This whole hierarchy of security and access control mechanisms maintains the integrity of the system at the maximum level of security required by the security standards applied inonline commerce.

 

Notwithstanding themeasures taken to protect your personal data,pleasebe aware that the transmission of information over the Internet in general, or over other public networks, is not completely secure, andthere is arisk that the data maybeseen and usedbyunauthorized third parties. We cannot be responsible for such vulnerabilities in systems outside our control.

 

 

What rights do you have?

 

The General Data Protection Regulation gives you a number ofrightsinrelation to your personal data. The European Regulation has stated that individuals (Users/Customers/CPotterygems.comAccount Holders)benefit from 8 (eight) rights, as follows:

 

1. a)The right to information(Art. 13, Art. 14) Pleasenotethat the introductory part of the “Terms and Conditions” document, as well as this chapter, provide information on: the identity and contact details of the controller and its representative; the contact details of the data protection officer; the purpose of the processing and the legal basis; the recipients or categories of recipients; information about the transfer of datato athird country; theappropriate safeguards; the storage period; his rights; his right to lodge a complaint; the possible consequences of providing the data; the existence of automated decision making.

 

1. b)Right of access(Art. 15). Individuals’ right of access is respected by the Company and concerns the following: confirmation of data processing; access to the processed data; provision of a copy of the personal data subject to processing; obtaining additional information (for a reasonable fee); remote access through a system that allows the data subject to view the data; verification of the identity of the person requesting information.

 

1. c)Right to rectification(Art. 16, Art. 19). The individuals’ right of access is respected by the Company and concerns: rectification of indexed data; completion of data.

 

1. d)Right ofdeletion(Art. 17, Art. 19). The company respects the right of deletion exercised by individuals only if this right is exercised in a reasoned/reasoned manner:
   1. Reasons: data no longer necessary; withdrawal of consent; opposition; unlawful processing. Also, by creating the Account each User or Customer has given his/her consent for Potterygems.com to transmit his/her personal data to contractual partners a legal obligation imposed by European Union or domestic law; offering services to a minor, if the legal conditions are not met;
   2. The right cannot be exercised and implicitly respected if the processing is necessary for: the right to freedom of expression and information; compliance with a legal obligation; performance of a taskin the public interest;in the field of health; archiving; scientific or historical research; statistical purposes; establishment, exercise or defense of a rightin

 

1. e)Right torestriction(Art. 18, Art. 19). The Regulation confers this right on individuals and can be exercised as such:
2. Cases: data accuracy contested; unlawful processing; data no longer needed;
3. The operator can only store the data;
4. Any processing on restricted data requires the consent of thedata subject;
5. The controller shall notify all recipients of the rectification, erasure or restriction of the data.

 

1. f)Right to portability(Art. 20). In accordance with the provisions of the Regulation, the Company respects the right of individuals to request the portability of their data in a simple, readable format and to transmit them to another controller of their choice.

 

1. g)The right to object(tostop the processing activity – Art. 21), may be exercised only for the following purposes: direct marketing; research, scientific, historical, statistical, research; performance of a task in the public interest, exercise of public authority; legitimate interests of the controller or athird party.

 

1. h) Theright not to be automatically profiled(Art. 22) implies:
2. Illegality of creating profiles for any purpose: assessing the abilityandquality of employees’ work; scoring – points;
3. Exception: the person’s consent.

 

Wealsoinformyou that you have the right to lodgeacomplaint with the supervisory authority about the processing of your personal data. In Romania, the contact details ofthedata protection supervisory authority are as follows:

 

National Supervisory Authority for Personal Data Processing

B-dul G-ral. Gheorghe Magheru, nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania, Phone: +40.318.059.211 or +40.318.059.212;

E-mail:anspdcp@dataprotection.ro.

 

 

 

In order to exercise the rights providedabove,as a customer of SC AISURU SRL, you have the right to submit a written request,datedandsent to contact@Potterygems.com, by which you may exercise, in a fair and lawful manner, your guaranteed rightofintervention, concerning: (i) the rectification, updating, blocking or erasure of data whose processing does not comply with the provisions of national law (Law no. 190/2018 on implementing measures for Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, and EU Regulation 679/2016, and EU Regulation 679/2016, may be exercised for all the above-mentioned actions, in particular when the data is incomplete or inaccurate; (ii) anonymization of personal data, (iii) notificationtothirdpartiesto whom the data have been submitted/disclosed, provided that suchnotificationdoes not involve a disproportionate effort compared to the legitimate interest that could be harmed, respectively for (iv) the cessation of the processing of his/her personal data insofar as this is possible according to the purpose of the processing. As Controller, we inform you that we will immediately cease the processing of personal data if the purpose for which we have collected them has ceased.

 

 

Without prejudice to your rightto contact theSupervisory Authority at any time, please contact usin advance, and wepromisethat we will make every effort to resolve any problem amicably, using the contact methods made available to us, in particular using the e-mail address: contact@potterygems.com

Please rest assured that we will do our best to respond promptly to your requests and provide you with the details you need!