Privacy Policy

PERSONAL DATA PROCESSING NOTICE
PERSONAL DATA PROTECTION POLICY

1. General Provisions

“Vernissage AM” online store (hereinafter: “the Company”, “we”, “us”, “our”) is committed to ensuring the confidentiality and protection of your personal data as a Customer. This Personal Data Processing Notice (hereinafter: “the Notice”) outlines the policy adopted by the Company, as well as the principles, methods, and procedures by which your personal data is processed.

This Notice applies to any website, mobile application, product, software, or service (hereinafter: “Services”) provided by the Company, unless the Company has explicitly established another written policy.

The Notice may be updated from time to time, and you will be informed of such changes through the “Vernissage AM” website. Nevertheless, we recommend periodically visiting our website to ensure that any updates remain acceptable to you. The terms used in this Notice correspond to the definitions set forth in the Company’s Public Offer.

By using our services or registering on the website, you unconditionally agree to the processing of your personal data in accordance with this Notice, including when necessary the request and receipt of your data.

2. Categories of Personal Data Subjects

Personal data subjects include the following groups:

customers of the Company,
individuals intending to use the Company’s services,
employees of the Company and other individuals who have contractual relations with the Company within the scope of service provision,
job applicants (candidates),
other individuals who have accepted this Notice in writing.

3. Legal Grounds for Personal Data Processing

Your personal data is processed based on the grounds established by the laws of the Republic of Armenia (RA), including the RA Law “On Personal Data Protection”, the contract concluded or to be concluded with you, the Company’s Public Offer that forms an integral part of that contract, as well as your consent provided by accepting this Notice.

Data of legal entities is processed in accordance with RA legislation, including the Law “On State Registration of Legal Entities, Separate Subdivisions of Legal Entities, Institutions and Individual Entrepreneurs”.

4. Processed Data and Methods of Collection

To use our Services, you may provide the following personal data:

first name, last name,
phone number,
delivery address,
email address.

In the case of legal entities or individual entrepreneurs, the following may also be required:

contact person’s first name, last name,
company name,
tax identification number,
phone number,
email address,
delivery address.

If necessary and with your consent, additional data may be collected. You are required to provide accurate, complete, and up-to-date information. In cases of false, inaccurate, or incomplete data, or where their authenticity is in doubt, the Company may deny access to the website and/or decline to provide services.

The Company may also collect data generated during your use of the website using cookies or similar technologies. You may manage or disable cookies in your browser; however, blocking them may limit certain functionalities. We recommend keeping cookies enabled.

Automatically collected data may include:

your IP address,
list of viewed products,
data about actions taken prior to entering the website,
time zone,
geolocation data.

By this Notice, you provide consent for the collection and use of such indirectly collected data.

To improve our Services, we may use customer behavior analytics tools, including:

Hotjar (Screen Recording). Hotjar may record your on-site interactions, such as mouse movements, clicks, and scrolling. These recordings are used exclusively to evaluate and enhance website functionality and user experience. Hotjar does not collect sensitive personal data or input fields containing personal information (e.g., passwords, payment details).

Your personal data is processed only to the extent necessary to achieve the purposes defined in this Notice.

5. Actions Performed with Personal Data

Personal data processing includes all mechanical and/or technical operations performed on data, including collection, input, comparison, organization, storage, transfer, correction, updating, modification, destruction, anonymization, blocking, use, review, and other necessary actions to achieve the purposes defined in this Notice.

6. Purposes of Personal Data Processing

Within the framework of your relations with the Company and the services provided by the Company, your personal data may be processed for:

proper provision of services and improving customer service quality,
required interaction under concluded contracts,
identity verification (authentication),
ensuring the accuracy of provided data (verification, correction, updating),
sending informational, promotional, marketing, or advertising SMS, calls, or electronic messages,
providing notifications related to services, obligations, or debts,
implementing debt collection measures,
collecting statistical data and conducting research (data used for these purposes is anonymized),
other purposes defined by RA legislation.

7. Accessibility of Personal Data

You agree that the Company may transfer your personal data both within the territory of Armenia and abroad to third parties that process, store, or provide information. Transfers outside Armenia comply with the RA Law “On Personal Data Protection”.

Your personal data may be disclosed (or exchanged) only for the purposes defined in this Notice and only to the extent necessary, including to:

operators of state information systems,
partner companies, suppliers, and service providers involved in the Company’s service delivery or research activities, including Users and Couriers,
third parties that process or store information regarding debtor obligations,
parties that have acquired the right to claim or collect customer obligations,
shareholders, subsidiaries, affiliates, representative offices, and branches of the Company,
agents, dealers, distributors, and other partners engaged in the sale or support of the Company’s products or services,
third parties using certain data (e.g., phone number, email) for marketing purposes, including sending advertising SMS, calls, surveys, online and social media ads, or emails.

By accepting this Notice, you agree to such transfers and acknowledge that the Company is not responsible for the legal implications of such messages.

Your personal data may also be provided to state authorities as required by law.

8. Data Retention Period

The Company periodically reviews personal data retention periods in accordance with RA legislation and internal policies.

Your personal data is stored for the period defined by the Company’s internal procedures and applicable laws.

9. Data Destruction

The Company processes only those personal data that are required by RA law or necessary to achieve the purposes defined in this Notice, while avoiding unnecessary duplication of data processing.

Data that are no longer needed or have exceeded their retention periods will be destroyed as prescribed by law.

10. Your Rights

You have all the rights granted under the RA Law “On Personal Data Protection”.

At any time, you may:

withdraw your consent to the processing of your personal data,
request deletion of your personal data.

Note that in such cases the Company may be unable to continue providing services or maintain contractual relations. Full deletion of data may not always be possible due to legal obligations.

You may also opt out of receiving marketing or advertising communications at any time by submitting a written request or through other methods established by the Company.

You have the right to request correction or updating of your personal data if they are inaccurate, incomplete, or outdated.

If you believe your personal data has been processed unlawfully or disagree with how it is processed, you may submit a complaint or request to the Company.

Additionally, you may file a complaint with the authorized data protection authority in Armenia:

Personal Data Protection Agency, Ministry of Justice of the Republic of Armenia

11. Security Measures

We attach great importance to the security of your personal data and implement all necessary measures to ensure its protection.

The Company processes personal data in accordance with the following principles:

legality and reliability of data processing purposes, methods, and results,
compatibility of actual and declared purposes,
proportionality of data scope, nature, and technical measures to the processing purposes,
sufficiency of data without collecting excessive or irrelevant information,
informing system users of their obligation to maintain lawful and safe behavior when handling data,
ensuring accuracy, completeness, reliability, and security of data in our systems,
informing data subjects about the processing of their data and granting the right to correct or supplement it,
continuous internal monitoring and periodic updating of security measures and technical resources.

The Company applies all required legal, organizational, and technical measures to protect personal data in accordance with RA law, internal information security policies, and technical standards.

Access to personal data is provided only to employees involved in implementing the purposes defined in this Notice and only to the extent and duration necessary.

All employees, partners, and authorized persons have signed confidentiality agreements and have been informed of disciplinary, administrative, civil, and criminal liability in case of violations.

All partner agreements include mandatory confidentiality clauses, including those regarding personal data.

12. Term of Consent

This Notice and any amendments take effect upon publication on the Company’s Platform and apply to all relations arising prior to their coming into force. After publication of a new version, previous versions are deemed invalid.

Your consent provided by accepting this Notice remains valid until all legal relations between you and the Company cease and until you have fully fulfilled your obligations to the Company.

13. Contact Us

If you have questions, comments, or need clarification regarding this Notice or our personal data protection policy, you may contact us at:

Email: info@vernissage.am
Phone: +374 (10) 25 01 01, +374 (44) 25 01 01