INTRODUCTION AND SUMMARY
Herbaroom values your privacy. This policy contains information about your rights and how we process your personal data. Personal data is any information that can be associated with you as an individual, for example your name and contact details.
Here are briefly the reasons why we process your data:
• As necessary to process your order and deliver the goods
• To provide communication and the opportunity to answer your questions
• To ask you for your opinion about Herbaroom and your experience with the service
• To comply with applicable law (for example consumer law or accounting law)
Under the Personal Data Protection Act, you have certain rights. For example, you always have the right to refuse marketing. You can also read how you can influence how we process your personal data - what rights you have.
Want to learn more? Read our detailed explanations below. Below you will find more information about how and for how long we process your personal data.
WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
Herbaroom, registered under NIP number 8421627284, is responsible for the processing of your personal data. Please also note that some of our payment and logistics service providers process personal data collected via our website or IT system after purchase and are independently responsible for its processing.
WHO CAN GET ACCESS TO YOUR PERSONAL DATA?
Your personal data is primarily processed by Herbaroom. We will never sell your personal data. In some cases, we share your personal data in order to effectively and properly fulfill our legal obligations to you:
• In order for us to receive payment from you, our payment processors will have access to your personal information
• In order for us to deliver your order to your home address or post office and to process any returns, we will share your personal data with our logistics service providers
• Your personal data is processed primarily by us at HerbaroomPlease contact us for more detailed information about who we share your personal data with.
HOW CAN YOU INFLUENCE HOW WE PROCESS YOUR PERSONAL DATA?
Under the Data Protection Act you have various rights regarding how you can influence how we process your personal data. Read more below.
THE RIGHT TO WITHDRAW CONSENT AND TO OBJECT TO DATA PROCESSING
You have the right to withdraw your consent to the processing of your personal data, partially or completely. Withdrawal of consent will be effective from the moment you notify us of it.The right to object generally applies when data processing is based on a balance of legitimate interests. However, in some cases your right to object may not apply (for example because we need to store your personal data). If we can demonstrate compelling legitimate reasons for processing your data that outweigh your interests and fundamental rights, or if we process your data in order to establish, exercise or defend against claims, you have no right to object to such data processing.
RIGHT OF ACCESS
You have the right to obtain confirmation as to whether we process your personal data. You can access your personal data and receive a copy of the personal data we process.
RIGHT TO CORRECTION
You have the right to rectify your personal data or ask us to complete incomplete data.
RIGHT TO ERASE (“RIGHT TO BE FORGOTTEN”) AND RESTRICTION OF PROCESSING
In some circumstances you have the right to ask us to delete your personal data. This may happen, for example, when your personal data is no longer necessary in relation to the purpose for which it was collected or otherwise processed, or when you withdraw your consent on which the processing is based and there is no longer a legal basis for further processing. .
THE RIGHT TO SUBMIT A COMPLAINT TO THE SUPERVISORY AUTHORITY
You always have the right to lodge a complaint with the supervisory authority. You can do this in particular in the Member State of the European Union/European Economic Area where you have your usual place of residence, your place of work or where an alleged breach of the relevant provisions on the protection of personal data has occurred.
THE RIGHT TO TRANSFER DATA
You have the right to request that we transfer some of your personal data that we hold to another company (data portability). This right applies to personal data provided to us in a structured, commonly used, machine-readable and mutually compatible format if:
• Data processing results from the consent granted or the concluded contract and
• Data processing is automatic
If you exercise your right to data portability, your personal data may be transferred directly from Herbaroom to another data controller, if technically possible.
HOW AND WHY DO WE PROCESS YOUR PERSONAL DATA?
Our goal is to be as transparent as possible about how and why we process your personal data. We only process personal data that is provided to us.
DATA PROCESSING BEFORE MAKING A PURCHASE
We need to process your personal data so that we can save, for example, a set of wall paintings you have created and receive feedback from you. If you do not provide us with personal data for this purpose, we will not be able to provide you with services or answer your questions
DATA PROCESSING NECESSARY FOR THE IMPLEMENTATION OF A PURCHASE AND AGREEMENT, ETC.
We need to process your personal data in order to fulfill your orders, for example to deliver goods to you. We also need to process your personal data to meet legal and other requirements, for example the requirement to store data under accounting law and consumer rights protection regulations. If you do not provide us with your personal data for these purposes, we will not be able to process your order.
Please note that our payment service provider/s also process personal data in order to process your payment for your order. The company(s) providing payment services to us is/are independently responsible for such data processing. The company/companies providing payment services to us also allows you to choose a simpler purchasing method by automatically completing your personal data or remembering them on your device