Privacy policy.
Effective Date: 9/10/2024
At Ana Cifu, we are committed to protecting and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect personal data in compliance with the General Data Protection Regulation (GDPR). By using our website, www.anacifu.com , you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect and process the following types of data:
Personal Data: Information such as your name, email address, shipping address, and payment details, provided when you create an account, make a purchase, or subscribe to services (e.g., newsletter or future subscription plans).
Non-Personal Data: Information about your device, browser type, and website usage to help us improve your experience.
2. How We Use Your Data
We use your personal data for the following purposes:
To process orders and manage transactions in the shop.
To provide customer support.
To personalize your experience, including showing products you may be interested in.
To send marketing emails, newsletters, and updates if you’ve subscribed (with an opt-out option).
To improve our website’s performance and future blog content based on user interaction.
3. Legal Basis for Processing Data (GDPR)
Under GDPR, we rely on these legal bases to process your data:
Consent: When you opt in to receive marketing emails or subscribe to services.
Contractual Necessity: When processing your data is necessary to fulfill your order or provide services.
Legitimate Interest: For purposes such as improving our website, ensuring security, and preventing fraud.
Legal Obligation: To comply with laws and regulatory obligations.
4. Sharing Your Data
We may share your personal data with trusted third parties, including:
Service Providers: Such as payment processors, email services, and hosting providers, to facilitate transactions and subscriptions.
Legal Authorities: If required by law or in the event of fraud or a security breach.
5. Your GDPR Rights
As an EU/EEA resident, you have the following rights under GDPR:
Access: You may request access to the personal data we hold about you.
Rectification: You can request corrections to your personal data if it’s inaccurate.
Erasure: You can ask us to delete your personal data ("right to be forgotten").
Restriction of Processing: You can request us to limit how we process your personal data.
Data Portability: You can request your data in a structured, machine-readable format.
Object to Processing: You can object to us processing your data, especially for marketing purposes.
Withdraw Consent: You can withdraw your consent at any time for data processing based on consent.
To exercise these rights, please contact us at [Your Contact Email]. We will respond within one month.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to:
Store preferences and improve website performance.
Track website usage for analytics and marketing purposes. You can manage cookie preferences through your browser settings or opt out via our cookie banner.
7. Data Security
We take appropriate technical and organizational measures to secure your personal data. However, no method of transmission over the Internet is 100% secure.
8. Data Retention
We will retain your data for as long as necessary to fulfill the purposes outlined in this policy unless a longer retention period is required by law.
9. International Data Transfers
If we transfer your data outside of the EU/EEA, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCC).
10. Children's Privacy
Our website is not intended for individuals under the age of 13, and we do not knowingly collect personal data from children.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date."
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your GDPR rights, please contact us at:
Email: anacifu.art@gmail.com