1. General
The online store REVIVUS (and its operator BVG d.o.o. Kranj, Savska cesta 16, 4000 Kranj, hereinafter: the Provider) is committed to protecting the privacy of users of the REVIVUS online store and buyers of REVIVUS products.
In case of any questions or issues regarding the use and processing of personal data, users of the REVIVUS online store can contact the Provider via e-mail: info@revivus.eu.
All personal data of users of the REVIVUS online store and buyers of REVIVUS jewellery are confidential and will under no circumstances be disclosed to unauthorised third parties.
The transfer of sensitive personal and transaction data in the REVIVUS online store is carried out in a secure way using the TLS (HTTPS) protocol, whose security is ensured by an SSL/TLS certificate from a trusted certification authority and by payment service providers (Stripe, PayPal).
By using the website revivus.eu, users are deemed to agree to the processing of their (personal) data as described in this Privacy Policy.
2. Request for access and deletion of personal data
A request for an extract of personal data stored for the purpose of purchases in the REVIVUS online store can be submitted by e-mail to: info@revivus.eu.
A request for deletion of personal data stored for the purpose of purchases in the REVIVUS online store can also be submitted by e-mail to: info@revivus.eu.
3. Principle of protection of personal data
The processing of (personal) data in the REVIVUS online store is lawful, fair and transparent. The rights of the user are always observed. At the user’s request, the Provider supplies all information regarding the processing of personal data. The Provider stores personal data only for as long as is necessary.
4. Users’ rights
-
Right to information. The user of the website revivus.eu is informed about the processing and collection of data. Information is available on why the data are being collected.
-
Right of access. The user has the right to access his or her collected data. The user has the right to request and obtain information about the personal data that have been collected.
-
Right to rectification. The user has the right to request the correction or deletion of his or her personal data that are inaccurate or incomplete.
-
Right to erasure. In certain circumstances the user may request the deletion of his or her personal data from the Provider’s records.
-
Right to restriction of processing. The user has the right to restrict the processing of his or her personal data.
-
Right to object to processing. The user has (in certain cases) the right to object to the processing of his or her personal data (e.g. in the case of direct marketing).
-
Right to data portability. The user has the right to obtain his or her personal data in a readable format.
-
Right to assistance from a supervisory authority. The user has the right to assistance from the supervisory authority and the right to other legal remedies.
-
Right to withdraw consent. The user has the right to withdraw any consent given for the processing of his or her personal data.
5. Data collected by the Provider while browsing the REVIVUS online store
When visiting and browsing the REVIVUS website and online store, the Provider processes the user’s online behaviour data on the basis of legitimate interest (for which user consent is therefore not required), for the following purposes:
-
obtaining data on the basis of which the Provider can improve the online store for users of the REVIVUS website and buyers of products from the REVIVUS online store (the legitimate interest lies in improving the Provider’s services for users of the REVIVUS website and buyers of products from the REVIVUS online store);
-
creating statistics and overviews, in particular monitoring the number of visits to the Provider’s website and online store or to individual content and measuring the effectiveness of advertisements (the legitimate interest lies in measuring the effectiveness of the Provider’s websites and advertising expenditure) – for this purpose, based on users’ online behaviour, the Provider may obtain and use other derived data or pass such derived data on to its processors, who are bound by the Provider’s instructions in their processing;
-
testing new features and applications before they are introduced on the website or in the online store, so that the Provider can avoid operational issues with new features during actual operation that could worsen the user’s shopping experience (the legitimate interest lies in the flawless operation of the Provider’s websites and the REVIVUS online store);
-
implementing measures against attacks on the Provider’s websites and online store and measures against any threat to their operation, and ensuring the security of users’ data (the legitimate interest lies in the flawless operation of the REVIVUS websites and online store and in the security of personal data of users of the REVIVUS websites and online store).
The Provider obtains data about the user’s behaviour on the websites via cookies (as specified in Section 9 of this Policy) in connection with the following data:
-
IP address of the user’s device (address of the user’s device through which it communicates with other devices on the internet);
-
operating system of the user’s device, including information on its version and language settings;
-
type of browser through which the user accesses the REVIVUS websites and online store, including information on the browser version and language settings;
-
web address (URL) of the page from which the user accesses the REVIVUS websites and online store.
6. Data collected by the Provider for purchases in the REVIVUS online store
The Provider collects the following data:
-
data provided by the user of the REVIVUS online store when ordering REVIVUS jewellery: first and last name, delivery address, billing address, contact details (telephone number, e-mail address), data needed to execute card payment for the purchase;
-
data that are automatically stored as a result of the use of the REVIVUS online store or a purchase in the REVIVUS online store: these are information that cookies and other tools automatically store about the user of the REVIVUS online store. The data are used to improve the user experience. These data are stored while the user is browsing the pages of the REVIVUS online store – e.g. IP address, browsing history, etc.
The Provider may also collect user data that are publicly available.
7. Purpose of the use of personal data
The Provider (as controller of personal data) collects and uses users’ data in order to:
-
offer its products to the user (communication for and in connection with the Provider’s products) and enable the user to purchase products (online);
-
deliver products to users;
-
resolve complaints/withdrawals from contract;
-
communicate and cooperate with users and inform them of changes;
-
improve users’ experience of using the Provider’s services;
-
fulfil all of its legal and contractual obligations;
-
send users tailored offers;
-
analyse the customer base (purchase history) with the aim of improving the quality and diversity of products.
In connection with visits to the website and purchases in the REVIVUS online store, the Provider acts as the controller of personal data – this means that the Provider determines the purposes defined above (i.e. which personal data are collected, for what purpose, in what manner they are processed, and is responsible for the proper implementation of such processing).
For the purpose of paying the purchase price of products ordered in the REVIVUS online store, the Provider shares the personal data necessary to complete the payment (e.g. first name, last name, card details, amount) with the payment service providers Stripe and PayPal.
These providers process personal data as independent controllers in accordance with their own privacy policies, which are available on their respective websites.
For the purpose of delivering products ordered in the REVIVUS online store, the Provider forwards the personal data supplied by the user to registered postal/courier service providers, who act as controllers with regard to the personal data needed to deliver products ordered in the REVIVUS online store, namely:
-
Pošta Slovenije d.o.o., Slomškov trg 10, 2500 Maribor, Slovenia, tax number: 25028022 and/or
-
DHL Ekspres (Slovenija), d.o.o., Špruha 19, 1236 Trzin, Slovenija, tax number: SI18805477
The user enters his or her data (for the purpose and needs of purchasing products from the REVIVUS online store) in a dedicated form. By submitting an order, the user is deemed to agree that the Provider may store and process these data for the purposes of sale/purchase and delivery of the ordered products.
With the explicit consent of users, the Provider processes personal data for the purposes of:
-
sending news, updates and current offers;
-
other purposes for which the Provider has requested consent from the user, where the request must clearly state for which purpose the Provider will process the user’s (personal) data.
The Provider stores accounting documents for as long as necessary for accounting and tax purposes and other legal obligations.
The Provider will expressly notify users of any further processing of personal data (for the purpose of obtaining consent) before such processing is carried out.
8. Access to personal data and protection of personal data
The Provider does not share users’ personal data with unauthorised persons. In the event of a purchase of products from the REVIVUS online store, personal data (first and last name, delivery address and contact telephone/e-mail) are transmitted to the delivery service provider for the purpose of delivery. The Provider discloses users’ personal data to other persons only if the user has given consent or if there are statutory grounds for such disclosure.
The Provider protects users’ personal data with the highest level of care. The Provider continuously monitors its personal data protection system (to prevent attacks on databases containing personal data). All databases containing users’ personal data are password-protected.
The transfer of sensitive personal and transaction data in the REVIVUS online store is carried out in a secure way using the TLS (HTTPS) protocol, whose security is ensured by an SSL/TLS certificate from a trusted certification authority and by payment service providers (Stripe, PayPal).
9. Information about cookies
The REVIVUS online store uses cookies to analyse how users browse the pages. The analysis is carried out for the purpose of improving the user experience.
A cookie is a small text file stored on a computer. Users can control cookies at the browser level. If the user wishes, he or she can disable cookies in the browser. If essential cookies are disabled, the website may not display correctly.
The Provider uses:
-
necessary cookies – these are cookies that are strictly necessary for the normal operation of the REVIVUS website and online store. Cookies last until the end of the session and closing of the browser;
-
functional cookies – these cookies ensure functionality and make the REVIVUS website and online store more convenient (e.g. they remember the user’s name so that he or she does not need to re-enter all details in the purchase form on the next visit);
-
analytics cookies – these cookies allow the Provider to monitor statistics on visits to the REVIVUS online store, which enables the Provider to improve and update the content and provide a better user experience;
-
advertising cookies – these cookies provide ads that are relevant to users and their interests and ensure that users are reminded that they have visited the REVIVUS website and online store.
| NAME | TYPE | PURPOSE | DURATION |
|---|---|---|---|
| wordpress_* | functional cookie | cookie for logged-in users (admin/editor login) | browser session duration |
| wpEmojiSettingsSupports | functional cookie | checks browser support for displaying icons and emoji characters | browser session |
| wc_cart_hash_*, wc_fragments_* | functional cookie | stores the contents and state of the shopping cart | browser session / short-lived |
| wc_cart_created, wp_woocommerce_session_* | functional cookie | links the user to their cart and order in the shop | up to a few days (until the session expires or the cookie is deleted) |
| pll_language | functional cookie | stores the user’s selected language for the website | persistent cookie (until deleted by the user) |
| cmplz_functional, cmplz_preferences, cmplz_marketing, cmplz_consented_services | functional cookie | stores cookie preferences and consent choices (cookie banner) | 365 days |
| __stripe_mid, __stripe_sid | functional / payment security cookie | prevents fraud and enables secure card payments (Stripe) | __stripe_mid: 1 year, __stripe_sid: 30 minutes |
| nsid, ts_c, enforce_policy, __paypal_storage__ | functional / payment security cookie | secure processing of payments via PayPal and fraud prevention | from session up to 3 years (depending on the cookie) |
| sbjs_*, sbjs_session | statistics cookie | analytics of visits (traffic source, page views, basic usage statistics) | browser session up to 6 months |
| tk_qs | statistics cookie | anonymous website usage statistics (WordPress / Automattic) | 30 minutes |
| Google Fonts API | functional / advertising third-party cookie | displays Google Fonts and sends the user’s IP address to the font provider | no traditional cookie; requested on each page load |
