Our site contains order forms that you would fill in. These forms collect information about you and we use such information ensure delivery of the item you have ordered. Pursuant to the Data Protection Act and the EU General Data Protection Act (GDPR), as approved by the European Parliament on 14 April 2016 and the related laws, we have a legal obligation to protect the personal information we collect from you. The personal details we collect and process are: name and surname, address (delivery address), e-mail address, bank details on return of goods / payment upon delivery). These details were or have been collected in relation to past or current sales relations. We do our best to protect these details and ensure utmost safety and we use these details only as legally permitted and for your purposes only!
The information you provide for us is needed for the adequate performance of the contract made between you and us, and it enables us to observe our legally binding obligations. Without this information, we are not able to deliver all services requested. To be able to effect an order for an article via the empressjewellery.com, you will first have to register as our customer, then you must log in into the profile you have created to finalize your order. Upon registration, there is a requirement for "mandatory details" and the site would not be functional without these. By acting so and entering your details, you expressly agree that your details will be handled for the purposes of the contract we have made.
The site enables you to establish a profile, even if you do not place an order. In that case, we would process your details subject to your explicit consent, and the details are being handled for the following purposes: steps to be undertaken for making a contract.
We warrant that, your personal details will be used only for the purposes of contractual and pre-contractual relations between ourselves, and that such details shall not be used for marketing or statistic purposes, and we shall not send you any personalized commercial messages, online presentations of products or news based on the history of your navigation in this web site.
The party that handles payment details shall collect information for the proper performance of the contract made with you, such as: your bank account or credit card details, to facilitate the processing of the payments; we use the payment services of an external provider , for example , one option is PayPal. The party that handles payments shall observe the currently valid law. Payments to empressjewellery.com would need collection of information related to payment transactions, via the payment instrument used, date and time, payment amount, expiry date for payment due date, and postal code for the payment, e-mail address with PayPal, IBAN details, address etc. details associated with the transaction. This information is needed for the proper performance of the contract between you and us and ТEMPRESS OOD to enable delivery of payment services.
We do our best to minimize data collection and establish limitation on their use; it is related to details in relation to which we have permission in place, and if required for delivery of services we are obliged to provide.
We disclose your personal details only if and to the extent required for any third party’s performance, provided that such third party shall need your details in order to perform the said service on our behalf. Such third parties (including all subcontractors), apply stringent terms to data processing and handling and they are prohibited from disclosing your personal details for any other purposes, unless they have obtained your preliminary permission for such disclosure.
Withdrawal of consent for handling of your personal details
If you do not wish all or any part of your personal details to be handled in the future by us for any specific purpose or to be handled in general, you can withdraw your consent for handling such information at all times by sending a free form request.
Your personal details would not be handled for the future; however, this will not affect any purchases made until such time and we shall keep the related payment documents until the expiry of the statutory period.
Upon withdrawal of your consent for personal data handling, such data being a mandatory requirement to create and maintain a profile in this forum, your account will be disabled and you would be able to access the forum as read only, but not for publication.
Should you wish to use the site again as an active user, then you shall register via a new profile.
Right to access
You can review your profile at all times, with the data stored and handled for you.
Upon request, we can deliver additional information related to collection, handling and storage of your personal details, and if you may wish so, a copy of your personal details being handled will be sent to your e-mail or will be provided in any other form.
Right to edit and/or amend
You can edit and/or amend any incorrect or incomplete personal details related to you at all times, direct via your profile.
Right to delete ("be forgotten")
You have the right to ask the Administrator to delete any part or all your personal details, and the Administrator shall delete, without undue delay, if any of the reasons mentioned below shall exist:
The Administrator shall not be obliged to delete any personal details, if these details are being stored and handled:
To exercise your right to be forgotten, you must take the following steps: Submit a request through a written application to firstname.lastname@example.org, providing good reasons.
Right of limitation
You have the right to ask the Administrator to limit the handling of your personal details as follows:
In case that you have exercised your right of limitation, the administrator shall stop handling your details.
Right to object
You can object at all times against handling of your personal details by the administrator, even if data has been handled for the purposes of profiling or direct marketing.
Your rights in case of violation of the security of your personal information
In case that the administrator shall find that security of your personal information has been violated, which can entail high risk for your rights and freedoms, we will immediately advise such violation to you without any undue delay, plus the measures already undertaken / to be undertaken.
The Administrator shall not be obliged to inform you, if the administrator has:
The Administrator does not transfer your information to any third countries.
In the event of violation of your rights pursuant to the abovementioned applicable law concerning protection of personal details, you are entitled to file a claim with the Commission for protection of personal details.
We assure you that the administrator has put in place appropriate technical and organizational measures to ensure and be able to demonstrate that the processing of your personal data is done in accordance with the General Data Protection Regulation. If you should have any questions related to security and/or confidentiality of your personal details, kindly contact us at email@example.com.
Should you have any queries, concerns or complaints related to our Privacy Statement or our Services, you can contact us at firstname.lastname@example.org.