Privacy Policy & GDPR Compliance

1. Who We Are

Bling Authority is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your personal information.

Data Controller: Bling Authority
Address: Namestie SNP 23, 811 01, Bratislava, Slovakia
ICO: 57176957
DIC: 1130644812
Contact: support@bling-authority.com

2. What Personal Data We Collect

We collect the following types of personal data:

• Account Information: Name, email address, phone number
• Billing & Shipping: Address, payment information
• Order History: Purchase records, preferences
• Website Usage: Cookies, IP address, browsing behavior
• Communications: Customer service interactions, reviews

3. Legal Basis for Processing

We process your data based on:

• Contract Performance: To fulfill orders and provide services
• Legitimate Interest: For marketing, fraud prevention, and business operations
• Consent: For marketing communications and cookies
• Legal Obligation: For tax and accounting requirements

4. How We Use Your Data

• Process and fulfill your orders
• Provide customer support
• Send order confirmations and shipping updates
• Improve our products and services
• Send marketing communications (with consent)
• Prevent fraud and ensure security
• Comply with legal obligations

5. Data Sharing

We may share your data with:

• Service Providers: Payment processors, shipping companies, email services
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger or acquisition

We never sell your personal data to third parties.

6. Your GDPR Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ('right to be forgotten')
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing or cookies

7. Data Retention

We retain your data for:

• Account Data: Until account deletion or 3 years of inactivity
• Order Data: 7 years for tax and legal compliance
• Marketing Data: Until you unsubscribe or object
• Website Analytics: 26 months maximum

8. Cookies Policy

We use cookies to:

• Remember your preferences and shopping cart
• Analyze website performance
• Provide personalized experiences
• Enable social media features

You can manage cookie preferences in your browser settings or through our cookie banner.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• SSL encryption for data transmission
• Secure payment processing
• Regular security audits
• Staff training on data protection
• Access controls and monitoring

10. International Transfers

Your data may be transferred outside the EU to service providers in countries with adequate protection or under appropriate safeguards such as Standard Contractual Clauses.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without parental consent.

12. Contact Us

For any privacy-related questions or to exercise your rights, contact us:

• Email: support@bling-authority.com

13. Complaints

If you're not satisfied with our response, you have the right to lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR).

14. Updates to This Policy

We may update this policy periodically. We will notify you of significant changes via email or website notice.