Alana Lily Chocolates & Cakes in respect to the processing of personal data would like to inform the Users of the website https://www.AlanaLily.co.uk, http://Instagram.com/AlanaLilyCakes, https://www.facebook.com/Alanalilychocolatesandcakes, https://Etsy.com/Uk/shop/AlanaLilyChocolates and https://Twitter.com/AlanaLilyCakes about the ways and the manners in which we process the data that we obtain from our Users, according to the new European Regulation n. 679/2016 on the processing of personal data ("European Privacy Regulation"), applicable from May 25th 2018.

1. Data Controller
Louise Haythornthwaite is the Data controller and can be contacted at the following email address: Louise_Haythornthwaite@hotmail.co.uk

2. Personal Data Collected
According to this Policy, Alana Lily Chocolates & Cakes will process personal data obtained from its Users; this data may include:
a) Personal data and contact details provided by the User upon the creation of a cake enquiry or firm order.
b) Data provided when requesting information or assistance;
e) Data provided when taking part in surveys, competitions or contests organized by Alana Lily Chocolates & Cakes.
Alana Lily Chocolates & Cakes will not request or process health data or in general other special categories of data defined in article 9 of the European Privacy Regulation. Personal Data of minors will be processed in the ways and manners explained in paragraph 8 of this Policy.
The above-mentioned categories of data will be processed only to the extent necessary to the purposes described in paragraph 4 of this Policy.

3. Processing of Personal Data
Personal data of the Users will be processed using manual processes with adequate security measures including password protected iPad and spreadsheets to ensure safety and confidentiality of the personal data. Specifically, Alana Lily Chocolates & Cakes will implement measures necessary to ensure that personal data is protected against loss, alteration, unauthorised disclosure of, or access to, Personal Data transmitted, stored or otherwise processed.
When it is no longer necessary to process the personal data for the purpose for which it was collected, or at the end of the retention period (as further explained in paragraph 10), Alana Lily Chocolates & Cakes will anonymize personal data and will remove identifiers.

4. Purposes of the Processing
Alana Lily Chocolates & Cakes will require its Users to provide their personal data for the following purposes:
a) To allow Users to discuss the requirements of an order via email, Etsy messaging, Instagram messaging, Facebook messaging, twitter messaging or over the telephone.
b) To comply with legal and regulatory obligations (defined as: "Legal Purposes")
c) When Users give their consent, to be sent newsletters, marketing communications trough traditional and other means, including email, SMS, MMS, social network, instant messages, mobile applications, banner, mail and phone, to promote and/or sell products and/or services offered by Alana Lily Chocolates & Cakes and to conduct other surveys to evaluate the Users' satisfaction with the Services (defined as "Marketing Purposes");
d) Details of users will only be shared with any third parties when explicit permission is sought, this could occur if Alana Lily Chocolates & Cakes is unavailable for the order being requested and a recommendation of another business is being provided.

5. Legal Basis for the Processing
Processing of personal data for Contractual Purposes is mandatory since it is necessary for the confirmation of an order.
Processing of personal data for the Purposes of the Law is mandatory since it is required by the applicable laws. If Users do not wish their personal data to be processed for these purposes, they will not be able to place an order nor to enjoy the services offered through Alana Lily Chocolates & Cakes.
Processing of personal data for Purposes of Marketing is not mandatory, and subject to prior consent of the User. If the User does not give their consent however, Alana Lily Chocolates & Cakes will not be able to inform the User about new product/services, promotions, personalized offers, or to carry out market surveys, or to send other communications and materials in line with their interests.

6. Communication of Personal Data
For the Purposes explained in paragraph 4, Alana Lily Chocolates & Cakes might communicate Users' personal data, only where strictly necessary to each type of processing, in the following categories of subjects:
a) Employees of Alana Lily Chocolates & Cakes, within the performance of their tasks and/or contractual obligation and in relation to the commercial relations with the Users;
b) To Postal Offices and couriers to send and deliver products purchased by the Users and/or other materials related to the services offered by Alana Lily Chocolates & Cakes;
c) To legal, administrative and fiscal consultants, within the limits of what is necessary or functional to the activities of Alana Lily Chocolates & Cakes, in the ways and manners explained above;
d) To financial institutions for the management of revenues and payments deriving from the performance of the contract with the User.
Personal data of the Users will not be disclosed.

7. Overseas Transfer of Personal Data
No data will be transferred outside of the UK.

8. Data of Subjects under 18
The services offered by Alana Lily Chocolates & Cakes can be enjoyed by subjects under 18, therefore minors. In this case, Alana Lily Chocolates & Cakes collects and processes personal data of minors only for the purposes, and in the ways and manners explained in this Policy, in compliance with the provisions of the European Privacy Regulation for processing of personal data of minors (art. 8) and with the prior consent of a parent or another legal guardian, whose data will be collected only for the purpose of obtaining such consent.

9. Rights of the Users
In relation to their personal data, the User will be able to exercise, with no additional charge and at any time, the following rights:
a) To obtain confirmation as to whether or not personal data concerning the user is being processed, and, where that is the case, access to the personal data;
b) To know the origin of the data, the purposes and the way in which they are processed and the logic applied to processing by automated means;
c) To ask for the update, rectification or - if the user is interested - the integration of the data;
d) To ask for the erasure, the anonymization or the blocking of data unlawfully processed or to object to the processing for legitimate reasons;
e) To object, fully or partially, to the processing of data for purposes of direct marketing carried out either through automated or more traditional ways;
f) To withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Together with the above-mentioned rights, starting from May 25th 2018, Users will also enjoy the rights enshrined in the following paragraph 10 b).
Users will be able, at any time, to exercise their right, to modify their contact details, to notify Alana Lily Chocolates & Cakes of changes and updates regarding their data, to obtain further information on the processing of their personal data carried out by Alana Lily Chocolates & Cakes by writing an email to the following address: Louise_Haythornthwaite@hotmail.co.uk or by calling the following number: 07919 014571

10. Further provisions applicable after May 25th 2018
The following provisions will become fully effective starting from May 25th 2018, when the European Privacy Regulation will be applicable
a) Retention periods for personal data: Alana Lily Chocolates & Cakes will retain personal data for no longer that is necessary to fulfil the purpose for which data have been collected, according to paragraph 2 of this privacy policy. In any case, the following retention periods will apply for this specific purposes:
➢ Personal data collected for Contractual Purposes (par. 4.a) will be retained for the duration of the contract and for 1 year after its termination.
➢ Personal data collected for Purposes of Law (par. 4.b) shall be retained in accordance with the specific limitation periods defined by law;
➢ Personal data collected for Marketing Purposes of Alana Lily Chocolates & Cakes (per 4.c) shall be retained for the duration of the service provided, the participation to the contest and/or the collection; and for 2 years after the collection and/or the termination of the service offered;
➢ Personal data collected for Purposes of Marketing of Others and Profiling Purposes (par 4.d-e) shall be retained for 12 months after the collection;
➢ Personal data collected for Purposes of Legitimate Interest of Marketing (par 4.f) should be retained for all the duration of the registration of the User on the Site through their Account end/or the participation to an online contest end/or the collection and for 2 years after the cancellation/deactivation of the Account;
➢ Personal data collected for Purposes of Legitimate Interest of business (par. 4.g) will be retained for 2 years from the moment of their collection.
Once these terms have expired, Users' personal data will be deleted/anonymized and/or aggregated.
b) Additional rights: the User, at any time and in the ways and manners explained in the previous paragraph will have the right to:
➢ Ask for a restriction of the processing when: (i) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; (ii) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; (iii) Alana Lily Chocolates & Cakes no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; (d) the data subject has objected to processing pursuant to Article 21.1 of the European Privacy Regulation, pending the verification whether the legitimate grounds of the controller override those of the data subject;
➢ Ask for the erasure of personal data without undue delay;
➢ Ask for the portability of his personal data.
c) Bring a claim before the National Authorities for the processing of personal data.

11. Updates
This document will be effective from the date indicated in the heading.
Alana Lily Chocolates & Cakes might change and/or integrate this document, also as a consequence of further modifications and/or integration of the European Privacy Regulation. Updates and modifications will be notified in advance and Users will always be able to view the updated Policy.
If you have doubts, questions or complaints with regard to the collection and processing of your personal data, you may contact Alana Lily Chocolates & Cakes through the section “Contact us” of the Site or or calling the following number 07919 014571