Privacy Policy

​

Welcome to Dorina Boutique! On this page, (“we”or“us”) describes what personal data we collect from you when you use our website (the“Website”), when you create an account by registering on the Website and when you place a purchase order through the Website.
We also describe how and why we process these personal data, and explain your rights under the EU General Data Protection Regulation (the“GDPR”) and how you can exercise such rights.
Personal data is any information by which a natural person can be identified, whether directly or indirectly Please note that we collect and process your personal data also in other circumstances, regarding which we have adopted specific privacy notices, namely: When you contact us via our customer service channels, regarding which please see the privacy notice available here; When, while subscribing to our newsletter (the“Newsletter”) on the Website you consent that we send you marketing communications, regarding which please see the privacy notice available here.
You can decide to use the Website (including to place purchase orders) as an unregistered user (a“Guest User”) or after creating your own account on the Website (as a“Registered User”).
Registration on the Website is optional and allows you to retrieve your order history, manage your wish list, check details of orders in progress, save several shipping addresses, manage return of products that you have purchased and provide, optionally and explicitly, the authorization to store and automatically display your credit card details, other current and future payment methods, including automatic payments, for future use.
Summary of this Privacy Policy Here below the details of the following points: The Data Controller and Its Representative in the European Union What Personal Data We Process and How We Collect It Use of Our Website By Minors Why We Process Your Personal Data and on What Legal Bases Who the Recipients of Your Personal Data Are and Where They Are Located Links to Third-Party Websites For How Long We Retain Your Personal Data Security Measures What Are Your Rights and How To Exercise Them Changes to this Privacy Notice The Data Controller and Its Representative in the European Union Dorina Boutique is the data controller with respect to the processing of your personal data as described in this privacy notice.
You can contact us by mail dorinasvet2@gmail.com.
What Personal Data We Process and How We Collect It We are committed to protecting and respecting you privacy and intend to give you as much control as reasonably possible over your personal data.
Please note that we may collect data (using cookies, trackers and tags) about how you use our Website, for example, the Website from which you have just accessed our site, the pages you check out and other actions taken on our Website.
For more detailed information about the types of cookies and other tracking techniques we use and about the information we collect through them, we encourage you to read our cookie policy.
In addition, we collect and process: The personal data you provide by filling in the registration form, when registering on the Website (e.g. first name, last name, date of birth, e-mail address, copy of a valid ID).
The personal data relating to your online shopping activity (e.g. product purchased, color, and price, of the product purchased, billing address, shipping address, copy of credit card, mobile telephone number and payment information).
In this privacy notice,we will refer to all personal data described above collectively as“Personal Data”.
To register on the Website, you have to fill in an online form.
If you do not fill in the fields marked with a (*) in the online form, you will not be able to register on the Website, because this information is necessary to allow us to create your account as a Registered User.
Filling in the fields that are not marked with a (*) is optional.
If you decide to fill in the fields that are not marked with a (*), and you have consented to receive from us marketing communications tailored to your preferences, we may use that information to analyse your preferences, as described here.
Use of Our Website By Minors Our Website neither targets nor is intended for persons under the age of 18.
Registration on our Website and subscription to our Newsletter are only available to persons aged 18 or over.
Why We Process Your Personal Data and on What Legal Bases Depending on how you choose to interact with us, we may process your Personal Data for different purposes and on different legal bases.
We process the Personal Data you provide in the registration form (first name, surname, and e-mail address) for the purpose of managing the Website registration and managing your account as a Registered User (including the“My Account”section of the Website), including to send you e-mails related to the registration process.
Processing these Personal Data is necessary in order to fulfil your request to be registered on the Website.
We process the Personal Data you provide when placing purchase orders (e.g.first name, last name, e-mail address, delivery address, billing address, mobile telephone number, valid ID and payment information), for the purpose of managing such orders (including delivery of the products you have purchased and managing service, refund or return communications).
Processing these Personal Data is necessary for the performance of contracts to which you part of.
We process the Personal Data relating to your payments (e.g. credit card number, expiry date and security code) for the purpose of verifying that the data provided to complete the transactions are complete, valid, accurate and non-fraudulent.
Processing these Personal Data is necessary in order to fulfil our legitimate interest of ensuring that transactions are secured and to prevent fraud or misuse of payment services (we always consider your rights and freedoms and process your Personal Data for our legitimate interest only where we do not think that your rights outweigh our legitimate interest).
We may need to process your Personal Data for the purpose of complying with legal obligations (such as tax and administrative laws).
Additionally, we may need to process your Personal Data, where it is necessary, for the purpose of handling potential claims or legal proceedings, on the ground of our legitimate interest of defending our business’s interests (we always consider your rights and freedoms and process your Personal Data for our legitimate interest only where we do not think that your rights outweigh our legitimate interest).
You may contact us by email dorinasvet2@gmail.com for information on how we take your rights and freedoms into account when we process your Personal Data to pursue our legitimate interests.
Who the Recipients of Your Personal Data Are and Where They Are Located We communicate your Personal Data that we use for the purposes described under letters a), b) and c) of the section“Why We Process Your Personal Data and on What Legal Bases)” to third parties that process your Personal Data on our behalf, such as suppliers of IT services, payment service providers, carriers, and companies that carry out customer care services on our behalf.
Additionally, if necessary in connection with the handling of any claim or legal proceeding or for complying with legal obligations, we may also communicate your Personal Data to external advisors.
We may also need to use, share or disclose your Personal Data if required in response to litigation, investigations or for other legally required disclosures.
We exercise appropriate due diligence in the selection of third parties, take all steps reasonably necessary to ensure that they process your Personal Data securely, only as instructed by us and for no other purposes, as well as that any transfer outside the European Economic Area is in accordance with applicable data protection laws.
Links To Third-Party Websites Our Website contains links to other websites.If you follow a link to any of these websites, please note that these websites have their own privacy policies.
Please check these policies before you submit any personal data to these websites.
For How Long We Retain Your Personal Data We will retain your Personal Data for only such period as is necessary in connection with the relevant purpose for which we process them.
We will retain your Personal Data: For the purpose of managing your account as a Registered User, until you decide to delete your account; For the purpose of managing your purchase orders, for no longer than is strictly necessary to deliver the products you have purchased and deal with any returns or refunds.
For the purpose of verifying that the Personal Data you have provided to complete a transaction are complete, valid, accurate and non-fraudulent, until the completion of the transaction; For the purpose of complying with legal obligations (such as tax and administrative laws), for no longer than is strictly necessary to comply with any applicable requirement.
For the purpose of handling claims or legal proceedings, for no longer than is strictly necessary for handling the claims or pursuing the litigation, and, in any event, for no longer than the applicable limitation period.
For more detailed information on our data retention policies, you can contact us dorinasvet2@gmail.com.
Security Measures We have suitable security measures in place to help protect against the loss of, misuse of, unauthorised access to and alteration of your Personal Data.
What Are Your Rights and How To Exercise Them At any time, you have the right to: Access: you may contact us at any time to request access to your Personal Data, and we will confirm to you whether we are processing your Personal Data and for what purposes, as well as provide details of the categories of Personal Data concerned, the recipients of the Personal Data and the retention periods on request, (we can also provide you with a copy of your Personal Data).
Rectification: if any of your Personal Data that we hold appears to be inaccurate or incomplete, you may ask us to correct or complete it at any time and, in any event, you can directly correct the credit card details, and other payment methods, saved.
Erasure: you may ask us to have your account as a Registered User deleted or, in any event, to have your Personal Data erased, including the details of the credit card and other payment methods used to make online purchases, if it is no longer necessary for us to keep them in connection with the purposes for which they were collected.
However, we must keep track of certain information, such as past purchases and similar information, to comply with legal obligations, and, therefore, in certain circumstances, we may not be able to delete your Personal Data in its entirety.
Restriction: in certain circumstances, it may be possible to require us to limit the way in which we process your Personal Data (e.g, require us to continue to store your Personal Data but not otherwise to process it without your consent).
Such circumstances include: where you think the Personal Data we hold about you are inaccurate, processing can be restricted while it is being rectified; where you object to our processing that is being carried out on the grounds that it is necessary in the public interest or for our legitimate interests, processing can be restricted while we determine whether such grounds override your interests; where processing is unlawful but you oppose the erasure of your Personal Data and request restriction of your Personal Data instead; and where we no longer need the Personal Data but you require the Personal Data in order to establish, exercise or defend a legal claim, our processing can be restricted.
Object: where we are processing your Personal Data to pursue our legitimate interests, you may object to this processing on grounds relating to your specific situation.
Portability: you may ask us to send you your Personal Data in an electronic, structured, commonly-used and machine-readable format and have your Personal Data transmitted directly from us to another data controller, where technically feasible.
Withdraw your consent: where you have given your consent to the processing of Personal Data, you may at any time decide to withdraw your consent.
Withdrawal does not invalidate the consent-based processing that occurred prior to withdrawal.
To exercise your rights or if you have any other queries, you can contact us using any other contact listed in the“Contact Us”section of the Website.
You may also get in touch directly with us dorinasvet2@gmail.com.
Right to Lodge a Complaint with a Supervisory Authority If you believe that we are processing your Personal Data in a way that infringes applicable data protection laws, you also have the right to lodge a complaint with the Data Protection Authority in the EU Member State of your usual residence, place of work or place of the alleged infringement.
You can also contact us dorinasvet2@gmail.com.
Changes to This Privacy Notice This privacy notice was last updated on 10/06/2021.
If we decide to change it, we will post any changes on our Website so that you can become aware of the changes that we have made. We may modify this privacy notice, so we encourage you to review it from time to time.
However, should we make material changes to this privacy notice, we will notify you through a notice on our Website’s home page.