At Lysvenvalaro, we respect your privacy and are committed to handling personal data responsibly. This page explains how personal data may be processed in connection with your use of our online store, the legal grounds for processing, your rights under the General Data Protection Regulation (GDPR), and how you can contact us about data protection matters.
This information complements our Privacy Policy and should be read together with it.
Personal Data We Collect
Depending on how you use our store, we may process the following categories of personal data:
Contact and delivery details: Your name, email address, telephone number, billing information, and delivery address when you place an order or contact our customer service team.
Order and payment information: Products purchased, order numbers, transaction references, payment status, and refund records. Payments may be processed by third-party payment service providers. We receive only the information made available to us through the relevant payment service.
Technical information: IP address, browser type, device information, access logs, and website usage data, where these are collected by the technologies and services used on our website.
Customer service communications: Information you provide when asking questions, requesting assistance, reporting an order issue, or submitting a complaint.
Please do not send passwords or full payment-card details through ordinary email.
Why We Process Personal Data
We process personal data only for specific purposes and where a valid legal basis applies under the GDPR.
Order processing and contract performance: To confirm purchases, manage orders, arrange delivery, process payments and refunds, and respond to requests relating to a purchase.
Legal and regulatory obligations: To maintain records and meet applicable accounting, tax, consumer protection, and other legal requirements.
Legitimate business interests: Where appropriate, to protect our store and customers, prevent fraudulent activity, maintain website security, respond to enquiries, and improve our services. We consider individuals’ rights and freedoms when relying on this legal basis.
Consent: Where required, we rely on your consent for activities such as certain non-essential cookies or marketing communications. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Cookies and Website Technologies
Our website may use cookies and similar technologies to support essential website functions and, where enabled, to provide preference settings, analyse website usage, or support advertising activities.
Where consent is legally required, non-essential cookies and similar technologies are used in accordance with the applicable consent requirements. Where consent-management options are available, you can review or change your choices through the relevant settings.
Sharing Personal Data
We may share personal data with service providers when necessary to operate the store, fulfil orders, or provide customer support. Depending on the services used, these providers may include:
Payment service providers that process transactions.
Shipping and logistics companies that deliver orders.
E-commerce, website hosting, and technical support providers.
Customer service providers and, where applicable, security, analytics, or advertising service providers.
We may also disclose information when required by law or when reasonably necessary to establish, exercise, or defend legal claims, prevent fraud, or protect the rights and security of our customers and business.
We do not describe any service provider as receiving personal data unless that sharing is relevant to the services used.
International Data Transfers
Some service providers may process personal data outside the European Economic Area (EEA). Where the GDPR applies and a transfer is subject to international data-transfer restrictions, the transfer must rely on an applicable legal mechanism and appropriate safeguards.
The safeguards used depend on the destination and circumstances of the transfer. Further information about applicable safeguards may be requested through our contact email.
Data Retention and Security
We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including order administration, customer support, dispute resolution, and compliance with legal recordkeeping requirements.
Retention periods may vary depending on the type of data and the applicable legal obligations. When personal data is no longer required, it is deleted, anonymised, or otherwise handled in accordance with applicable law, where reasonably practicable.
We use appropriate administrative, technical, and organisational measures to help protect personal data against unauthorised access, loss, alteration, misuse, or disclosure. However, no method of electronic storage or online transmission can be guaranteed to be completely secure.
Your Rights Under the GDPR
Where the GDPR applies, you may have the following rights, subject to applicable legal conditions and exceptions:
Right of access: Request confirmation of whether we process your personal data and obtain access to that data.
Right to rectification: Request correction of inaccurate or incomplete personal data.
Right to erasure: Request deletion of personal data when the legal requirements for erasure are met.
Right to restriction: Request restriction of processing in circumstances provided by law.
Right to data portability: Receive certain personal data you have provided in a structured, commonly used, machine-readable format and, where legally applicable, request its transfer to another controller.
Right to object: Object to processing based on legitimate interests in circumstances provided by law. You may object at any time to the processing of personal data for direct marketing where the GDPR applies.
Right to withdraw consent: Withdraw consent where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Rights relating to automated decision-making: Where applicable, benefit from the safeguards provided by the GDPR in relation to decisions based solely on automated processing that produce legal or similarly significant effects.
These rights are subject to applicable legal requirements and do not apply in every circumstance. We assess each request in accordance with the GDPR and other applicable laws.
How to Exercise Your Rights
To ask a question about personal data or exercise your data protection rights, contact us at:
Email: hello@lysvenvalaro.com
Please describe your request clearly and provide sufficient information for us to understand it. We may ask for reasonable verification of your identity or authority to act on behalf of another person where necessary to protect personal data.
We will respond within the period required by applicable law. Under the GDPR, requests are generally answered within one month of receipt. Where permitted by law, this period may be extended by up to two additional months for complex or numerous requests. If an extension is necessary, we will provide the required notification.
If we cannot fulfil a request, we will explain the reasons where required by law and inform you of any applicable right to lodge a complaint.
Right to Lodge a Complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority. Depending on the circumstances, this may be the authority in the country where you habitually reside, work, or where the alleged infringement occurred.
You may also contact the relevant supervisory authority for information about your rights and the available complaint procedures.
Automated Decision-Making
Where a decision is based solely on automated processing and produces legal or similarly significant effects, the GDPR may provide specific rights and safeguards, subject to applicable conditions and exceptions.
Where these provisions apply, individuals may have the right to obtain relevant information, express their point of view, contest the decision, and request human intervention.
Updates to This Policy
We may update this page when our data-processing practices or applicable legal requirements change. Any revised version will be published on this page. We encourage you to review this information periodically to stay informed about how personal data is handled.
For questions about this policy or personal data processing, please contact us at hello@lysvenvalaro.com.