This website ("website") is operated by Luma Inc., which includes Luma stores, and Luma Private Sales. This privacy policy only covers information collected at this website, and does not cover any information collected offline by Luma. All Luma websites are covered by this privacy policy.
Luma Security
Personal information provided on the website and online credit card transactions are transmitted through a secure server. We are committed to handling your personal information with high standards of information security. We take appropriate physical, electronic, and administrative steps to maintain the security and accuracy of personally identifiable information we collect, including limiting the number of people who have physical access to our database servers, as well as employing electronic security systems and password protections that guard against unauthorized access.
Our website uses encryption technology, like Secure Sockets Layer (SSL), to protect your personal information during data transport. SSL encrypts ordering information such as your name, address, and credit card number. Our Customer Care center and stores also operate over a private, secure network. Please note that email is not encrypted and is not considered to be a secure means of transmitting credit card information.
Luma Privacy Policy
To help us achieve our goal of providing the highest quality products and services, we use information from our interactions with you and other customers, as well as from other parties. Because we respect your privacy, we have implemented procedures to ensure that your personal information is handled in a safe, secure, and responsible manner. We have posted this privacy policy in order to explain our information collection practices and the choices you have about the way information is collected and used.
As we continue to develop the Luma website and take advantage of advances in technology to improve the services we offer, this privacy policy likely will change. We therefore encourage you to refer to this policy on an ongoing basis so that you understand our current privacy policy.
The Information We Collect
Generally, you may browse the Luma website without providing any personally identifiable information. However, we may ask you to provide personally identifiable information at various times and places on this website. In some cases, if you choose not to provide us with the requested information, you may not be able to access all parts of this website or participate in all of its features, pricing, and product selection.
We may collect the following information:
- name
- contact information including email address
- demographic information such as postcode, preferences and interests
- other information relevant to customer surveys and/or offers
For the exhaustive list of cookies we collect see the List of cookies we collect section. From your purchases and other interactions with us, we obtain information concerning the specific products or services you purchase or use. When you visit this website, our web server automatically collects anonymous information such as log data and IP addresses, and may collect general information concerning your location. We may use the automatically collected information for a number of purposes, such as improving our site design, product assortments, customer service, and special promotions.
How We Use The Information We Collect
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- Internal record keeping.
- We may use the information to improve our products and services.
- We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
- From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customize the website according to your interests.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
Others With Whom We Share Your Information.
The Luma Group: All of the above information that we collect, as described above, may be shared among all Luma entities, including Luma Venia and Luma Terra stores, website and Private Sales.
Service Providers: We also may disclose information to outside companies that help us bring you the products and services we offer. For example, we may work with an outside company to: (a) manage a database of customer information; (b) assist us in distributing emails; (c) assist us with direct marketing and data collection; (d) provide us storage and analysis; (d) provide fraud prevention; and (e) provide other services designed to assist us in maximizing our business potential. We require that these outside companies agree to keep confidential all information we share with them and to use the information only to perform their obligations in our agreements with them.
Other Companies: We may provide information to carefully selected outside companies when we believe their products or services may be of interest to you.
Business Transitions: We may transfer or share a copy of personal information about you in the event that Luma or one of its properties, affiliates, or subsidiaries goes through a business transition, such as a merger, being acquired by another company, or selling a portion of its assets. You will be notified via email or prominent notice on our website prior to a change of ownership or control of your personal information, if your personal information will be used contrary to this policy. However, nothing in this Privacy Policy is intended to interfere with the ability of Luma to transfer all or part of its business and/or assets to an affiliate or independent third party at any time, for any purpose, without any limitation whatsoever.
Luma specifically reserves the right to transfer or share a copy of personally identifiable information collected from its websites to the buyer of that portion of its business relating to that information.
Compliance with Law: We may provide access to information when legally required to do so, to cooperate with police investigations or other legal proceedings, to protect against misuse or unauthorized use of our website, to limit our legal liability, and to protect our rights or to protect the rights, property, or safety of visitors of this website or the public.
Luma partners with advertising companies to place our advertising on publisher websites on the Internet. These advertising companies collect anonymous information about your visits to our web site. This technology involves the use of third party cookies that allow them to develop personalized advertising so that it directly relates to offers that may be of interest to you. You may choose to opt-out of this service we have with our third-party advertising partner. We may also use Luma cookies to provide similar enhanced online marketing to you based on your interests and preferences. You may also choose to opt out of these enhanced online marketing ads.
Your Choices Regarding Use Of The Information We Collect
You have several choices regarding our handling of your nonpublic personally identifiable information.
Direct Mail or Telephone Marketing: If you shop at the Luma or Private Sales stores and wish to be removed from the list of customers that receive direct mail or telemarketing calls, please either write to Luma Customer Care at 112 West 34th Street, 18th Flr. New York, NY 10120 or call +1 800-403-8838. If you choose to write to us, please include your name, address, and credit card account number (if you have one), and state one of the following:
- "NO MAIL OFFERS" (if you don't want to receive offers by mail);
- "NO PHONE OFFERS" (if you don't want to receive offers by phone);
- "NO PHONE OR MAIL OFFERS" (if you don't want to receive either).
Because customer lists often are prepared well in advance of an offering (sometimes a few months before the offer is made), you may continue to receive some offers after you send us a request not to use your information for specified marketing purposes. We appreciate your patience and understanding in giving us time to carry out your request.
Your California Privacy Rights
Under California Civil Code sections 1798.83-1798.84, California residents are entitled to ask us for a notice describing what categories of personal customer information we share with third parties or corporate affiliates for those third parties or corporate affiliates' direct marketing purposes. That notice will identify the categories of information shared and will include a list of the third parties and affiliates with which it was shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit a written request to the following address: Luma Customer Care, 112 West 34th Street, 18th Floor, New York, NY 10120. Please allow 30 days for a response.
Cookies, Web Beacons, and How We Use Them
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyze web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
A "web beacon" or "pixel tag" or "clear gif" is typically a one-pixel image, used to pass information from your computer or mobile device to a website.
We use cookies and web beacons to keep track of what you have in your shopping cart and to remember you when you return to the website as well as to identify the pages you click on during your visit to our site and the name of the website you visited immediately before clicking to the Luma website. We use this information to improve our site design, product assortments, customer service, and special promotions. You can, of course, disable cookies and web beacons on your computer by indicating this in the preferences or options menus in your browser. However, it is possible that some parts of our website will not operate correctly if you disable cookies. We may also use web beacons, and other technologies, to help track whether our communications are reaching you, to measure their effectiveness, or to collect certain non-personal information about your computer, device, or browser in order to allow us to better design future communications to you.
We may contract with third parties who may use cookies and web beacons and collect information on our behalf or provide services such as credit card processing, shipping, promotional services, or data management. We call them our Customer Care Partners. These third parties are prohibited by our contract with them from sharing that information with anyone other than us or our other Customer Care Partners.
List of cookies we collect
The table below lists the cookies we collect and the information they store.
| COOKIE name | COOKIE Description |
|---|---|
| CART | The association with your shopping cart. |
| CATEGORY_INFO | Allows pages to be displayed more quickly. |
| COMPARE | The items that you have in the Compare Products list. |
| CUSTOMER | An encrypted version of your customer id. |
| CUSTOMER_AUTH | An indicator if you are signed into the store. |
| CUSTOMER_INFO | An encrypted version of the customer group you belong to. |
| CUSTOMER_SEGMENT_IDS | Stores your Customer Segment ID |
| EXTERNAL_NO_CACHE | A flag that, indicates whether caching is on or off. |
| FRONTEND | Your session ID on the server. |
| GUEST-VIEW | Allows guests to edit their orders. |
| LAST_CATEGORY | The last category you visited. |
| LAST_PRODUCT | The last product you looked at. |
| NEWMESSAGE | Indicates whether a new message has been received. |
| NO_CACHE | Indicates whether it is allowed to use cache. |
| PERSISTENT_SHOPPING_CART | A link to information about your cart and viewing history if you have asked the site. |
| RECENTLYCOMPARED | The items you recently compared. |
| STF | Information on products you emailed to friends. |
| STORE | The store view or language you have selected. |
| USER_ALLOWED_SAVE_COOKIE | Indicates whether a customer authorized cookies. |
| VIEWED_PRODUCT_IDS | The products that you recently looked at. |
| WISHLIST | An encrypted list of products added to your wish list. |
| WISHLIST_CNT | The number of items in your wish list. |
Online Account Registration
To make online shopping faster and easier, you may register on the Luma website. As a registered customer, you only have to enter your shipping addresses and billing information once; they will be securely stored with us for your future use. Using your name and a password of your choice, you may access your account online at any time to add, delete, or change information. If you are using a public computer, we strongly encourage you to Sign Out when you finish shopping. Your information will still be stored with us but it will not be accessible to anyone else from that computer.
Emails
You will receive promotional emails from us only if you have asked to receive them. If you do not want to receive email from Luma or its affiliates you can click on the "Unsubscribe" link at the bottom of any email communication sent by us. Please allow us 3 business days from when the request was received to complete the removal, as some of our promotions may already have been in process before you submitted your request.
Acceptance
By using this website, you accept the policies set forth in this Privacy Policy.
Questions for Luma?
We are a company for which transparency in information is essential in order to establish a relationship of trust with the people who are part of our project, as well as with our suppliers and customers. Therefore, the protection of the personal data of those who trust us is of essential importance. The purpose of this Privacy Policy is to provide clear information about how we collect, process, and use such data.
This Privacy Policy establishes the basis on which the company processes the personal data voluntarily provided by our users through the website bestofgifts.es.
This Policy shall apply whenever data is provided to the company, which shall act as the data controller, through any of the contact forms, subscription forms, or other means enabled on the website where personal data such as name, email address, telephone number, among others, is collected.
Our commitment
We are committed to:
- respecting the privacy of our users and processing personal data only with their consent or on the applicable legal basis;
- processing only the personal data strictly necessary to provide the requested service;
- processing personal data securely and confidentially, taking the necessary measures to prevent unauthorized access and misuse;
- not use personal data for purposes for which we have not previously obtained authorization or sufficient legal basis;
- not transfer or share personal data with third parties, except where legally required or for operational reasons directly related to the service provided;
- retain personal data only for as long as is strictly necessary for the purpose for which it was collected.
Who is responsible for your personal data?
Company name: BESTOFGIFTS - INTERNACIONAL GIFTS, UNIPESSOAL LDA
Tax ID number / VAT number: PT509896812
Registered office:
Zona Industrial da Poupa 2,
Rua B, nº 92
4780-321 Santo Tirso,
Portugal
Website: www.bestofgifts.eu
Contact email address for data protection matters: [email protected]
What is personal data and how is it processed?
Personal data refers to any information about an identified or identifiable natural person. An identifiable person is one whose identity can be determined, directly or indirectly, in particular by means of a name, an identification number, location data, electronic identifiers, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
The processing of personal data comprises any operation or set of operations performed on personal data, whether by automated means or not, such as collection, recording, organization, storage, adaptation, modification, consultation, use, disclosure, restriction, erasure, or destruction.
How we process your personal data and for what purposes
Personal data collected through the website bestofgifts.es may be processed for the following purposes:
- Request for information by the user: management of queries sent via contact forms, email, telephone, or other means enabled on the website;
- Newsletter subscription: management of registration and sending of informational, promotional, or commercial communications;
- Account creation and access to the customer area: management of authentication and access to the user's profile using their credentials;
- Order management and contractual relationship: processing of purchases, billing, shipping, order tracking, and customer service;
- Management of comments or ratings: when the website allows users to post comments, opinions, or ratings;
- Staff selection processes: if there is a feature for submitting applications or resumes.
What personal data we collect
Depending on the purpose, we may collect the following data:
- first and last name;
- email address;
- phone number;
- billing and/or delivery address;
- tax identification number;
- data necessary for managing the user account;
- information contained in messages sent through contact forms;
- information included in applications or resumes, where applicable.
Only data that is strictly necessary for the specific purpose in question will be requested.
It is important that users are aware of the data they provide and the purpose for which they do so, as by providing it, they accept that such data will be collected, stored, and used for that purpose. Consent may be withdrawn at any time through the appropriate means, without affecting the lawfulness of the processing carried out previously.
What is the legal basis for the processing of personal data?
In accordance with current data protection regulations, the processing of personal data by bestofgifts.eu may be based on:
- the consent of the data subject;
- the performance of a contract or the implementation of pre-contractual measures;
- compliance with legal obligations;
- legitimate interest, where applicable and duly justified.
What rights you have over the personal data you provide
As the owner of the data, you can exercise the following rights:
- Right of access: obtain confirmation as to whether your personal data is being processed and, if so, access it;
- Right of rectification: request the correction of inaccurate or incomplete data;
- Right of erasure: request the deletion of your personal data when legally applicable;
- Right to object: to object to the processing of your personal data for reasons related to your particular situation, under the terms established by law;
- Right to restriction of processing: to request the restriction of processing in certain circumstances;
- Right to data portability: to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another data controller where technically feasible;
- Right to withdraw consent: at any time, where the processing is based on consent.
To exercise these rights, you may send a written communication, duly identified, to the address of the data controller or to the email address: [INSERT].
You may also lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data infringes the applicable regulations.
Data security and preservation
We will only retain personal data for as long as necessary to fulfill the purpose for which it was collected or for as long as there are legal obligations requiring its preservation.
We take appropriate technical and organizational measures to protect personal data from destruction, loss, alteration, disclosure, or unauthorized access.
What personal data we share with third parties
Personal data will not be transferred to third parties, except when necessary for:
- compliance with a legal obligation;
- the proper provision of the requested service;
- the execution of contracts with suppliers or data processors acting on behalf of the company and subject to a duty of confidentiality.
case of international data transfers, these will be carried out with the legally required guarantees.
Information collection
We collect personal information such as name, email address, phone number, tax identification number, and other data necessary to provide our services. This information is collected voluntarily through website forms, purchase processes, account creation, and direct communications.
Record retention
Personal data provided by customers will be retained as follows:
- For users who have made purchases on the website: data will be retained for as long as necessary to manage the contractual relationship and until the user requests its deletion, without prejudice to legal retention obligations;
- In relation to customer service and email communications: the data will be kept for the time necessary to manage and respond to each specific request related to user orders or queries;
- In relation to newsletters and commercial communications: the data will be kept until the user withdraws their consent;
- In the context of the purchase of our products: the data will be kept for the entire duration of the contractual relationship and for the period required by law for tax, accounting, administrative, or legal defense purposes.
Once the legally applicable periods have elapsed, the data may be blocked and kept solely for the purpose of complying with possible legal responsibilities. At the end of this period, it will be permanently deleted.
Consent to the use of cookies.
For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.
When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.
CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).
Data processing agreement
We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Server log files
Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:
- Your consent status or the withdrawal of consent
- Your anonymised IP address
- Information about your Browser
- Information about your Device
- The date and time you have visited our website
- The webpage url where you saved or updated your consent preferences
- The approximate location of the user that saved their consent preference
- A universally unique identifier (UUID) of the website visitor that clicked the cookie banner