Privacy Policy
This privacy policy provides information about how your data is processed by Filinox. It applies to all services and products offered by Filinox.
This privacy policy explains:
-
What data Filinox collects
-
How Filinox uses your data and why it is necessary
-
Your rights regarding data protection and your options
-
The technologies and data used to provide you with a secure and seamless shopping experience
-
The technologies and data used for advertising, especially through tracking tools
1. What data does Filinox process?
Filinox offers a variety of services through its website. When you contact us—online, by phone, or otherwise—various data is collected. Most of the data we process is provided directly by you when using our services. For example, when you create an account and register your name and email address, we receive this data. We also collect technical data from your device, and we may receive additional data from third parties.
By "your data," we mean personal data—information that allows us to identify you. Information that cannot be linked to you personally is considered non-personal data.
Filinox processes the following types of data:
Profile data
This generally includes your name, email address, and chosen password. It may also include demographic data such as your age, gender, and personal interests (e.g., preferred brands or product types).
Contact information
Depending on how you reach out to us, we store your contact details—such as your postal address, phone number, Facebook ID, username, etc.
Interest data
When you use Filinox services, we collect data about the types of products, brands, or topics you're interested in. This helps us personalize your experience, for instance, by prioritizing the display of relevant products during your future visits.
Geolocation data
For specific purposes, we may process your location data when you activate location services. We do not create movement profiles from this data—it is used solely to provide location-based services or delivery information.
2. How do we use your data?
Filinox processes your data in compliance with data protection laws and only for specific purposes. These include order processing, delivery, and after-sales service. We process your data only to the extent necessary to fulfill our contractual obligations and provide the requested service.
When you create an account, we store your personal details and assign a Customer ID to set up your account.
To protect your data during registration or ordering, information is transmitted securely using encryption (SSL technology). This ensures that your data cannot be accessed by third parties.
Your data may also be used for data analysis, market research, or advertising purposes—for example, in personalized promotions, usage analysis, or demographic research to support targeted advertising.
The use of your data is based on your consent. If you have given consent for the processing of your personal data, this forms the legal basis of the processing. This consent may cover newsletter subscriptions, surveys, email communications, or credit checks.
3. What are my data protection rights?
Under applicable law, and within its scope, you have the following rights regarding your personal data:
-
Right of access (Art. 15 GDPR)
-
Right to rectification (Art. 16 GDPR)
-
Right to erasure (Art. 17 GDPR)
-
Right to restrict processing (Art. 18 GDPR)
-
Right to data portability (Art. 20 GDPR)
-
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
-
Right to withdraw consent (Art. 7(3) GDPR)
-
Right to object to certain data processing (Art. 21 GDPR)
Your data is stored only as long as necessary to fulfill the purposes outlined in this policy, particularly in meeting our contractual or legal obligations. In some cases, data may be retained longer if required by law or necessary for legal claims.
If you close your customer account, we will delete all personal data, unless legal obligations require us to retain it, in which case the data will be blocked and excluded from further use.
4. Information about Google Analytics
Currently, Google Analytics does not offer native GDPR compliance tools. The regulation requires:
-
Cookies to be limited to a lifespan of under 13 months
-
Anonymization of IP addresses transferred to Google Analytics
-
The deletion of all personal data and any consent-based tracking data
5. Information about cookies
Here’s a simplified overview of the cookies we use on our website:
Essential cookies:
-
A session cookie is used to identify the user and personalize their navigation. It disappears once the browser is closed.
-
A cookie consent is stored to remember the user's choice regarding cookie usage, and it remains valid for one month.
-
A PrestaShop-related cookie is linked to the browser to help retain the shopping cart and other site features. It expires after three weeks.
Analytical cookies:
-
We use Google Analytics to track and understand user behavior on our website.
-
The session cookie duration is one day.
-
The browser cookie remains valid for two years.
Session cookie duration: 1 day
Browser cookie duration: 2 years