why we collect your personal data
Depending on the purpose for which we process your data, we need to collect different data, depending on each case, as follows:
your identity data (for example, your name, surname, language and country from which you interact with us, contact data, etc.);
economic and transactions information (for example, your payment or card data, information on your purchases, orders, returns, etc.);
commercial information (for example, if you have subscribed to our newsletter).
Remember that, when we ask you to fill in your personal data to give you access to any service or functionality of the website, we will mark certain fields as compulsory, since this is information that we need to be able to provide the functionality or service in question. Please take into account that, if you decide not to make such data available to us, you may be unable to use the functionalities of the website.
Depending on how you interact with our website, i.e., depending on the services or functionalities that you want to use, we will process your personal data for the following purposes:
1. For the execution of the purchase or services contract that you executed with us on the website. This purpose includes processing your data, mainly:
To contact you for updates or informative notices related to the contracted functionalities or services, including quality surveys and to be able to establish the degree of customer satisfaction with the provided service.
To manage payment of the products that you purchase, regardless of the payment procedure used.
To manage potential returns after you have purchased.
To ensure that you are able to use other available functionalities or services, such as the purchase, management and use of the Gift Card.
2. For marketing purposes. This purpose includes the processing of your data, mainly, for:
If and when you subscribe to our Newsletter, we will process your personal data to manage your subscription, including to send customised information on our products or services through various means (such as e-mail or SMS). We may also make available to you this information through push notifications in case you have activated them in your mobile device.
do we share your data with third parties
technological service providers,
logistic, transport and delivery partners and service providers,
advertising and marketing related partners and service providers.
what happens when you provide us with data of third parties
We offer functionalities or services that require us to process the personal data of a third party that you must provide, such as in the case of activation and sending of the Gift Voucher or the management of the application for the Gift Voucher. If you provide us with personal data of third parties, you confirm that you informed them of the purposes and of the manner in which we need to process their personal data.
how we are legally permitted to process your personal data
The legal terms on which we are permitted to process your personal data also depends on the purpose for which we process them, as explained below.
1. Execution of the purchase or services contract
We process your data because their processing is necessary for us to make the purchase or services contract with you.
Certain processing of data related to the purchase process is activated only because you request or authorise it, as is the case of the storage of payment (card) data for future purchases. In these cases, our processing of your data is supported by your own consent.
We consider that we have a legitimate interest to carry out the necessary verifications to detect and prevent potential fraud when you make a purchase. We understand that the processing of these data is positive for all the participating parties when a purchase is paid and in particular for you, since this allows us to establish measures to protect you from fraud attempts by third parties.
We are legally permitted to process your data for marketing purposes due to the consent that you give us, for example when you accept receiving customized information through multiple channels, when authorizing the sending of push notifications in your mobile device or when accepting the legal terms and conditions to participate in a promotional action or to publish your pictures on the website or on our social networks' channels.
how long will we keep your data
The time for which we will keep your data will depend on the purposes for which we process them, as explained below:
1. Execution of the purchase or services contract We will process your data for the time necessary to manage the purchase of the products or services that you buy, including potential returns, complaints or claims related to the purchase of the product or service in question.
Sometimes, we will only process the data until the time when you decide, as is the case of payment (card) data that you requested us to store for future purchases.
2. Marketing We will process your data until you unsubscribe or cancel your subscription to the newsletter. If you participate in promotional actions, we will keep the data during a six (6) months period from the end of the action.
Notwithstanding the fact that we will process your data for the time strictly necessary to achieve the purpose in question, we will subsequently keep them duly stored and protected for the time during which liability may arise for their processing, in compliance with legislation in force from time to time. Once each of the potential actions is time-barred we will proceed to delete the personal data.
what your rights are when making your data available to us
We undertake to keep your personal data confidential and to ensure that you may exercise your rights. Bearing that in mind, we have agreed that you may exercise your rights free of charge by writing us an e-mail to a single e-mail address (firstname.lastname@example.org), simply informing us of the reason for your request and the right that you wish to exercise. If we consider this necessary to be able to identify you, we may request you to provide a copy of a document evidencing your identity. In particular, notwithstanding the purpose or legal basis we use to process your data, you have the following rights:
To request access to your personal data that we hold.
To request that we erase your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them.
To request that we cancel or limit the processing of your personal data, which entails that in certain cases you can request us to temporarily suspend the processing of the data or that we keep them longer than necessary.