Effective Date: 27-09-2024
This Privacy Policy is provided pursuant to Art. 13 of EU Regulation 2016/679 (hereinafter referred to as the “GDPR”) and applies to the users of the website www.boscova-jewellery.com (hereinafter, the “Site”). It explains how we collect, use, and protect your personal data. Please read this policy carefully to understand our practices regarding your personal data.
1. Data Controller and Contact Information
The Data Controller for the processing of personal data is Boscova Jewellery, as brand owned by the legal entity TEB CONSULTING, with its registered office at ul. Konstruktorska 7, 02-673 Warszawa, Poland (hereinafter, the “Controller”). Boscova Jewellery and TEB CONSULTING are considerable the same entity and can be referred with both names.
You may contact the Data Controller at hello@boscova-jewellery.com for any inquiries regarding the handling of your personal data.
2. Types of Data Collected
We collect and process various types of personal data, including:
- Browsing Data: Collected automatically via cookies and similar technologies. For detailed information, please refer to our Cookie Policy.
- Personal Data: Such as name, email address, and other contact details provided by you voluntarily through various forms on the Site (e.g., signing up for services, contacting us, or making a purchase).
- Transactional Data: Information related to your purchases, including billing and shipping details.
Data may also be collected when you voluntarily send an email or make other direct inquiries.
3. Purpose of Processing and Data Retention
We process your data for the following purposes:
3.1. Legitimate Interests of the Controller (Art. 6(1)(f) GDPR):
- Ensuring the proper functioning of the Site and services.
- Preventing fraud or abuse of the website.
- Exercising legal rights, such as defense in legal proceedings.
- Marketing Spam: Sending commercial communications related to products and services similar to those previously purchased by you. Data will be stored for up to 24 months.
3.2. Contractual Purposes (Art. 6(1)(b) GDPR):
- User registration for the Site.
- Order processing, including product returns.
- Responding to contact inquiries via the “Contact Us” section. Data will be stored for a maximum of 12 months for inquiries and 10 years for accounting purposes related to purchases.
3.3. Based on Your Consent (Art. 6(1)(a) GDPR):
- Newsletter Subscription: Sending promotional material, offers, or information about new products. You can withdraw your consent at any time by contacting us. Data will be retained for up to 24 months, unless you withdraw your consent earlier.
4. Legal Basis for Processing
We process personal data based on the following legal grounds:
- Legitimate Interests as specified above (Art. 6(1)(f) GDPR).
- Performance of a Contract with you, or steps taken prior to entering into a contract (Art. 6(1)(b) GDPR).
- Consent where applicable (Art. 6(1)(a) GDPR).
5. Data Recipients
Your personal data may be shared with the following third parties:
- Service Providers: Including hosting providers, marketing agencies, and payment processors, who perform services on our behalf.
- Authorities: Where required by law or in the defense of legal claims.
- Business Partners: For outsourcing purposes or those involved in the operation of our IT systems.
We ensure that these third parties comply with data protection obligations and will process your data only for the purposes we specify.
6. Data Transfers Outside the EEA
Personal data may be transferred outside the European Economic Area (EEA). Where such transfers occur, we ensure that they are made in compliance with GDPR by:
- Transferring data to countries with an adequate level of protection, as determined by the European Commission, or
- Entering into contracts based on the Standard Contractual Clauses (SCCs) approved by the European Commission.
You may request details on the countries to which your personal data is transferred and the specific safeguards in place by contacting hello@boscova-jewellery.com.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on the Site, analyze traffic, and deliver targeted ads. For detailed information about the types of cookies we use and how to manage your cookie preferences, please see our Cookie Policy.
8. Data Processing Methods
Your data will be processed using both manual and automated methods, ensuring confidentiality, security, and accuracy. This includes operations like data collection, storage, modification, and erasure. We take appropriate technical and organizational measures to protect your data from unauthorized access and loss.
9. Data Retention
We retain personal data only for as long as necessary for the purposes outlined above or as required by law, including:
- Transactional data: Kept for 10 years for accounting and administrative purposes.
- Inquiries and contact requests: Stored for 12 months.
- Soft spam communications: Stored for 24 months, unless you opt out earlier.
10. Data Subject Rights
Under the GDPR, you have the following rights concerning your personal data:
- Right to Access (Art. 15): Obtain confirmation of whether we process your data and access the data we hold.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your data (the “right to be forgotten”).
- Right to Restrict Processing (Art. 18): Request limits on how your data is processed.
- Right to Data Portability (Art. 20): Receive your data in a structured format and transfer it to another controller.
- Right to Object (Art. 21): Object to data processing in certain circumstances.
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting the legality of prior processing.
You can exercise these rights by contacting us at hello@boscova-jewellery.com. We aim to respond to your request within one month. For complex requests, we may extend this period to three months, in which case we will inform you of the delay.
11. Right to Lodge a Complaint
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Polish Data Protection Authority or the data protection authority in your home country.
12. Nature of Data Provision
Providing personal data for the purposes outlined in sections 3(a), 3(b), and 3(c) is necessary to use the Site effectively. If you do not provide the necessary data, you may not be able to use certain features or services.
For optional data processing based on consent, such as receiving marketing communications, you can freely decide whether to provide the data. Failure to provide this data will only affect your ability to receive promotional materials.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations. Any significant changes will be communicated to you through appropriate channels. Please check this page regularly for updates.
14. Contact Information
If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact us at:
TEB CONSULTING
ul. Konstruktorska 7, 02-673 Warszawa, Poland
Email: hello@boscova-jewellery.com
15. California Privacy Rights (CCPA)
If you are a California resident, you have certain rights regarding your personal data under the California Consumer Privacy Act (CCPA). This section provides additional information for California consumers about the rights available to them under CCPA.
15.1. Categories of Personal Information We Collect
In the preceding 12 months, we may have collected the following categories of personal information from or about California residents:
- Identifiers: Name, email address, IP address, billing/shipping address, phone number.
- Commercial Information: Purchase history and product preferences.
- Internet or Network Activity: Browsing history, search history, and information regarding your interaction with our Site.
- Geolocation Data: Approximate location based on IP address.
- Financial Information: Payment card details (processed by third-party payment providers).
- Inferences: Preferences drawn from your purchase history or browsing activity.
We collect this information directly from you or your interactions with our Site.
15.2. Your Rights Under CCPA
As a California resident, you have the following rights under the CCPA:
- Right to Know: You have the right to request information about the categories and specific pieces of personal data we have collected about you in the past 12 months, the sources of that data, the purposes for collecting it, and the categories of third parties with whom we share personal data.
- Right to Delete: You have the right to request the deletion of your personal data that we have collected, subject to certain exceptions (e.g., for compliance with legal obligations or completing transactions).
- Right to Opt-Out: You have the right to opt out of the sale of your personal data. However, we do not sell personal data.
- Right to Non-Discrimination: You have the right not to be discriminated against for exercising your rights under the CCPA. We will not deny you services, charge you different prices, or provide a different level of service if you choose to exercise your rights.
15.3. How to Exercise Your Rights
To exercise your Right to Know or Right to Delete, you may submit a verifiable consumer request by contacting us at:
- Email: hello@boscova-jewellery.com
- Address: TEB CONSULTING, ul. Konstruktorska 7, 02-673 Warszawa, Poland
We will need to verify your identity before processing your request. This may involve providing additional information so we can confirm your identity. You may submit a request twice in a 12-month period.
15.4. Authorized Agents
You may designate an authorized agent to make a request on your behalf under the CCPA. The agent must provide proof of your written authorization or a power of attorney. We may also require you to verify your identity directly with us and confirm that you have authorized the agent to submit the request on your behalf.
15.5. Do Not Sell My Personal Information
We do not sell personal information as defined by the CCPA. If our practices change, we will update this policy and provide you with an opportunity to opt out of the sale of your personal data.
15.6. Shine the Light Law
California residents may also request information regarding our disclosure of personal information to third parties for their direct marketing purposes under California’s “Shine the Light” law (Civil Code Section § 1798.83). To make such a request, please contact us at hello@boscova-jewellery.com.
Contact Information
If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact us at:
Boscova Jewellery by TEB CONSULTING
ul. Konstruktorska 7, 02-673 Warszawa, Poland
Email: hello@boscova-jewellery.com