Effective Date: September 09, 2024
Website: creamyandcrumbly.com
Business Name: Creamy and Crumbly
Business Address: 1210 Wien, Donaufelder Str. 54
Contact Email: [email protected]
At Creamy and Crumbly, we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, store, use, share, and secure your personal information when you visit creamyandcrumbly.com or purchase our products and services. It also describes your rights under the General Data Protection Regulation (GDPR) and how you can exercise them.
By using our website, purchasing products, or subscribing to our services, you agree to the terms of this Privacy Policy.
1. Data We Collect
We may collect the following types of personal data:
a) Personal Information You Provide:
- Contact Information: Name, email address, postal address, and phone number.
- Payment Details: Information related to your payment methods, including credit card information and billing address (processed securely by third-party payment processors).
- Account Information: If you create an account, we collect login credentials (username and password).
- Communications: Information you provide through emails, customer service interactions, and other communications with us.
- Purchase History: Information on the products or services you have purchased.
b) Automatically Collected Data:
- Device Information: IP address, browser type, operating system, and other technical information.
- Usage Data: Information about how you navigate and use our website, such as pages visited, time spent on each page, and links clicked.
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your browsing experience (for more information, please see our Cookie Policy).
c) Third-Party Data:
We may receive personal data from third-party service providers, such as analytics providers or payment processors, but only if you have given them your consent to share this data with us.
2. How We Use Your Data
We process personal data for the following purposes:
- To Provide Our Services: We use your data to process your orders, deliver products, and provide customer support.
- To Communicate with You: We use your contact information to send order confirmations, respond to inquiries, and provide important updates about your account or orders.
- Marketing and Promotions: With your consent, we may send you promotional emails or newsletters about new products, services, or offers. You can opt out of these communications at any time.
- Website Improvement: We use data such as usage information to analyze website performance, improve our services, and enhance user experience.
- Legal Compliance: We may use your personal data to comply with legal obligations, respond to legal claims, or enforce our website’s terms and conditions.
3. Data Sharing
We do not sell, rent, or trade your personal data. However, we may share your data with third parties under the following circumstances:
a) Service Providers:
We share your data with trusted third-party service providers who help us with website operations, payment processing, order fulfillment, email delivery, and marketing activities. These service providers are contractually obligated to protect your data and only use it in accordance with our instructions.
b) Legal Requirements:
We may disclose your personal data to comply with applicable laws, regulations, legal processes, or government requests. This includes sharing data with law enforcement agencies, courts, or regulatory bodies where necessary.
c) Business Transfers:
If Creamy and Crumbly undergoes a business transaction, such as a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you in advance if your data is subject to a different privacy policy following such a transfer.
4. Data Storage and Security
We take reasonable steps to protect your personal data from unauthorized access, disclosure, or alteration. This includes the use of:
- Encryption: Secure encryption protocols are used to protect sensitive data, such as payment information, during transmission.
- Access Control: Only authorized personnel have access to your personal data, and they are required to maintain its confidentiality.
- Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal requirements. Once your data is no longer needed, we securely delete or anonymize it.
5. Your Rights Under GDPR
As a resident of the European Economic Area (EEA), you have certain rights regarding your personal data. These rights include:
a) Right to Access:
You have the right to request a copy of the personal data we hold about you and information about how it is processed.
b) Right to Rectification:
If your personal data is inaccurate or incomplete, you have the right to request corrections or updates.
c) Right to Erasure (“Right to be Forgotten”):
You have the right to request the deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
d) Right to Restrict Processing:
You can request that we limit the processing of your personal data if you dispute its accuracy or object to its processing.
e) Right to Data Portability:
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transfer it to another data controller where technically feasible.
f) Right to Object:
You have the right to object to the processing of your personal data for direct marketing or for other legitimate interests pursued by us, unless we have compelling legal grounds to continue processing.
g) Right to Withdraw Consent:
Where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
6. Exercising Your Rights
To exercise any of your rights under GDPR, or if you have any questions or concerns about how we handle your data, you can contact us via email at [email protected]. We will respond to your request within one month as required by GDPR. You also have the right to lodge a complaint with the Austrian Data Protection Authority or another supervisory authority in your country of residence.
7. International Data Transfers
Your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA) that may not provide the same level of data protection. Where such transfers occur, we ensure that your personal data is protected by appropriate safeguards, such as standard contractual clauses or binding corporate rules, in compliance with GDPR.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and assist in our marketing efforts. For more information on how we use cookies, please refer to our Cookie Policy.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make changes, we will update the “Effective Date” at the top of this policy and notify you by email or a prominent notice on our website.
By using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue using our services.
For any inquiries or further details, feel free to contact us at:
Email: [email protected]
Address: 1210 Wien, Donaufelder Str. 54