Tirana
 
+355 4 453 5115
0Cart

Privacy Policy

The Marketplace Privacy Policy 

Effective as of: 01.05.2022

We, Super Mart Albania Shpk (hereinafter the “Company” or “Marketplace” or “we” or “us”), Registry Code M21525018U, seat and registered address: Rruga “Andon Z. Cajupi”, Hyrja Pallati Nunmer 3, Hyrja Nr. 2, kati 3, Tiranë, Shqipëri; e-mail: [email protected], collect and process Personal data of individuals, contracting parties or other contacts on the market we provide our services (“You”). We are aware of the responsibility that we have to take care of and protect Your Personal data, to comply with the applicable legislation in the field of privacy and protection of Personal data.

 With this Privacy Policy (the “Policy”), the Marketplace describes the way we collect and use Your personal information. The Policy describes what methods are used and for what purposes the Marketplace, respectively our service providers, process the information collected from and about You while offering our services and concluding agreements or when You are visiting or using our services through our website, mobile app and/or through customer service or any other channels as we may make available, including providing services of the Marketplace through third parties. We also explain what data subjects’ rights are and our obligations and liability.

 Important! Read this Policy carefully. It provides important information about how we process Personal data and explains Your legal rights. This Policy is not intended to change the terms and conditions of any agreement entered into with us, nor the rights that You have under the applicable data protection laws.

 We do not provide services to people under the age of 18. If You are under the age of 18, please do not provide us with any of Your Personal data. We ask for Your assistance to keep Your Personal data up to date by informing us of any changes to Your Personal data.

By providing Your Personal data, You trust us and voluntarily accept the terms and conditions of this Privacy Policy.

 If You provide information about another person on their behalf, You shall ensure that that person has been provided with this Privacy Policy and that the requirements of the applicable laws have been complied with before providing the information.

 1. DATA PROTECTION OFFICER

The Data Controller is Super Mart Albania Shpk (hereinafter “Data Controller”).

Contact person (our data protection officer) for any comments, questions or concerns:

Aida Alijaj e-mail: [email protected]

 Your data processors will be any respective seller on the Marketplace You choose to buy products from. This data is necessary for the seller to be able to fulfil the order.

 2. TERMS AND DEFINITIONS USED

The most fundamental definitions with respect to this Policy are as follows:

“Group” – Super Mart Albania Shpk and its affiliated companies, including Super Mart OÜ and other subsidiaries.

 “Data Controller” – the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Your Personal data.

“Personal data” – any information that concerns You, including information obtained from public databases and public channels and information lawfully obtained from third parties, through which You can be identified directly or indirectly, in particular by an identifier such as names, Personal ID No., location data, phone, e-mail or one or more markers specific to Your identity.

“Processing of Personal data” – any action or set of actions that can be performed on Your Personal data by automatic or other means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure or transmission, dissemination, update or combination, blocking, erasure or destruction of data.

 “Pseudonymization of Personal data” or “Anonymization of Personal data” – pseudonymization and anonymization are operations that are alternatives to erasure or destruction of Your Personal data. These operations remove all elements that directly or indirectly identify You. Pseudonymized or anonymized data does not constitute Personal data.

 “Regulation” – General Data Protection Regulation (EU) 2016/679.

 3. GENERAL PRINCIPLES OF PROCESSING PERSONAL DATA

 3.1 We Process Your Personal data pursuant to effective law, including the Regulation, this Policy and the terms and conditions of the Marketplace.

 3.2 We process Your Personal data in a reliable and confidential way. We respect each person’s right to the protection of their Personal data, and we shall do our best to ensure that Personal data collected by us is well protected. We regularly evaluate the risks associated with the Processing of Personal data and shall apply appropriate mitigation strategies to hedge risks.

 3.3 Data protection is an integral part of our services and is overseen by our data protection officer. We ensure that our employees know and comply with the requirements of data protection. We expect, instruct and train our employees to respect our privacy requirements.

 3.4 We process Your Personal data lawfully and purposefully. We set clear goals for the Processing of Personal data and process Personal data for these purposes only. We do not collect or process the data that we do not need. We have the right to delete/blur or use other ways to make data/documents presented to us unreadable that are not necessary for the provision of our services.

 3.5 We process Your Personal data in a transparent and fair way. We ensure an appropriate secure, honest and lawful manner of processing Your Personal data to prevent the unauthorized disclosure or inappropriate use of Your Personal data.

 3.6 We shall store Your Personal data only for as long as the retention of data is required by law or the agreement or is necessary for the provision of our services and/or our legitimate interest. At the end of the retention period, we shall permanently erase Your Personal data or anonymize it.

 3.7 We do our best to make sure that Your Personal data we process is accurate and limited to what is necessary.

 4. HOW WE COLLECT YOUR PERSONAL DATA

We may collect and process Your Personal data in the following cases:

  • If You contact us via any Available Channels to request information about our products and services;
  • If You provide Your or Your contact persons´ or representatives´ details through any of our Available Channels;
  • If for certain data a written consent is required by law, You ticking the appropriate box(es), in which case the consent is considered equivalent to written consent;
  • Through inquiries in public registers;
  • If Your data is available during and on the occasion of an agreement for provision of services by the Controller;
  • If You respond to our direct marketing campaigns, for example by filling out a questionnaire or submitting data electronically;
  • If other legal entities, including partners, make a permitted transfer of Your Personal data to us.

5. THE CATEGORIES OF PERSONAL DATA WE PROCESS

5.1. In general, we collect Your personal data directly from You, so You decide what kind of information to provide to us. For example, the information we receive from You is as follows:

  • When You create a MyIute account, You send us Your e-mail address, first, middle and last name;
  • When You place an order, You provide us with the following information: the product You want, first and last name, delivery address, billing details, payment method, phone number, dates on bank cards.
  • creating and managing an account in the Marketplace platform;
  • processing of orders involving acceptance, validation, dispatch and invoicing for the products;
  • solving problems related to order cancellations or any other problems related to orders, purchased goods or services;
  • return of products in accordance with legal provisions;
  • reimbursement of the value of the products in accordance with the legal provisions;
  • support, including giving answers to Your questions in relation to Your orders or the goods and services of the Marketplace.
  • measures to protect the website and users of the Marketplace platform against cyber attacks;
  • measures to prevent and detect fraudulent attempts, including the transmission of information to competent public authorities;
  • management measures for various other risks.
  • companies of the group of companies to which the Marketplace belongs;
  • partners in the Marketplace platform;
  • courier service providers;
  • payment/banking service providers;
  • providers of marketing/telemarketing services;
  • providers of market research services;
  • insurance companies;
  • IT service providers;
  • other companies with which we can develop joint programs for the sale on the market of our goods and services.

 

5.2. In addition, we suggest that You register on the Marketplace platform through Your Facebook or Google account. You can view Facebook and Google's privacy policies by following the following links:

https://www.facebook.com/about...

https://policies.google.com/pr...

 

5.3. In addition, we may collect and subsequently process certain information about Your browsing behavior on our website or using a mobile app to personalize Your online experience and prepare suggestions that are tailored to Your account. We invite You to learn more about this by reading the section on processing below.

 5.4. On our website and in the mobile app, we may store and collect information through cookies and similar technologies under the Marketplace Cookie Policy.

 5.5. We do not collect or otherwise process sensitive data included in special categories of personal data in the Regulation. Furthermore, we do not wish to collect or process data of minors under the age of 18.

 

6. THE PURPOSE AND GROUNDS OF THE PROCESSING

 We will use Your personal data for the following purposes:

 6.1. Providing Marketplace services for Your benefit

This general objective may include, where appropriate, the following:

 The processing of Your data for these purposes is in most cases necessary for the conclusion and performance of a contract between the Marketplace and You. In addition, processing under the applicable legislation, including tax and accounting legislation, is required to fulfil these objectives.

 6.2. Improving our services

We would always like to offer You the best online shopping experience. For this purpose, we may use certain information about Your buyer behavior, invite You to complete surveys of Your satisfaction after the completion of an order, or conduct directly, or with the help of partners, market research and research.

 These activities are based on our legitimate interests in doing business, always making sure that Your fundamental rights and freedoms are unaffected.

 6.3. Marketing

We would like You to always be aware of the best offers for the products/services You might be interested in. In this regard, we may send You messages, via e-mail /SMS/mobile etc. containing general and thematic information, information about similar products or products complementing the products You purchased, information about offers and promotions, information about products added in the Marketplace or if You have shown an interest in purchasing them, and other business communications such as market research and consumer opinion surveys, and we may present personalized recommendations on the website and mobile app. To provide You with information of interest to You, we may use certain data about Your buyer behavior (for example, viewed products/products added to the list of desired products/purchased products) to create an account. We always ensure that such processing is carried out in compliance with Your rights and freedoms and that the decisions taken in relation to them do not have any legal consequences for You and do not affect You in such a way to a significant extent.

 In most cases, we require Your prior consent to send You marketing communications. You can change Your mind and withdraw Your consent at any time by changing the settings in Your account.

 In certain situations we can base our marketing activities on our legitimate interest in promoting and developing our commercial activity. In any case, when we use Your information about our legitimate interests, we take care and take the necessary measures to ensure that Your fundamental rights and freedoms are not affected. However, You may at any time, using the means described above, stop processing Your personal data for marketing purposes and we will respond to Your request.

 6.4. Protecting our legitimate interests

There may be cases where we use or transmit information to protect our rights and commercial activities.

 These may include:

 The main reason for these types of processing are our legitimate interests related to the protection of our commercial activity by making it clear that we ensure that all measures taken by us guarantee a balance between our interests and Your fundamental rights and freedoms.

 Furthermore, in some cases, our processing is based on legal provisions such as the obligation to protect the goods and values provided for by the applicable legislation in this regard.

 7. PERIOD OF KEEPING YOUR PERSONAL DATA

As a rule, we store Your personal data for as long as You have a Marketplace account. You may always ask us to delete certain information or close Your account, and we will respond to this request by retaining certain information, even after closing the account, when applicable law or legitimate interests so require.

 

8. WHERE WE SEND YOUR PERSONAL DATA

8.1. As the case may be, we may transfer or access some of Your personal data to the following categories of recipients:

 8.2. If we are legally obliged, or if this is necessary to protect our legitimate interests, we may disclose certain personal data to public authorities.

 8.3. We guarantee that access to Your data by third-party individuals is carried out in accordance with the legal provisions in the field of data protection and confidentiality of information, based on contracts concluded with them.

 

9. TO WHICH COUNTRIES DO WE TRANSFER YOUR PERSONAL DATA

9.1. We currently store and process Your personal data in Albania.

However, some of Your personal data may be transferred to entities located in the European Union or outside the European Union, including in countries for which the European Commission has not recognised an adequate level of personal data protection.

 9.2. We will always take steps to ensure that any international transfer of personal data is carefully guided in order to protect Your rights and interests. Transfers of data to service providers and other third parties will always be protected.

 9.3. You may contact us at any time using the contact details mentioned above to find out which countries we transmit Your data to and what are the safeguards we apply to these data transfers.

 10. PROTECTING THE SECURITY OF YOUR PERSONAL DATA

10.1. We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures in compliance with industry standards.

 10.2. We store Your data on secure servers using the latest encryption algorithms and ensure backup storage.

 10.3. Despite the measures we apply to protect Your personal data, we are aware that, in principle, the transmission of information over the Internet or other public networks is not completely safe, and there is a risk that the data may be reviewed and used by unauthorised third parties. We cannot take responsibility for these vulnerabilities on systems that are not under our control.

 11. YOUR RIGHTS TO PERSONAL DATA PROTECTION

11.1 You have certain rights regarding Your Personal data, such as the right to:

(a) ask us to provide You with additional details on how Your data is used;

(b) ask us to give You access to Your Personal data and to provide You with a copy of it;

(c) receive Personal data that concerns You and that You have provided to us in a structured, widely used and machine-readable format and – where technically possible – to transfer this data to another controller without hindrance if the processing of Your data is based on Your consent or agreement and is performed by automated means;

(d) ask us to update any inaccuracies in the data that we store and to correct / update the same;

(e) ask us to erase or anonymize all data about You for which we no longer have a legal basis to process;

(f) when the processing is based on consent and in connection with direct marketing, You may withdraw Your consent in order for us to stop that particular processing henceforth;

(g) object to any processing for the purpose of automated individual decision-making (including profiling) when it significantly affects You, while You have the opportunity to exercise Your right to request human intervention by the controller, the right to express Your views and to challenge the decision;

(h) ask us to limit the processing of Your data, e.g. while a complaint is being investigated.


11.2 Procedure for exercising the rights:

 11.2.1 You may submit a request for exercising Your rights to the Contact Person in one of the following ways: on site, by mail (including e-mail), phone or fax.

 11.2.2 Each one of Your applications, inquiries or requests is accepted with an incoming number, it is reviewed, we verify Your identity and the right that You want to exercise, and we answer within one month of receipt. In more complex cases or during the receipt of numerous requests, this period may be extended by another two months, of which we will inform You. In the event that there are reasons to reject the request, we will state these reasons to the applicant in writing.

 11.2.3 The exercise of these rights is subject to certain exceptions, for example when the public interest must be protected (e.g. in preventing or detecting crimes), or our interests, or the rights and freedoms of others.

 11.3. If You are not satisfied with the processing of Your data or with our response in exercising these rights, You have the right make a complaint to the competent supervisory authority or to the court. Please try to resolve the issue with us beforehand.

 

12. AMENDMENT OF PERSONAL DATA AND TERMINATION OF PERSONAL DATA PROCESSING

Inform us immediately of any changes and inaccuracies in Your Personal data submitted to us. At our request, submit to us a document that proves the changes in Your Personal data (e.g. name change certificate).

13. POLICY UPDATE

We may make changes to this Policy from time to time. Changes to this Policy will take effect when the revised Policy is published on the website, and an update notification will be posted on the Website.