Why do we use your personal data?

To protect our customers, users, visitors, assets, and businesses against violence, fraud, theft, misuse, and other harmful activities, Bumbacel has implemented various security and safety measures. Some of these measures will require the collection and processing of personal data.

We will use your personal data to generate and send advertisements and promotions, including style and shopping recommendations, notifications, information, surveys, and invitations through various communication channels.

Advertisements, promotions, and other direct marketing communications will be distributed based on your preferences through email, text messages, phone calls, or postal mail, as well as displayed in your mobile app, social media channels, or web browser.

To optimize the online customer experience, we offer personalized advertisements and promotions resulting from algorithmic analysis and predictions of your preferences, interests, and behavior.

To be more efficient in our marketing communication, we collaborate with various social media networks, search engines, and advertising networks (“Advertising Partners”).

Read more about our Advertising Partners below.

How will your data be used?

The way we process your data and the specific personal data we use vary depending on the application and the intended use. For example, we may use order history, payment data, and shopping habits to detect online losses or fraud.

We may also use personal data received from web cookies, pixels, plugins, or other web tracking technologies for the same purposes.

You can learn more about cookies in the Cookie section of this Privacy Policy.

In many of our stores, we use surveillance cameras to detect and prevent theft, fraud, and to improve the security of visitors and staff.

We use data obtained directly from you when you create an account, make a purchase, subscribe, sign up for newsletters, or interact with us in any other way.

We will never extract, use, and store personal data from data brokers or other external sources, nor will we have access to such data for marketing purposes unless explicitly stated.

Bumbacel collaborates with advertising partners such as Facebook, Instagram, TikTok, Pinterest, and YouTube for social media advertising and with Google for online advertising networks like Google Ads and Google Marketing Platform.

Advertising Partners use data provided by us and collected from cookies and other technologies to predict your preferences and interests, considering this when selecting ads in their online advertising network spaces. This is a common industry practice known as “retargeting.” Retargeting allows us to run the most relevant advertising campaigns for you, measure the effectiveness and coverage of advertising materials, and measure the performance of advertising partners and campaigns.

Advertising Partners use cookies and similar technologies to track the use of our sites and services by accessing data stored on your device or in applications.

Read more about cookies and other tracking technologies in the Cookie section of this Privacy Notice.

Each advertising partner is responsible for its own part of the processing as operators, including (if applicable) international transfers of personal data.

Advertising Partners

Bumbacel collaborates with advertising partners such as Facebook, Instagram, TikTok, Pinterest, and Google.

Our advertising partners allow us to identify and interact with the appropriate target audience, create and distribute personalized marketing content through various platforms and services. To choose content that matches your interests, we may use information obtained from you when you sign up for newsletters or create an account, become a member, or make a purchase from us. We may share this information and a customer identifier, such as an encrypted email address or device ID, with third parties such as Facebook and Google. The purpose is to display relevant ads on websites and third-party apps. For this, a match is made between your data and the third party’s database. If a match is found, you receive promotional and relevant content in your feed or search engine. If no match is found, your data is securely destroyed. We take the responsibility of protecting our customers’ personal data very seriously and want to assure you that this personal data is treated securely using a technique called hashing. This ensures that your data is mixed in a way that makes it unreadable to anyone other than the intended recipient, explicitly for this purpose.

We may also link this data across different devices you use, as well as processing data about ads, for example, if you clicked on an ad and then made a purchase. The purpose is to measure the impact of the ad and enable ad billing.

If you do not want us to communicate your data to third parties for this purpose, you can withdraw your marketing consent at any time by managing your consent in the cookie settings in the help section at the bottom of the first page.

Each advertising partner is responsible for its part of the processing as operators, including (if applicable) transfers of personal data to countries outside the EEA.

Who has access to your data?

We may share your personal data within Bumbacel whenever necessary to fulfill the intended purpose.

We may share your personal data with third parties for security and safety reasons. For example, we will share your data with companies that help us detect and prevent potential fraud and theft.

We may share relevant information with insurance companies for damage management and law enforcement agencies, to the extent required by legal obligations.

Such third-party recipients have an independent right and/or duty to process your personal data for their own interest or by legal obligation.

Personal data is also shared with providers who perform certain tasks on our behalf, such as data analysis and creating marketing content. Bumbacel is always fully responsible for its providers.

From time to time, we may share personal data with independent third parties, such as advertising partners, media agencies, and electronic communications providers. Please note that many of these recipients have an independent right or obligation to process your personal data as operators.

Except as specified in this document, we do not transmit, sell, or exchange data with any third party.

What is the legal basis for processing personal data?

We will obtain your consent before sending you newsletters by email.

We will ask for your consent in advance for marketing information based on cookie data or other tracking technologies.

If you are an account holder, you can receive updates from us through other channels, such as social media networks. For this processing, we rely on our legitimate interest as a society to promote our ads.

Unless there is a specific legal obligation, processing your personal data for security and safety purposes is based on our legitimate interest.

How to exercise your rights?

You have the right to exercise your rights against Bumbacel regarding the personal data in the possession and control of Bumbacel.

Personal data in our possession is data obtained directly from you when you shop with us, create an account or subscription, subscribe to newsletters, or when you interact with us through other online or offline means.

You have the right to withdraw your consent for marketing or to object if the processing is based on our legitimate interest at any time.

Withdrawing consent or objecting to additional marketing communication means stopping all future ads, promotions, and other marketing messages from Bumbacel, including the underlying processing of personal data for this purpose.

However, if you continue to receive marketing communications from us displayed in your social media feed or web browser, this is an issue between you and your platform provider.

You can revoke your consent or opt-out of other marketing communications through the following means:

Following the instructions in each marketing notification Modifying your account settings Configuring privacy settings on the social media platform or Contacting Customer Service

How long do we save your data?

We will retain your personal data no longer than necessary for each purpose.

We will keep images from our surveillance cameras for a maximum period of 30 days, unless we are required by law or public authority to keep and/or process data for a longer period.

Cookies

If you leave a comment on our site, you can opt-in to saving your name, email address, and website in cookies. These are for your convenience, so you do not have to fill in your details again when leaving another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and screen display options. Login cookies are kept for two days, and screen display option cookies are kept for one year. If you select “Remember Me,” your login cookies will be kept for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Comments

When visitors leave comments on the site (product reviews), we collect the data shown in the comments form, the visitor’s IP address, and the user agent string to help detect spam.