Personal Data Protection

We handle your personal data in accordance with the law, fairly, securely, and transparently for you. We are aware of our responsibility, as you have entrusted us with your personal data. Therefore, all key information regarding data processing, our obligations, and your rights are outlined below.

DATA CONTROLLER

PURPOSES OF DATA PROCESSING

We process personal data for the following purposes and in accordance with one of the six possible legal bases (consent, conclusion or performance of a contract, legal obligations, protection of the vital interests of an individual, tasks in the public interest, legitimate interests of the controller or third parties) and for a precisely defined period of time when this is necessary.

Wherever the processing of personal data is based on your consent, you always have the option to change or withdraw that consent and decide differently regarding your personal data going forward.

Except in rare cases of justified exceptions (criminal offences, violations, requests from government authorities, and justified legal claims by third parties), processing is not based on legitimate interests pursued by the controller or a third party.

TYPES OF PERSONAL DATA

In order to ensure the favourable conclusion and performance of a contract for you, we process various types of personal data.

USERS OF PERSONAL DATA

We use personal data within our company as the controller and in certain cases share it with our contracted processors (website maintenance providers, IT equipment and systems maintenance providers, software servicers and maintenance providers, programme maintenance providers…), who are bound by strict protection of all data.

TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

Personal data is not transferred to countries outside the European Union.

YOUR RIGHTS

The Constitution of the Republic of Slovenia and applicable European and Slovenian regulations guarantee you a number of rights regarding privacy and the protection of personal data, including in particular the following:

• the right to be informed about the processing of your personal data (the text you are reading is part of the exercise of this right);
• the right of access to personal data means that you have the right to obtain from us as the controller confirmation of whether personal data concerning you are being processed, and where this is the case, access to that personal data and additional information (purposes of processing, types of data, data users, retention period, existence of rights and complaint options, sources of data, any automated decision-making or special profiling);
• the right to rectification means that you have the right to have us as the controller rectify inaccurate personal data concerning you without undue delay; taking into account the purposes of processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement;
• the right to erasure, also known as the "right to be forgotten", means that you have the right to have us as the controller erase personal data concerning you without undue delay, if the prescribed conditions are met (processing is no longer necessary, withdrawal of consent and absence of another legal basis, justified objection, unlawful processing, erasure is required by applicable regulations, and similar);
• the right to restriction of processing means the right to have us as the controller restrict the processing of your data if you contest the accuracy of the data, or if you have lodged an objection, or if the processing is unlawful, or if the processing is no longer necessary for the controller but for the establishment, exercise, or defence of your legal claims;
• the right to data portability means the right to receive personal data concerning you that you have provided to us as the controller in a structured, commonly used, and machine-readable format, and the right to transmit that data to another controller without hindrance (applies to data we process automatically on the basis of consent or a contractual relationship);
• the right to object means that you may at any time object to certain types of processing of your personal data (public interests, legitimate interests of the controller, marketing purposes) and we must demonstrate legitimate grounds for the processing or cease the processing (always in the case of marketing);
• rights regarding automated processing and profiling means that you are not subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects concerning you, unless this is strictly necessary, prescribed by law, or you have consented to it.

We will be happy to assist you in exercising all your rights or in obtaining additional information or clarifying any uncertainties, via e-mail: info@amourparfums.com

If you believe that your rights or the regulations on the protection of personal data have been violated, you may lodge a complaint with the competent state authority. In Slovenia, this is the Information Commissioner of the Republic of Slovenia (Zaloška 59, 1000 Ljubljana, phone: 01 230 97 30, fax: 01 230 97 78, e-mail: gp.ip@ip-rs.si).