GDPR
Confidentiality and Use of Personal Data Policy (GDPR Compliant)
Introduction
Welcome to www.olympicfangear.com (hereinafter referred to as "the Site"). This confidentiality and use of personal data policy outlines how the Site collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR). The Site is managed by Mansour BORCHANI, with an address at Jõe 3-305, 10151 Tallinn, Estonia.
1. Data Controller
The data controller responsible for processing personal data is:
- M.BORCHANI
- Address: Jõe 3-305, 10151 Tallinn, Estonia
- Email: olympicfangearcrm@gmail.com
- Whatsapp:+32497036400
2. Personal Data Collected
The Site collects and processes the following types of personal data:
- Identification Data: Name, surname, date of birth, and gender.
- Contact Data: Email address, postal address, and phone number.
- Payment Data: Payment card details and billing address.
- Technical Data: IP address, browser type, operating system, and usage data.
- Profile Data: User preferences, interests, and purchase history.
3. Purposes of Data Processing
Personal data collected is used for the following purposes:
- Order Processing: To process and fulfill customer orders, including payment processing and shipping.
- Customer Service: To provide customer support and respond to inquiries.
- Marketing: To send promotional materials, newsletters, and special offers, subject to obtaining the customer’s consent.
- Personalization: To customize the user experience based on preferences and past interactions.
- Compliance: To comply with legal obligations and protect the rights and interests of the Site.
4. Legal Basis for Processing
The Site processes personal data based on the following legal grounds:
- Contractual Necessity: Processing is necessary to fulfill a contract with the customer.
- Consent: Processing is based on the customer’s explicit consent, which can be withdrawn at any time.
- Legal Obligation: Processing is necessary to comply with legal obligations.
- Legitimate Interests: Processing is based on the legitimate interests of the Site, such as improving services and securing transactions.
5. Data Sharing and Disclosure
The Site may share personal data with:
- Service Providers: Third-party service providers who assist in operating the Site and providing services (e.g., payment processors, shipping companies).
- Legal Authorities: Authorities or regulatory bodies when required by law.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the new entity.
6. International Data Transfers
Personal data may be transferred to countries outside the European Economic Area (EEA). In such cases, the Site ensures appropriate safeguards are in place, such as standard contractual clauses or other legal mechanisms.
7. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods are determined based on legal requirements and the nature of the data.
8. Data Subject Rights
Under the GDPR, customers have the following rights regarding their personal data:
- Access: The right to access their personal data.
- Rectification: The right to correct inaccurate or incomplete data.
- Erasure: The right to request the deletion of their personal data.
- Restriction: The right to restrict the processing of their data.
- Data Portability: The right to receive their data in a structured, commonly used format and transfer it to another controller.
- Objection: The right to object to the processing of their data for certain purposes, including direct marketing.
- Withdrawal of Consent: The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
9. Security Measures
The Site implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. These measures include encryption, secure servers, and access controls.
10. Cookies and Tracking Technologies
The Site uses cookies and similar tracking technologies to enhance the user experience, analyze site usage, and provide targeted advertising. Users can manage their cookie preferences through their browser settings or the Site’s cookie consent tool.
11. Changes to This Policy
The Site reserves the right to update this confidentiality and use of personal data policy at any time. Changes will be posted on the Site, and customers will be notified of significant updates. Continued use of the Site after such changes constitutes acceptance of the revised policy.
12. Contact Information
For any questions or concerns regarding this policy or the processing of personal data, please contact:
M.BORCHANI
Jõe 3-305
10151 Tallinn, Estonia
Email: olympicfangearcrm@gmail.com
Whatsapp : +32497036400