skip to Main Content

FREE SHIPPING FOR ALL ORDERS OVER 50 €. WE SHIP WORLDWIDE!

Privacy and
Cookie Policy

The safety and security of your personal data.

Privacy and
Cookie Policy

The safety and security of your personal data.

Privacy & Cookie Policy

The safety and security
of your personal data.

Privacy and Cookie Policy

 

GENERAL

The controller of personal data is company ARRATHI, proizvodnja kozmetičnih izdelkov, d.o.o., Žabarjeva ulica 12, 1000 Ljubljana, Registration number: 8553092000.

By opening and using the Website, various information and data is exchanged between your device and the server, including personal data under the EU General Data Protection Regulation (Regulation (EU) 2016/670 hereinafter referred to as the General Regulation). Below we present you the exchange of information and define precisely the use, interest and reasons.

The website is accessible on the HTTPS secure protocol, which provides encrypted connection and data exchange, and our servers are updated to the latest versions, which increases the level of security.

 

PERSONAL DATA AND PROCESSING

Personal data is information that identifies you as a specific or identifiable individual. The Controller collects the following personal data in accordance with the purposes set out below in the Privacy Policy:

  • Basic customer information that is collected when placing an order in an online store (first name, last name, address, email address and telephone number) and when registering a customer as a user in an online store (username, email address and password for access).
  • Information on user purchases and invoices issued.
  • Device IP address.
  • Date and time of access.
  • Website URL and referring URL (channel and campaign – how the visitor was acquired or the source through which the visitor came to the site).
  • Website retention time, number and URLs of pages visited, and total visit time.
  • The type of browser you are using, and the operating system used.

The controller does not collect or process your personal information except when you enable or consent to it or there is a legal basis for it and the controller has a legitimate interest in the processing.

 

DATA PROCESSING BY LAW OR CONTRACTUAL RELATIONS

PURCHASE IN THE ONLINE SHOP
In the case of concluding and executing a contract with the controller (in case of online purchase), you must provide personal data for the purpose of the conclusion of a contract. It is not possible to process an order in an online store without the provision of personal data.

When processing your order, we transfer your information to an EU-registered accounting program that demonstrated appropriate technical and organizational measures consistent with the General Regulation for the secure processing of your personal data.

We transmit your personal information to a delivery service which is registered in the EU and demonstrated appropriate technical and organizational measures in accordance with the General Regulation for the secure processing of your personal data.

SENDING PROMOTIONAL MESSAGES
The controller can send you emails about sales campaigns or news to your e-mail address, which you specified at the time of your order. The Controller does not forward your email to a third party under any circumstances, and you always have the option to unsubscribe from receiving promotional messages by clicking the link in the message itself. The Controller always respects your decision and the opt-out is automated and takes effect immediately.

 

PROCESSING OF PERSONAL DATA ON THE BASIS OF LEGAL INTEREST

In accordance with the General Regulation, the controller may also process data on the basis of a legitimate interest. The Controller strives that the rights and freedoms of the individual or the visitor of the website prevail over said interests. If you do not want the data processed or want to delete or cancel the processing, you can send us an e-mail at info@myboucle.com.

GENERAL STATISTICAL PROCESSING
For the purpose of optimizing the website, monitoring the proper functioning of the website, analysing sales, re-purchases and customer behaviour, and for business optimization purposes and measuring business performance, we use the Google Analytics tool. The tool monitors sales by sales channels, how many buyers make repurchases, and in what quantity and value, we monitor responses to advertising campaigns and general visitor statistics. We use IP address anonymization so that your IP address is never forwarded. Once your IP address becomes anonymous, your identification is no longer possible, so Google Analytics cannot in any way associate your device with other Google data.

ACCESS TO HISTORY OF ORDERS AND OTHER DATA
Controller’s staff can access your order history if you provide personal data for identification or order number. Upon access, they can offer you a better service or offers and effectively resolve any complaints.

CUSTOMIZED COMMUNICATION WITH EXISTING AND POTENTIAL BUYERS
Personalized communication (via email, browser notifications or social networks) is used to present a suitable offer, communicating discounts and provision of other content that may be of interest to you based on your past interactions with our site. We use your demographics (gender, age and location), your purchase history (purchased products, number of purchases), product responses and views (opening messages, clicks on links), and behavioural conduct to initiate this type of communication. sending personalized messages.
When using personalized communication, we never create user profiles, nor do we profile you or analyse your personal data, we only perform processing on a large group basis, which makes it impossible for you to be identified as an individual.

 

CONSENT

The Controller may process and collect your personal information, subject to your consent, for the purposes of verifying and enabling your online account created by registering on the Website and for sending promotional messages and other content by email in case there is no other legal basis for this and you have given us your explicit consent. The controller may also process and collect your personal data for other purposes, but only if you have been accurately informed of these purposes and given explicit consent.
If you do not want the data processed or want to delete or cancel the processing, you can send us an e-mail at info@myboucle.com.

COOKIES
We use cookies to provide you with a better user experience and keep statistics and monitor the operation of the website. Our analytics cookies contain anonymization of your IP address so that your personal information is not disclosed to a third party.

There are different ways to control and manage cookies. Keep in mind that removing or blocking cookies may adversely affect your user experience and accessibility to certain pages of our online store.

Consent to the installation of non-essential cookies is given by clicking on the accept button. But most browsers also automatically accept cookies, but you can choose whether to accept cookies through the browser control, which is usually found in the browser’s Tools or Settings menu. For more information on how to change your browser settings or how to block, manage, or filter cookies, visit: www.allaboutcookies.org. It is also possible to remove cookies by clicking on the “disable” button.

Cookie Name Type Duration Sensitivity ID Description
_stripe_sid persistent 1 year necessary _stripe_sid
Stripe cookies for payment processes.
_stripe_mid session 30 minutes necessary _stripe_mid
Stripe cookies for payment processes.
__tawkuuid persistent 6 months necessary __tawkuuid
This cookie remembers you so that we can link chat conversations together to provide a better service. It expires within 6 months.
TawkConnectionTime session 10 minutes necessary TawkConnectionTime
This cookie remembers you so that we can link chat conversations together to provide a better service.
Facebook persistent 3 months non-necessary fr
This cookie will help deliver our advertising to people who have already visited our website when they are on Facebook or a digital platform powered by Facebook Advertising.
Facebook session 10 minutes non-necessary _fbp
This cookie will help deliver our advertising to people who have already visited our website when they are on Facebook or a digital platform powered by Facebook Advertising.
Viewed Cookie Policy persistent 1 hour necessary viewed_cookie_policy
The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not the user has consented to the use of cookies. It does not store any personal data.
Google Analytics persistent 24 hours non-necessary _gid
This cookie is installed by Google Analytics. The cookie is used to store information of how visitors use a website and helps in creating an analytics report of how the website is doing. The data collected including the number visitors, the source where they have come from, and the pages visited in an anonymous form.
Google Analytics persistent 2 years non-necessary _gat_gtag
Identification code of the website for tracking visits.
Google Analytics persistent 2 years non-necessary _ga
Enables us to know what pages, content and activity a user has done for site analytics and performance measurement.
PHPSESSID session 10 minutes necessary PHPSESSID
This cookie is native to PHP applications. The cookie is used to store and identify a users’ unique session ID for the purpose of managing user session on the website.

PERSONAL DATA RETENTION
The controller retains your personal data for as long as is necessary to accomplish the purpose for which the personal data was collected and processed. In case a special law prescribes the retention of data for a specified period, then the controller processes that data in accordance with said law.

If you place an order, complete it and accept the delivery of goods, then we keep the order information on the server for 2 years from the delivery. If you make a request to delete your data from our databases, we can delete the data beforehand, except for the data on the invoice, which is not allowed to be deleted in accordance with the legislation and must be kept by the Controller for 5 years.
Data in Google Analytics is deleted after 26 months.

 

PERFORMANCE OF CONTRACT

By using the Website, you are aware that the controller may also entrust other contractors (processors) with your personal data solely on behalf of the controller and within the limits of the controller’s authorization. The controller employs the following contractors (processors):

  • Provider of accounting and customer relationship management program and direct messaging software for communication
  • Accounting Service,
  • Email provider (e.g., Google Mail, Mailchimp)
  • Online advertising solution provider (e.g., Facebook, Google)
  • Delivery service

In case of transfer of personal data to third countries outside the EU, the controller shall ensure that such transfer is justified by a Commission decision on the adequacy or specific contractual provisions between the employer and the processor or user from a third country, in accordance with Article 46 of Regulation (EU) 2016/679.

 

YOUR RIGHTS

In accordance with Articles 15, 16, 17, 18, 20 and 21 of the General Regulation, you have the right of access, right to rectification, right to erasure (‘right to be forgotten’), right to restriction of processing, right to data portability and right to object.
For more information on data processing and additional questions, you can contact us via the email above.

Back To Top