Who are we?

We are MAISON ADORABLE DOO, Belgrade, and we process and protect your personal data.

General information

Protecting your personal data and complying with the relevant legal obligations, including those under the EU General Data Protection Regulation, are very important to us (MAISON ADORABLE DOO). Personal data is always processed in accordance with the provisions of the General Data Protection Regulation and national data protection provisions. This data protection statement explains what personal data we collect and process and for what purposes. It also informs you, as a data subject, of your rights.

MAISON ADORABLE DOO, as the controller (see below), has implemented comprehensive technical and organisational measures to ensure reliable protection of the data processed through its websites. However, data transmission between your device and our server may have vulnerabilities, particularly if you communicate with our server through a device that has been taken over by a third party.

If you have security concerns, you can obtain information by email or telephone.

Definitions

  • This data protection statement is based on the provisions and definitions of the General Data Protection Regulation. Our data protection statement should be readable and understandable for visitors, customers and business partners alike. To ensure this, the terms used in this statement are briefly explained below: 

Personal data

  • Personal data is any information relating to an identifiable natural person.

Data subject

  • A data subject is any identifiable natural person whose personal data is processed by a company acting as controller.

Controller

  • The controller is the company that collects data about data subjects and determines the purposes and means of processing.

Processor

  • A processor is a natural person or company engaged by the controller to process data.

Recipient

  • A recipient is a natural or legal person or public authority to whom personal data is made available.

Third party

  • A third party is a natural or legal person or public authority that processes personal data for the controller or processor.

Processing

  • Processing is any operation involving personal data. It includes everything from collection and storage to restriction or deletion of data.

Restriction of processing

  • Restriction of processing means limiting the use of personal data.

Consent

  • Consent is any statement by which a person agrees to the processing of personal data relating to them.

Withdrawal

  • By withdrawing consent, a person withdraws the controller’s right to process data on the basis of that consent.

What do we use your data for?

  • We use your data, collected online or in person, among other things, to manage your registration as a user, manage your purchases of products or services, respond to your enquiries and, if you wish, send you personalised communications.

Why do we use your data?

  • We have legal grounds for processing your data for various reasons. The main reason is that we need to process your data to perform the contract you enter into with us when you register and make a purchase or use any of our services or features. We also use your data for other reasons, for example, to respond to your enquiries or send you newsletters you have requested.

Your rights

  • You have the right to access, rectify or erase your personal data. In certain cases, you also have other rights, such as the right to object to our use or transfer of your data, as explained in detail below.

We recommend that you read our entire Privacy and Cookie Policy below to fully understand how we use your personal data and your rights in relation to it.

In this Privacy and Cookie Policy, you can find all the important information about our use of the personal data of our users and customers, regardless of the channels or means you use to communicate with us.

If you would like information about how we use cookies and similar tools that may be installed on our customers’ and users’ devices, we recommend that you consult the Cookie Policy.

We are transparent about what we do with your personal data, to help you understand how we use it and the rights you have in relation to it:

  • We make all the information in this Privacy and Cookie Policy available to you at all times, so you can consult it whenever you need to. You can also find additional information about how we use your data during your interactions with us.

There are certain terms we regularly use in this Privacy and Cookie Policy:

  • When we refer to our website, we generally mean any channels or means you may have used.

Who is the controller of your data?

Your data controllers are:

MAISON ADORABLE DOO, a company based in Belgrade that sells home decor online, both retail and wholesale.

Address: Beogradskog bataljona 53, Čukarica 11030, Beograd, Srbija.

Data protection email address: [email protected]

In other words, MAISON ADORABDLE DOO is responsible for processing and protecting your personal data.

Data collection / visiting the website

When you visit our websites, a range of data and information is collected each time a page is requested and stored in server log files. This includes information about:

  • browser types and versions,
  • your computer’s operating system,
  • the website that referred you to us,
  • the pages accessed on our web server,
  • the date and time of your visit,
  • your IP address,
  • your internet service provider.

When using this anonymously collected information, MAISON ADORABLE DOO generally cannot draw conclusions about the data subject. However, this data is necessary to deliver our website content correctly and display it optimally for you, and to provide the competent authorities with the necessary information in the event of a cyberattack. MAISON ADORABLE DOO therefore processes this data for statistical purposes and also uses it as a technical measure to ensure data protection and the security of processing and of your data. Following statistical analysis, the data is deleted within 36 months.

Why do we process your personal data?

Depending on the purpose for which we process your data at any given time, as explained below, we need to process different types of data. In general, depending on the individual case, these will be:

– Your identification data (your first name, surname, photograph, email address, address, telephone number, language and the market from which you communicate with us, contact details, identity card number or another document for tax purposes in the event of a refund);

– Financial data and transaction data (your payment or card details, information about your purchases, orders and returns);

– Information about connections, geolocation and/or browsing (location data, device identification number or advertising ID);

– Commercial information (if you have subscribed to our newsletter),

– Information about your style and preferences.


Please remember that when we ask you to provide personal data to give you access to any website feature or service, we will mark certain fields as mandatory because we need that information to provide the service or give you access to the feature. Please note that if you choose not to provide this information, you may be unable to complete your user registration or use those services or features.

In certain cases, a third party may provide information about you using a feature or service available on the website, for example, to send you a gift card or deliver an order to your address. In such cases, we process only the data about you that is necessary for that feature or service, as set out in this Privacy and Cookie Policy.

In other cases, we may collect information passively, as we may use tracking tools such as browser cookies and similar technologies on our website and in our communications with you. Depending on how you interact with our Platform, meaning the services, products or features you wish to use, we will process your personal data for the following purposes:

To manage your registration as an online store user.
If you decide to become a registered user of our online store, we need to process your data to identify you as an online store user and give you access to its various features, products and services available to registered users. You can cancel your registered user account by contacting Customer Service.

Please note that the data we collect about your activities through the various website channels, including purchases, will remain linked to your account to provide access to all the information in one place.

To establish and perform the purchase or service contract you have entered into with us through the online store.
This purpose mainly involves processing your data for the following reasons:

To contact you with updates or information notices relating to the agreed features, products or services, including quality surveys, and to establish how satisfied users are with the service provided.

To manage payment for the products you purchase, regardless of the payment method used. For example:

  • If, when purchasing any of our products through the website or app, you choose to activate the feature for saving payment information and your delivery address for future purchases, we need to process the relevant data to activate and operate that feature. Consenting to activate this feature allows your payment information to be filled in automatically during subsequent purchases, so you do not have to enter it for each new transaction, and that information will be considered valid and current for subsequent purchases. You can change or remove your card payment details at any time in the payment information section, either through your registered user account on the website or in the My Account section.

To activate mechanisms for preventing and detecting unauthorised use of the online store (for example, during purchases and returns), as well as potential fraud against you and/or us. If we believe a transaction appears fraudulent or detect unusual behaviour indicating an attempt to misuse our features, products or services, this processing may result in the transaction being blocked or your user account being deleted.

To manage potential returns after a purchase, for which we will request an identity card number or another document for tax purposes, and to manage requests for information about item availability and product reservations through the Platform, depending on the availability of these options at any given time.

For invoicing purposes and to make tickets and invoices available to you for purchases made through the website.

To ensure that you can use other available features or services, such as purchasing, managing and using gift vouchers.

To handle requests or applications you submit through customer support channels.

We process only the personal data strictly necessary to manage and handle your requests or applications.

If you contact us by telephone, the call may be recorded for quality assurance purposes and to enable us to respond to your request.

Subject to availability, if you choose to use WhatsApp as a customer support communication channel, we will share your telephone number with WhatsApp Inc. (located in the USA) to confirm that you are a user of this service. We recommend reviewing your privacy settings and reading WhatsApp’s privacy policy for more detailed information about how WhatsApp uses users’ personal data.

Subject to availability, if you choose to communicate with customer support through the chat service of a social network or another partner, some personal data, such as your name or username, is imported from your social network or partner account. Please also remember that the data you send through this service is available to the social network or partner and is subject to their privacy policies. We therefore recommend reviewing your privacy settings and reading the social network’s or partner’s privacy policies for more detailed information about how they use personal data when you use their services.

For marketing purposes.

This purpose mainly involves processing your data for the following reasons:

To personalise the services we offer you and provide recommendations based on your interactions with us on the platform and analysis of your user profile (for example, based on your previous purchases and browsing history).
If and when you subscribe to our newsletter, we process your personal data to manage your subscription, including sending personalised information about our products or services through various channels (by email or SMS).
Please note that this processing involves analysing your profile as a user or customer to identify your preferences and, consequently, which products and services best suit your style when sending you information. For example, based on your purchase and browsing history (that is, the items you have clicked on), we will suggest products we think may interest you and, if you are a registered user, we will also provide a cart recovery feature.
To display online advertisements that you may see when visiting websites or apps (for example, on social networks). The advertisements you see may be random, but they may also be related to your preferences, purchases or browsing history.

If you use social networks, we may provide certain information to companies we work with so that they can show you advertisements for our brand and, more generally, offer you and users like you advertisements that take account of your profile on those social networks. If you would like to know more about the use of your data and the principles of advertising on social networks, we recommend reading the privacy policies of the social networks on which you have profiles.

We also use your data to measure and carry out segmented analysis of the advertisements we display to users on some of our partners’ platforms. To do this, we work with those third parties, which provide us with the technology needed to use these services (for example, cookies, pixels and SDKs). Please note that although we do not provide these partners with personally identifying information, we do provide them with a form of identifier each time (for example, an advertising ID linked to a device, an identifier linked to a cookie, or similar). If you would like to know more, please read the Cookie Policy. You can also reset your advertising ID or disable personalised advertisements on your device by adjusting your preferences in your device’s Settings section.
Data enrichment: in certain circumstances, we may combine your personal data collected from different sources to improve our understanding of your needs and preferences regarding our products and services (and for analysis, user profiling, market research, quality checks and improving our interactions with customers). For example, this includes linking your data if you have a registered account and make a purchase as a guest using the same email address associated with your account, or linking automatically collected data (such as IP and MAC addresses or metadata) with data you have provided through your activity on the platform or in any of our stores (for example, information about your purchases in physical stores or online, your preferences and similar information).
To carry out promotional activities (for example, to organise competitions or send a saved list of items to the email address you specify). If you participate in a promotion, you authorise us to process the personal data you have shared with us according to the promotion and to disclose it through various media, such as social networks or the Platform itself. For each promotion you participate in, terms and conditions will be available with more detailed information about the processing of your personal data.
To share photographs or images you have shared publicly on the Platform or through our social media channels, provided that you give your express consent for this purpose.

On what legal grounds do we process your data?

The legal basis that allows us to process your personal data also depends on the purpose for which we process it, as explained below:

To manage your user registration on the website.

  • We process your data because it is necessary under the provisions governing use of the website. In other words, for you to register as a user on the Platform, we need to process your personal data, as otherwise we would be unable to manage your registration.
  • We consider that we have a legitimate interest in linking your account to purchases and information about your activities collected through the various channels on the Platform.

Establishing, performing and concluding a purchase contract or service contract in order to enter into a purchase or service contract with you.

  • We process your data because it is necessary for us to enter into a purchase or service contract with you.

  • Certain types of data processing relating to the purchasing process are activated only because you request or authorise them, as is the case with payment information for future purchases. In these cases, our processing of your data is based on your consent. We also process location data when you consent to this so that we can offer you certain services through the app when you visit some of our physical stores.

  • We consider that we have a legitimate interest in carrying out the checks necessary to detect and prevent potential fraud when you make a purchase. We consider this processing beneficial for all parties involved: for you, because it enables us to take measures to protect you against attempted fraud by third parties; for us, because it helps us avoid unauthorised use of the website; and for our customers and society, because preventing and detecting fraudulent activity also protects their interests.

Customer support

  • We consider that we have a legitimate interest in responding to requests or enquiries you submit through the various available contact channels. We consider this processing beneficial for you too, as it enables us to provide appropriate assistance and respond to your enquiries.

Marketing

  • We are legally permitted to process your data for marketing purposes on the basis of your prior express consent.

  • To show you personalised information, we consider that we have a legitimate interest in profiling based on the information we hold about you (such as your browsing history, preferences or purchases) and the personal data you have provided. We consider this processing beneficial for you too, because it improves your user experience and gives you access to information that matches your preferences.

Usability and quality analysis

  • We consider that we have a legitimate interest in analysing the Platform’s usability and user satisfaction, as we consider this processing beneficial for you too, because its purpose is to improve the user experience and provide a higher-quality service.

How long will we keep your data?

The retention period for your data depends on the purpose for which we process it, as explained below:

To manage your user registration on the website

  • We process your data for as long as you remain a registered user (that is, until you decide to cancel your registration).

Establishing, performing and concluding a purchase or service contract

  • We process your data for as long as necessary to manage your purchase of products or services, including potential returns, complaints or requests relating to their purchase.
  • Sometimes we will process data only until the time you specify, as is the case with payment details you have asked us to store for future purchases.

Customer support

  • We process your data for as long as necessary to handle your requests or applications.

Marketing

  • We process your data until you unsubscribe.
  • We will also show you personalised advertisements until you change your device, browser and/or cookie settings to withdraw permission for these activities.
  • If you participate in promotions, we keep the data for six (6) months after the promotion ends.

Usability and quality analysis

  • We process your data from time to time during periods when we carry out specific activities or quality assessment surveys, or until we anonymise your browsing data.

Although we process your data only for the time strictly necessary to achieve the relevant purpose, we subsequently keep it stored and appropriately protected for the period during which an obligation to process it may arise under applicable law. Once the time limit for any potential action has expired, we delete the personal data.

Do we share data with third parties?

To fulfil the purposes set out in this Privacy and Cookie Policy, we need to give access to your personal data to third parties that support us in providing services to you, namely:

  • financial institutions,
  • fraud detection and prevention organisations,
  • technology and analytics service providers,
  • logistics, transport and delivery service providers and partners and/or their partner organisations,
  • customer support service providers,
  • marketing and advertising service providers and partners, such as social networking websites, advertising agencies or advertising partners.

For service efficiency, some of these service providers are located in territories outside the European Economic Area that do not provide the same level of data protection as the European Union and may not be on the list of countries providing an adequate level of data protection issued by the competent data protection authority in Serbia. In these cases, we inform you that we transfer your data using appropriate safeguards to keep it secure at all times. For this purpose, we use the most suitable international data transfer tools in accordance with standard contractual clauses and other relevant supplementary measures. You can view the content of these standard contractual clauses at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/data- transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

What are your rights when you provide us with your data?

We take responsibility for keeping your personal data confidential and enabling you to exercise your rights. You can exercise your rights free of charge by emailing us at our email address ([email protected]), simply stating your request and the right you wish to exercise. If we consider it necessary to identify you, we may ask you to provide a copy of a document proving your identity.

We may also offer you the opportunity to exercise your rights and configure your privacy settings when using some of our services, or make specific channels available to you on our Platform.

In particular, regardless of the purpose or legal basis we rely on to process your data, you have the following rights:

To request access to the personal data we hold about you.

To request that we rectify the personal data we hold. As a general rule, you must provide only your own data and not that of third parties, except to the extent otherwise permitted by this Privacy and Cookie Policy.

To request that we erase your personal data to the extent that it is no longer necessary for the purpose for which we need to continue processing it, as explained above, or when we are no longer legally permitted to process it.

To request that we stop or restrict the processing of your personal data. This means that, in certain cases, you can ask us to temporarily suspend processing or retain the data for longer than necessary.

If you have given us consent to process your data for any purpose, you also have the right to withdraw that consent at any time. Some of the circumstances in which you can withdraw your consent are set out in section 2, where we explain the purposes for which we process your data.

If you do not want us to send information to third parties so that advertisements can be shown to you, you can prevent this in several ways, for example, by changing your device, browser and/or cookie settings, reviewing the privacy policies and settings of the social networking websites on which you have profiles, or emailing us at the above email address with your request.

When we are legally permitted to process your data on the basis of your consent or for contractual purposes, as explained in section 3, you also have the right to request portability of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, so that it can be transferred directly to another entity without hindrance from us.

In addition, when the processing of your data is based on our legitimate interest, you also have the right to object to its processing.

Finally, we inform you that you have the right to lodge a complaint with the competent data protection supervisory authority, in particular:

Data subjects’ rights

The General Data Protection Regulation grants data subjects comprehensive rights in relation to the processing of personal data. Below is an overview of these rights for your information:

  • Right of access
    – Every data subject has the right to obtain information about their stored personal data at any time and to receive a copy of that data.

  • Right to rectification
    – Every data subject has the right to request the immediate rectification or completion of inaccurate personal data relating to them. 

  • Right to erasure
    – Every data subject has the right to request that the controller erase the personal data concerned if the purpose of processing no longer exists,
    or there is no longer a legal basis for processing (expiry of a contract, withdrawal of consent).

  • Right to restriction
    Every person whose personal data is processed has the right to request that the controller restrict processing if:

  • the purpose of processing no longer exists,
  • there is no longer a legal basis for processing (expiry of a contract, withdrawal of consent).
  • Right to data portability
    Every data subject has the right to receive the personal data they have provided in a structured, commonly used and machine-readable format, or to transmit it to another controller without hindrance from the controller, where processing is based on consent or a contract and is carried out electronically.

Right to object

  • Every person whose data is processed has the right to object to the processing of personal data relating to them on the basis of a legitimate interest. In the event of an objection, MAISON ADORABLE DOO will no longer process the personal data unless we can demonstrate compelling grounds for processing that override the interests, rights and freedoms of the data subject and serve the exercise or defence of rights.

  • Right to withdraw consent
    Every data subject has the right to withdraw consent to the processing of personal data at any time.

  • Right to lodge a complaint with a supervisory authority
    You have the right to lodge a complaint with the competent supervisory authority under Article 77 of the General Data Protection Regulation if you believe that the processing of the personal data concerned infringes the provisions of that Regulation.

What happens when you provide us with third parties’ data?

We provide features or services that require us to process third parties’ personal data, which you must provide. If you provide us with third parties’ personal data, you confirm that you have informed them of the purposes for which and the way in which we need to process their personal data.
If a third party provides us with data about you, or you provide it to us in connection with a feature or service requested by one of our users, we will in all cases use it to manage that feature or service within the purposes set out in this Privacy and Cookie Policy. We will always include links to this policy in our communications.

Changes to the Privacy and Cookie Policy

We may amend the information contained in this Privacy and Cookie Policy at our discretion. If we do so, we will notify you in various ways through the website (for example, through a banner, pop-up or push notification), or we may even send a notification to your email address when the change is important to your privacy, so that you can review and access the changes and, where applicable, object or unsubscribe from any service or feature. In any event, we recommend reviewing this Privacy and Cookie Policy from time to time in case minor changes are made or we introduce improvements to our interactions, so that you can always find information on our website or in our app.

Cookie Policy

In this Cookie Policy, you will find information about how we use cookies and similar tools installed on our customers’ and users’ devices. In some cases, the use of cookies involves processing personal data. We therefore recommend reviewing the Privacy Policy available on our website if you would like to know how we use customers’ and users’ personal data and how you can exercise your rights, or if you would like to review the terminology we use to refer to our platform (website, app or physical stores).

Information about cookies

We use cookies and similar tools to make browsing our website easier, understand how you interact with us and, in certain cases, show you advertisements that match your browsing habits. Read our Cookie Policy to better understand the cookies and similar tools we use, their purposes, how to manage your preferences and other information that may be of interest.

What are cookies?

A cookie is a small text file containing information about your browsing or use that a website, app or other platform stores on your computer, tablet, smartphone or similar device as a label identifying that device. Cookies are necessary, for example, to make browsing easier and to understand how users interact with the platform so that it can be improved further. They are also very useful for displaying advertisements that match users’ preferences and for other purposes described in detail below. Cookies do not harm your computer or device.

The term “cookie” also includes technologies that are installed on your device in a similar way and/or collect data from and about your device in a similar way (such as Flash cookies, web tracking images or bugs, pixels, HTML5 local storage and SDK technologies for app formats). The term “cookie” also refers to the use of digital fingerprinting techniques, meaning techniques for combining data that help us identify your device. Sometimes these technologies work together with cookies to collect and store data, either to provide certain features or services on our platform or to show you advertisements on third-party platforms based on your browsing.

This explanation provides a general overview of what is meant by the term cookie, for information purposes only. The specific cookies we use are described in detail in the cookie settings menu available on our platform.

What types of cookies are there?

This section provides a general overview of the types of cookies that may be used online. According to ownership, cookies can be divided into:

– First-party cookies: cookies sent to the user’s computer or device from equipment or a domain managed by the publisher itself, through which the platform or service requested by the user is provided.

– Third-party cookies: cookies sent to the user’s computer or device from equipment or a domain managed by a third party, rather than the publisher, that processes the data collected through the cookies.


According to their purpose, cookies can be divided into:

– Strictly necessary (technical) cookies: these cookies allow users to browse a website, platform or app and use the various options or services available on it, such as traffic control, data or session identification, access to restricted sections or content, remembering the items in an order, placing an order, managing payments, controlling fraud relating to service security, using security features while browsing, requesting registration or participation in an event, storing content for video or audio playback, enabling dynamic content (for example, text or image loading animations), or sharing content through social networks. As they are strictly necessary, technical cookies are downloaded by default when they enable the platform to be displayed or the service requested by the user to be provided.

– Functional and personalisation cookies: these cookies remember information so that users can access the platform with certain characteristics that may distinguish their experience from that of other users, such as language, the number of results displayed in a search, or the appearance or content of the service according to the browser used or the region from which the service is accessed. Not accepting these cookies may result in slower website performance or poorly tailored recommendations.

– Analytics cookies: these allow the number of users and the sections visited on the platform to be identified, as well as how users interact with them, so that measurements and statistical analysis of use can be carried out to improve the platform or services based on that analysis.

Targeted advertising cookies: these store information about users’ behaviour collected by continuously monitoring browsing habits, allowing a specific profile to be developed so that advertisements matching that profile can be shown to the user. These cookies allow the most efficient management of advertising space that the publisher has included, where appropriate, independently or in cooperation with third parties.

What are cookies used for on our websites?

Cookies play an important role in the operation of our platform. The main purpose of our cookies is to make your browsing experience as pleasant and efficient as possible. For example, they are used to remember your personal preferences (language, country and so on) while browsing and on future visits. We also use cookies to improve our services and platform and to offer advertisements that match your browsing habits.

The data collected by cookies also enables us to improve the platform by assessing statistics and usage patterns (number of visits, sections you visit most often and visit duration), to understand statistically how users interact with the platform. This helps us improve our services and adapt the platform to users’ individual interests, provide faster searches and so on.

Sometimes we may use cookies to collect data that allows us to show you advertisements on our platform, on third-party platforms or through any other means, based on analysis of your browsing habits (products or sections viewed and similar information).

In any event, the cookies we use will never store sensitive data such as passwords or credit or debit card details.

How can I manage the use of cookies in this online store?

In the cookie settings menu, available at all times on our platform, you can find full information about the cookies used on this platform, including the purpose, duration and management of each cookie (first-party or third-party), so that you can enable or disable cookies that are not strictly necessary for the platform to function correctly.

When browsing the internet, you can also disable cookies in your browser. Instructions for disabling them in the most popular browsers are available below:

You can disable the use of cookies at any time.

Please note that the cookie settings menu and the option to disable cookies are specific to each browser you use. Accordingly, if you configure cookies in a particular way on one device and wish to apply similar settings on another device, you will need to configure the same options on that other device.

As an additional step regarding third-party cookies used to provide advertisements matching your interests, please note that some third parties may participate in the following self-regulatory targeted advertising programmes, which offer corresponding opt-out options:

Network Advertising Initiative (NAI) – http://www.networkadvertising.org/choices/
Google Analytics – https://tools.google.com/dlpage/gaoptout

Who uses the data stored by cookies?

The data stored by cookies on our platform is used exclusively by us, except for the cookies listed in section 2 as “third-party cookies”, which are used and managed by external entities to provide services that improve our services and the user experience when browsing our platform. More information is available in the cookie settings menu, which is accessible at all times on our platform.

For more detailed information about the processing of your personal data when we work with third parties and those involved in international data transfers, we recommend reading the Privacy Policy available on our website, as well as those third parties’ privacy policies and privacy settings available on their websites.