Decantio.eu
Last updated: May 2025
Applicable law: GDPR (Regulation EU 2016/679)
1. Introduction
This Privacy Policy explains how Decantio.eu (hereinafter referred to as “the Platform”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data provided by visitors and registered users (hereinafter “Users”) of the website located at https://decantio.eu.
We are committed to protecting your personal data and your right to privacy. This policy has been prepared in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, “GDPR”) and applicable national data protection laws.
By accessing the Platform, registering an account, or submitting any information through the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
If you have any questions about this policy or our data practices, please contact us at: legal@decantio.eu
2. Data Controller
The data controller responsible for the processing of your personal data is:
Decantio.eu
Website: https://decantio.eu
Data protection contact: info@decantio.eu
Where required by applicable law, we will maintain a Record of Processing Activities (ROPA) and may be required to designate a Data Protection Officer (DPO). If this applies, contact details will be published on the Platform.
3. What Personal Data We Collect
We collect personal data in the following categories, depending on how you interact with the Platform:
3.1 Data You Provide Directly
- Full name or display name used on the Platform.
- Email address used for registration and communications.
- Password (stored in encrypted form only — we never store plain-text passwords).
- Country of residence (for shipping and legal compliance purposes).
- Profile information you choose to add, such as a bio, profile photo, or social links.
- Listing information submitted as a Seller, including product descriptions, photos, prices, and fragrance attributes.
- Communications sent through the Platform’s internal messaging system.
- Complaints or support requests submitted to the Platform.
3.2 Data Collected Automatically
- IP address and approximate geographic location (country/region level).
- Browser type, device type, and operating system.
- Pages visited, time spent on pages, and navigation patterns (via cookies and analytics tools).
- Referral source (how you arrived at the Platform).
- Date and time of access and activity logs.
3.3 Data From Third Parties
- If you register or log in using a third-party authentication provider (such as Google or Facebook), we may receive your name, email address, and profile photo from that provider, subject to your privacy settings with them.
- Payment processors may share transaction reference data with us for the purpose of order management. We do not store full payment card details.
4. Legal Basis for Processing
Under the GDPR, we process your personal data on the following legal bases:
- Contractual necessity (Article 6(1)(b)): Processing required to provide you with the Platform’s services, including account management, facilitating listings, and enabling Transactions between Users.
- Legitimate interests (Article 6(1)(f)): Processing for the purposes of fraud prevention, Platform security, improving our services, and internal analytics, where these interests are not overridden by your rights.
- Legal obligation (Article 6(1)(c)): Processing required to comply with EU law, including tax, consumer protection, and data protection obligations.
- Consent (Article 6(1)(a)): Where you have given explicit consent, such as for marketing communications or optional data processing activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- Creating and managing your User account on the Platform.
- Enabling Sellers to create and manage Listings and Buyers to browse and complete Transactions.
- Facilitating communication between Buyers and Sellers through the Platform’s messaging system.
- Processing and responding to complaints, support requests, and moderation actions.
- Sending transactional communications (account confirmations, password resets, listing updates).
- Sending service-related notifications and, where consent is given, marketing communications.
- Monitoring and improving Platform performance, usability, and security.
- Detecting, preventing, and investigating fraud, abuse, or violations of our Terms and Conditions.
- Complying with applicable legal obligations, including responding to lawful requests from authorities.
- Maintaining internal records as required by law.
6. User Responsibility for Publicly Shared Data
By registering an account or creating a Listing on the Platform, you acknowledge and accept full responsibility for any personal data or other information you choose to share publicly on the Platform, including but not limited to:
- Profile information visible to other Users.
- Listing descriptions, photos, prices, and fragrance details.
- Reviews, ratings, or messages posted publicly.
You consent to the Platform storing, displaying, and processing the data you submit for the purposes of operating the marketplace. You should not include sensitive personal data (such as financial information, identity documents, or health data) in any publicly visible field on the Platform.
Decantio.eu is not responsible for any consequences arising from information you voluntarily disclose on the Platform. You are advised to exercise caution regarding what personal information you make publicly visible.
7. Perfume and Fragrance Content — Informational and Educational Purpose
Important Notice: All fragrance-related content on Decantio.eu — including perfume descriptions, encyclopaedia entries, ingredient information, olfactory family classifications, perfumer profiles, brand information, and any related editorial content — is provided solely for informational and educational purposes.
The Platform makes no representations or warranties as to the accuracy, completeness, or currency of any fragrance information published on the Platform. Fragrance formulations, ingredient compositions, and product specifications may change over time and may vary between batch, region, or distribution channel.
Fragrance and cosmetic information on the Platform must not be interpreted as:
- Professional cosmetic, dermatological, or medical advice.
- A guarantee of the safety, suitability, or composition of any product listed or described.
- A substitute for consulting official product documentation, safety data sheets, or a qualified professional.
Users with known allergies, sensitivities, or medical conditions related to fragrances or cosmetic ingredients are strongly advised to consult a qualified medical or cosmetic professional before purchasing or using any fragrance product. The Platform accepts no liability for any adverse reactions, allergic responses, or harm resulting from reliance on informational content published on Decantio.eu.
All trademarks, brand names, and fragrance house names referenced in the Platform’s educational content are the property of their respective owners. Their use on the Platform is for identification and informational purposes only and does not imply any affiliation, endorsement, or partnership with Decantio.eu.
8. Cookies and Tracking Technologies
Decantio.eu uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform.
8.1 Types of Cookies We Use
- Strictly necessary cookies: Required for the Platform to function correctly, including session management and security. These cannot be disabled.
- Functional cookies: Remember your preferences and settings to improve your experience (e.g., language preference, login state).
- Analytics cookies: Collect anonymised data about how Users interact with the Platform to help us improve its performance and content.
- Marketing cookies: Used where consent is given to deliver relevant content or measure the effectiveness of communications.
8.2 Managing Cookies
You may control or disable non-essential cookies through the cookie consent banner displayed on your first visit to the Platform, or through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.
For more information about cookies and how to manage them, visit: www.allaboutcookies.org
9. Sharing of Personal Data
We do not sell your personal data to third parties. We may share your data in the following limited circumstances:
9.1 With Other Users
Certain profile and Listing information is visible to other Users of the Platform as part of the marketplace function (e.g., Seller display name, listing details, and reviews). You control the information you submit to public-facing fields.
9.2 With Service Providers
We may share data with trusted third-party service providers who assist in operating the Platform, including hosting providers, payment processors, email delivery services, and analytics providers. These providers process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
9.3 Legal Requirements
We may disclose personal data where required by law, court order, or a lawful request from a competent authority within the EU or the jurisdiction of our service providers. We will notify affected Users where legally permitted to do so.
9.4 Business Transfers
In the event of a merger, acquisition, or sale of the Platform or its assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. Users will be notified of any such change.
10. International Data Transfers
Decantio.eu is based in the European Union and primarily processes data within the EU/EEA. Where data is transferred outside of the EU/EEA (for example, through third-party service providers), we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Transfers to countries with an adequacy decision issued by the European Commission.
- Other appropriate legal mechanisms as required.
You may request information about the safeguards applicable to international transfers by contacting us at legal@decantio.eu.
11. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:
- Active account data: Retained for the duration of your account’s existence on the Platform.
- Listing and Transaction data: Retained for a minimum of 5 years following a Transaction to comply with EU tax and consumer protection requirements.
- Support and complaint records: Retained for 3 years following resolution.
- Analytics data: Retained in anonymised or aggregated form indefinitely; identifiable data retained for no longer than 26 months.
- Marketing consent records: Retained until consent is withdrawn plus an additional 1 year for audit purposes.
When data is no longer required, it is securely deleted or anonymised in accordance with our data retention procedures.
12. Your Rights Under the GDPR
As a data subject under the GDPR, you have the following rights in relation to your personal data:
- Right of access (Article 15): You may request a copy of the personal data we hold about you.
- Right to rectification (Article 16): You may request correction of inaccurate or incomplete data.
- Right to erasure / Right to be forgotten (Article 17): You may request deletion of your personal data, subject to our legal retention obligations.
- Right to restriction of processing (Article 18): You may request that we limit how we use your data in certain circumstances.
- Right to data portability (Article 20): You may request your data in a structured, machine-readable format.
- Right to object (Article 21): You may object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent (Article 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
- Right to lodge a complaint: You have the right to lodge a complaint with your national data protection supervisory authority. In Spain, this is the Agencia Espanola de Proteccion de Datos (AEPD): www.aepd.es
To exercise any of these rights, please submit a written request to: legal@decantio.eu. We will respond within 30 days of receipt. We may request proof of identity before processing your request.
13. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- Encryption of data in transit using TLS/SSL protocols.
- Encrypted storage of passwords and sensitive credentials.
- Access controls limiting data access to authorised personnel only.
- Regular security reviews and vulnerability assessments.
- Data minimisation practices — we only collect what is necessary.
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected Users without undue delay.
14. Children’s Privacy
The Platform is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a User is under 18 years of age, we will take steps to delete their account and associated data promptly.
If you believe a minor has registered on the Platform, please notify us immediately at legal@decantio.eu.
15. Third-Party Links and External Content
The Platform may contain links to third-party websites, fragrance databases, or external resources. This Privacy Policy applies solely to data collected by Decantio.eu and does not extend to any third-party sites or services. We encourage you to review the privacy policies of any external sites you visit via the Platform.
We are not responsible for the privacy practices or content of third-party websites.
16. Changes to This Privacy Policy
We reserve the right to update or amend this Privacy Policy at any time. Any material changes will be communicated to registered Users via email or a prominent notice on the Platform, and the “Last updated” date at the top of this document will be revised accordingly.
Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Privacy Policy. Where consent is the legal basis for processing, we will seek renewed consent where required by law.
17. Contact and Complaints
For any questions, requests, or complaints regarding this Privacy Policy or how we handle your personal data, please contact us at:
Email: info@decantio.eu
Website: https://decantio.eu
If you are not satisfied with our response, you have the right to escalate your complaint to the competent supervisory authority in your EU member state.
Users in other EU member states may contact their respective national data protection authority. A full list is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en
This Privacy Policy has been drafted to comply with GDPR (Regulation EU 2016/679), the EU ePrivacy Directive (2002/58/EC as amended), and applicable national data protection legislation. It should be reviewed periodically and updated in consultation with a qualified data protection professional as the Platform grows and its data processing activities evolve.