Dublino is committed to protecting your personal data. This notice describes our data processing practices under Regulation (EU) 2016/679 (GDPR).
1. Data controller
Your personal data is controlled by Dublino. See the Contact page for our details.
2. Data processed and purposes
To fulfil orders we process: name, shipping and billing address, email and phone number. For the newsletter we process your email. Technical data (e.g. IP address, browser data) is generated while you use the site.
3. Legal basis
Performance of a contract (orders), compliance with a legal obligation (e.g. accounting retention), and your consent (e.g. newsletter, marketing).
4. Transfers and processors
We share your data, to the extent necessary to fulfil your order, with the courier and the payment provider. We work with our processors under appropriate contractual safeguards.
5. Retention
Accounting records are kept for the statutory period (typically 8 years). Consent-based processing continues until you withdraw consent.
6. Your rights
You have the right of access, rectification, erasure ("right to be forgotten"), restriction, objection, and data portability. Exercise them via the Contact page.
7. Remedies
You may lodge a complaint with the competent data protection authority or seek a judicial remedy.