Terms of Use
Terms and conditions
When the user selects a product or products and submits an order by pressing the “Pay now" button, the online store automatically "generates - creates" and sends an e-mail with the details of the order (products, prices, quantities, user data...). In the following, the ordering process is divided into three parts, which are as follows:
ORDER ACCEPTED After the successful submission of the order, the buyer receives a notification by e-mail that the order has been accepted and is waiting for processing. The buyer can always access comprehensive information about the status and contents of the order on the provider's website www.rupaunderground.com under their profile.
ORDER CONFIRMED Within no more than 48 hours from the acceptance of the order, the provider reviews, checks the availability and confirms the order or rejects it with a reason. The provider reserves the right to call the customer on his contact phone number if necessary. The contract for the purchase of the ordered items between the user and the provider is irrevocably concluded when the buyer receives a confirmation to the electronic address (e-mail).
ORDER COMPLETED AND SHIPPED The provider packs and ships the goods within the promised period and informs the buyer about this by e-mail. In this part, the user is informed about the deadline and method of delivery. In the aforementioned e-mail, the provider also informs the buyer about the deadline and method of delivery, about the return policy, where to contact in the event of a delay in delivery and where to contact in the event of a complaint. The delivery time of the item is counted in working days.
RIGHT TO WITHDRAW THE PURCHASE, RETURN OF GOODS The consumer has the right to notify the company in writing of withdrawal from the contract within 8 days. The consumer must then return the goods to the company within 8 days of written notification, bearing the direct costs of the return.
If the consumer returns the goods received within the contract withdrawal period (i.e. 8 days from the receipt).
Privacy policy
1. Who are we?
This privacy policy applies to information collected by the company LUTA LIVRE d.o.o.. The personal data we collect is controlled by the company LUTA LIVRE d.o.o. For the purposes of applicable data protection legislation, the relevant entity, as set out in section 14 below, is the controller of your personal data.
2. What information is covered in this privacy notice?
This privacy policy covers all personal data that we collect, use and process, meaning data that (either separately or in combination with other information) enables us to directly or indirectly identify.
3. What personal data do we collect from you and how do we collect it?
The types of personal data we may collect and hold will vary depending on the nature of our interaction with you and may include:
•identification and contact information, such as your name, postal and email address, telephone number, gender, date of birth and title;
•payment information
•information found about you from social media, such as your profile picture, likes, location and friends list;
•geolocation data when using our website;
•product preferences and other information
We may collect your personal information in a number of ways, including when:
•visit our website and register an account with us and/or purchase products through our website and/or consult live;
•correspond with us through any of our channels (eg messaging platforms such as text messages, live chat and WhatsApp, social media and email).
We usually collect your personal data directly from you. In some cases, we may collect your personal information from third parties, such as payment platform providers.
4. How do we use your personal data?
Why do we process your data: To provide you with information about our products and services.
How we use your information for this purpose: We process your order history to develop, market, sell or otherwise offer you products, services or information. We also process your name and contact information to provide you with copies of our newsletter and information about our products, store launches, partnerships and in-store events, contact you about matters relating to the Services and provide you with other marketing or promotional information where permitted to do so by applicable law or where you have given us your consent to do so. We also process this data to ensure that we do not contact you for direct marketing purposes if you have asked us to do so.
Based on the following rationale: Such use of your personal data is necessary to fulfill our contractual obligations to you. It is also in our legitimate interest to provide you with the best possible online and in-store user experience.
Why we process your data: To process your payments and protect against fraudulent transactions.
How we use your data for this purpose: We process your personal data, including with payment information (credit card, debit card and/or other payment information) to fulfill your orders for our products, services and/or gift cards. We also process this information to protect your payment information and protect against fraudulent transactions. We process information about your device when you shop on our site to detect potential fraudulent transactions or suspicious shopping activity.
Based on the following justification: It is in our legitimate interest to process personal data that payments are secure and necessary for the performance of our contract with you. Providing certain personal information is voluntary, but we may not be able to process your order and send you the required order confirmation and shipping confirmation email if you do not provide us with certain requested information.
Why we process your information: To provide you with products and services that you purchased them from us.
How we use your information for this purpose: We may need to use your name and contact information to fulfill our obligations under a contract with you (e.g. if you have purchased a product or service from us, such as hand cream or facial care).
Based on the following rationale: We need to process your personal data in this way in order to fulfill our legal and/or contractual obligations to you.
Why we process your data: To investigate potential concerns and to inform our product developers.
How we use your data for this purpose: We process your personal or health data (e.g. skin type or where you have an adverse reaction to a product) to investigate concerns.
Based on the following rationale: We will process this data only if we have your express consent.
Why we process your data: To improve your experience on our website. How we use your data for this purpose: We process data such as your username and Rupa account password, IP address, information about your purchases and your other activity on our website to improve our website, including changing it based on your usage, history and settings and troubleshooting.
Based on the following justification: In our legitimate it is in our interest to provide you with a flawless online experience.
Why we process your data: To evaluate the online activities of our website users.
How we use your data for this purpose: We process the data collected by our websites automatically and through cookies and other technologies, to evaluate our users' activities, measure interest and use of our website and communications, and customize s website and our communications with you. We do this both individually and collectively. Please see the section entitled 'Internet-specific matters' for more details.
Based on the following rationale: It is in our legitimate interests to process personal data using cookies and other technologies that we need to use to operate our website. Where required by applicable law, we will ask for your consent to the use of cookies that are not necessary for the operation of our website.
Why we process your data: To update your account, understand and analyze our sales, your needs (i.e. why you choose certain products ) and wishes.
How we use your information for this purpose: We may use your personal information to carry out internal administrative activities, analytics, design and product development. If you have a customer account (whether created online or in-store), we may also collect information about the products you browse online or purchase, where you purchased the products, and other information relevant to your relationship with the client and Rupa. We use this information for our internal demographic insights into our customers, to offer you an improved service based on your preferences, including identifying relevant products, services and events that may be of interest to you, and to customize your experience with Rupa.
Together with Non-Personal Information we may also use this information for our internal marketing analyzes and demographic studies, to analyze, profile and monitor customer patterns so that we can consistently improve our products. This means we can offer our customers a more personalized and integrated shopping and interactive experience across all our channels.
Based on the following justification: It is in our legitimate interest to process personal data to analyze, develop, improve, market and provide products and services to you.
Why we process your data: To understand your preferences based on the information included in your Rupa profile (filled out on online, in store or at one of our counters) or in other messages you send to Rupa Underground.
How we use your data for this purpose: We process your data in this way to better understand you, maintain, update and service your account with us .
This processing also enables us to carry out internal administrative activities, research, analytics, planning and project development.
Based on the following justification: It is in our legitimate interest to process personal data so that we can better offer you our products.
Why we process your data: To process exchanges or returns.
How we use your data for this purpose: We process your personal data to fulfill our obligations under our contract with you.
Based on the following rationale: we need to process your personal data to fulfill our legal and/or contractual obligations to you.
Why we process your data: To respond to requests or complaints.
How we use your data for this purpose: If you contact the company via live chat from our website, by email or phone, the company will collect your personal data and used to identify you as a customer, assist with your inquiry, process your order, process payments, deliver products and services, update our records and generally manage your account with us under our terms with you.
Based on the following rationale: We need to process your personal data to fulfill our legal and/or contractual obligations to you.
Why we process your data: To ensure the security and integrity of Rupa's resources, including the website.
How we use your information for this purpose: Rupa Underground will process personal information to evaluate and improve the security and reliability of our remote and electronic resources, including the analysis of information collected during technological development and program improvements.
Based on the following rationale: It is in our legitimate interest to process your personal data to ensure safe and reliable access to our goods and services.
Zakaj obdelujemo vaše podatke: da ocenimo ali zagotovimo skladnost z veljavnimi zakoni, predpisi in politikami.
How we use your information for this purpose: We may process your personal information to audit, confirm and document compliance with legal, administrative, industry and ethical standards, including Rupa's policies and procedures, code of conduct and social responsibility initiatives.
Also processed to audit compliance of our affiliates and service providers with contractual obligations and applicable privacy and other standards.
Based on the following rationale: We process your personal data to comply with laws and regulations, to enforce internal policies, and to prevent and detect fraud and other practices that undermine our commitment to fair and ethical behavior.
5. Internet-Specific Matters
You can find more information about how we use cookies in our Cookie Policy.
6. Do we use your personal data for direct marketing?
We will only use your personal data with your consent to send you marketing material by email, SMS, WhatsApp or post, depending on your marketing preferences. Our marketing communications may include products, services and other offers from Rupa Underground or third parties affiliated with us.
You may unsubscribe from our direct marketing at any time by contacting us as described below. When we send you a direct marketing message by email or other electronic means, we will always give you the option to opt-out in the message itself.
7. With which third parties do we share your personal data?
Your personal data is intended for the company, but may be shared with third parties under certain circumstances:
Rupa Undergroud: We may share your personal information among our group of companies to register your account with us, deliver our products, provide you with customer support, process your payments, understand your preferences, send you information about products that may be of interest to you and perform other activities described in this Privacy Policy. Some of our group companies may be located overseas, as described in the section entitled 'Where do we transfer your personal data?'
Our Service Providers: We use other companies, agents and contractors to perform services on our behalf or to help provide Rupa Underground products to you. We may share personal information with such service providers, including the following:
•ponudniki infrastrukturnih in IT storitev, vključno z arhiviranjem e-pošte, pošiljanjem po pošti, spletnim sporočanjem, plačilom/zaračunavanjem, sistemi za rezervacije/določanje sestankov, službo za podporo IT in storitvami v oblaku;
•oglaševalski partnerji, vključno s partnerji za digitalno oglaševanje, kot so spletna mesta družbenih medijev in Google;
•marketinške, oglaševalske in komunikacijske agencije ter podjetja za informacijske storitve;
•ponudniki transporta in logistike;
•zunanji revizorji in svetovalci; in
•druge stranke, ki smo jim po zakonu pooblaščeni ali od nas zahteva razkritje informacij.
In the course of providing such services, these service providers may have access to your personal information. Some of these service providers may be located overseas, as described in the section entitled 'Where do we transfer your personal data?'.
Third parties permitted by law: In certain circumstances, we may be required to disclose or share your personal information to comply with a legal or statutory obligation (for example, we may be required to disclose personal information to the police, regulators, government agencies or judicial or administrative authorities).
We may also disclose your personal information to third parties if the disclosure is legally permitted and necessary to protect or defend our rights, matters of national security, law enforcement, to enforce our contracts or to protect your rights or the rights of the public.
Third parties related to business transfers: We may transfer your personal information to third parties in connection with a reorganization, restructuring, merger, purchase or transfer of assets, provided that the receiving party agrees to handle your personal information in a manner that consistent with this Privacy Policy.
Rupa Underground will not sell your personal information to third parties for monetary compensation, but may share your information with affiliated companies and contractors to better serve you, such as by customizing your online experience and customizing the products and services available to you.
Please note that our website may from time to time contain links to and from the websites of our partners or affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we have no control over how they may use your personal information. The same applies to your use of social media sites. Please check the privacy policies of third-party websites before submitting any personal information to them.
8. What are your rights in relation to your personal data?
In relation to the personal data we hold about you, you have the following rights:
• Access. You have the right to request a copy of your personal data that we process, as well as other additional information. For your privacy and security, we may, at our sole discretion, require you to prove your identity before providing the requested information.
• Correction. You have the right to request that incomplete or inaccurate personal data that we process about you be corrected.
• Deletion. In some jurisdictions in which we operate, you have the right to request that we delete the personal data we process about you, unless we are required to do so, if we need to retain such data to comply with a legal obligation or to establish, exercise or defend legal claims.
• Limitation . In some jurisdictions in which we operate, you have the right to restrict our processing of your personal data in certain circumstances, including where you believe that data is inaccurate; our processing is unlawful; or that we no longer need to process such data for a specific purpose, unless we cannot delete the data due to a legal or other obligation or because you do not want us to delete it.• Portability. In some jurisdictions in which we operate, you have the right to obtain the personal data we hold about you in structured electronic form and to transmit such data to another data controller where (a) personal data you have provided to us and ( b) if we process this data on the basis of your consent or for the performance of a contract with you.
• Objection. In some jurisdictions in which we operate, where the legal basis for processing your personal data is our legitimate interest, including the profiling we do to send you personalized offers, product recommendations and similar content, you have the right to object to such processing on the grounds that, related to your situation. We will comply with your request unless we have compelling legitimate grounds for processing that override your interests and rights, or if we need to. You can make a request to exercise any of these rights in relation to your personal information by sending a request to shop@rupaunderground.com. The Company will generally provide you with access to your personal information where practicable and will take reasonable steps to change any of your personal information that is inaccurate or out of date. In some circumstances and subject to applicable privacy laws, we may not allow you to access your personal information or refuse to correct your personal information; in this case we will give you the reasons for this decision. Please note that if at any time you withdraw your consent to our collection, use and disclosure of your personal information (subject to contractual and legal restrictions and reasonable notice) or fail to provide us with the personal information we request from you, you may not be able to may provide the products or services you have requested or contact you. You also have the right to lodge a complaint with us and, where applicable, with your local data protection authority if you believe that we have not complied with applicable data protection laws. Please let us know your concern or complaint in writing and send it to the appropriate entity at the address listed below in the section titled "Contact". We will address or investigate your concern or complaint and respond to your complaint within a reasonable time. We aim to do our best to resolve any complaint to your satisfaction.
9. How do we protect your personal data?
We do a number of things to protect our data, including administrative, technical and physical safeguards such as firewalls and encryption measures. While we strive to protect our systems, website, operations and information from unauthorized access, use, alteration and disclosure, due to the inherent nature of the Internet as an open global communication medium and other risk factors, we cannot guarantee that any information during transmission or stored in our systems will be safe from intrusion by others such as hackers. Aesop takes reasonable steps to: a) ensure that the personal information we collect, use and disclose is accurate, complete and up-to-date; b) protect the personal data we hold against misuse and loss and against unauthorized access, modification or disclosure; and c) where permitted by law, destroy or permanently anonymize personal data that we no longer need. Transactions with credit cards are carried out by the authorized banking institution STRIPE. When collecting credit card information for online purchases, Rupa Underground offers secure server transactions that encrypt your information in transit and prevent others from accessing it. Personal information is stored on servers that are protected by appropriate safeguards and will be accessible to authorized employees and agents who require access in connection with their responsibilities. Your credit card information is encrypted and then removed from our system when your order is shipped. We do not normally collect unsolicited personal information. In the event that we receive unsolicited personal information, we will determine whether it would be permissible to collect such personal information if requested. If we determine that collection would not be permitted to the extent permitted by law, we will destroy or anonymize that personal information as soon as practicable. The Company will generally give individuals the option not to identify themselves when entering into transactions where it is legal and practicable to do so. However, many times we will not be able to do this. For example, we will need your address to deliver products purchased through our website.
10. How do we protect your personal data?
We do a number of things to protect our data, including administrative, technical and physical safeguards such as firewalls and encryption measures. While we strive to protect our systems, website, operations and information from unauthorized access, use, alteration and disclosure, due to the inherent nature of the Internet as an open global communication medium and other risk factors, we cannot guarantee that any information during transmission or stored in our systems will be safe from intrusion by others such as hackers. Rupa Underground takes reasonable steps to: a) ensure that the personal information we collect, use and disclose is accurate, complete and up-to-date; b) protect the personal data we hold against misuse and loss and against unauthorized access, modification or disclosure; and c) where permitted by law, destroy or permanently anonymize personal data that Rupa no longer needs. Credit card transactions are carried out by an authorized Stripe banking institution. When collecting credit card information for online purchases, it offers secure server transactions that encrypt your information in transit and prevent others from accessing it. Personal information is stored on servers that are protected by appropriate safeguards and will be accessible to authorized employees and agents who require access in connection with their responsibilities. Your credit card information is encrypted and then removed from our system when your order is shipped. We do not normally collect unsolicited personal information. In the event that we receive unsolicited personal information, we will determine whether it would be permissible to collect such personal information if requested. If we determine that collection would not be permitted to the extent permitted by law, we will destroy or anonymize that personal information as soon as practicable. Companies will generally give individuals the option not to identify themselves when doing business, where it is legal and practicable to do so. However, many times we will not be able to do this. For example, we will need your address to deliver products purchased through our website.
11. How do we treat children's privacy?
We will never knowingly collect personal information from individuals under the age of sixteen (16). If we learn that a person under the age of 16 has provided us with personal information, we will remove that personal information from our files.
12. How can you contact us?
If you have any questions or concerns regarding this Privacy Policy, please email us at shop@rupaunderground.com.
13. Which version of this Privacy Policy applies?
We reserve the right to change our privacy policy from time to time. If you would like to obtain a copy of the most recent version of our Privacy Policy at any time, please visit our website at http://www.rupaunderground.com/ or contact us by email: shop@rupaunderground.com. This privacy policy was last updated on November 27, 2022.