Official European distributor of Arezou’s Indian aromatherapy skincare

Official European distributor of Arezou’s Indian aromatherapy skincare

Privacy

INTRODUCTION

Vivien Dezamits, operating as DVcollections, located at 1220 Vienna, Donaufelder Strasse 164, (hereinafter referred to as the Service Provider or Data Controller) hereby submits to the following privacy policy.

This Privacy Policy governs the data processing activities on the following website: dvcollections.store. The Privacy Policy can be accessed at: dvcollections.store/privacy.
Any amendments to the Privacy Policy will take effect upon publication at the address above.

DATA CONTROLLER AND CONTACT INFORMATION:

Name: Vivien Dezamits
Email: dvcollectionsindia@gmail.com

DEFINITIONS

  1. Personal Data: Any information relating to an identified or identifiable natural person (“data subject”).
  2. Data Processing: Any operation or set of operations performed on personal data, whether automated or not.
  3. Data Controller: The natural or legal person that determines the purposes and means of the processing of personal data.
  4. Data Processor: A natural or legal person that processes personal data on behalf of the Data Controller.
  5. Recipient: A natural or legal person to whom personal data is disclosed.
  6. Consent of the Data Subject: Freely given, specific, informed, and unambiguous indication of the data subject’s agreement.
  7. Data Breach: A breach of security leading to the accidental or unlawful destruction, loss, or unauthorized disclosure of personal data transmitted, stored, or otherwise processed.

PRINCIPLES GOVERNING THE PROCESSING OF PERSONAL DATA

Personal data must be: a) Processed lawfully, fairly, and in a transparent manner in relation to the data subject.
b) Collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
c) Adequate, relevant, and limited to what is necessary.
d) Accurate and kept up to date.
e) Stored no longer than necessary for the purposes for which it is processed.
f) Processed securely to ensure protection against unauthorized or unlawful processing, accidental loss, destruction, or damage.

The Data Controller is responsible for ensuring compliance with these principles.

DATA PROCESSING ACTIVITIES

PURCHASING A PRODUCT

  1. Data collected: Name, billing address, email address, and other relevant information needed for processing purchases.
  2. Legal basis: Data processing is required for fulfilling contractual obligations (i.e., processing orders) and for the legitimate interests of fraud prevention and service improvement.
  3. Recipients: Employees responsible for accounting, marketing, and shipping.
  4. Retention period: Data will be retained for a period of 5 years for accounting and legal purposes.

ADDITIONAL LEGAL BASES FOR PROCESSING

Data may also be processed on the following legal grounds:

  • Compliance with legal obligations: Necessary for tax and accounting purposes.
  • Consent: For marketing activities, where explicit consent has been provided.
  • Legitimate interest: To prevent fraud and improve security.

INTERNATIONAL DATA TRANSFERS

If personal data is transferred outside the European Economic Area (EEA), such transfers will be protected through:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring that the receiving country provides an adequate level of data protection.

DATA RETENTION PERIODS

Personal data will be retained for the following durations:

  • Transactional data: Retained for a minimum of 5 years for compliance with accounting laws.
  • Marketing data: Retained until the user withdraws consent or requests deletion.

RIGHTS OF DATA SUBJECTS

Users have the following rights regarding their personal data:

  • Access: Request access to their personal data.
  • Rectification: Request the correction of any inaccurate data.
  • Erasure: Request the deletion of their personal data.
  • Restriction: Request restrictions on how their data is processed.
  • Portability: Receive their personal data in a structured, commonly used format.
  • Withdraw consent: Withdraw consent for data processing at any time.

Data subjects can exercise these rights by contacting: dvcollectionsindia@gmail.com.

COOKIE POLICY

  1. Data collected: Cookies collect unique identifiers, timestamps, and browsing behavior to improve user experience.
  2. Purpose: Cookies are used for tracking user activity, storing shopping cart information, and user authentication.
  3. Types of cookies:
    • Session cookies: Temporary cookies that are deleted once the browser is closed.
    • Persistent cookies: Remain stored on your device until deleted manually or automatically.
    • Third-party cookies: Used by external services like Google Analytics for web analytics and performance monitoring.
  4. Consent: Cookies not essential for website functionality require user consent via the cookie banner.

GOOGLE ANALYTICS

  1. This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses cookies to help analyze how users interact with the site.
  2. Information generated by cookies (including the user’s IP address) will typically be transferred to a Google server in the USA and stored there. IP anonymization is activated on this website, meaning the IP address of users within the EU/EEA will be shortened before transmission.
  3. You can prevent the collection and processing of data by Google Analytics by downloading and installing the following browser plugin: Google Analytics Opt-Out.
  4. More information on Google’s privacy policy can be found here: Google Privacy Policy.

SOCIAL MEDIA

  1. Data collected: Information such as the username and public profile of users who like or follow the company’s social media pages on Facebook, Instagram, YouTube, etc.
  2. Purpose: Social media interactions, such as likes, shares, or comments, are used to promote content, products, or offers.
  3. Retention period: Data is retained according to the terms of the specific social media platform. Users can review or delete their data based on each platform’s privacy settings.
  4. Legal basis: Data processing on social media platforms is based on user consent and the legitimate interest of business promotion.
  5. Third-party involvement: Social media platforms may process user data according to their privacy policies (e.g., Facebook or Instagram privacy policies).

SECURITY MEASURES

We employ technical and organizational measures to protect personal data, including:

  • Encryption: SSL encryption for data transmission.
  • Password protection: Stored using Blowfish algorithm encryption.
  • Regular security assessments: To ensure data protection compliance.

NOTIFICATION OF DATA BREACH

In the event of a data breach that poses a high risk to the rights and freedoms of users, we will notify the affected individuals without undue delay, providing information on the nature of the breach, its consequences, and the measures taken to mitigate any damage.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Updates will be published on this page, and where appropriate, notified to users via email.

___________________________________________________________________________________

SHIPPING AND ORDERING PROCESS

All orders are shipped via GLS-ONE from our registered address in Austria. Once your order has been processed and dispatched, it should arrive within 5 business days.

Delivery Notifications and Options:

Upon dispatch, you will receive an email with additional information and options for managing your delivery. These notifications include:

  • Delivery date details.
  • The ability to change the delivery address.
  • Option for self-collection from a GLS Parcel Shop.
  • Deposit permission in case you are not available to receive the parcel.

Missed Delivery:

If you are not at home during delivery and have not issued a drop-off permit, GLS will first attempt to deliver the parcel to a neighbour for signature. If this is not possible, GLS will leave a notification card and take the parcel to the nearest GLS Parcel Shop. You can collect your parcel there by presenting a photo ID.

You can contact DVcollections at any time for further inquiries via the provided email address or phone number.