ONLINE PAYMENT SECURITY STATEMENT
Payments in our online store are processed through Shopify Payments, a secure system for accepting payment cards online.
Payment details are entered into a secure payment form and transmitted in encrypted form during payment. Our store does not have access to your complete payment card details and does not store them.
Shopify Checkout is secure, and all Shopify stores comply by default with PCI DSS, the payment card industry security standard for organisations that store, process or transmit credit card information. Shopify Payments protects customer information through fraud detection and encryption methods, including 3-D Secure. When paying with cards enrolled in the 3-D Secure programme, your bank may verify your identity using a token or password in addition to verifying the validity of the card itself.
Thank you for using Shopify Payments!
STATEMENT ON THE PROTECTION AND COLLECTION OF PERSONAL DATA
Protecting the privacy of personal data
The Seller uses various commercially available measures and tools to protect your personal data. Unfortunately, no transmission of data over the Internet can be completely secure. For this reason, the Seller cannot guarantee the protection of any information transmitted to www.kabayanstore.eu and is not responsible for any misuse by a third party that receives such information.
Anyone who has consented to the collection and processing of their data may withdraw their consent without providing a reason. In that case, all further data collection will cease, membership on the website will end, and any obligations incurred during the membership period will become due.
The Seller undertakes to protect the privacy of the personal data of all registered Users of www.kabayanstore.eu and to handle such data in accordance with the Personal Data Protection Act and other applicable regulations.
Registration is required before Users can access certain content and involves voluntarily entering their personal data. By agreeing to provide personal data, the User is deemed to have accepted the conditions for the use of personal data set out in these General Terms and Conditions. These conditions authorise the Seller to collect, use, process and transfer personal data necessary for using the website in accordance with the Personal Data Protection Act.
The Seller will collect User data for the following purposes:
- To gain a better understanding of Users’ individual needs and requirements and develop ways to improve the quality of the Seller’s services, resulting in greater customer satisfaction.
- To contact Users in writing, by telephone, SMS and/or email, and to send materials to their home addresses informing them about benefits and new additions to the Seller’s offering.
- To provide third parties, such as delivery services, with the information necessary to fulfil the purposes listed above.
The Seller will retain personal data for as long as necessary for the purposes set out in these General Terms and Conditions. Once that period has expired, the personal data will be destroyed, deleted or anonymised in a manner that ensures its security.
The Seller will not disclose Users’ personal data to third parties except to provide services, protect the interests of Users and the Seller, and prevent potential misuse.
The Seller will ensure that Users’ personal data is kept in a secure location, with reasonable administrative, technical and physical safeguards to prevent unauthorised use, access, disclosure, copying or modification. Only the Seller’s authorised personnel may access this data.
The Seller undertakes to give Users access to the personal data it holds about them to ensure that the data is accurate, complete and up to date.
If Users request that their personal data be corrected or deleted, the Seller will amend or remove that data. By choosing to delete their personal data, Users accept that they will no longer be able to access certain content on the website.
When providing personal data, the User guarantees that it is complete, truthful, accurate and up to date.
Protection of personal data and access by third parties
Users’ personal data is protected in accordance with the Personal Data Protection Act, and the Seller will not make it available to third parties in any way. We forward necessary personal data exclusively to business partners for the delivery of your order or for addressing printed advertising materials. Customers have the right to request the correction, amendment or completion of inaccurate, incomplete or outdated data. For any questions concerning the protection of personal data, please contact kabayanasianfoodstore.ck@gmail.com.
SHOPIFY
Our store is hosted on Shopify. Shopify provides the online e-commerce platform that allows us to sell our products and services.
Your data is stored through Shopify’s data storage systems, databases and general Shopify application. Shopify stores your data on a secure, protected server.
Making User data available to third parties
The Seller guarantees that it will not make a User’s email address or other information available to third-party legal entities or individuals without the User’s consent. Exceptions include delivery services and authorised executive authorities of the Republic of Croatia conducting investigations under a valid court order, as well as disclosures necessary to provide services, protect the interests of Users and the Seller, and prevent potential misuse.
Correcting errors
The Seller is not responsible for accidental errors or errors caused by force majeure or other objective circumstances resulting in an accidental breach of the guaranteed protection of User data. However, the Seller guarantees that any such error will be corrected as soon as possible, where this is feasible.
Reporting errors
The Seller cannot guarantee that the information on the website will be free from errors. If an error occurs, please report it to kabayanasianfoodstore.ck@gmail.com so that we can correct it as quickly as possible.
Cookies
The website www.kabayanstore.eu uses cookies to provide you with a better and simpler user experience.
Our website uses cookies to improve the user experience, provide functionality and store information about your orders. By continuing to browse www.kabayanstore.eu, you agree to the use of cookies.
What is a cookie?
A cookie is a piece of information stored on your personal computer when you browse a website you have visited. Cookies make websites easier to use by saving your preferences, such as language or address, and reactivating them when you return. This allows information to be tailored to your needs and usual browsing habits.
In addition to simple preference information, cookies can store a large amount of personal information, such as your name and email address, for which you must explicitly grant access. Unless you have allowed this, cookies cannot access files on your computer. The activities involved in storing and sending cookies are not visible to you. However, your chosen browser’s settings allow you to approve or reject requests to store cookies, delete stored cookies and manage other cookie-related activities.
If you do not agree to the use of these cookies, please disable them through your browser’s individual settings, following the instructions for your browser so that cookies from this website cannot be sent to your device: Firefox, Chrome, Internet Explorer, Microsoft Edge, Apple devices, Opera or Mozilla.
Below is a list of the cookies we use. We have listed them here so that you can decide whether to opt out of cookies.
- _session_id: A unique token, session-based. Allows Shopify to store information about your session, such as the referrer and landing page.
- _shopify_visit: Holds no data, persists for 30 minutes after the last visit, and is used by our website provider’s internal statistics system to record the number of visits.
- _shopify_uniq: Holds no data, expires at midnight the following day relative to the visitor, and counts visits to the store by an individual customer.
- Cart cookie: A unique token, valid for two weeks, which stores information about the contents of your shopping cart.
- _secure_session_id: A unique token, session-based.
- storefront_digest: A unique token with no expiry. If the store has a password, this is used to determine whether the current visitor has access.
CONFIDENTIALITY STATEMENT
This confidentiality statement applies to information on www.kabayanstore.eu and to information collected through the use of that website and stored in databases. The service provider of www.kabayanstore.eu complies with legal regulations to protect Users’ privacy.
All User information is kept strictly confidential and is available only to employees who need it to perform their duties. All employees and business partners are responsible for respecting the principles of privacy protection.
End Users are advised to read this confidentiality statement carefully. By accessing or using our website, the End User confirms that they have read, understood and agreed to all data confidentiality conditions and the terms of use of www.kabayanstore.eu.
If the End User does not agree with this Confidentiality Statement, they are advised to leave the website and not access or use www.kabayanstore.eu.
All the information mentioned above, including information required under the Consumer Protection Act, is contained in these General Terms and Conditions.
QUESTIONS AND CONTACT INFORMATION
If you would like to access, correct, amend or delete any personal information we hold about you, submit a complaint or simply request further information, please contact our privacy compliance officer at kabayanasianfoodstore.ck@gmail.com.
DATA PROTECTION AND PRIVACY POLICY
The Data Protection and Privacy Policy is the fundamental document describing the purposes and objectives of collecting, processing and managing personal data, as well as ensuring an adequate level of data protection, hereinafter referred to as the “Policy”.
To ensure fair and transparent processing, FIL-AVSO Air Tech d.o.o. provides clear information about the processing and protection of the personal data it collects and processes, and enables straightforward oversight and management of personal data and consent.
This Policy has been prepared in accordance with applicable regulations, Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR), and the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18).
The following sections contain information about privacy protection when using this website and information about internet cookies.
PRIVACY PROTECTION
This section describes how your personal data is handled when you use the online store www.kabayanstore.eu.
Personal data means information that identifies you, including your first and last name, email address, home address and telephone number. It also includes information that is not generally publicly available and that FIL-AVSO Air Tech d.o.o. receives and processes during your use of the online store.
Personal data is collected exclusively when Users voluntarily provide it, for example by completing an online form or subscribing to the newsletter. Non-personal information and data may be collected automatically through cookies.
REASONS WHY WE PROCESS PERSONAL DATA
To enter into and fulfil contractual obligations, FIL-AVSO Air Tech d.o.o. processes personal data when carrying out the following activities:
- Creating customer accounts.
- Processing orders.
- Delivering or dispatching ordered parcels.
- Sending commercial communications by email, telephone, post or courier, within the scope of the consent given.
- Responding to enquiries.
- Resolving disputes or complaints.
- Conducting sales and marketing activities.
FIL-AVSO Air Tech d.o.o. will keep your personal data confidential and will not distribute, publish, provide it to third parties for use, or otherwise make it available to any third party without your prior consent.
Every visitor has the option to register on www.kabayanstore.eu, allowing them to purchase products more quickly.
If you decide to become a registered User of www.kabayanstore.eu, we need to process your information to identify you as a User of the online store and grant you access to the various features, products and services available to registered Users. You can cancel your registered account by contacting our customer service team.
However, visitors to www.kabayanstore.eu can also make purchases without registering.
As a User of www.kabayanstore.eu, you may choose not to register. In that case, you will not be able to use certain features available through registration. If you do not wish to register when making a purchase, you must still enter the basic information required for delivery or dispatch of the products and, depending on the payment method and country, the information needed to process payment.
DATA WE COLLECT
When you visit and browse www.kabayanstore.eu, we will process access data, server log files and cookies collected in this context to make our website, its content and the features you use available to you, and to ensure the stability and security of our IT systems and databases.
The legal basis for processing data when you visit www.kabayanstore.eu is Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR): processing necessary for legitimate interests, namely ensuring the technical availability of the website.
For its business operations, FIL-AVSO Air Tech d.o.o. collects the following information:
- First and last name.
- Permanent, temporary or residential address.
- Delivery address.
- Email address.
- Contact telephone number.
- Chosen account password.
- Information about ordered products, such as item numbers and sizes.
- Payment information.
- Information about returns and complaints, such as reasons for returns and notifications of defects.
- Order numbers.
- Shipment tracking numbers.
During visits to our website and online store
You can visit www.kabayanstore.eu without providing information about yourself. In that case, we will collect technical access data that your browser automatically transmits to our server when you browse our website. Access data includes the following information:
- The time and date of access.
- The address of the website you have accessed and are accessing.
- The content of the request, including the addresses and names of requested files.
- Information about the browser and operating system used, including versions and language settings.
- Online identifiers, such as your IP address, device identification and session IDs.
- Error messages, where applicable, if the requested content cannot be displayed.
- The last page you visited from which a link directed you to our website.
When you visit our website, your access data will automatically be stored in our server’s log files and subsequently anonymised by shortening or deleting your IP address. Following this process, it will no longer be possible to identify you from the server log files.
When you visit www.kabayanstore.eu, we will also collect information that you provide directly by using the available features. For example, we will learn which products interest you when you use the search function.
Data we collect when you contact us
We will collect the communication data you provide when you contact us through the contact form on our website, by email, by telephone or by other means. Depending on the channel you use, this may include your contact details, such as your email address or telephone number, and the content of your message.
We will also use features offered by social networks such as Facebook and Instagram to interact with our customers. Please note that FIL-AVSO Air Tech d.o.o. has no influence over the terms of service or data processing policies of social networks. Please therefore carefully consider the personal information you provide to us through social networks.
3.6. Data we collect when you subscribe to the newsletter
If you subscribe to the newsletter of www.kabayanstore.eu, we will store the information you provide for that purpose, namely your email address, to send you the newsletter.
You can unsubscribe from the newsletter of www.kabayanstore.eu at any time. To unsubscribe, use the unsubscribe link at the bottom of each newsletter.
HOW WE USE COLLECTED DATA
We process your data to fulfil the contracts we have entered into with you and provide the services and products you have requested. The purpose of processing is based primarily on the specific terms of the contract. Further details about the purpose of data processing can be found in the General Terms and Conditions of Use of www.kabayanstore.eu.
We also process your data to provide customer support when you use www.kabayanstore.eu. This may include:
- Processing requests submitted to our customer service team.
- Providing non-commercial service communications, such as security information and technical support.
Depending on your chosen payment method, the information required for payment will be forwarded to the contractual partner responsible for processing the payment. The payment service provider collects the information within its own card payment application, and its privacy notices apply in that case. FIL-AVSO Air Tech d.o.o. does not have access to the information required for payment and does not store it.
The legal basis for processing data when processing an order, fulfilling a sales contract and transferring your data to external payment service providers is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR): processing necessary to enter into and perform a contract.
We will use the information you enter, such as information about ordered products and returns, for internal statistical purposes and market research. Before using it, we will anonymise the information by removing all personal data, for example by replacing your name and other identifying information with random data.
This allows us to measure which pages and products in our online store are popular, which devices our Users generally use and which regions our website is accessed from. The information collected helps us continuously optimise our existing offering and develop new features and services.
The legal basis for processing this type of data is Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR): processing necessary for legitimate interests, namely improving website functionality and the quality of our offering.
WHEN WE WILL SHARE PERSONAL DATA
In principle, we will share your information only if:
- You have explicitly consented in accordance with Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR).
- Sharing is necessary under Article 6(1)(f) to establish, exercise or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in your information not being shared.
- Sharing is necessary to comply with a legal obligation under Article 6(1)(c) or (e) of the General Data Protection Regulation (GDPR), particularly if we are required to provide information to a public authority.
- Sharing is permitted by law and necessary under Article 6(1)(b) of the General Data Protection Regulation (GDPR) to perform a contract with you or take steps at your request before entering into a contract.
Some of the processing activities described here may be carried out by external service providers acting on our behalf. The service providers referred to in this document may include data centres that store and maintain our websites and databases, IT service providers that maintain our business systems, and consultancy firms.
If and to the extent that we share data with our service providers, that data may be used only to provide their services. Our contracted service providers will process your data as part of processing and fulfilling your order, in accordance with Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR).
Contracted service providers are carefully selected business partners. They are contractually bound by our instructions, implement appropriate technical and organisational measures to protect data subjects’ rights, and are subject to regular checks conducted by us.
HOW LONG WILL WE KEEP YOUR DATA?
Unless otherwise stated here, your data will be stored only for as long as necessary to fulfil our contractual or legal obligations, achieve the purposes for which the data was originally collected, or for as long as we have a legitimate interest in storing it.
The length of time we retain your data depends on the purpose for which we process it.
To manage your registration as an online store User
We will process your data for as long as you remain a registered User, or until you decide to cancel your registration.
To develop, fulfil and perform a sales or service contract
We will process your data for as long as necessary to manage your purchase of products or services, including any potential returns, complaints or claims relating to that purchase.
For customer support
We will process your data for as long as necessary to respond to your request or report.
For marketing
We will process your data until you unsubscribe or cancel your newsletter subscription. We will also show you personalised advertisements until you change your settings or withdraw permission on your mobile device or in your browser. If you participate in promotional activities, we will retain your data for six (6) months following the end of the relevant activity.
For usability and quality analysis
We will process your data periodically for the duration of the relevant activity or quality study, or until we anonymise your browsing data.
In all other cases, your personal data will be deleted, except for data that we must retain in accordance with statutory retention periods. In those cases, however, we will restrict processing, meaning that your data will be used only to meet legal obligations.
Your orders, payment information and other information, where applicable, are generally subject to statutory retention requirements, which require us to retain such information for up to ten years.
Even if data is not subject to statutory retention requirements, we may refrain from deleting it in circumstances permitted by law and restrict its processing instead. This may apply particularly when the data may be needed for further contractual processing, to exercise rights or for legal defence. The duration of the processing restriction will depend on statutory limitation periods.
YOUR DATA PROTECTION RIGHTS
We undertake to keep your personal data confidential and ensure that you can exercise your rights. With this in mind, we, as joint controllers, have agreed that you may exercise your rights free of charge by writing to kabayanasianfoodstore.ck@gmail.com and simply informing us of the reason for your request and the right you wish to exercise.
If we consider it necessary to identify you, we may ask you to provide a copy of a document confirming your identity.
You always have the right to receive information about our processing of your personal data. When providing such information, we will explain the data processing procedure and provide an overview of the personal data we store about you.
In particular, regardless of the purpose or legal basis we use to process your data, you have the following rights:
- To request access to the information we hold about you. Please remember that, if you are a registered User of the platform, you can review this information in the personal information section of your account.
- To request correction of the information we hold about you. If you are a registered User of the platform, you can also access the relevant personal information section to change or update your details. Whenever you actively provide information about yourself through any procedure, you guarantee that it is truthful and accurate and undertake to inform us of any changes or amendments. You are solely responsible for any loss or damage caused to the platform, the party responsible for the platform or any third party by submitting incorrect, inaccurate or incomplete information in registration forms. As a general rule, you must provide only your own information and not that of third parties, except to the extent permitted by this Privacy and Cookie Policy.
- To request deletion of your personal data to the extent that it is no longer necessary for the purpose for which we need to continue processing it, as explained above, or when we are no longer legally permitted to process it.
- To request that we stop or restrict the processing of your personal data. In certain circumstances, this includes asking us to suspend processing temporarily or retain your data for longer than otherwise necessary.
You have the right to data portability. This means that, at your request, we will provide you with a digital copy of the personal data you have supplied to us.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the Croatian Personal Data Protection Agency, Martićeva 14, 10000 Zagreb, email: azop@azop.hr.
RIGHT TO WITHDRAW CONSENT AND RIGHT TO OBJECT
If you wish to exercise the right to withdraw consent or object as described below, please contact us at kabayanasianfoodstore.ck@gmail.com.
Withdrawal of consent
Article 7(3) of the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, gives you the right to withdraw any consent you have previously given. This means that we will no longer continue processing data on the basis of that consent. Withdrawal of consent will not affect the lawfulness of processing carried out on the basis of your consent before it was withdrawn.
Objection to the processing of your data
If we process your data on the basis of legitimate interests under Article 6(1) of the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, you have the right under Article 21 to object to the processing on grounds relating to your particular situation or where your objection concerns direct advertising.
DATA SECURITY
We use all appropriate technical measures to ensure data security, particularly to protect your data against risks during transmission and against unauthorised access by third parties. These measures will be adjusted from time to time in line with the latest developments.
To protect the personal data you enter on our website, we use the Secure Sockets Layer (SSL) protocol, which encrypts your data during transmission.
CHANGES TO THE DATA PROTECTION AND PRIVACY POLICY (GDPR)
We will update the Data Protection and Privacy Policy periodically when adapting to new versions of the website and online store or when legislation changes. Material changes will be documented in this document, and we will obtain our Users’ consent where necessary.
In any event, we recommend reviewing this Data Protection and Privacy Policy from time to time in case we make minor changes or introduce interactive improvements, using it as a reference point for information on our website.