Protection of personal data

We handle your personal data in accordance with the law, fairly, securely, and transparently for you. We are aware of our responsibility because you have entrusted us with your personal data. Therefore, all key information regarding data processing, our obligations, and your rights is provided below.

PERSONAL DATA CONTROLLER

PURPOSE OF DATA PROCESSING

We process personal data for the following purposes and in accordance with one of the six possible legal bases (consent, conclusion or performance of a contract, legal obligations, protection of an individual's vital interests, tasks in the public interest, legitimate interests of the controller or third parties) and for a specific period when necessary.

Wherever the processing of personal data is based on your consent, you always have the option to change or withdraw this consent and decide differently regarding your personal data for the future.

Except in rare cases of justified exceptions (criminal acts, offenses, requests from state authorities, and legitimate legal claims of third parties), the processing is not based on the legitimate interests pursued by the controller or a third party.

TYPES OF PERSONAL DATA

To ensure a favorable conclusion and execution of the contract, we process various types of personal data.

USERS OF PERSONAL DATA

We use personal data in our company as a controller and, in certain cases, we provide it to our contractual processors (website maintainers, equipment and information technology system maintainers, service providers and software maintainers, program maintainers...), who are committed to strict protection of all data.

TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS

Personal data is not transferred to countries outside the European Union.

YOUR RIGHTS

The Constitution of the Republic of Slovenia and the applicable European and Slovenian regulations guarantee you a range of rights regarding privacy and personal data protection, including in particular the following:

• the right to be informed about the processing of your personal data (the text you are reading is part of the exercise of this right);
• The right of access to personal data means that you have the right to obtain from us, as the controller, confirmation as to whether or not personal data concerning you are being processed, and where that is the case, access to those personal data and additional information (purposes of processing, types of data, data users, retention period, existence of rights and complaint options, sources of data, any automated decision-making or specific profiling);
• The right to rectification means that you have the right to have us, as the controller, rectify inaccurate personal data concerning you without undue delay; considering the purposes of processing, you also have the right to complete incomplete personal data, including by providing a supplementary statement;
• The right to erasure, also known as the "right to be forgotten," means that you have the right to have us, as the controller, erase personal data concerning you without undue delay if the prescribed conditions are met (processing is no longer necessary, withdrawal of consent and absence of another legal basis, justified objection, unlawful processing, erasure required by applicable regulations, and similar);
• The right to restriction of processing means the right to have us, as the controller, limit the processing of your data if you contest the accuracy of the data or if you have lodged an objection or if the processing is unlawful or if the processing is no longer necessary for the controller but is required for the establishment, exercise, or defense of your legal claims;
• The right to data portability means the right to receive personal data concerning you, which you have provided to us as a controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from us (applies to data that we process automatically based on consent or contractual relationship);
• The right to object means that you can object to certain types of processing of your personal data (public interests, legitimate interests of the controller, marketing purposes) at any time, and we must demonstrate legitimate interests for processing or cease processing (always in the case of marketing);
• The rights regarding automated processing and profiling mean that you are not subject to a decision based solely on automated processing, including profiling, which has legal or similar effects concerning you, unless it is necessary, prescribed, or if you do not consent to it.

In exercising all your rights or obtaining additional information or clarifying dilemmas, we will be happy to assist you via email: info@amourparfums.com

If you believe that your rights or data protection regulations are being violated, you can file a complaint with the competent national authority. In Slovenia, this is the Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, phone: 01 230 97 30, fax: 01 230 97 78, email: gp.ip@ip-rs.si).