Privacy Policy
Plutus Luxury is a brand of Synanidis Exclusive e.U. We take the protection of your personal data seriously and process it only as described here.
Who is responsible
Synanidis Exclusive e.U., trading as Plutus Luxury Sebastianplatz 6/5/19, 1030 Vienna, Austria FN 647012 p, Commercial Court of Vienna info@plutusluxury.com, +43 676 6011977
We are the controller for the processing described on this page. We have not appointed a data protection officer, as we are not required to do so.
What we collect and why
When you place an order: your name, billing and delivery address, email address, telephone number, order details, and payment status. Legal basis: performance of the contract, Article 6(1)(b) GDPR, and our legal obligations to retain accounting records, Article 6(1)(c) GDPR.
When you create an account: the above, plus your login credentials and order history. Legal basis: performance of the contract.
When you contact us or request a quotation: the information you provide in the form or message. Legal basis: performance of the contract or steps taken at your request before entering into one, and our legitimate interest in answering enquiries, Article 6(1)(f) GDPR.
When you subscribe to our newsletter: your email address and the date and time of your confirmation. Legal basis: your consent, Article 6(1)(a) GDPR, which you may withdraw at any time.
When you leave a review: your name, email address, and the review content.
When you visit the site: server log data including IP address, browser, referring page, and time of access, retained briefly for security and operation. Legal basis: our legitimate interest in a secure and functioning website.
Cookies and similar technologies: see our Cookie Policy. Non essential cookies are set only with your consent.
Who we share it with
We use the following service providers. Each processes data only on our instructions or, where indicated, as an independent controller under its own privacy notice.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| GoDaddy | Website hosting | All site data | EU and USA |
| Cloudflare | Content delivery and security | IP address, request data | Global |
| Automattic, WooCommerce | Shop platform | Order and account data | EU and USA |
| WooPayments and Stripe Payments Europe | Card payment processing | Payment and transaction data | EU and USA |
| Mollie B.V. | Payment processing for Klarna transactions | Name, address, order, payment data | Netherlands, EU |
| Klarna Bank AB | Payment by invoice or instalments. Separate controller. Klarna carries out its own identity and credit assessment under its own terms. | Name, address, order, payment data | Sweden, EU |
| Apple and Google, Apple Pay and Google Pay | Wallet payment authorisation | Payment token, transaction data | EU and USA |
| FedEx and appointed carriers | Delivery | Name, address, telephone | EU and international |
| Mailchimp, Intuit | Newsletter, abandoned basket and marketing emails, eCommerce tracking | Email, name, purchase behaviour | USA |
| Icegram Email Subscribers | Newsletter management | Email address | Site database |
| Fluent Forms | Enquiry and contact forms | Form contents | Site database |
| Customer Reviews for WooCommerce | Review invitations and display | Name, email, review | EU |
| Google Ireland, Google Ads and Google Listings and Ads | Advertising, conversion measurement, product listings | Cookie identifiers, usage data | EU and USA |
| Smash Balloon Instagram Feed, Meta | Instagram feed display | Technical connection data | USA |
| WPML | Language versions | Language preference | Site database |
| YITH and WPC Wishlist | Wishlist and quotation requests | Session data, selected products | Site database |
| CookieYes | Consent management | Consent record, IP address | EU |
| Our tax adviser | Statutory accounting | Invoice data | Austria |
Where a provider processes data outside the European Economic Area, that transfer is based on the European Commission’s Standard Contractual Clauses or an adequacy decision.
We do not sell your personal data and we do not share it with anyone else except where we are legally required to.
How long we keep it
Order and invoice data is retained for seven years to satisfy Austrian tax and commercial record keeping obligations. Account data is retained until you delete your account. Newsletter data is retained until you unsubscribe. Enquiry correspondence is retained for up to three years. Server logs are retained for a short period for security purposes.
Your rights
You have the right to request access to your data, correction of inaccurate data, erasure, restriction of processing, and portability. You may object to processing based on our legitimate interests. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact info@plutusluxury.com.
You also have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde Barichgasse 40 to 42, 1030 Vienna, Austria dsb@dsb.gv.at
Is providing data required
Providing the data needed to complete an order is necessary to enter into the contract. Without it we cannot process your order. Providing data for the newsletter or for enquiries is entirely voluntary.
Automated decision making
We do not carry out automated decision making or profiling that produces legal effects for you. Where you choose Klarna, Klarna may carry out its own automated credit assessment under its own terms.
Changes
We may update this policy as our services change. The current version always applies.