Privacy policy

PRIVACY POLICY

This Privacy Policy governs the processing of personal data provided by users through this online store, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and current Spanish legislation.

1. Data Controller

Owner: Rosa Mena Sanchis
Address: Oliva, Valencia
Email: umarossa@gmail.com

2. Personal Data Collected

Personal data that may be collected through the online store include:

Full name.
Shipping and billing address.
Email address.
Phone number.
Information necessary for payment processing.
Order history.
Browsing data obtained through cookies, where applicable.

3. Purpose of Processing

Personal data will be processed for the following purposes:

Manage and process orders placed.
Provide customer support and respond to inquiries.
Manage exchanges, returns, and refunds.
Comply with corresponding legal and tax obligations.
Send commercial communications and promotions, provided the user has given their consent.

4. Lawfulness of Processing

The legal basis for data processing is:

The performance of the sales contract.
Compliance with legal obligations.
The user's express consent for receiving commercial communications.

5. Data Retention

Personal data will be retained for the time necessary to fulfill the purposes for which they were collected and for the periods required by current legislation.

6. Recipients of Data

Data may be disclosed to third parties when necessary for the provision of the service, including:

Payment platforms.
Shipping and courier companies.
Technology and web hosting providers.
Public administrations and competent bodies, when there is a legal obligation.

Under no circumstances will personal data be sold or transferred to third parties for commercial purposes.

7. User Rights

Users may exercise their rights of access, rectification, erasure, opposition, restriction of processing, and data portability by sending a communication to the email address umarossa@gmail.com.

They may also file a complaint with the Spanish Data Protection Agency if they believe their rights have not been adequately addressed.

8. Data Security

Necessary technical and organizational measures will be adopted to ensure the security and confidentiality of personal data, preventing their alteration, loss, or unauthorized access.