Last updated: July 2018
Naky Limited/cartiromanesti.co.uk, are committed to ensuring that your privacy is protected. This policy explains how we use the information we collect about you and the procedures that we have in place to safeguard your privacy whilst you use the website.
We will only use the information that we collect about you lawfully (in accordance with the Data Protection Act 1998 and General Data Protection Regulation (GDPR)-Regulation (EU) 2016/679).
Purpose of the Policy
Please take a moment to read and understand it. Please note that it should be read in conjunction with our Website Terms of Service.
Who we are and what do we do?
The Sites and our Services are operated by Naky Limited, ("Naky Limited", "Carti Romanesti", "we", "us" or "our").
Naky Limited is an English company with registered company number 8067719 and whose registered office is at 29 Tavistock Street, Luton, Berfordshire, LU1 3UT, United Kingdom.
How to contact us?
email, addressed to email@example.com; or
post, addressed to Naky Limited, 29 Tavistock Street, Luton, Bedfordshire, England, LU1 3UT
What personal information do we collect and how do we use it?
Typically, we will collect, store and process information about you if you use our websites to view or buy products, e-vouchers or gift cards, or if you voluntarily provide us with such information, for example when you subscribe to our mailing list, enroll in our loyalty program, enter a promotion or competition, contribute content about yourself to our websites, whether by direct upload, posting such content to one of our social media pages or by using a hash tag or other identifier that we use to integrate social media content with our websites. This information will be processed by electronic means and includes:
contact details including name, email, telephone number and address.
This information allows us to fulfill your order and notify you of the status of your order. All orders are shipped using a third-party service provider and we will therefore pass on your details to that service provider so that they can deliver your goods to you. That third-party service provider has undertaken to us that they will not use it for any other purpose than to deliver your ordered goods to you.
login and account information, including screen name, password and unique user ID;
personal details including gender and date of birth;
personal preferences including your marketing and cookie preference;
content you may provide via a form on our websites;
your image and any personal information that you include in content that you contribute to our websites (such as comments, photos and videos) as well as the name of the social media account from which you contribute that information; and
other personal information you provide to us on our websites, via mobile apps, on feedback forms, in our stores or when you interact with us in other ways, both online and offline.
The purpose of data processing / Legal basis:
The personal data that you provide by completing the contact forms, by phone or by e-mail, is treated confidentially.
Recipients / Recipient Categories:
We categorically exclude data from third party outside Naky Limited (cartiromanesti.co.uk). Exceptionally, data is processed by data operators, but only at our request. They are carefully selected; they are verified by us and also have a contractual obligation, according to art. 28 of the GDPR. Also, we may send extracts from your application to contractual partners (for example, vendors, for product-specific requests) to process your request. But in these cases, the application is pre-anonymized so that third parties cannot make any connection between you and your application. If the transmission of personal information may be necessary, we will inform you and we will ask for your consent.
Storage Time / Storage Time Criteria:
All personal data that you have provided us with requests (suggestions, assessments or criticisms) through this website or by e-mail is deleted by us not later than 90 days after the final response from, or is secured anonymously. The 90-day-limit is explained by the fact that, as a rule, after 90 days, there are no further inquiries about our responses.
Our website collects certain information by automated means when you visit us. You can learn more about this activity by visiting our Cookies Policy below.
Sharing information with third parties
We share personal information with third parties who perform services on our behalf. We use third parties to host our websites or mobile apps, operate certain of its features, send e-mails, print or send mailings, run our sweepstakes, contests or other promotions, conduct customer research, authorize and process your payments, manage and analyze data and our advertising effectiveness, provide customer support, manage customer claims, prevent fraud, protect our assets and data, and fulfill orders. These third parties are not authorized by us to use or disclose the information except as necessary to perform services on our behalf or comply with legal requirements. Any personal information shared with such third parties is protected as described below.
Subject to applicable law, we may also share the personal information we obtain with our affiliates, subsidiaries and other group companies for the purposes described in the prior paragraph. If we share your personal information with such entities, we will ensure that an adequate level of protection is in place to protect your personal information in accordance with applicable law.
We also may disclose information about you: (A) if we are required to do so by law, regulation or legal process (such as a court order or subpoena) including lawful requests by public authorities to meet national security or law enforcement requirements; (B) in response to requests by government agencies, such as law enforcement authorities; (C) for the purpose of or in connection with legal proceedings, or otherwise for the purpose of establishing, exercising or defending our legal rights; or (D) when we believe disclosure is necessary or appropriate in connection with an investigation of suspected or actual illegal activity.
We reserve the right to transfer any information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution or liquidation), but only where we have first taken reasonable steps to ensure the security and confidentiality of your information.
How we protect your information
We take technical and organizational security measures to protect data against unauthorized access as much as possible. In addition to providing the operational environment, we use encryption methods. The information you provide is automatically transmitted and verified in encrypted form using a Secure Socket Layer (SSL) protocol to prevent the abuse of third-party data. You can see that your browser's status bar contains the lock symbol and that the address line starts with "https ..."
Subject to applicable law, you may have certain rights with respect to our processing of your information.
According to Art.15 par. (1) of the GDPR, you have the right to obtain free of charge, upon request, information about your personal data stored by Naky Limited (cartiromanesti.co.uk).
In addition, if there are legal requirements, you have the right to modify (Article 16 of the GDPR) to delete (Article 17 of GDPR) and to limit (Article 18 of GDPR) the processing of personal data.
To the extent that data processing is based on Art.6 par. (1) lit. (e) or (f) of the GDPR, you have a right of opposition in accordance with Art.21 of GDPR. To the extent that you oppose data processing, it is no longer valid unless the operator demonstrates that there are overriding reasons justifying the processing and which prevail over the interests, rights and freedoms of the data subject.
If you give your data processing consent, you have a right to transfer the data, as per Art.20 of GDPR.
To the extent that the processing of data is based on consent, according to Art. 6 par. (1) lit. (a) or Art. 9 par. (2) lit. (a) of the GDPR, it may at any time be revoked with effect in the future without this affecting the legality of the previous processing.
If you change your mind and no longer wish to receive marketing communications from us, you have the right to request that we cease sending marketing communications, whether by email or otherwise, you can do this by:
checking the applicable box(es) on any form we may use to collect information from you;
clicking the unsubscribe link displayed in any of our marketing e-mails; or
otherwise requesting that we do not process your information for marketing purposes.
You can withdraw any consent given to us at any time and free of charge, but you may no longer be able to benefit from our services if you do so.
To exercise these rights or to make a complaint or submit an inquiry about our privacy practices, please contact us by email at firstname.lastname@example.org or write to us at: 29 Tavistock Street, Luton, Bedfordshire, England, LU1 3UT.
You also may lodge a complaint with the data protection authority in your country if you are not satisfied with our response.
Last updated: July 2018
Our website uses "cookies" (small files that a server sends to your computer) that manage the connection to our pages.
They are sent from our web server to your device (PC, laptop, Smartphone or tablet) and saved in your web browser. Cookies may perform different functions. The following subsections inform about the individual purposes of the different cookies that can be used.
Google Conversion Tool
Purpose of Data Processing / Legal Basis:
This website also uses the Google Conversion Tool for internal and anonymous analysis of the effectiveness of the ads launched. If you browse another web page, a cookie from the ad banner on your website is saved in your browser. If the ad banner refers to an ad campaign ordered by Google, Google saves the appropriate cookie if the ad banner is clicked. Neither our conversion partner nor Naky Limited (cartiromanesti.co.uk) can identify what other websites you have called. We do not collect or receive any information that we can personally identify to the user. Information collected through Conversion Tracking serves solely to create statistics on the success and use of our campaigns. These cookies lose their validity after 30 days. The legal basis for this use of cookie technology is Art. 6 par. (1) lit. (f) of the GDPR. If you do not want to participate in this analysis, you can disable the cookie save by setting it from the browser.
Google Display Advertising Network
Purpose of Data Processing / Legal basis:
Facebook Conversion Technology
Purpose of Data Processing / Legal Basis:
We use our "Facebook Conversion Pixel" and "Facebook Remarketing" services on our websites. With Facebook Conversion Pixel, we can identify with Facebook if someone clicked on our Facebook ad and if it was directed to our page. We cannot see what other web pages you have visited. The information collected with Facebook Conversion Pixel serves to create statistics on the success and use of our advertising ads on Facebook. We do not collect or receive any information that we can personally attribute to the user. With Facebook's re-marketing technology, users who have visited our web pages can be approached again on Facebook's Facebook pages through goal-oriented advertising. We do not collect and receive information about who Facebook users are actually target-oriented advertising. For us, it is not possible to identify individual users here. The legal basis for this data processing is Art. 6 par. (1) lit. f) of the GDPR.
More detailed information about the goals and level of collections and processing of your personal data through Facebook, as well as the setting options for protecting your privacy, within Facebook, is found in the Facebook Data Use Policy. Through the Digital Advertising Alliance in the United States, the Digital Advertising Alliance of Canada in Canada, or the European Interactive Digital Advertising Alliance in Europe or your device settings, you can disable it so that you do not show interest-based online advertising, Facebook or other participating businesses.
Recipients / Recipient Categories:
With Facebook Conversion Pixel, we can identify with Facebook if someone has clicked on our Facebook ad and has been directed to our page. The information generated by the module and / or graphics on the use of this page is transmitted to a Facebook server in the US where it is saved. Facebook uses this information to conduct an assessment of your usage behavior with respect to Facebook ads.