Privacy policy

PRIVACY RULES
1. INTRODUCTORY PROVISIONS

Obrt Rai, Veljaki 15, 52232 Kršan, Croatia, registered in the Republic of Croatia under MBS: 98348612, OIB: 54267852692 mail: rai.croatia@gmail.com (hereinafter: "Rai" "we", "us", "our" , etc.) is the owner of the website www.enlightlove.com and the Enlight brand.

Rai, the manager of personal data processing, takes care of the privacy of our users. This privacy policy explains how Rai processes your personal data. Rai is focused on the protection of your personal data and its processing in accordance with the General Data Protection Regulation and the Law on the Implementation of the General Data Protection Regulation.

Please read this Policy carefully to understand why and how we collect your personal information and how it will be used. In case of any questions or complaints related to this Privacy Policy or the handling of personal data, you can contact us by e-mail or mail at the above addresses.

By using this website, you accept this Privacy Policy.

2. DATA COLLECTION


Personal data is any data relating to an individual whose identity is known or can be determined. An identifiable individual is a person who can be identified directly or indirectly, in particular with the help of identifiers such as name, identification number, location data, online identifier or with the help of one or more factors inherent to physical, physiological, genetic, mental , economic, cultural or social identity of that individual.

We collect your personal data only when you voluntarily provide us with such information, in accordance with the provisions of these Rules.

Certain information and data that are not personal data may be collected automatically through our internet servers or through the use of "cookies". Examples of site usage information include: the most visited and viewed pages and links on our website, the number of completed forms, time spent on the site, the most popular keywords that lead users to our site, your IP address, information collected through cookies, information about your device such as hardware settings, system activity, browser type, etc.

 

3. BASIS FOR DATA PROCESSING


We process the user's personal data when the regulations require us to take certain actions, when the processing is necessary for the execution of a contract or taking actions before concluding a contract, or based on our legitimate interests, except when these interests are stronger interests or the fundamental rights and freedoms of an individual that require the protection of personal data . If we cannot process personal data based on the stated legal grounds, we will ask for your consent.

a) Registration
Rai enables user registration on the website. For this purpose, the user enters his name, surname, e-mail address and desired password. Based on the registration, the user can view the offer, create his wish list, compare products, order products faster and easier and have access to special offers or immediately put products in the basket and order products.

During the registration process, a user account is created for one person only, and it is not allowed to communicate registration or user account data to third parties. The user is obliged to keep data about his security code and user account, and is also responsible for all unauthorized activities authorized and carried out under his username and/or password.

The legal basis for processing data for the purpose of registering users of the website is the contractual obligation that arises when the user registers on the website and accepts the General Terms and Conditions. If a registered user wants to delete his profile, he can send a request to rai.croatia@gmail.com

 

b) Newsletter
If you want to receive newsletters about our offers, new contents on the Internet, you can register your e-mail address via the form with the optional entry of your first and last name for the purpose of personalizing the messages. An e-mail confirmation of your subscription to the newsletter will be sent to the e-mail address registered by the User before the first sending of the newsletter for the purpose of the double authentication procedure. This confirmation is used to prove whether the e-mail owner, as a respondent, agrees to receive the newsletter. Personal data collected for the purpose of signing up for the newsletter will be used exclusively for sending our newsletter.

We use the Mailchimp platform to manage subscriptions and newsletter deliveries. Mailchimp exports personal data outside the EU based on standard contractual clauses for the transfer of personal data. The Mailchimp system records newsletter openings and clicks on links in order to offer statistical data on which content was interesting to the recipients of the newsletter.

You can opt out of receiving the newsletter at any time by choosing the option to withdraw your consent in the received newsletter or by contacting rai.croatia@gmail.com. Withdrawal of consent does not affect the legality of the processing until the moment of withdrawal. Receiving the newsletter is voluntary and the user does not bear any negative consequences if he does not give or if he withdraws his consent.

In case of withdrawal of consent, you will no longer receive our newsletter, and e-mail addresses that have been unsubscribed will remain in our unsubscribe list in order to prove compliance with prescribed legal obligations.

 

c) Distance purchase

For the purpose of purchasing through the website, the user provides his/her personal data: name, surname, address, e-mail address, telephone/mobile number, in order to execute the contract and provide pre-contractual notices in accordance with regulations.

When making a purchase via the website, the user confirms acceptance of the General Terms and Conditions and the Privacy Policy available on the website. The user can provide his data for the execution of the contract via the website through a registered profile or as a guest.

The user's personal data, which were provided during the purchase, are processed for the purpose of fulfilling the contract, including the prior verification of the conditions for concluding the contract, as well as for the purpose of carrying out the payment transaction and delivery of the product. Personal data will also be processed for the purpose of preventing possible misuse, preventing fraudulent practices, all based on legitimate interest and in accordance with regulations.

The user is obliged to provide accurate, valid and complete personal data. In case of violation of this obligation, Rai has the right to deny access to such a user or to deny the realization of all or part of the services or products it offers. The processing of personal data for the purpose of executing the contract is a condition for providing the service, and in this sense it cannot be limited or revoked. In case the customer does not want to provide his personal data, he will not be able to conclude a contract or make a purchase.

Rai will not disclose or transfer the user's personal data, except for the purpose of fulfilling the product purchase contract (which refers to financial institutions for the purpose of payment realization, suppliers of the purchased product for the purpose of calculation, delivery and delivery of the ordered product, and persons authorized to maintain IT system through which purchase transactions are carried out), protecting the interests of customers and preventing possible abuse. Personal data will also be submitted to competent authorities in accordance with regulations. Personal data is kept within the periods prescribed by law.

If the customer, who is a natural person, makes a purchase via a payment order/general payment slip, then we also process data on the customer's IBAN for accounting reasons and monitoring of transactions.

Data on users' credit cards and security codes is not processed by Rai, nor does it have access to them, because the processor Stripe is engaged to process card transactions in accordance with the General Terms and Conditions.