This Privacy & Cookie Notice (hereinafter the “Notice”) is dated 17 August 2020.
Here at rebeccacassar.com (hereinafter the “Website”), we respect the privacy of our customers (hereinafter “You” or the “Customer”) and are wholly committed to protecting the confidentiality and security of your personal data. This Notice will explain in further detail how we use the personal data which we collect from you when you use our Website, as well as provide further information as to the cookies which may be stored on your computer.
INDEX:
- Who we are.
- What data do we collect?
- How do we collect your data?
- How will we use your data?
- How do we store your data?
- What are your data protection rights?
- What are cookies?
- How do we use cookies?
- What types of cookies do we use?
- How to manage your cookies.
- Changes to our Notice.
- How to contact us.
- How to contact the relevant supervisory authority.
1. Who we are.
By way of a brief summary, Rebecca Cassar (creator and founder of rebeccacassar.com) is a freelance Maltese artist and creative intent on exhibiting her portfolio of works on this Website.
We are a controller of your personal data – which we process in an appropriate and lawful manner in accordance with the Maltese Data Protection Act (Chapter 586 of the Laws of Malta) (the “Act”), including its subsidiary legislation, and the General Data Protection Regulation (Regulation (EU) 2016/679) (the “Regulation” or the “GDPR”), each as may be amended, supplemented or replaced from time to time.
This Notice aims to ensure that you are fully informed on how (and when) we will collect and process your personal data. It aims to inform you of the items of personal data which we will collect about you and further describes how we will handle said personal data (regardless of the way you interact with us, whether by email, phone, or otherwise). Moreover, this Notice also provides further information as regards (i) our obligations in terms of processing your personal data responsibly, (ii) your data protection rights as a data subject, (iii) use of cookies and (iv) how the law protects you.
This Notice should be read in conjunction with our Terms of Use as may be found at https://rebeccacassar.com/terms-of-use/.
If you have any questions relating to this Notice, including any requests to exercise your legal rights (which are described at Section 6), please contact us, by email or in writing, using the contact details set out below:
Name: Rebecca Cassar
Email address: [email protected]
2. What data do we collect?
We collect the following data:
- Personal identification information including:
- Name;
- Surname;
- Address (be it your billing or shipping address in the event of payment and/or delivery of goods purchased from our website);
- Email address;
- Mobile and/or telephone number;
- Debit and/or credit card details in the event of a purchase being made from our website, and ancillary financial data including payment history and/or invoices issued to you.
3. How do we collect your data?
You directly provide us with most of the personal data which we collect. We collect and process personal data when you:
- Register an account on our Website or otherwise place an order for any of our products and/or services, be it via the Website or otherwise.
- Provide us with your feedback via email, or otherwise.
- Use or view our website via your browser’s cookies.
4. How will we use your data?
We collect your personal data for the purpose of:
- processing your order/s and/or otherwise administering your account on the Website; and
- otherwise abiding by any legal obligation/s which may be incumbent upon us.
5. How do we store your data?
We will only retain your personal data for as long as is necessary to fulfill the purposes for which we collected it – i.e. to process your orders and/or commissions for the purpose of performing our contract with you, and thereafter, to be able to assert, exercise or defend possible legal claims against or otherwise relating to or involving you or your order/s within the applicable prescriptive periods or statutes of limitation.
6. What are your data protection rights?
We would like to make sure that you are fully aware of all of your data protection rights under the GDPR. In this respect, every user is entitled to the following:
- The right to access – You have the right to request copies of your personal data.
- The right to rectification – You have the right to request the correction of any information you believe is inaccurate. You also have the right to request us to complete the information you believe is incomplete.
- The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
- The right to restrict processing – You have the right to request us to restrict the processing of your personal data, under certain conditions.
- The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
- The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
- The right to withdraw your consent – You have the right to withdraw your consent to the processing of personal data if and in so far as this has been provided for a purpose other than those listed under Section 4 of this Notice.
If you make a request, we have one (1) month to respond to you. If you would like to exercise any of these rights, please write to us at [email protected].
7. What are cookies?
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our Website, we may collect information from you automatically through cookies or similar technology.
For further information, visit allaboutcookies.org.
8. How do we use cookies?
We use cookies in a range of ways to improve your experience on the Website, including keeping you signed in (if and in so far as you have created an account with us).
9. What types of cookies do we use?
There are a number of different types of cookies, however, our Website uses Strictly Necessary Cookies – i.e. those enabling basic functions like page navigation and access to secure areas of the Website; without which the Website cannot function properly.
10. How to manage cookies.
You can delete all cookies that are already on your device by clearing the browsing history of your browser. This will remove all cookies from all websites you have visited. Be aware though that you may also lose some saved information (e.g. saved login details, site preferences).
Managing site-specific cookies
For more detailed control over site-specific cookies, check the privacy and cookie settings in your preferred browser.
Blocking cookies
You can set most modern browsers to prevent any cookies being placed on your device, but you may then have to manually adjust some preferences every time you visit a website/page. Moreover, some services and functionalities may not work properly at all (e.g. logging in to your account).
11. Changes to our Notice.
We reserve the right to change the terms of our Notice from time to time, in which case an updated version will be uploaded on the Website. The current version was last updated on 17 August 2020.
12. How to contact us.
If you have any questions about our Notice, the personal data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at:
Email: [email protected];
13. How to contact the relevant supervisory authority
You have the right to lodge a complaint at any time to a competent supervisory authority on data protection matters, such as (in particular) the supervisory authority based in the place of your habitual residence or your place of work. In the case of Malta, this is the Office of the Information and Data Protection Commissioner (the “IDPC”) (https://idpc.org.mt). We would, however, appreciate the opportunity to deal with your concerns before you approach the supervisory authority, so please do contact us prior to resorting to the IDPC.