1. DEFINITIONS
1.1. Administrator – means the controller of personal data, which is TRVL MEDIA Limited with its registered office at 99, Sir Adrian Dingli Street, SLM 1905 Sliema, Malta, EU VAT number: MT 25054237.
1.2. Personal Data – means any information relating to an identified or identifiable natural person, including, among others, the device IP address, location data, online identifier, and information collected via cookies or similar technologies.
1.3. Policy – means this privacy policy.
1.4. GDPR – means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
1.5. Service – means the online service operated by the Administrator at www.wallissimo.com.
1.6. Users – means any natural person who visits the Service or uses one or more of the services or features described in the Policy.
2. PROCESSING OF PERSONAL DATA IN CONNECTION WITH USE OF THE SERVICE
In connection with the User's use of the Service, the Administrator collects personal data to the extent necessary to provide the offered services, as well as information about the User's activity on the Service. Below are the detailed principles and purposes of processing personal data collected during the User's use of the Service. We may also use cookies, navigation signals, or other anonymous tracking information to improve the interaction between our servers and the User's device. In addition, we may cooperate with external advertisers who may (themselves or through their partners) place or recognize unique cookies in the User's web browser.
3. WHEN AND WHAT PERSONAL DATA THE ADMINISTRATOR COLLECTS
3.1. To the extent permitted by law, the Administrator collects the following personal data about the User of the Service:
a) When the User places an order and uses the Administrator's services, and when the User subscribes to the newsletter, the Administrator collects the following personal data of the User: first name, last name, email address, delivery address, telephone number, and any other information necessary for the use of specific Administrator services, including data for product personalization.
b) For Users who have opted in to receive information about discounts, promotions, special offers and other marketing information, the Administrator collects the following data: first name, last name, email address, date of birth.
c) Each time the User accesses the Service, the Administrator's servers automatically collect information from the User's web browser or device. This information includes: the User's IP address and browser type (if a browser is used), device identifier, location (if enabled), Internet service provider or wireless service provider, referring/outgoing pages, platform type, date/time stamp and number of clicks, session start and end, type of marketing materials provided to the User tailored to their shopping preferences, items viewed and added to the cart and how they were viewed.
4. TYPE AND DURATION OF THE ADMINISTRATOR'S USE OF PERSONAL DATA
4.1. The User's personal data are used by the Administrator for the following purposes:
a) Processing and managing orders placed by the User via the Service and providing services, including personalized products – legal basis: necessity for the performance of a contract (Art. 6(1)(b) GDPR) – the Administrator processes the data until the orders are fulfilled and the service is completed;
b) The Administrator's own marketing, in particular: sending newsletters; sending information about discounts, promotions, special offers and other marketing information – legal basis: the User's voluntary consent (Art. 6(1)(a) GDPR) – the Administrator processes the data until consent is withdrawn;
c) Compliance with legal obligations, in particular tax and accounting regulations – legal basis: necessity for compliance with a legal obligation (Art. 6(1)(c) GDPR) – the Administrator processes the data for the period required by the applicable regulations;
d) Creation of analyses and statistics – legal basis: the Administrator's legitimate interest (Art. 6(1)(f) GDPR) in analyzing User activities on the Service and their account usage and preferences to improve features and distribution – the Administrator processes the data as long as the analyses remain useful;
e) Use of personal data obtained from cookies stored in browsers or devices for analytical or statistical purposes, administrative activities, fraud prevention and tracking aggregated user traffic – legal basis: voluntary consent (Art. 6(1)(a) GDPR) – the Administrator processes the data until consent is withdrawn;
f) Enforcement of claims and defense against claims – legal basis: the Administrator's legitimate interest (Art. 6(1)(f) GDPR) to protect its rights – the Administrator processes the data until the limitation period for claims expires.
5. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
5.1. The Administrator may disclose the User's personal data to: a) service providers, subcontractors and third parties who process personal data on behalf of the Administrator (e.g., Internet service providers, payment service providers, banks, courier services; providers of accounting, legal, audit or consulting services); b) competent authorities or third parties who request such information on the basis of legal grounds and applicable regulations.
6. TRANSFER OF DATA OUTSIDE THE EU AND EEA
6.1. The Administrator transfers personal data outside the EU and the EEA only when necessary and where an adequate level of protection is ensured, in particular by: a) cooperating with entities that process personal data in countries for which an appropriate decision of the European Commission exists; b) applying the European Commission's Standard Contractual Clauses; c) applying binding corporate rules approved by the competent supervisory authority. 6.2. The Administrator informs the User about any planned transfer of personal data outside the EU and the EEA at the time of data collection.
17. CONTACT
For any questions regarding the processing of personal data, the User may contact the Administrator by email at info@wallissimo.com or by post at TRVL MEDIA Limited, 99, Sir Adrian Dingli Street, SLM 1905 Sliema, Malta, EU VAT number: MT 25054237.