Last Updated: November 2024
Thank you for visiting bekesinimrod.com (NB CREATIVE SRL)! We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website and use our services, in compliance with the EU General Data Protection Regulation (GDPR).
By using our website and services, you agree to the practices described in this policy. Please read this Privacy Policy carefully to understand how we handle your data.
Information We Collect
We collect personal information from you when you place orders, subscribe to our newsletter, or interact with our website. The types of data we may collect include:
- Order Information: To fulfill and process your orders, we collect your full name, email address, billing and shipping address, and payment information.
- Newsletter Information: We collect your email address if you sign up for our newsletter to receive updates, promotions, and exclusive offers.
- Technical Data: To improve website functionality and user experience, we collect non-identifiable data such as your IP address, browser type, and browsing patterns on our site, via cookies and similar tracking technologies.
How We Use Your Information
We use your personal data only for specific, legitimate purposes. The ways in which we use your information include:
- Order Fulfillment: To process and ship your orders, provide order confirmations and updates, and handle any customer service inquiries.
- Customer Communication: We may use your contact information to reach out to you regarding the processing of your order, such as to provide updates on its status, clarify order details, or address any issues related to your purchase.
- Newsletter Communication: To send you marketing content, updates, and exclusive offers. You may unsubscribe from these emails at any time.
- Improving Our Website: To analyze usage patterns and enhance the functionality and user experience of our website through aggregated data.
Working with Third-Party Partners
We collaborate with trusted third-party partners to fulfill orders and enhance our service. These partners act as data processors and comply with GDPR, handling your information only to complete services on our behalf. We work with:
- The Print Store: A third-party company that manages the printing, production and shipping of photography prints. We share your order details, including your name, shipping address, and specific order information, solely for the purpose of producing and delivering your print orders.
- Printoteca: A third-party company that manages the manufacturing and distribution of clothing items. We provide them with the necessary order details, including your name, shipping address, and order specifications, to facilitate clothing production and delivery.
Payment Processing
To securely process payments, we partner with a trusted, GDPR-compliant third-party payment processor (Stripe). When you make a purchase on our website:
- Payment Information: Your payment information (such as credit card or bank details) is collected directly by our payment processor and not stored on our servers. This ensures your payment details remain private and secure.
We only receive limited information about your transaction, such as confirmation of payment and order details, to complete and fulfill your order.
Legal Basis for Processing Your Data
Under the GDPR, we process your personal data based on the following lawful grounds:
- Contractual Necessity: To fulfill and manage your orders, ensuring that our products are delivered to you as requested.
- Consent: For sending marketing emails (such as newsletters). You can withdraw your consent at any time.
- Legitimate Interests: For improving our website, managing interactions with our trusted partners, and ensuring a seamless user experience.
How We Share Your Data
We do not sell or rent your personal data. However, to deliver our services, we may share your data with the following third parties under strict confidentiality agreements and GDPR-compliant contracts:
- Third-Party Service Providers: Including our Print Production Partner and Clothing Production Partner. These providers receive only the data required to fulfill your order and are prohibited from using your data for other purposes.
- Payment Processors: We partner with secure, GDPR-compliant payment processors to handle transaction data securely.
- Legal Obligations: If required by law or necessary to protect our rights or those of third parties, we may disclose your information to comply with legal obligations.
Data Security
We take your privacy seriously and implement a range of technical and organizational measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure Data Transmission: Sensitive information, such as payment data, is encrypted during transmission.
- Restricted Access: Only authorized personnel and partners who need access to your data for order fulfillment are permitted to view it.
While we strive to protect your data, please remember that no online system is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your data only as long as necessary to fulfill the purposes for which it was collected or as required by law. Specifically:
- Order Information: Retained for [insert period, e.g., up to 7 years] for tax and accounting purposes.
- Newsletter Information: Retained until you choose to unsubscribe.
- Technical Data: Retained in aggregate form for website improvement purposes only.
Your Rights Under GDPR
The GDPR provides you with certain rights regarding your personal data. Subject to certain conditions, you may:
- Access: Request access to the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data in specific circumstances, such as when data is no longer necessary.
- Restriction: Request restriction of processing if there is a dispute about data accuracy or the processing is unlawful.
- Data Portability: Request that we provide your data in a structured, commonly used, and machine-readable format, or transfer it to another organization where technically feasible.
- Objection: Object to processing based on legitimate interests, such as direct marketing.
To exercise any of these rights, please contact us at [Your Contact Email]. We will respond to your request in accordance with GDPR regulations.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to provide essential functions and analyze website performance. Cookies are small data files that are placed on your device to enhance your experience. You may manage cookie preferences via your browser settings.
Children’s Privacy
Our website is not intended for individuals under 18 years of age, and we do not knowingly collect or store data from children under 18. If you believe we may have collected information from a child under 18, please contact us to request its deletion.
Updates to This Privacy Policy
We may periodically update this Privacy Policy to reflect changes in our practices, legal requirements, or technological advancements. Any updates will be posted on this page with the date of the latest revision. Please review this policy periodically to stay informed about how we protect your data.
Links to the third-parties’ privacy policies
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
NB CREATIVE SRL
Reg. no. 49403944
VAT. no. RO49590907
Registered in Romania