PRIVACY POLICY
This PRIVACY POLICY is an integral part of the TERMS AND CONDITIONS for using the Glowey Lights Ltd. website ("the Website"), administered by Glowey Lights Ltd. ("the Company").
In the course of our operations, we act as a personal data controller and perform actions of collecting, processing, and storing personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and applicable national and European legislation.
This document outlines how we collect and process personal data of data subjects – end-users. It also describes how you can contact us if you need to.
I. What information is collected through the Website?
-
To use the services of the Website, including to access the online product ordering platform and related services, our information system requires certain information about you through which you can be identified directly or indirectly.
1. Information provided voluntarily by the User:
a) In cases where a specific Website service requires it, we may ask you to provide the following personal data:
-
full names
-
valid email address
-
phone number
-
physical delivery address
-
possible preferences or comments
-
additional data (user content and/or inquiry);
b) The listed categories of personal data may also be requested in case of an inquiry to us regarding the exercise of your rights described below.
2. Information the Website collects from the User:
For the fulfillment of certain functionalities of our website and the services accessible through it, our information system collects information from your electronic device during standard operations for the normal functioning of WEB operations. In this way, the following additional categories of personal data may also be collected, namely:
-
IP address
-
browser used
-
preferred language settings
-
type of device used to load the website
-
information about your device's operating system
-
data on user behavior and user characteristics.
We collect data on the source from which you accessed the Website. In any case, we do not collect your publicly available information, even if the referral to our website is from a social network.
When you visit the Website, our social media profiles, and/or use the functionalities and services available on the Website, including for creating a user profile and shopping, certain personal data about you may be collected and processed through the installation of small text files – so-called Cookies – on your device.
Your data may be used by us for traffic analysis, advertising purposes, market research, and user group profiling, system reports on Website activity, and for recovering consumption information, for improving website functionality and its analysis, including, but not limited to, in:
-
actions for creating and administering user profiles
-
actions for identification and establishing the legally stipulated age for online shopping
-
direct marketing of products and services
-
evaluating advertising effectiveness
-
managing and administering online shopping activities
-
analyzing purchase history, preferences, and behavior
-
preventing payment fraud
-
managing inquiries.
Cookies may also be created, accessed, read, and manipulated by third parties (our advertising partners, social networks, analytics partners). To learn more about the conditions under which these third parties use cookies, as well as the data they collect, for how long they do so, for what purposes they collect it, and how you can prevent or confirm this, you can visit their respective cookie policies.
More information about the Cookies we use and the general terms of website use can be found in our General Website Terms of Use and Cookie Policy.
3. Personal data of children. How do we treat it?
The Website services are not directed at persons under 18 years of age. The Company does not aim to and does not wish to collect personal data of children in connection with the services provided through the Website.
If the Company nevertheless receives information about a minor in connection with the Website's services, we will not process it and will delete it, unless a regulatory act obliges us to process such data in another, specifically established manner.
II. Basic principles for data processing and protection
In carrying out our activities, we apply the following basic principles:
-
data is processed lawfully, fairly, and transparently;
-
data is collected only for explicit, specified, and legitimate purposes;
-
processed data is limited to the necessary minimum in relation to the stated purposes;
-
data is kept up-to-date and for no longer than necessary;
-
processing is carried out in a manner that ensures appropriate security and protection against unauthorized or unlawful processing, loss, destruction, or damage;
-
access to data by third parties is provided solely for purposes essential to performing the requested service;
-
maximum assistance is provided in exercising rights by data subjects.
III. By whom and how is information collected?
In connection with the purposes stated below, the Website collects information from its visitors, including end-users – data subjects.
Personal information processed through the website may be collected in the following ways, jointly and severally:
-
Provided personally and voluntarily by the visitor;
-
Through the use of "cookies" and other similar solutions for optimizing website performance, analysis, and sending commercial communications.
IV. Your rights as a data subject
In accordance with the GDPR, you have the following rights regarding your personal data:
-
Right to information: To receive information about what personal data we process, why, and how.
-
Right of access: To request access to your personal data that we store.
-
Right to rectification: To request the correction of inaccurate or incomplete personal data.
-
Right to erasure ("right to be forgotten"): To request the deletion of your personal data if certain grounds exist (e.g., the data is no longer necessary for the purposes for which it was collected).
-
Right to restriction of processing: To request the restriction of the processing of your personal data under certain circumstances.
-
Right to data portability: To receive your data in a structured, commonly used, and machine-readable format and/or to transfer it to another controller.
-
Right to object: To object to the processing of your personal data on grounds relating to your particular situation.
-
Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
-
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) if you believe your GDPR rights have been violated.
To exercise any of these rights, please contact us at the email address provided below.
V. Contact Us
For any questions related to the processing of your personal data, or to exercise your rights, please contact us at:
Email: gloweylights@gmail.com
.png)