1. Introduction

By making purchases with us, creating an account, or visiting the Vicedeal.com website ("Vicedeal", "we", "our" or "us"),you provide us with a set of your data, which is primarily necessary to fulfill our obligations under the contract to you. We respect your privacy and appreciate your trust in us, therefore we treat your personal information with great care and sensibility. The following Privacy Policy ("Policy") describes our online information practices and explains how we collect and process your personal information through Vicedeal. This Policy applies to the processing by Vicedeal of the personal information of our website visitors, customers, and other users.

Your personal information is processed by or on behalf of:

Mediapress Ltd., - a company registered under the laws of Hong Kong with Company Registered number 2302638, having its residency and office in Rm 816, Level 8, Landmark North, 39 Lung Sum Avenue, Sheung Shui NT, Hong Kong SAR.

This Privacy Policy applies only to this website. Vicedeal may link to other websites. We are not responsible for the content or privacy practices on any website other than Vicedeal. By visiting our website, you accept the practices described in this Policy.

If you have any questions regarding the processing of your personal information, please contact us at the above address or by e-mail at [email protected].

2. What information do we collect, what purposes, and what legal basis do we use

Data used to process customers' order

This is data, that is necessary to fulfill the contract you have entered into with us (or with one of our trading partners). If you order something with us, we need certain information from you to fulfill your order and keep you informed about your order. This includes the normal business practices related to our day-to-day business activities including processing orders, customer support and customer identification, payment, financial reporting, etc. To do this, we collect your name, email address, delivery address(es), payment details, and telephone number. This information is also required for any returns or repairs. The legal basis for such processing is the contract you enter into with us by purchasing goods on our website and accepting our Terms.

Data to maintain a user account

We store the following information in your Gradado account: your name, username, shipping and residential/business/billing address(es), phone number, email address, order number, payment details, gift cards, and invoices. We also store your order history in your account and we store the settings you specify in your account, such as your wish list, language settings, and your email and personalization preferences. If you have not logged in for 3 years, we will delete all of your data. You can also request to have your data deleted from your account at any time. The primary legal basis for processing this type of customer account data would be the performance of a contract. Storing information like name, address, order history, and payment details is crucial for fulfilling the contract with the customer. This includes processing orders, handling returns, providing customer support, and ensuring a smooth shopping experience.

The secondary legal basis (which may apply depending on specific circumstances) is the legitimate Interest. Storing customer preferences (e.g., language settings, wish lists) and using them to personalize the customer experience can be considered a legitimate interest for the business. Analyzing order history and customer behavior to improve services and tailor offers can also fall under legitimate interest, as long as it is balanced with the customer's rights and freedoms.

Communication with you:

We will use your personal information to communicate with you about your orders and our services All customers must provide an email address to allow communication with Vicedeal regarding orders placed. We may send you a confirmation email after you register with us as well as service-related announcements as necessary (for example, temporary suspension of service for maintenance.)

Customer reviews

We are interested in constantly improving our services, so customer feedback is extremely important to us. If you use our services or place an order on Vicedeal, we may ask you to leave a review by sending an appropriate email. Sending those emails is not intended for remarketing or any advertisement but consists of our legitimate interest under GDPR of receiving customer feedback. We may share your feedback with one of our service providers. We will only do this if you have provided feedback via the link in the appropriate email. If you do not wish to receive mailing asking for your feedback, you can always unsubscribe by sending an appropriate message to [email protected] or use the "unsubscribe" button available in the interface of all our messages. This kind of data processing is intended to fulfill the terms of the contract (delivering the goods, notification about the status of the order, etc.).

Marketing

Marketing includes sending newsletters containing relevant information and offers about our products and services via various information channels, such as email, or our other (digital) channels. In order to personalize these messages, we review your order history and your search and click behavior on our website. We have a legitimate interest in this. You can opt out of this mailing in the interface of such messages, or by contacting us at [email protected]. We may also provide advertising companies such as Meta (Facebook, Instagram) and Google with information that will allow them to provide you with more useful and relevant Vicedeal advertising. When it comes to sharing user data with advertising companies like Meta (Facebook) we only do it based on explicit user consent. You can withdraw consent at any time by adjusting your cookie preferences or by contacting us at [email protected].

Analytics

Analytics includes the processing of your personal information in anonymous, aggregated form for analytical purposes to improve our business operations, including our marketing activities, and enhance your experience on our website, to predict and anticipate future user behavior, to develop statistics and commercial scores, and to understand the customer preferences. We may analyze the information we collect about you, for instance by dividing customers into different customer categories based on purchase patterns, behavior, and interactions with us.

Adv Personalization

If you give us your consent, we and our advertising networks may serve you personalized advertising on websites outside of Vicedeal.com. We may recognize you outside of Vicedeal.com based on cookie technology if you have given us appropriate permission to use your click and search behavior for personalized advertising outside of Vicedeal.com. This is done solely on the basis of your consent to show you relevant advertising from Vicedeal.com or our advertisers outside of Vicedeal.com. If you do not consent to personalized advertising outside of Vicedeal.com, you will still see advertising, including on Vicedeal.com.

Data for competitions and promotions

If you participate in a promotion or contest, we may ask you to provide information such as your name, address and/or email address. We need this to run the promotion and announce the winner(s). We collect this data with your permission. If you agree, we may also use the information you provide to us in the promotion or contest for other purposes. You can find out in the relevant competition or promotion what we use your data for and how long we keep this data.

GrowthBook soft tools

On Vicedeal.com we use GrowthBook soft tools. GrowthBook provides a suite of products that allows us to ideate, discuss, test, analyze, and learn from experiments we run on our products. It is a modular platform used for either Feature Flags, Experiment Analysis, or both. Vicedeal uses GrowthBook generally for A/B testing. A/B testing is a user-experience research methodology that consists of a randomized experiment that usually involves two variants (A and B), although the concept can be extended to multiple variants of the same variable. It includes the application of statistical hypothesis testing or "two-sample hypothesis testing" as used in the field of statistics. A/B testing is a way to compare multiple versions of a single variable, for example by testing a subject's response to variant A against variant B, and determining which of the variants is more effective.

Vicedeal integrates GrowthBook code and then uses the tools within the applicable GrowthBook Service to define metrics and set up feature flags and experiments as needed. Any user IDs, passwords, and other access credentials (such as API tokens) for the GrowthBook Service are kept strictly confidential and not shared with any unauthorized person. GrowthBook has a policy of only the absolute minimum of data required to provide services. All of Vicedeal users' data stays local to Vicedeal infrastructure. To see detailed information please refer to the GrowthBook Security page and Privacy Policy.

Legal and regulatory compliance

This includes the processing of any information that citizenM is required to retain based on a legal obligation or duty of care including administrative obligations based on applicable (tax) laws, governmental statistics requirements, etc.

Security management

This includes securing the company IT network and systems, company information, company premises, our employees, customers and users, and preventing fraud, non-payments, and other illegal or infringing activities.

Personal information will be processed only if such processing is based on any of the legal grounds listed in section 6(1) of the General Data Protection Regulation (“GDPR”), notably consent (e.g. for profiling), necessary for the performance of a contract, legitimate interest, or compliance with legal obligations. Where consent to the collection of personal information is revoked, we will stop processing the personal information.

3. How we collect personal information

Information provided directly from you:

We receive and store any information you provide in relation to our Services. To use certain parts of this Site or order products, all customers must fill out an online registration form with personal information, including but not limited to, your name, shipping and billing address(es), phone number, email address, and financial information, like your claws and regulations credit card number. We may ask for your country of residence and/or your organization's country of operation so that we can comply with applicable laws. This information is used for billing, order processing, and internal marketing as well as to communicate with you about your order and our Site.

Automatic information:

Certain data types related to your use of our Services and your visits to our website are collected and stored automatically. For example, with your consent, we use cookies and other online identifiers. We also receive certain types of information when your web browser or device accesses our service, website, and other content provided by or on behalf of Vicedeal on other websites.

Information from other sources:

We might receive information about you from other sources such as updated delivery and address information from our carriers, which we use to correct our records and deliver your next purchase more easily.

4. Sharing personal information

Vicedeal never sells, rents, trades, or licenses your personal information. However, we may share your personal information in a limited number of circumstances, including:

Third-party service providers: We use third-party service providers to perform specific functions on our behalf and assist us with various tasks. Those may include supporting the delivery of our digital services, such as hosting, maintaining, and supporting our websites and applications; supporting our customer service; supporting our advertising and marketing campaigns; supporting customer research and obtaining ratings and reviews; supporting the personalization of our marketing messages and ensuring an optimal shopping experience; supporting you in facilitating telephone communication between you and our sales partners; For example, we provide your name, shipping address, email and phone number to partners such as DHL, UPS or your local postal providers in order to guarantee delivery of your orders, and we may use relevant customer information in order to monitor the quality of the third party's service. Those third parties are only permitted to use your personal information for the purpose for which it has been provided and may not disclose it to any other third party except at our express direction and in accordance with this Privacy Policy

Payment service providers: Similarly, we must provide your credit card number to financial services organizations such as credit card processors and issuers to process payments. We protect all submissions of your credit card number for authorization with state-of-the-art data encryption.

Business transfers: we might sell or buy other businesses or services. In such transactions, customer information generally is one of the transferred business assets. We may transfer your personal information as part of that transaction.

Legal & Regulatory Authorities: We may from time to time make your personal information available to legal and regulatory authorities, to our accountants, auditors, lawyers, or similar professional advisers, or to other third parties, when this is required by law, necessary to permit us to exercise our legal rights, to comply with our legal obligations, or necessary to take action regarding illegal activities or to protect the safety of any person.

5. Cookie Policy

Cookies are small text files stored on your computer's hard drive by your Internet browser. Most browsers accept cookies by default. However, if you configure your browser to reject or delete cookies, certain features of our Site will no longer function properly. For example, blocking or disabling cookies will prevent you from adding products to your shopping cart, completing the checkout process, or using services that require you to log in.

We use cookies on this website to:

In addition, we display interest-based advertising on our Site and certain unaffiliated websites using information collected when you interact with our Site, services, or content. These ads, sometimes called personalized or targeted ads, are based on activities such as your purchases on our Site, visits to websites featuring our content or ads, and interactions with our tools or payment services. Technologies like Google Analytics and other tracking/marketing tools are utilized for this purpose.

Like other online ad networks, we employ cookies, web beacons (action tags or single-pixel gifs), and similar technologies to understand which ads you view, click on, and interact with. This helps us provide you with ads that are more relevant to your interests.

We do not link your interactions with unaffiliated sites to your identity when delivering interest-based ads. Additionally, we do not share your personal information with advertisers or third-party websites displaying our ads. However, advertisers and their partners (including ad networks and service providers) may infer information about you, such as your general interests or demographics, based on your interaction with their ads.

In some cases, third-party advertisers use technologies to deliver ads directly to your browser. When this occurs, they automatically receive your IP address. They may also use cookies to measure the effectiveness of their ads and tailor content to your interests. We do not control these cookies or the information collected by third-party advertisers, and their data practices are not governed by our Privacy Policy. For details on their privacy practices, please contact the respective advertisers or third-party platforms directly. Please note that we use Google Analytics and you can opt-out of Google Analytics by downloading Google’s Opt-Out Browser Add-on

Read more here

6. How Vicedeal protecting your personal information

Vicedeal incorporates physical, electronic, and administrative procedures to safeguard the confidentiality of your personal information, such as:

Security: Vicedeal has used and will continue to use reasonable endeavors to protect personal information against loss, alteration, or any form of unlawful use. Where possible, personal information will be encrypted and stored on a virtual private server that is secured by means of industry-standard protection measures.

Restriction of access: Only to a strictly limited number of employees who provide specific services, i.e. who must have access to personal information for the purpose of their job, access to your personal information is granted. If and to the extent personal information will be stored in a cloud infrastructure provided by third-party cloud providers, these providers will be bound by written contract to process personal information provided to them only for the purpose of providing the specific service to Vicedeal and to maintain appropriate security measures to protect this personal information.

Data Encryption: Vicedeal safeguards all financial transactions done through this Site with Secure Sockets Layer ("SSL") encryption;

Data Breach Procedures: Vicedeal permanently protects the personal information it processes against loss and unlawful processing. In the event of a personal data breach, we will: (a) promptly assess the nature and scope of the breach, including the number of individuals affected and the types of personal data involved; (b) notify the relevant supervisory authority within 72 hours of becoming aware of the breach; (c) notify the data subjects affected without undue delay where the breach is likely to result in a high risk to their rights and freedoms; (d) take appropriate measures to mitigate the potential adverse effects of the breach, including but not limited to: securing the compromised data, investigating the cause of the breach, and implementing measures to prevent future occurrences. In order to ensure that a data breach will receive adequate attention and, if required, be reported, we have implemented a Data Breach Policy, which describes the procedure that must be followed in case of a data breach.

Data Processing Register: We maintain a detailed Data Processing Register, which records all categories of personal data we collect, the purposes for which we process it, the legal basis for processing, categories of recipients, retention periods, and other relevant details. The Register is available for inspection upon request. You have the right to obtain a copy of this Register by contacting [email protected].

Data Retention: Vicedeal will retain personal information only for the period necessary to fulfill the purposes for which it has been collected. We retain your account and log data for 3 years from your last interaction with our website or account. This period allows us to provide you with consistent customer service, fulfill any warranty obligations, handle returns, and comply with legal requirements (e.g. to respond to incident information requests during the statutory claim period). In some jurisdictions, the law may require financial transaction data to be retained for up to 7 years for tax and financial report purposes. This kind of data will be retained in the context of Granados's obligations under tax law for the period provided for by law but in any form for no more than 7 years. You have the right to access, rectify, restrict processing or delete your personal data. To exercise these rights, please contact us at [email protected]. You have the right to request the deletion of your personal data at any time, except where storage is necessary for compliance with our legal obligations.

Cross-Border Data Sharing: To provide you with the best possible experience and deliver our services effectively, we may need to share your personal information across international borders. This includes transferring data to our service providers, support partners, and cloud infrastructure located in countries outside your region, including the United States and other locations outside the European Economic Area. We work only with third-party service providers who we believe adequately secure all computer hardware. We take appropriate safeguards to ensure the secure and lawful transfer of your data, including implementing contractual agreements with recipients that comply with all applicable data protection laws and regulations. You acknowledge and consent to this global data sharing as necessary for the provision of our services. In order to ensure an adequate level of protection for your personal data when transferred to countries outside the European Union, we use Standard Contractual Clauses approved by the European Commission. These clauses establish contractual safeguards that ensure compliance with the GDPR requirements for the protection of personal data. For further details on the specific safeguards in place, please contact us.

7. Data Subject Rights

In accordance with the General Data Protection Regulation (GDPR), you, as a data subject, have the following rights regarding your personal data that we process:

Right of access: You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data, including the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed.

Right to rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.

Right to erasure ("right to be forgotten"): ("right to be forgotten"): In certain circumstances provided for by the GDPR, you have the right to obtain the erasure of your personal data

Right to restriction of processing: In certain circumstances, you have the right to restrict the processing of your personal data, for example where you contest the accuracy of the data.

Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without hindrance from us.

Right to object: You have the right to object at any time to of your personal data for reasons relating to your particular situation.

Right to withdraw consent: If the processing is based on your conprocessing sent, you have the right to withdraw your consent at any time.

Right to lodge a complaint: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority.

How to exercise your rights:

To exercise any of your rights, please contact us at [email protected]. We will consider your request and provide you with a response within the timeframes required by law. Such requests are usually provided free of charge; however, a reasonable fee may be applied to cover our administrative costs for requests that are manifestly unfounded, excessive or repetitive.

8. Children data

Vicedeal.s not intended for use by persons under the age of 18. We never knowingly solicit, collect, use, or disclose personal information from children under 18 years of age. If we discover that we have inadvertently collected personal information from a child or person under 18, we will delete that information as soon as possible.

9. Policy updates

Depending on changes in legislation or other practical reasons we may amend or make changes to this Privacy Policy from time to time to make sure it is still up to date. Policy updates are made by publishing changes on our website. Please review this policy periodically to monitor changes.

10. Third-party links

In some places on our site, there may be links to third-party websites.

These links are provided for your convenience and information. Please note that we do not control or endorse the privacy practices or the content of these third-party websites. Once you leave our website by clicking on a third-party link, this Privacy Policy no longer applies, and we encourage you to read the privacy policies of the third-party websites you visit. We are not responsible for any personal data you provide to third parties or for how they use or manage your data. Use of third-party links is at your own risk.

11. Contact Information and privacy inquiries

If you have any questions, concerns, or inquiries regarding this Privacy Policy or the processing of your personal data, you may contact us using the information provided below:

Data Controller:

Mediapress Ltd..

Registered Office: Rm 816, Level 8, Landmark North, 39 Lung Sum Avenue, Sheung Shui NT, Hong Kong SAR

Email: [email protected]

Our Data Protection Officer can be contacted at: [email protected]

You may also use this contact details to exercise any of your rights and privacy choices as outlined in this Privacy Policy. Please be reminded, that in case of any non-compliance with privacy legal requirements or violation of your rights, you have the right to contact the relevant EU supervisory authority. right to contact your proper EU supervisory authority.