1. GENERAL PROVISIONS
1.1. This Privacy Policy defines the procedure for processing and ensuring the security of personal data of Users and Clients of the online store riarti.shop (hereinafter referred to as the "Operator").
1.2. We collect, store, and use your personal data in accordance with applicable data protection laws and international privacy standards. The Operator sets the compliance with human rights and freedoms in the processing of personal data as its primary goal.
1.3. By providing personal data on the Website, the Client expresses full consent to the terms and conditions of this Privacy Policy.
2. CATEGORIES OF COLLECTED DATA
The Operator may process the following personal data of the Client, entered by them independently or provided in the course of service:
• Surname, first name, patronymic (if applicable);
• Email address (e-mail);
• Phone number (including instant messengers);
• Delivery address;
• Date of birth;
• Social media account details;
• Information regarding purchase history and personal interests;
• Passport details and bank card details (requested exclusively for processing refunds and executing bank transfers).
3. PURPOSES OF DATA PROCESSING
The Client's personal data is processed by the Operator for the following purposes:
• Fulfilling obligations to the Client within the framework of the public offer (processing, executing, and delivering orders);
• Providing customer support and monitoring the quality of services rendered;
• Organizing and conducting contests, surveys, and promotional campaigns;
• Sending marketing and informational newsletters;
• Conducting statistical and marketing research based on anonymized data.
4. PROCESSING RULES AND CROSS-BORDER TRANSFER
4.1. Personal data processing shall mean any action (collection, recording, systematization, accumulation, storage, extraction, use, transfer, blocking, erasure, destruction) performed with or without the use of automation tools.
4.2. In order to fulfill its obligations regarding product delivery, marketing analysis, and payment processing, the Operator has the right to entrust data processing to third parties and counterparties on the basis of concluded agreements.
4.3. Given that the Operator’s logistics warehouse is located in Italy, the Client hereby provides consent to the cross-border transfer of their personal data to the territory of foreign states for the purpose of executing order obligations. Third parties undertake to maintain the strict confidentiality and security of the transmitted data.
5. USE OF COOKIES
5.1. The website riarti.shop uses cookies (small text files placed on the User's device) to ensure the proper functioning of the interface, save items in the shopping cart, remember language preferences, and collect anonymized analytics to improve website performance.
5.2. The User may amend their browser settings at any time to block or delete cookies. However, this may lead to the improper functioning of certain features of the online store, including the inability to place an order via the cart.
6. DATA RETENTION PERIODS
6.1. The Operator stores Clients' personal data for the period necessary to achieve the purposes for which it was collected, as well as to comply with legal, tax, and accounting obligations in accordance with applicable legislation.
6.2. Data processed for marketing and newsletter purposes shall be stored until the Client withdraws their consent.
7. CLIENT RIGHTS (GDPR COMPLIANCE)
The Client possesses a full spectrum of rights regarding their data and may demand the following at any time:
• Access and Copying: Obtain information regarding exactly what data is stored by the Operator and how it is processed;
• Rectification: Demand the correction or completion of inaccurate or incomplete personal data;
• Right to be Forgotten (Erasure): Demand the complete removal of their personal data from all databases of the Operator;
• Opt-out of Marketing: Withdraw consent for promotional newsletters without giving any reason. To do so, the Client may click the "unsubscribe" button at the bottom of any email or send a direct request to riarti@inbox.ru.
8. DATA SECURITY AND RECORDING OF CONVERSATIONS
8.1. The Operator undertakes to implement the necessary technical and organizational measures to protect personal information against unauthorized access, modification, disclosure, or destruction.
8.2. The Operator has the right to record telephone conversations with the Client for quality control purposes. Information obtained from such conversations is strictly protected in accordance with applicable data security standards.
