The website www.ALPACABOX.com and the eShop are designed, operated and administered by AlpacaBox-Stores SRL (hereinafter “we”, “us”, “our”) which is Your contracting party with:
2B, Gheorghe Tudor street, Chisinau city, Republic of Moldova, MD-2028
- Contact information for registry related issues:
ALPACABOX Customer service
- The purpose of and legal justification for handling personal data
Handling of personal data is based on the registrar’s legitimate interest, contractual relationship and/or compliance with the registrar’s legal obligations . Handling of personal data may also be based on the registered person’s consent, which thus forms the legal basis for the handling, where applicable. The registrar has a legitimate interest in practicing business-like, justified and lawful sales and marketing, including customer profiling related to these activities.
- Description of collected data
Personal data is handled within the scope of the legal framework to manage and develop customer relations. We primarily collect personal data for processing orders.
The personal data handled in the register may be used for the following purposes:
We need personal data for handling orders for delivery and customer communications regarding such orders (e.g. order and delivery verifications). Furthermore, the data will be used for invoicing and debt collection and for handling possible complaints. Regarding payment data, we store only the method of payment and the price in case of returns.
If you have created a customer account on our website, we will use your personal data to administer the account in order for you to be able to see your purchase history, create wish lists and save your shopping cart. Address details are also stored for later orders. They can be amended or deleted by the customer or us.
Developing products and services and anonymized reporting
We may handle personal data to improve our current products and services and to develop new ones. We can recognise feedback given and messages to customer service with a user account.
We use responses from consumer studies and surveys to analyse our customers’ preferences, expectations and opinions about our products, website and services.
We use anonymized data for reporting purposes. Anonymized data cannot be used for recognizing people; we use these data solely to analyse the realisation of our commercial targets. This data is, for example, the total number of visitors on our website and the duration of visits.
Our customer service handles your personal data when they are contacted via any channel. We may combine the data collected by our customer service to other personal data, for example your shopping history. Thus we can offer a personal and efficient service.
Recognizing and preventing illegal activities
In some cases, we are expected to disclose your data, including personal data for legal or regulatory reasons, as in the case of a trial. We may also disclose your data on the basis of a challenge, court decision, other court or police investigation, or request from an authority.
- Automatically collected personal data
When you place an order or visit our website, we automatically collect data about your visit. Part of this data may be classified as personal data. This data contains:
- your browser, operating system, device model, IP-address, and the time and duration of the connection
- logged-in customer’s user account credentials and date of registration
- location data (including Wi-fi hotspot details)
- websites prior to entering ALPACABOX.com site
- behaviour data on our website (such as clicks and browsing data on the page, search terms used)
- cookies and other credentials
- marketing details: benefits, campaigns and their usage
- purchase history at the product level and shopping cart details
- in addition, the data of those who have subscribed to the electronic newsletter are collected to administer subscriptions and other tasks related to customer communication activities.
- other data collected with your consent
- Directly collected personal data
Directly collected data means data which you disclose to us for example when placing an order or contacting our customer service. Directly collected data are:
- Customer’s contact details (name, email address, phone number, postal address and possibly other personal data voluntarily given, such as company name or birthday)
- If the recipient of the order is other than the customer, then the recipient's name and postal address as well
- Data on marketing permits and bans
- Message history with our customer service in chat, Facebook, by website contact form or email.
- Contact information you enter when participating in sweepstakes and competitions
- Disclosing personal data to third parties
Your personal data may be disclosed within the scope of the applicable law to our co-operation partners to the extent that it is necessary in order to carry out the customer’s assignment. Third parties may be personal data processors, and are only third parties accepted by us, who enable us to perform assignments and further improve the customer experience. When we use subcontractors or third parties, we ensure that personal data handling by them is done under the data protection regulations.
To provide an excellent customer experience and to fulfil assignments, we may be required to send personal data for handling to the servers of service providers located outside EU or EEA. In these cases we ensure that applicable contractual measures are applied to the transfer (for example, commitment to the EC standard contract clauses), that the transfer has a legal basis and their handling fulfils the legal confidentiality requirements.
- Others: Facebook, Instagram, Google
A cookie is a short text snippet or file that a website sends to your browser. It enables your site to remember information about your visit, such as your chosen language and other settings. A cookie makes your next visit easier and makes the site smoother for you. Cookies have an important role related to content.
AlpacaBox-Stores SRL uses a system that utilises cookies. We use them, for example to calculate the number of visitors on our pages, to improve and develop them, and to store your language preferences.
- Personal data on social media
Our social media sites, such as Facebook, Instagram, Pinterest, Twitter and YouTube are public, and the registers formed on the sites contain data that the registered person has entered into the public domain, such as name, reviews, site likes and shares, and comments. We are not responsible in any way for protecting any social media site user’s personal data or the data itself.
When you interact with us through social media, we can collect, save and store automatically collected data about your channel/media usage. If, for example, you click “Like” on our social media site or tag your friend to our publication, we will save this information. This data is most likely not recognizable, but there may be some data that can be linked to a person, depending on your settings on the specific channel.
The information you publish on social media is data that you have published, and it can be linked to you depending on the content. We collect, save and use this content and other information you have published on our social media channels. We may also collect data you have allowed social media to share with us, or that is shareable based on the user account settings.
- Storing of personal data
The register is stored electronically and duly protected from outsiders with firewalls, passwords and other technical means of protection generally used in the data protection industry. Only assigned employees of the registrar or of companies acting for us may have access to the personal data in the register with a user right granted by the registrar. All employees with access to personal data are subject to confidentiality.
- Website user rights regarding personal data
The customer has the right to know what information about him/her is stored in the register. An inspection request must be sent in writing to the person handling the register for the registrar. The inspection request can also be presented personally at the aforementioned address. When presenting the inspection request personally, proof of identity must be presented. AlpacaBox-Stores SRL will respond to the request for an inspection in writing.
If there are errors in the customer data, the customer can demand that the registrar correct the error. The customer has the right to ban the use of his/her personal data for direct marketing or marketing and opinion surveys by notifying the registrar. Banning direct marketing can also be done from one’s own customer account or following the instructions given in marketing messages.
The customer has the right to delete personal details handled by AlpacaBox-Stores SRL at any time excluding the following circumstances: you have an open task in customer service; you have an open order that has not yet been delivered in full; you are suspected of misusing our services or you have misused our services during the last four years; you have an unpaid debt to AlpacaBox-Stores SRL regardless of payment method; if you have made purchases, we must store the purchase related personal data in accordance with accountancy rules.
- Children’s personal data
We accept orders through the website only from people over 18 years, so that we do not wittingly collect personal data of children through our website.