PRIVACY POLICY
I. What Is Personal Data and Why We Collect It
Whenever consumers visit the Website to view its contents and/or use its features, including making purchases from the Website, we collect personally identifying information (“Personal Data”) about consumers via digital tracking technologies (cookies) as well as personal data manually entered on the Website. This data is collected for purposes such as analysing user behaviour and interests, adding products to the user’s shopping cart, participating in promotional campaigns and loyalty programs, as well as any other personal data provided for purposes like registering on the Website or subscribing to any Serund newsletters. The types of personal data we collect when visitors and users manually enter it during registration or when purchasing products include name, address, phone number, email address, purchase information, purchase method, and associated information such as credit or debit card details used to facilitate the sale of products. To review our rules regarding the automatic collection of personal data and our use of digital tracking technologies, please visit our Cookie Policy, which forms an integral part of this Privacy Policy.
II. How Personal Data Is Processed
The personal data collected through the Website is primarily processed using computer and electronic means, adopting security measures to minimise the risks of destruction or loss, including accidental loss of the data itself, unauthorised access, or processing without consent, or processing that does not conform to the purposes of collection as indicated in this Privacy Policy.
III. Legal Grounds for the Processing
Through the Website, different types of personal data are collected and processed for different purposes and on different legal grounds. Specifically: (a) personal data related to browsing and collected via cookies is processed on the grounds of the performance of contracts or the functioning of the Website (for necessary and functionality cookies) or on grounds of our legitimate interest (for marketing and analysis cookies); (b) personal data provided manually by users in the course of making orders on the Website is processed on the grounds of the conclusion and performance of contracts for the sale of products marketed on the Website; (c) personal data provided manually by users during registration on the Website or for subscribing to our newsletter and other Serund communications is processed on the grounds of the consumer’s explicit consent.
IV. Retention Periods
Personal data linked to purchases will be stored for at least 10 years to comply with tax and civil law. Additionally, the data linked to purchases may be stored for a longer period to comply with the contractual unlimited warranty granted to the client. Unless provided otherwise by applicable laws, consent-based processing of personal data, such as data provided for marketing and profiling activities, is kept as long as necessary for the specific processing, considering the particular sector of activity and the interest demonstrated by users in staying updated on our products. Consumers subscribing to our newsletter will be asked to renew their consent no later than 2 (two) years after subscription or consent renewal. Personal data of consumers who do not renew their consent, and where Serund cannot demonstrate any other legal grounds for processing, shall be deleted without undue delay.
V. Disclosure of Personal Data to Third Parties
Serund discloses the personal data collected via the Website only as permitted by law. Personal data may be processed and disclosed to: (i) consultants of Serund, such as lawyers or accountants, processing data in their capacity as persons in charge of internal organisation; (ii) Serund business partners, such as banks, couriers, system administrators, and marketing companies acting as data processors, providing specific technical and organisational services related to the Website or the sale of products (e.g., logistics, IT, and marketing services); (iii) police and judicial authorities, in compliance with the law and upon their request, or when there are reasonable grounds to believe that such disclosure is necessary to (1) investigate, prevent, or take action regarding suspected unlawful activities or assist national supervisory authorities; (2) prepare a defence against third-party claims, protect the security of the Website, or protect the company; (3) exercise or protect the rights, property, or security of Serund, its affiliates, customers, employees, and third parties. Serund processes personal data using servers located within the European Union. In cases where Serund transfers personal data outside the European Economic Area, it ensures that the relevant country is recognized as having an adequate level of data protection, or Serund requires its partner to conclude the EU’s Standard Contractual Clauses to safeguard the transferred personal data.
VI. Rights of Consumers Regarding the Processing of Their Data
A user always has the right to obtain confirmation of whether or not personal data concerning them exists, even if it is not yet recorded, and to have it communicated in an intelligible form. A user also has the right to obtain information about the source of personal data, the purposes and methods of processing, the logic applied when processing with the aid of electronic instruments, the identification details of the data controller and processors, and the categories of persons to whom the personal data may be communicated or who may come to know it (e.g., data processors). A user also has the right to request an update, correction, or—when relevant—an inclusion of personal data, deletion, conversion to an anonymous form, or the blocking of personal data that has been processed in violation of the law, including data that is not necessary in relation to the purposes for which it was collected or subsequently processed. Users can also request the portability of their data. A user has the right to object, in whole or in part, to the processing of personal data concerning them for legitimate reasons, even if relevant to the scope of collection, or to the processing of personal data for purposes such as sending advertising, direct marketing, conducting market research, or commercial communications. They also have the right to request the restriction of processing concerning themselves. The right to object can be exercised specifically in relation to one or more methods of sending marketing communications. Users also have the right to lodge a complaint with a data protection authority (please see below for more information) and the right to withdraw previously given consent.
If you have any questions regarding our Privacy Policy, please contact us at info@serundofficial.com.