Our Privacy Policy explains how we collect, use and protect information in relation to Brillù-Gift website and digital services (collectively, the “Services”). This Privacy Policy applies to all visitors and users who access the Services.
This website is operated by Brillù Gift Srl, strada principala 192, Gura Vaii, Brasov, Romania.
Brillù Gift Srl operates in its capacity of data controller for the purposes of applicable data protection laws and regulations, including the Regulation (EU) 2016/679 dated 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data (“GDPR”). For the purposes of the website Privacy Policy, Brillù Gift is designated by its trademark Brillù.
1. INFORMATION WE COLLECT
Depending on the Services provided by the website and used by you, on your choices and configuration of your terminal (with respect in particular to cookies), personal data concerning you (your “Personal Data”) collected and processed by Brullù Gift mainly includes: your name, date of birth, e-mail address, postal address, telephone number, your preferences and interests and when purchasing products and services your billing and transactional information, your connection logs, and your nationality when required by specific regulations, as well as the information that you may disclose when you contact us.
The Personal Data that is mandatory for Brillù Gfit to fulfill the purposes that are described below is marked with an asterisk on the various pages of the website. Should you not fill in these mandatory fields, Brillù Gift may not be able to take care of your demands and/or to provide you the requested services. Other Personal Data is purely optional and allow us to know you better and to improve our communications and services accordingly.
When you visit the website, we may use cookies to collect information about how you use our Services and provide features to you. For more information about our use of cookies, please visit our Cookie policy.
2. PURPOSES OF PROCESSING
We collect and process your Personal Data with your consent and/or as necessary to perform a contract (e.g. to provide products ordered), meet our legal obligations, or fulfill our legitimate interests (notably for marketing purposes, to prevent fraud or to protect the security of our IT systems).
We use and process Personal Data about you for purposes described below:
– to provide the products or services requested;
– to personalize the content of the website, to send you information about our products, services, offers, news and events (newsletters, invitations and other publications) either by e-mail, telephone, contact forms, or post;
– to understand your preferences and interests;
– to make statistics;
– to prevent fraud and ensure compliance;
– to reply to your questions, complaints or orders of documents or services;
– to improve our website and provide technical support.
We will not process your Personal Data in a way that is incompatible with the purposes for which it has been collected or subsequently authorized by you or collect any Personal Data that is not required for the mentioned purposes. For any new purpose of processing we will ask your separate consent.
3. YOUR RIGHTS
In accordance with applicable data protection laws and regulations, you have a right to request access to, rectification or erasure of your Personal Data, or restriction of processing.
You may request at any time that we stop sending you information about our offers, news and events by using the opt-out link inserted in each e-mail that we send you.
Moreover, you have the right to lodge a complaint with your local data protection authority about any of our activities that you deem are not compliant with the GDPR.
You can exercise your rights by using your account settings or by simply writing us at the following address: EMAIL. Please keep in mind that in case of a vague request we may engage a discussion to better understand the motivation for the request and require you to prove your identity (for example, by requesting an ID, or other data). This is made to ensure that no right of third parties are violated by your request.
4. DATA RECIPIENTS
Your Personal Data shall be processed by Brillù Gift. It shall not be transferred or made accessible to any third party apart from: our service providers (such as providers of hosting and maintenance services or advertising partners).
5. TRANSFER OF PERSONAL DATA & SECURITY MEASURES
Brillù Gift, its affiliates, or service providers may transfer information that we collect about you, across borders. If you are located in the European Union, please note that we may transfer your Personal Data to a country that does not have the same data protection laws as your jurisdiction. Any transfer of your Personal Data outside the European Economic Area shall only take place subject to appropriate safeguards being in place, such as standard contractual clauses and other contractual safeguards. You can contact us to obtain a copy of the safeguards implemented to secure data transfers operated outside the European Economic Area.
We use reasonable and appropriate information security safeguards to help keep the information collected through the Services secure and take reasonable steps to verify your identity before granting you access to your account. Among others, we utilize the following security measures:
– Pseudonymization of certain categories of your Personal Data;
– Encryption of your Personal Data in transit and in rest;
– Regular vulnerability scanning and penetration testing;
– Organizational measures (access control, restriction of access);
– Conducting periodical data protection impact assessments and privacy audit.
6. DATA RETENTION
We will retain your Personal Data as long as your account is active or needed to provide you services, and only for as long as necessary in relation with purposes of processing identified in this Privacy Policy. Information we receive about you may be retained for an extended period of time when it is the subject of a legal obligation, an investigation or otherwise to prevent harm.
The Personal Data that is used for the purpose of sending you information concerning the offers, news and events of Brillù Gift shall be kept for a period of two (2) years as of the date on which it was collected or as of your last contact with Brillù Gift. Your Personal Data shall be destroyed within a maximum of 30 days following any request on your part to unsubscribe.
The Personal Data that is collected and processed under the “Contact us” and/or or similar section shall only be kept throughout the duration of the processing of your request. It shall be deleted thereafter.
Finally, the connection logs that are collected, subject to your consent, using the cookies implemented on our website, shall be kept in accordance with applicable laws and regulations for a period of time that does not exceed twenty four (24) months.
7. CHILDREN’S PRIVACY
Brillù Gift website is not directed to users under the legal age of drinking. If you are younger this legal age, depending of your country, you may not use our Services. If you are a parent or guardian and believe we may have collected information about a child, please contact us.
8. CONTACT US
If you have any questions about this Privacy Policy and if you wish to exercise your rights, please contact our Data Protection Officer at the following email address: customerservice@brillu-gift.com
Brillù Gift may modify or update this Privacy Policy from time to time, so please review it periodically. We may provide you additional forms of notice of modifications or updates as appropriate under the circumstances.
