Privacy Policy

Introduction

In accordance with Article 13 of Regulation (EU) No. 2016/679 (the "GDPR"), Spectacles Shop Trading LIMITED informs you that your personal data, collected from you or from third parties, will be processed in compliance with the GDPR and in accordance with this privacy notice.

Data Controller

The Data Controller is Spectacles Shop Trading LIMITED, with headquarters at Room 1508, 15th Floor, Arland Center Office Tower II, 625 Nathan Road, Hong Kong. Phone: +852 1234 5678; email: info@spectaclesshop.com. The updated list of Data Processors is available at the Data Controller's office.

Data Protection Officer

The Data Protection Officer (DPO) can be contacted at: dpo@spectaclesshop.com.

Purpose and Legal Basis of Processing

Your personal data will be processed for the following purposes: (a) execution of contracts with customers and suppliers; (b) response to information requests and contact forms; (c) sending newsletters and promotional communications with prior consent; (d) compliance with legal obligations; (e) legitimate interests such as fraud prevention and website security. The legal basis for processing is Article 6 of the GDPR (consent, contract, legal obligation, legitimate interest).

Recipients or Categories of Recipients

Your personal data may be made accessible to or communicated to the following subjects, who will be appointed by the Data Controller as Data Processors or will act as independent controllers: IT service providers, hosting providers, email service providers, and legal/tax consultants. In any case, personal data will not be disseminated.

Transfer of Data to Non-EU Countries

Your data will circulate within EU countries. In addition, data may be communicated to subsidiaries or affiliates of the Data Controller located in non-EU countries, occasionally and exclusively when the transfer is necessary for the performance of a contract concluded with the data subject, or for the performance of pre-contractual measures adopted at the data subject's request (Article 49, paragraph 2, letter b, GDPR).

Data Retention Period

Personal data will be kept for a maximum period equal to the statute of limitations for the rights actionable by the Data Controller, as established from time to time by applicable legislation. Data processed for marketing purposes will be kept for a maximum of 24 months, or until the consent is revoked.

Rights of Access, Erasure, Restriction and Portability

Data subjects are granted the rights set out in Articles 15 to 20 of the GDPR. By way of example, each data subject may exercise the following rights:

• a) Obtain confirmation as to whether or not personal data concerning him or her are being processed;
• b) If processing is ongoing, obtain access to the personal data and information about the processing, and request a copy of the personal data;
• c) Obtain rectification of inaccurate personal data and integration of incomplete personal data;
• d) Obtain, where one of the conditions set out in Article 17 of the GDPR applies, erasure of the personal data concerning him or her;
• e) Obtain, in the cases provided for in Article 18 of the GDPR, restriction of processing;
• f) Receive the personal data concerning him or her in a structured, commonly used and machine-readable format, and request their transmission to another controller, where technically feasible.

Right to Object

Each data subject has the right to object at any time to the processing of his or her personal data carried out for the pursuit of a legitimate interest of the Data Controller. In the event of an objection, personal data will no longer be processed, unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of a right in legal proceedings.

Right to Withdraw Consent

Where consent is required for the processing of personal data, each data subject may also withdraw the consent already given at any time, without affecting the lawfulness of the processing based on the consent given before the withdrawal.

Right to Lodge a Complaint

Each data subject may lodge a complaint with the supervisory authority in the case of a breach of his or her rights under the GDPR. The list of supervisory authorities is available on the European Data Protection Board website.

Exercise of Rights

The rights of the data subject may be exercised through the contact details provided above.

Contact Us

For any information, please contact us at the following email address: info@spectaclesshop.com