The owner of the Service and at the same time the Administrator of your personal data is Tasty Lightbox ltd with its registered office in Crawley (3 Climping Road, RH11 0BE), e-mail address: firstname.lastname@example.org,website address: tastylightbox.co.uk (hereinafter referred to as the Administrator).
We ensure that the processing of personal data takes place in accordance with REGULATION (EU) 2016/679 of the EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Regulation onthe protection of personaldata), hereinafter referred to as the GDPR.
Your personal data is processed only for the purpose of fulfilling a service/salecontract(including registering an account on the Website, placing an order on the Website (by telephone or e-mail), subscription of the newsletter (Newsletter), handling inquiries submitted by the electronic contact form), pursuant to Article 6(1)(b) of The Basic Regulation. B GDPR, i.e. processing is necessary for the performance of the contract to which the data subject is a party or to take action at the request of the data subject, before concluding thecontract.
The Controller processes the following categories of personal data:
– first and last name,
– address data,
– e-mail address,
– phone number.
When using the Service, additional information may be retrieved, in particular: the IP address assigned to the User’s computer or the external IP address of the Internet provider, the domain name, the type of browser, the access time, the operating system type.
The transfer of personal data to the Administrator is voluntary, provided that the failure to provide the fore. data may prevent thecontract fromthe emergency and the performance of the contract.
Your personal data will be stored for the period necessary for the performance of the contract and after that time for a period corresponding to the limitation period of any claims. If you register your account on the Website, personal data will be stored until you delete it.
If you choose online payments, personal data,tothe extent necessary for the execution of payments, are transferred: Fiserv., Inc., 255 Fiserv Dr, Brookfield, WI 53045, USA. If you choose payments via the terminal, personal data, to the extent necessary for the execution of payments, shall be transferred: iZettle AB, reg.no 556806-0734, Regeringsgatan 59, 111 56, Stockholm, Sweden.
In the field of your personal data,you are entitled to:
– access to personal data,
– rectification of data,
– the deletion of personal data,
– processing restrictions,
– opposition to the processing.
The Controller shall apply technical and organisational measures to protect the personal data processed appropriate to the risks and categories of data protected, and in particular protect the data from making it available to unauthorized persons, taking away by an unauthorized person, processing in violation of applicable laws and altering, loss, damage ordestruction.