Privacy Policy (GDPR)

Terms for the Processing of Personal Data (GDPR)

These terms for the processing of personal data (hereinafter referred to as Terms) describe how B-commerce, s.r.o., with its registered office at Stöcklova 19, 085 01 Bardejov, Company ID: 52424812, registered in the Commercial Register of the District Court Prešov, Section Sro, File No. 38488/P (hereinafter referred to as the Company or we), processes your personal data for the purpose of providing our services, consisting of the operation of an online shop (hereinafter referred to as Services) on the website www.line-twine.com (hereinafter referred to as the Website) as well as through other means of remote communication.

The Company is the controller responsible for the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Act No. 18/2018 on the Protection of Personal Data, as amended (Act No. 18/2018).

The Company has adopted all appropriate technical and organizational measures to ensure the protection of personal data.

Definitions

“Personal Data”: any information relating to an identified or identifiable natural person, in particular name, surname, identification number, location data, online identifier or characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

“Processing of Personal Data”: any operation or set of operations performed on personal data, such as collection, recording, organization, structuring, storage, alteration, retrieval, consultation, use, transmission, dissemination, making available, combination, restriction or erasure, whether or not by automated means.

What information do we collect and for what purpose?

Information for registration and access to the Website

For registration, login and access to personalized services, we process the following personal data: (i) first name, (ii) last name, (iii) email address.

Legal basis: performance of a contract (Article 6(1)(b) GDPR).

Information for the provision of Services

For the provision of Services (delivery of ordered goods), we process: (i) first name, (ii) last name, (iii) address, (iv) email address, (v) telephone number and (vi) payment details (card number, expiration date, CVV code).

Legal basis: performance of a contract (Article 6(1)(b) GDPR).

Information collected for marketing purposes

For sending newsletters, information about discounts, updates, improvements and offers via email, SMS, post or notifications, we process: (i) first name, (ii) last name, (iii) email address, (iv) telephone number, (v) address.

Legal basis: consent (Article 6(1)(a) GDPR). Consent may be withdrawn at any time via the unsubscribe link in the relevant message; this does not apply to system or transaction-related messages connected with the provision of Services.

Information collected when visiting and using the Website

To improve our Services and user experience, we process information about: (i) your device, (ii) your use of the Website and/or Services (IP address, geographical location, browser and operating system type and version, visit duration, viewed pages, movements), (iii) time-based usage patterns.

Legal basis: consent (Article 6(1)(a) GDPR).

Comments and reviews

When publishing comments or reviews, we process: (i) first name, (ii) last name, (iii) chosen alias, (iv) other data voluntarily provided by you.

Legal basis: consent (Article 6(1)(a) GDPR).

Communication with us

In the context of communication (support, complaints, problem resolution), we process: (i) first name, (ii) last name, (iii) address, (iv) email address, (v) telephone number, (vi) communication content, (vii) metadata and (viii) other necessary data.

Legal basis: performance of a contract (Article 6(1)(b) GDPR).

Complaints procedure

In the course of handling complaints, we process: (i) first name, (ii) last name, (iii) email address, (iv) telephone number, (v) address, (vi) IBAN.

Legal basis: legal obligation (Article 6(1)(c) GDPR).

Other legal bases for processing

In addition, we may process personal data to comply with legal obligations (Article 6(1)(c) GDPR) or to protect our legitimate interests (Article 6(1)(f) GDPR), in particular for fraud prevention, ensuring IT and information security, and for direct marketing.

We share order data – internal order number, value, currency, products and time of the order – with Google Analytics for sales statistics, even if you have not consented to analytics cookies, on the basis of our legitimate interests (Article 6(1)(f) GDPR). We do not share your name, contact details, address or device identifiers, and we do not use this data for advertising.

How do we share your personal data?

For the provision of the Website and Services, we share personal data in accordance with the principle of data minimization only with necessary recipients, such as employees, subcontractors, advisors, suppliers, affiliated companies and service providers, to the extent necessary to achieve the purposes set out in these Terms.

Identifiable personal data is not shared with third parties for direct marketing purposes.

Do we transfer your personal data to third countries?

Personal data may be transferred within the European Union, the European Economic Area, and to countries that provide an adequate level of data protection as recognized by the European Commission.

How long do we process your personal data?

• Registration and access: up to 30 days after deletion of the user account.
• Provision of Services: until full performance of the contract.
• Marketing: until withdrawal of consent or deletion of the account.
• Website usage: until withdrawal of consent.
• Comments/reviews: until withdrawal of consent.
• Communication: until your request has been fully handled.
• Complaints: in accordance with statutory retention periods.

How can you withdraw your consent?

You may withdraw your consent at any time by sending an email to info@line-twine.com.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to the processing of your personal data.

Automated decision-making and profiling

We do not use automated decision-making or profiling.

Protection of children

We do not knowingly process personal data of persons under the age of 16.

Financial transactions

Payments are processed via external payment service providers. Personal data is transferred only to the extent necessary to process payments.

Third-party websites

We are not responsible for the content or privacy practices of third-party websites.

Contact

If you have any questions regarding data protection, please contact us at info@line-twine.com.

Updates to these Terms

We reserve the right to amend these Terms. The current version is published on the Website.