Se rendre au contenu

Privacy policy

Privacy statement on data processing

 

Privacy Notice (GDPR) – Alevino

1) Who is responsible for processing your personal data? (Data Controller)

Your personal data is processed by Alevino (operated by Dachi Khechuashvili).

Contact: hello@alevino.be

Business address: Rue Garibaldi 108, 1060 Saint Gilles

Company/VAT number: BE 0728.885.219

2) What personal data do we collect?

Depending on how you use our webshop, we may process:

  • Identification and contact details (name, email, phone)

  • Billing and delivery address

  • Order details (products purchased, quantities, order history)

  • Payment-related information (transaction references; we do not receive full card details)

  • Customer service communications

  • Technical data (IP address, device/browser data, logs)

  • Cookie and preference data (only where applicable and permitted)

3) Why do we process your data and what is the legal basis?

We process your personal data for the following purposes:

A. To process and deliver your order (contract necessity)

  • Create/handle your order, payment, delivery, invoicing, returns, and customer support.

    Legal basis: necessity for performance of a contract.

B. To comply with legal obligations (legal obligation)

  • Accounting and tax compliance (e.g., keeping invoices and accounting records).

    Legal basis: compliance with legal obligations.

    Retention is described in section 7.

C. To run and secure our webshop (legitimate interests)

  • Fraud prevention, IT security, troubleshooting, and improving our services.

    Legal basis: legitimate interests (secure and reliable webshop).

D. Marketing communications (consent or legitimate interests, depending on the channel)

  • Newsletter and promotional emails only if you opted in (or where permitted for existing customers under applicable rules).

  • You can opt out anytime via the unsubscribe link in each email or by contacting us.

    Legal basis: consent (and/or legitimate interests where legally permitted for existing customers).

E. Cookies, analytics, and retargeting (consent for non-essential cookies)

  • If we use analytics/advertising/retargeting cookies or similar technologies, we ask for your consent via our cookie banner before placing them (except strictly necessary cookies). Sirius Legal+1

    Legal basis: consent (for non-essential cookies/trackers).

4) Where does your data come from?

  • From you directly (checkout forms, account creation, email contact)

  • From your use of our website (technical logs and cookies, subject to your preferences)

5) Who do we share your data with?

We only share personal data as necessary for the purposes above, with:

  • Odoo (webshop/CRM/hosting tools) acting typically as a service provider/processor for the webshop operations

  • Payment providers you choose at checkout (e.g., PayPal, Apple Pay, Shop Pay). These providers may act as independent controllers for their payment services.

  • Delivery carriers (e.g., DPD, bpost) for shipping and delivery

  • Professional advisors where needed (e.g., accountant) and authorities where legally required

We do not sell your personal data.

6) International transfers

If any of our service providers process data outside the European Economic Area, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) where required.

7) How long do we keep your data?

We retain data only as long as needed for the purposes described:

  • Order, invoice, and accounting data: kept for the period required under accounting/tax rules (commonly up to 10 years, depending on the document type). 

  • Customer account data: while your account is active (and for a limited period after inactivity, unless legal obligations require longer)

  • Marketing preferences: until you withdraw consent/opt out

  • Cookies: according to the cookie settings/retention described in the cookie banner/policy

8) Your rights (GDPR)

You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure (where applicable)

  • Restrict processing (where applicable)

  • Object to processing (especially direct marketing, at any time)

  • Data portability (for data processed by automated means based on contract/consent)

  • Withdraw consent at any time (without affecting processing already done)

To exercise your rights, email hello@alevino.be. We may ask for information to verify your identity (only what is necessary).

9) Automated decision-making / profiling

We do not make decisions based solely on automated processing that produce legal effects (or similarly significant effects) about you.

If we use limited profiling for marketing (e.g., recommending products based on past purchases), you can object at any time.

10) Questions or complaints

For questions, contact: hello@alevino.be.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA): Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, +32 (0)2 274 48 00.