1. Data Controller
This Privacy Policy explains how personal data is collected, used, and protected when users visit this website or make a purchase. The data controller responsible for the processing of personal data is Buf Diana | ARTAORA.
2. Personal Data Collected
We may collect and process the following personal data:
• Name and surname
• Billing and shipping address
• Email address
• Phone number
• Payment information (processed securely by third-party providers such as Stripe, Redsys or PayPal)
• IP address
• Browser and device information
• Cookies and browsing data
3. Purpose of Data Processing
Personal data is collected and processed for the following purposes:
• Processing orders and payments
• Shipping and delivery of products
• Customer service and communication
• Managing returns and refunds
• Compliance with legal, accounting, and tax obligations
• Sending marketing communications if the user has given consent
• Improving website functionality, services, and user experience
4. Legal Basis for Processing
The legal basis for processing personal data includes:
• Execution of a purchase contract
• Compliance with legal obligations
• User consent
• Legitimate business interests
5. Data Sharing
Personal data may be shared with third parties when necessary, including:
• Payment providers (Stripe, Redsys, WooCommerce payment gateways)
• Shipping and logistics companies
• Website hosting providers
• Accounting and tax service providers
• Legal authorities when required by law
6. Data Retention
Personal data will be stored only for as long as necessary to fulfill the purposes described above and to comply with legal and tax obligations.
7. User Rights
Users have the right to:
• Access their personal data
• Request correction of inaccurate data
• Request deletion of their data
• Request restriction of processing
• Object to processing
• Request data portability
Users may exercise these rights by contacting us via email.
8. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.
9. Changes to This Policy
ARTAORA reserves the right to modify this Privacy Policy at any time. Changes will be published on this page.
