Pursuant to and by the effect of Article 13 of the European Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data (GENERAL DATA PROTECTION REGULATION – GDPR). As required by the General Data Protection Regulation of the European Union (GDPR 2016/679, Article 13), before proceeding with processing, the interested party (User of the website www.alchemythelabel.com) is informed that personal data collected through the website are subject to processing by the Company through IT and/or telematic tools, for the purposes indicated in this policy.
We are A&A APAREL DISTRIBUTION SRL (“we”, “us”, “our”), Limited Liability Company registered in Romania with Trade Registry Number J25/383/2020 and VAT Number RO42945832 , registered office located at Maresal Averescu 54, zip code 220148 Drobeta Turnu Severin, Romania.
You can contact us on firstname.lastname@example.org
If you have any requests to exercise your legal rights, check section 10 (“What are my privacy rights?”) below.
WHAT INFORMATION DO WE COLLECT, AND HOW?
When you interact with us, whether by using our website or communicating with us, we may collect the following information about you:
Information you give us: you may give us information about yourself if you sign up for an account on our website, place an order for products, complete any online forms (such as registration forms, competitions, surveys or by reviewing the products you’ve ordered), opt in to receive our newsletters and special offers, enter a competition or promotion, participate in social media functions or correspond with us (by email, telephone, instant messaging apps, social media or otherwise).
Depending on what you provide, this information can include your name, address or location, phone number, email address, date of birth, gender, purchase information, shopping preferences, reviews, images and financial information (including your credit or debit card details, although we do not hold them, our payment processors do).
If you register an account on the website you may choose to give us your photograph and nickname. From your ALCHEMY account, you can also invite your friends to shop at our website (including by email, Facebook, or Twitter). Even though we let them know that we’ve received their details from you, please ensure that you have your friend’s permission before sharing their contact details with us and only forward emails to people you know would be happy to receive them.
Information we receive from other accounts or sources: we can receive information about you from other sources, such as from your other accounts (like when you use your Apple ID or Google Sign In to sign in on our website) or other websites, including data brokers, social media providers like Facebook and Twitter, advertising networks and analytics partners, and payment and delivery service providers. By logging into our mobile applications via Apple, Google, Facebook or Twitter, or linking your ALCHEMY account on our website to your Apple, Google, Facebook or Twitter accounts, you are giving us permission to obtain certain information and content from these accounts. The specific types of information that we may obtain depends on your settings for that account or website, and will be subject to their privacy policies. We supplement the data you provide us with data from data appending services such as public or social graph data in order to better serve you with content or promotions. We will append this data to our existing customer account information to better understand customers’ interests and to provide more relevant product recommendations and advertising, to increase our customer’s security when using our website and to comply with our legal obligations, such as sanctions laws. This information may include household size, household income, or profession. This information can be associated with your personal information such as name, email, address, physical address or phone number.
Information our IT systems collect about you: each time you visit the website, certain information will be created and automatically recorded by our IT systems. That information includes:
Device information: the information provided by your device will differ depending on your operating system and device settings (eg. PC, Mac, iPhone, Android, or otherwise), but includes the type of device you have (eg. iPhone 6S or Samsung Galaxy S7), the device’s IP address and location, the browser you're using, your mobile network provider (for mobile devices), the pages you have visited, your time zone and country location, and crash or download error reports.
WHAT DO YOU USE MY INFORMATION FOR?
We also carry out research, analysis, and surveys on your use of our website, and views. We keep tracking of your spend on our website to see if you can benefit from our exclusive loyalty programs, VIP customer program and Access. Finally we use your information to confirm your identity and perform credit checks or anti-fraud checks, in order to ensure your, and our, financial security. Please scroll down to find out the detailed purposes for which we collect your information, what specific information is collected and the legal basis for which we purpose that data.
To register and manage your ALCHEMY account on our Website, we collect your name, email, password and other additional details you may wish to add to your account, like phone number, addresses and gender. The legal basis is the performance of a Contract with you.
To fulfil the orders you make through our website, we collect your Name, addresses, phone number, Order details, like the products you are buying, the size and price. The legal basis is the performance of a Contract with you.
To collect payment from you we collect your payment information, which comprises the credit/debit card’s number, holder’s name and CVV. We don’t store them and only transfer them to our authorised payment providers. The legal basis is the performance of a Contract with you.
To provide you with our customer services (including helping you to solve any issue you have with our services, updating you about any change to our terms of service, or contacting you to know how was your experience with us): we collect your name, email, password, phone number and addresses and your contact history with us. The legal basis is the performance of a Contract with you and our legitimate interests in retaining you as a customer.
To monitor the quality of our customer services, we collect your name, email, password, phone number and addresses, your response to our SMS inquiries about the quality of the service and your contact history with us (including phone records of our conversations and conversations through email or other instant messaging apps). The legal basis is the legitimate interests in running our business.
To review and post your reviews on your orders: we collect your name, age range, skin characteristics (such as type, tone, and concerns) and your written review. The legal basis is your consent.
To administer, maintain and optimise our Website and our services, we collect your device information (such as your device IP address and device type), cookie identifiers and browsing information. The legal basis is the legitimate interests in running our business.
To perform fraud and credit checks and if we can do business with you, we collect your name, email, addresses, credit/debit card details, browsing history, purchase history, date of birth, gender, specific behavioural cookies, device information (such as IP address and device type), any national identifiers (like driver’s license or ID cards) and any publicly available information (like social media profiles or news). The legal basis is the legitimate interests to protect ALCHEMY and its customers from fraudulent activities and compliance with a legal obligation.
To send you marketing communications and personalised offers, we collect your name, email, phone number, addresses, date of birth, purchase history, browsing history and behaviour, device information, shopping preferences, cookie identifiers, internal identifiers and country. The legal basis is the legitimate interests in electronic direct marketing of similar products and services which you have acquired using our website. When such is not applicable, your consent to send you special offers and campaigns by ALCHEMY.
To manage our loyalty programmes, we collect your name, email, phone number, addresses, date of birth, purchase history, browsing history and behaviour, device information, shopping preferences, nickname, cookie identifiers, internal identifiers, country, spent tier level and wealth. The legal basis is our legitimate interests in running our business and improving your shopping experience.
To provide you with personalised recommendations and enhance your experience, we collect your name, email, phone number, addresses, date of birth, purchase history, browsing history and behaviour, in-stores interactions with products, device Information, shopping preferences, nickname, cookie identifiers, internal identifiers, country, spent tier level and wealth. The legal basis is our legitimate interests in running our business and improving your shopping experience.
To carry on research, analysis, enquiries and surveys on your use of our website, we collect your Name; Addresses; Email; Device information, legal basis is our legitimate interests in running our business and improve our Website and your experience.
To advertise and retarget advertising of ourproducts and services, we collect your email, cookie identifiers and device information. The legal basis is our legitimate interests in running our business.
To produce aggregated statistical reports, we use your order history, provided that the result of such reports do not identify you. The legal basis is our legitimate interests in running our business and improving our website.
WHO DO YOU SHARE MY INFORMATION WITH?
To provide our services and the website, we work with a number of carefully selected third parties. To do this, we may share your information with these third parties in the following limited circumstances:
Third party service providers for business purposes: to function properly, we rely on a number of carefully selected third parties to provide us with services and products. We permit these companies to use your personal information only to the extent necessary to provide us with their services and products. Below you can find the types of third parties we use:
Courier companies that we use in order to deliver the products to you and, as such, they need to have access to your order information, including your name and address. These providers have a global outreach, with many local companies that can be engaged depending on your shipping address.
Payment providers that we use to process your payment information (including your credit/debit card details) so that we can collect payment from you.
Analytics and search engine providers, like Google, that we use to assist us in the improvement and optimisation of the website.
Marketing Tools providers that help us enable our marketing. These providers are based in the United States.
Performance Marketing and Recommendations Providers that help us deliver advertising and recommendations of products tailored to your interests and needs.
Third parties that administer the platforms integrated with the Website
IT/technology providers that we use to support, maintain and provide our technology and IT infrastructure that supports our website and the storage of your information.
Advertisers for marketing purposes: we can provide your information to our advertising and social media partners that you select (including Facebook and Twitter), where they require the data to select and serve relevant adverts about ours and our partners’ products and services to you and others.
Third party service providers to enrich data: we may also enrich, match or combine information we hold about you with data from other sources, for instance by sharing some of your personal data with selected business partners.
To comply with legal requests: on occasion we may be required to liaise with various regulators and law enforcement agencies in a number of different countries, whether as a result of law, a court order, or another legal process. Although we dispute requests wherever suitable, in some cases we may have to share your information with the regulators or law enforcement agencies. Where we consider it appropriate, and provided we are not prohibited from doing so by law or court order, we will attempt to notify you of these legal demands.
Aggregated information with third parties: we may aggregate your information with the information of other customers, creating a dataset of information about the usage of our website, purchase of products, and other general, grouped information about our customers. The legal basis is our legitimate interest to understand the usage of our service and demand for our product. Although this dataset is aggregated and anonymised, meaning it cannot identify you as an individual, it provides a valuable insight into the use of our website and we may therefore share it with select third parties. These parties may include providers of plugins or similar technologies (to help measure traffic), our partners and other providers.
TRANSFERS OF YOUR PERSONAL DATA
By using our website and our services, you acknowledge and accept that your personal information will be processed in the Romania.
WHAT ARE MY PRIVACY RIGHTS?
You have certain rights in relation to the personal data we hold about you, which we detail below. Some of these only apply in certain circumstances as set out in more detail below.
You have the right to know whether we process personal data about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with (including the categories of personal data we share with businesses for their direct marketing uses and the names and addresses of those businesses). Please note that in your ALCHEMY account dashboard, you can see information about you, namely your account details (such as name, email, phone number, date of birth, the addresses you use for billing and shipping, your order history and shopping preferences).
You have the right to receive a subset of the personal data we collect from you in a structured, commonly used and machine-readable format and a right to request that we transfer such personal data to another party. The relevant subset of personal data is data that you provide us with your consent or for the purposes of performing our contract with you. If you wish for us to transfer the personal data to another party, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal data or its processing once received by the third party.
You have the right to correct any personal data held about you that is inaccurate. You can edit your personal information in “My Account” settings. You can also request the correction by emailing us.
You may request that we erase the personal data we hold about you in certain circumstances.
You have a right to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances. Please note that if we stop processing the personal data, we may use it again if there are valid grounds under data protection law for us to do so (eg. for the defence of legal claims or for another’s protection).
Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod postal 010336, Bucuresti, Romania
UPDATES TO THIS POLICY