LORLUM Co ltd. with registered offices in Prawet, Bangkok ( BKK ) - 10250, Thailand in its quality as data controller (“LORLUM”) which can be contacted at the following email address privacy@lorlum.com informs you, according to the EU Regulation No. 679/2016 on the processing of personal data ("GDPR") that it processes the personal data provided by you ("Data") when you purchase or enjoy LORLUM products or services, you contact LORLUM or register and create a personal account on the website www.lorlum.com (“LORLUM Website”) with the modalities set out in this privacy information notice (the “Privacy Notice”).
LORLUM collects and processes the following Data: your identifying Data, such as the name and surname, the date of birth. your contact information, including the postal and/or shipping address, telephone number, and e-mail; the details of your purchases and the services used by you, including the spending volume and items purchased. the information relating to payments done for online purchases; we collect the details of your personal account, LORLUM uses some cookies and other tracking technologies to automatically collect certain information relating to the way in which you use the LORLUM Website such as the IP address or the URL origin. For further information on the cookies and tracking systems that LORLUM uses on its Website, please consult the LORLUM’s Cookie Policy; and any other information that you provide in relation to a request of assistance or that can be necessary to benefit from LORLUM’s services in order to allow LORLUM to better meet your needs. If you provide us any personal data relating to a third-party (for example, your family members or any person to whom you would like to make a LORLUM’s gift), please be sure that they agree on any processing of their personal data by LORLUM. In any case, you should communicate to such third-party individuals that you provided their personal data to LORLUM, also informing them on the purposes and modalities of the processing as well as on their privacy rights by providing them with a copy of this Privacy Notice
ORLUM collects your Data when you visit LORLUM Website, including by registering and accessing LORLUM’s services through your personal account, and when you make your purchases online. Data is processed in electronic form in line with technical and organizational security measures defined by applicable laws.
LORLUM processes Data collected from you for the following purposes: Contractual Purposes and, in particular: (i) to manage the sale of its products and provide sale and after sale services (including, for example, fraud prevention, returns, guarantee and customer support); (ii) in relation to LORLUM’s online activities, to maintain your personal account and offer the services you request through the LORLUM Website; and (iii) LORLUM’s newsletter service, if you have subscribed to it. Law Purpose, including to comply with legal and regulatory obligations to which LORLUM may be subject. Marketing Purposes, thus, with your prior consent, to send marketing communications on LORLUM’s exclusive products, services and activities through electronic means (including, for example, email, SMS, MMS, mobile, social network and instant messages) to promote its trademarks, services and/or products, as well as to conduct market analysis and statistics, except for communications relating to LORLUM’s newsletter as referred to in letter (ii) above for which you need to subscribe. Profiling Purposes and therefore, with your prior consent, to analyse your habits, interests and preferences in order to offer personalised services and send targeted marketing communications on the basis of your needs. Customer Satisfaction Surveys: We may use your contact details (such as your email) to send you customer satisfaction surveys after a purchase is completed. This helps us evaluate your shopping experience, identify areas for improvement, and maintain high standards of customer service. Business Legitimate Interest Purposes and, in particular:(i) to exercise or defend legal claims relating to the rights of LORLUM and its representatives;(ii) to enable the technical management of the LORLUM Website, including solving technical problems, performing updates, and preventing fraudulent activities or website misuses;(iii) to complete a potential business transfer, asset sale, or financing transaction by disclosing Data to the parties involved; and(iv) to anonymize Data in order to perform statistical analysis.
Processing of Data for Contractual Purposes is mandatory since it is necessary to purchase products, register and create a personal account on the LORLUM Website, as well as use the functionalities available on the website and specific services offered by LORLUM (including the newsletter subscription, and online chat, etc.). Processing of Data for Law Purposes is mandatory since it is required by the applicable laws. If you do not provide your Data, it would not be possible for LORLUM to provide the products or services that you request. Processing of Data for Marketing and Profiling Purposes is not mandatory and subject to your prior consent which, in any case, may be withdrawn at any time. Processing of Data for Business Legitimate Interest Purposes is functional to the pursuit of a legitimate interest of LORLUM, properly balanced with your interests. This processing is not mandatory and you can object to it at any time as indicated below. In such case, no data processing will be carried out by LORLUM for these purposes, except in cases where LORLUM demonstrates the existence of compelling legitimate reasons or needs to exercise or defend its legal rights.
Your Data are processed for no longer than is necessary to fulfil the above-mentioned purposes and, particularly: For the Contractual and Business Legitimate Interest Purposes, Data are retained for the duration of the contract and/or of the service requested (including an account created on the LORLUM Website), as well as for the following next 10 years. For the newsletter service, your Data will be processed until you unsubscribe from the service and/or you exercise your right to oppose such communications by clicking on the link available at the end of each communication received. For Law Purposes, your Data are stored in accordance with the specific limitation periods defined by law. For Marketing and Profiling Purposes, your Data are stored for a period of 7 years from the last purchase done and/or from the last contact with you (e.g., opening of a newsletter or interacting with our services), subject to your consent. Upon expiry of the above-mentioned retention periods, your Data will be automatically deleted, aggregated, or made anonymous in a permanent and non-reversible way.
LORLUM may communicate your Data that are strictly necessary to fulfil each purpose of the processing to the following categories of subjects: (i) employees in charge of the processing (such as the personnel of the CRM, IT, and Retail offices); (ii) consultants and professional and technical service providers (such as IT service providers, postal offices, couriers, and legal consultants); (iii) companies belonging to LORLUM's group, or joint ventures (if applicable); (iv) public entities, banks, third parties involved in corporate transactions and extraordinary operations, and legitimate recipients. These subjects may also be located in countries outside your local region or the Economic Area as indicated on the LORLUM Website. For information on these countries, please refer to the LORLUM Website or contact LORLUM as per the modalities indicated in paragraph 9 below. In any case, any international transfer of Data will be carried out in compliance with applicable data protection laws. You have the right to receive information on the place where your Data are kept, as well as on the measures adopted for the transfer, by asking directly to LORLUM through the contact details provided in paragraph 9 of this Privacy Notice. In any case, your Data are not divulged.
You may always enforce your privacy rights, for example you may access your Data, verify your Data content, origin, accuracy, ask for your Data to be integrated, updated, amended, deleted, or blocked for breach of law, as well as object to the processing of your Data for legitimate purposes. In addition to the rights above, you may ask for a restriction of the processing, your Data portability and lodge a claim before the competent Data Protection Authority, if the premises subsist. You can exercise your privacy rights at any time as follows: By contacting LORLUM through the modalities indicated in paragraph 9 below;
If you have doubts, questions or complaints with regard to the collection and processing of your Data, or your wish to exercise one of your privacy rights above, please contact LORLUM by sending an e-mail to the following address privacy@lorlum.com. The Data Protection Officer (DPO) designated by LORLUM is available at the following address privacy@lorlum.com.
This Privacy Notice will be effective from the date of update indicated in the heading. LORLUM might change and/or integrate this Privacy Notice, also as a consequence of further law modifications and/or integration. Updates and modifications will be notified in advance, and you will be able to consult the constantly updated Privacy Notice on the LORLUM Website.