DATA PROTECTION POLICY
The EU General Data Protection Regulation no. 2016/279 (GDPR) that was agreed upon by the European Parliament and Council in April 27th 2016, brought changes regarding the processing of the personal information.
We inform you that processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
We inform you that Tavva Kitchen („The controller” or “INTELLIGENT CHANGE”), having it’s headquarters in Romania, Magnoliei 5, Chiajna 077040 and being subject to the Romanian legal system, processes through www.tavvakitchen.com the following personal data:
- First name
- Last name
- E-mail address
- Phone/fax number
- Home/shipping address (street name, ap. number, city, country, state, zip code)
- Credit card information
- Heatmap – where are the users clicking on the website
- Recordings – regarding the activity of the users on our website
- Device – The type of device used to access our website
Your personal data is processed in the following purposes:
A. First and last namea) billing (data needed for the invoice), under the legal obligation regulated by art. 319 (6) and (20) of the Romanian Fiscal Code; b) delivery of purchased goods, under the contractual obligation to sell and deliver the online purchased goods.
B. E-mail addressa) getting in touch with you on your online purchase, the approximate date of delivery or order canceling, as well as responding to your complaints or other different remarks that you may have regarding the order; b) sending you newsletters about sales, deals, or other existing items on the web site;
C. Phone/fax numbera) in your own interest, for the purpose of confirming the order you placed and contacting you only in necessary circumstances regarding the order (if there is nobody to deliver the order to at your shipping address, additional information on the shipping address or the time of delivery, etc.)
D. Home/Shipping addressa) delivery of purchased goods, under the contractual obligation to sell and deliver the online purchased goods. b) billing (data needed for the invoice), under the legal obligation regulated by art. 319 (6) and (20) of the Romanian Fiscal Code;
E. Credit card informationa) payment, under your contractual in order of payment for the purchased goods.
F. Heatmapa) in order to understand you and your needs so we can provide you valuable information regarding our products.
G. Recordingsa) in order to create a better website, customized on your needs and to provide you valuable information regarding our products.
a) in order to be able to send you e-mails and offers customized on the device you are mostly using.
We collect data in order to better understand our clients. We use some of the data to create custom audiences on Facebook and to create lookalikes to help us advertise. We do not sell the data or send it to anyone else.
If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption, in accordance with the GDPR regulations stated at art. 31(1) lt. a).
The final scope of the processing of your personal information is the direct marketing, in order for us to be able to send you customized offers and discounts.
We inform you that the data retention period is until we delete the custom audience. We clean our database every six months and as a result the personal information of the users who do not open any of our e-mails during the six months period of time is automatically erased. We do not archive or store any of your personal data, but we do use platforms as Facebook, Shopify, Klaviyo and Amazon that have taken security measures to protect your data. We encourage you to read their privacy statements.
We inform you that you have the right to withdraw your consent for us to contact you or for the continued processing of your personal data, at anytime, by contacting us at email@example.com. However, the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. From the moment you withdraw your consent, we will erase all of your personal data and no longer process it.
We ensure the confidentiality of your data and the fact that this data will not be processed or distributed for any other reasons that those stated above or included in the Policy statement published on the web site.
If you do not agree with one or more than one purpose for processing stated above, or if you have any remark regarding the Data Protection Policy, please contact us at firstname.lastname@example.org