1. Lawful Basis For Processing
The following reasons for which a company may collect and process your personal data are included in the laws on data protection. Consent: we can collect and process your data with your consent in certain situations. One example of this is when you tick a box to receive a newsletter. We will always clarify which data is necessary for a particular service when collecting your personal data.
1.1 Contractual obligations:
Sometimes your personal data needs to comply with our contractual responsibilities. For example, if you order one of our products for home delivery, your address details will be collected by us and passed to our courier to deliver your purchase. Likewise, we also require your billing address to fulfill the payment agreement between both parties.
1.2 Legal compliance:
It may be necessary to collect and process your data if the law deems it obligatory. For example, details of individuals involved in any criminal activities (like fraud or money laundering) are to be passed on to law enforcement.
1.3 Legitimate interest:
Sometimes we need your data to pursue our legitimate business interests while not materially impacting your personal rights, freedom, or interests. For example, the shopping history of multiple customers may be combined to identify trends, ensure we can handle demand, or develop new products/services.
2. When We Collect Data?
On our website Samarali.eu, data is collected when:
2.1 You visit the website and use your account to buy products.
2.2 You create a Samarali.eu account.
2.3 You engage with Samarali social media on Facebook or Instagram.
2.4 You contact us with questions, complaints, etc.
2.5 You enter promotional competitions run by Samarali.
2.6 You review our products or services.
2.7 You enter personal data into any forms on Samarali.eu.
2.8 You have permitted another party to share your personal information or details.
3. What Data We Collect On Samarali.eu?
The following data is collected:
3.1 If you have a Samarali account: your first and last name, billing and delivery address, debit or credit card details (if given permission), orders, email address and telephone number. We will also keep encrypted records of your login password for your personal security.
3.2 Payment Card Information.
3.3 Product reviews.
3.4 Technical information such as your internet connection, your browser, country of origin, the web pages viewed during your visit.
3.5 If applicable: your social media handle or username, to help us respond to any feedback or questions you may have.
4. How & Why We Use Your Data?
Samarali is going to use your data for:
4.1 Handling any orders made by using our website. Data collection during checkout is necessary for us to process and successfully deliver your order and comply with our legal obligations in the case of refunds, warranties, etc.
4.2 Appropriately responding to your questions, requests, and complaints. Your information enables us to improve our customer service and to do this to the best of our ability we may also keep a record for any future communication with Samarali and to indicate our communication history. We do this not only based on our contractual obligations to you, our legal obligations, and our legitimate interests but also to provide you with the best possible service and to understand how we can make improvements in the future.
4.3 Protecting ourselves and you from any criminal activities. To do so, we use your personal data to keep your account up to date whilst also keeping it safe. Your browsing activity with us will also be monitored so any problems can quickly be identified and resolved, and the integrity of our websites will be protected. This is done as part of Samarali’s legitimate interest. An example of this would be checking your password upon login, and monitoring IP addresses so any possible fraudulent log-ins from unexpected locations can quickly be identified.
4.4 Preventing fraudulent transactions and process payments. This is done based on our our legitimate business interests, and also helps to protect our customers from any criminal activity.
4.5 Informing you about changes to our services or sending you communications required by law. Examples of these include updates to this Privacy Notice, product recall notices, and legally required information relating to your orders. Promotional content will not be included in these service notifications and do not require prior consent when sent by text message or email. We would be unable to comply with our legal obligations if we did not use your personal data for these purposes.
4.6 Developing, testing, and improving the systems, services, and products Samarali provides, such as recording your browser’s session ID to help us understand any online feedback on problems you may have. This is done based on our legitimate business interests.
4.7 Complying with our contractual or legal obligations to share data with law enforcement, e.g. a court order is submitted to share data with a court of law or law enforcement agencies.
5. Who We Share Your Data With?
Occasionally your personal data is shared with trusted third parties, e.g. delivery couriers. To keep your data safe and protect your privacy, we apply the following policy to those organizations:
5.1 Only information necessary to perform their specific services is provided.
5.2 Your data may only be used for the exact purposes specified in our contact with them.
5.3 We work closely with them to ensure that your privacy is respected and protected at all times.
5.4 Any of your data held by these parties will either be rendered anonymous or be deleted if we stop using their services.
Examples of third parties we work with are:
- Operational companies such as delivery couriers.
- Fulfillment company that holds the inventory.
- Direct marketing companies.
In summary, Samarali works with reliable third parties who are compliant towards the GDPR laws in the EU.
In rare instances, third parties may request Samarali to share our data. This will only be done in very specific circumstances, such as:
- Fraud management. Information on (potentially) fraudulent activity in our online environment may be shared, which includes sharing data about individuals with law enforcement.
- A valid request from law enforcement.
We may be required to disclose your personal data to any law enforcement, regulatory, or Government body, in your country of origin or elsewhere when necessary. These requests are assessed on a case-by-case basis and take the privacy of our customers into consideration. Personal data is used for payment and shipment purposes.
6. Individual Rights
Customers and individuals have the right to request:
6.1. Access to personal data we’re holding about you.
6.2. That Samarali stop any consent-based processing of your personal data after you withdraw your consent.
6.3. The correction of your personal data when incorrect, out of date, or incomplete.
6.4. That Samarali stop using your personal data for direct marketing, either through specific channels or all channels.
6.5. Review by a partner of any decision made based solely on the automatic processing of your data. i.e. where the outcome and criteria for that decision have not yet been reviewed by a human. You have the right to request a copy of, correction to, and/or removal of any information about you that Samarali holds at any time. To ask for your information, please send an email to email@example.com.To ask for your information to be changed, please update your online account, or contact our customer services team via email firstname.lastname@example.org. If we choose not to grant your request, we will explain to you why.
Your right to withdraw consent:
Whenever you have granted us permission to use your personal data, you have the right to withdraw this permission at any time.
Where we rely on our legitimate interest:
You can ask us to stop processing your personal data for personal reasons in cases where we are processing the data on the basis of our legitimate business interests. We must do so unless we believe we have a legitimate reason to continue processing your personal data.
You always have the right to request us to stop the use of your personal data for direct marketing activity through all channels, or selected channels. We are obligated to comply to this request at all times. Checking Your Identity. We will ask you to verify your identity to protect the confidentiality of your information, before proceeding with any requests you make under this Privacy Notice. If you have authorized for a request to be submitted on your behalf by a third party, we will ask them to prove they have your permission.
7. How To Stop?
Direct marketing communication from us can be stopped in the following ways:
- Click the ‘Unsubscribe’ link in any email communication that we send you.
- Email email@example.com.
Please note it takes some time for our systems to be fully updated, so you may continue to receive communications for a short period of time after changing your preferences.
8. For All Non-Dutch Customers
By using our services and/or providing your personal data to us, you grant permission to the processing of your personal data by Samarali or on Samarali’s behalf. Naturally you still have the right to request for Samarali not to process your data in certain ways, and your wishes will be respected. Sometimes your personal data will need to be transferred between countries to enable us to supply the goods or services you have requested. Normally, we may transfer your personal data from your country of residence to ourselves or third parties. By being a Samarali customer, you are permitting the overseas use, transfer, and disclosure of your personal data outside your country of residence for our business purposes. Transfer of your personal data may happen as our information technology facilities and servers are likely to be located outside your country of residence. Samarali will ensure reasonable steps are taken to prevent third parties outside your country of residence from using your personal data in any way that is not disclosed in this Privacy Notice. We will also ensure we adequately protect the confidentiality and privacy of your personal data.
9. What Are Cookies & Why Do We Use Them?
To register user preferences and to ensure a better and more personalized experience, cookies are used as a standard method. A cookie is a file stored on your computer in which these preferences are stored.Samarali.eu uses both session cookies and persistent cookies. Persistent cookies stay on your computer permanently until you manually delete them, whereas session cookies delete themselves automatically after a certain period of time has elapsed or when you close your browser. Both types of cookies do not store any personal details relating to you or your credit/debit cards. Any cookies created are for the sole purpose of, and essential to, the function of our website Samarali.eu.The cookies that you allow on your computer can be managed through the internet browser that you use. It is also possible to be alerted every time a cookie is offered – through your internet browser’s help menus one can find instructions on how to manage your cookies.
10. Any Questions?
We hope this Privacy Notice has been helpful in detailing how we handle your personal data and what you can do to control it.If you have any questions that have not been covered, please us by sending an email to firstname.lastname@example.org.
This Privacy Notice was last updated on 22/03/2020