1.1 What is the definition and the nature of personal data?
"Personal data": it means all data used to directly or indirectly identify a person, in particular by reference to an identifier such as the last name, the first name, e-mail addresses, telephone number(s), date of birth, data on transactions on the website as well as any other information which we may request and which you may opt to provide to us with, as explained in further detail in article 2 hereinafter.
1.2 Who is the data controller and who is the data processor?
The Orange Girl Immacolata Di Marco, a Luxembourg sole proprietorship, registered with the Luxembourg Register of Trade and Companies (number A41875), whose registered office is located at 24 rue du Nord, L-3261 Bettembourg, Luxembourg, is the Data Controller as well as the Data Processor for personal data collected and processed through this website, email and phone.
2. The data we gather and means of the processing
We are liable to gather and process the following data:
2.1 The data that you send to us directly and in particular:
The data needed to create an account on our website. These include: name, email address, phone number, postal address. This information is mandatory.
The data needed to process and fulfill orders placed via our website or over the phone or by email.
The financial or accounting data needed to process repayments.
The data that we request when you report a problem to us on our website, products or services.
2.2 The data that we automatically gather:
We record the data used when you access and use our website and our services.
We can also gather information on your use of our website, such as the number of orders placed and details thereof.
The data may be processed in hardcopy, by automated or electronic means including via mail or e-mail, phone (e.g. phone calls, SMS, MMS), fax and any other mean (e.g. web sites, mobile apps).
3. Retention period
We keep all personal information we have for as long as you have an account with us or as long as we need to provide our services. We keep your personal data until you request your data to be removed from our database.
However, we may keep and process personal information after the cancellation of your account to comply with legal and regulatory obligations or the establishment, exercise or defence of legal claims.
4. Why do we gather data?
We process personal data in order to manage, invoice and monitor the activity of the website.
This data is needed to properly perform our services. We can also use said data to send you information and/or canvassing e-mails. The processing is then based on our legitimate interest to inform you and to develop our activity.
We gather and process your personal data in order to satisfy one or more of the following purposes:
- To manage your access to our website and the use thereof;
- To carry out the operations relating to the management of clients for contracts, including processing and fulfilling orders, deliveries and issuing invoices;
- Customer relationship management;
- To send newsletters and non marketing messanges;
- Direct marketing (special offer, commercial communications, coupons, advertising campaigns...). We give you the right to express your refusal in this regard upon gathering your data, in accordance with the applicable legal provisions;
- To create reports and analyse customer behaviour;
- To improve our platform, products and services;
- To manage any unpaid accounts and disputed claims;
- To comply with our legal and regulatory obligations;
- To help us to preserve the secure environment of our platform.
5. Recipients of the data
The data may be processed by natural persons and/or legal entities, acting on our behalf and under specific contractual obligations, based in EU Member States.
The data may be communicated to third parties to comply with legal obligations, to execute Public Authorities orders or to exercise our rights before judicial authorities.
The personal data received through the subscription to the newsletter are treated in accordance with the GDPR.
The data is processed to allow you to receive The Orange Girl newsletter. They can be logged for historical or statistical purposes.
7. Your rights
You have various rights over your personal data:
- Right to access to your personal data;
- Right to request correction of your personal data where it is inaccurate.
- Right to request delete your personal data, where permitted by the GDPR.
- Right to ask us to restrict processing of your personal data, where permitted by the GDPR. In that case, such personal data will, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
- Right to data portability, i.e the right to receive your personal data provided to us, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller, provided that certain conditions are met;
- Right to object any time to processing of your personal data.
Cookies consist of portions of code installed in the browser that assist us in providing you with the best possible website experience. Some of the purposes for which cookies are installed may also require your consent.
Where the installation of cookies is based on consent, such consent can be freely withdrawn at any time following the instructions provided in this document.
8.1 Technical cookies and cookies serving aggregated statistical purposes
8.1.1 Activity strictly necessary for the functioning of the website
8.1.2 Activity regarding the saving of preferences, optimization, and statistics
8.2 Other types of cookies or third parties that install cookies
We may use some third party operated services to collect statistics in an anonymized and aggregated form and to track your browsing habits. Some of these services may not require your consent or may be managed directly by us - depending on how they are described - without the help of third parties.
8.3 Using your browser to control cookies
You can manage preferences for cookies directly from within your own browser and prevent – for example – third parties from installing cookies.
Through browser preferences, it is also possible to delete cookies installed in the past, including the cookies that may have saved the initial consent for the installation of cookies by this Website.
You can, for example, find information about how to manage cookies in the most commonly used browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Internet Explorer.
9. Confidentiality of your login ID and password
You are responsible for the confidentiality of your login ID and your password to access our website. You undertake to keep this password secret and not disclose it to anyone. You must contact Us immediately in the event of theft, loss, misappropriation or unauthorised use of your login ID or if you notice that your account has been used without your knowledge.
10. Security measures
We inform you that we take all useful precautions, suitable organisational and technical measures to preserve the security, integrity and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged or to prevent access thereto by unauthorised third parties.
We reserve the right at all times to amend this policy, in whole or in part. Said amendments will take effect as from the publication of the new Privacy & Cookies Policy. We will first inform you thereof by all useful means. In any event, your use of the website following the taking of effect of said amendments will constitute acknowledgement and acceptance of the new Privacy & Cookies Policy.