Privacy Policy
1. Identification of the name of the person responsible for the file
In accordance with the provisions of the REGULATION (EU) 2016/679, of April 27, 2016, on the Protection of Personal Data, we inform you that the personal data obtained as a result of your sending personal data, will be incorporated into a file owned by ______ (hereinafter THE COMPANY) with registered office at _______, having implemented all the security measures established in the REGULATION (EU) 2016/679.
2. What type of data do we collect?
THE COMPANY may collect the following personal information from users of THE COMPANY’s website through the corresponding forms: name, e-mail address, postal address, telephone number when the user visits the WEBSITE, contacts THE COMPANY or participates in THE COMPANY’s promotions or surveys.
In addition, THE COMPANY collects all the information related to your navigation on the WEBSITE and your interaction with the brand.
All personal data collected by THE COMPANY comes from the data subject.
3. For what purpose does THE COMPANY collect the data?
The data subject’s personal data will be processed for the following purposes as applicable:
- Manage and develop the WEB registration. The registration will involve profiling of user navigation on the WEB.
Such profiling involves the use of the customer’s personal data and browsing information such as page views,
the sections of the WEB visited, the location to evaluate your preferences and/or personal interests in order to offer you the contents of the WEB, offers, services and products suitable to your profile. - Manage and send information about exclusive promotions, latest news and personalized information tailored to the profile, interests and needs of the interested party as a customer via email, SMS or mail. The sending of this information will involve the profiling of users, which consists of using personal data, the history of your purchases if applicable, as well as browsing information on the WEB to evaluate certain aspects related to your personal preferences in order to offer you commercial communications appropriate to your profile.
- The content, products or services will be personalized to the customer in the communications according to their interests. To manage communications, please refer to the ‘Subscriptions’ section in My Account.
- Respond to the exercise of ARCO+ rights, as well as to queries and complaints.
4. How long do we keep your data?
THE COMPANY will store personal data only for such period of time as is reasonably necessary in view of the needs to respond to issues that arise or resolve problems, make improvements, activate its services and comply with the requirements of applicable law.
This means that it may retain personal data for a reasonable period of time even after the data subject has stopped using THE COMPANY’s services or has stopped using the WEBSITE. After this period, personal data will be blocked from all COMPANY systems.
5. What legitimizes us to process data?
THE COMPANY has the following legitimate grounds to be able to process personal data:
Execution of the contract
The legal basis for the processing of personal data collected from the data subject is the execution of the purchase contract. In this sense, the interested party is obliged to provide the data necessary for its execution. If you do not provide us with this information, it will not be possible to complete the sale.
Legal obligations
The management and issuance of the sales invoice is based on the legal obligation of THE COMPANY in its relationship with customers.
Consent
In relation to the following purposes, the legal basis for the processing of the data subject’s personal data will be the consent of the data subject, if given:
- WEB registration management
- Management of sending information on exclusive promotions, latest news and personalized information tailored to the profile of the person concerned.
- Response to the exercise of ARCO+ rights, queries and claims by the interested party.
The withdrawal of consent to these treatments by the data subject shall not condition the execution of the purchase contract concluded between the data subject and THE COMPANY.
Legitimate interest
In relation to the following purposes, the legal basis for the processing of the personal data of the data subject will be the legitimate interest of THE COMPANY:
- The elaboration of profiles through the navigation on the WEB by a registered user in the same, as well as all those users who have provided us with their data for any other purpose.
- Profiling for sending information about exclusive promotions, latest news and personalized information tailored to the profile of the person concerned.
- Sending satisfaction surveys about the services used by THE COMPANY’s customers to request their opinion and improve them.
Our legitimate interest is to ensure that our WEBSITE remains secure, as well as to help THE COMPANY to understand the needs, expectations and level of satisfaction of users and, therefore, to improve services, products and brands, in order to improve the level of customer satisfaction and ensure a unique browsing and shopping experience.
6. To which recipients can we send the data?
The personal data of the interested party may be transferred/communicated to the following recipients:
- Public Administrations and Agencies when so required by tax, labor, Social Security or any other applicable regulation.
- Companies in charge of data processing, such as franchisees and suppliers that provide services to THE COMPANY (courier companies, communication sending companies, agencies, profiling companies, etc.).
International data transfers may also occur in connection with the above transfers/communications for which THE COMPANY will use the Standard Contractual Clauses adapted by the European Commission and the EU-US Privacy Shield.
As a guarantee for those transfers made to countries that do not have an adequacy decision from the European Commission.
In any case, third parties with whom certain personal data is shared will have previously accredited the adoption of adequate technical and organizational measures for the correct protection of such data.
THE COMPANY does not sell customer data to third parties under any circumstances.
7. How does THE COMPANY protect data?
The WEB uses information security techniques such as firewalls, access control procedures and cryptographic mechanisms,
All this in order to prevent unauthorized access to the data and ensure the confidentiality of the same.
To achieve these purposes, the user accepts that THE COMPANY obtains data for the purposes of the corresponding authentication of access controls.
Additionally, any transaction made through the WEB is carried out through secure payment systems. Confidential payment data is transmitted directly and in encrypted form (SSL) to the corresponding entity.
THE COMPANY declares that it has adopted all the necessary technical and organizational measures to guarantee the security and integrity of the personal data it processes, as well as to avoid its loss, alteration and/or access by unauthorized third parties.
8. What are your rights regarding your personal data?
You are entitled to the following rights that can be exercised through the e-mail address comercial@chl98.es:
- Right of access: You have the right to obtain confirmation as to whether or not THE COMPANY is processing personal data concerning you, as well as the right to access the personal data that THE COMPANY has about you.
- Right of rectification: You have the right to request that THE COMPANY rectify personal data when it is inaccurate or complete when it is incomplete. If you are registered on our WEB, it may be easier for you to correct them directly by modifying your profile.
- Right to erasure/right to be forgotten: You can ask us to delete personal data when, among other reasons,
the data are no longer necessary for the purposes for which they were collected. - Right of limitation: You have the right to request the limitation of the processing of your data, in which case we will only keep them for the following purposes
exercise or defense of claims. - Right of portability: You have the right to receive personal data in a structured, commonly used and machine-readable format and to transmit it to another controller when the processing is based on consent or a contract and is carried out by automated means.
- Right to object: You may object to the processing of personal data based on the public or legitimate interest pursued by THE COMPANY, including profiling. In this case, THE COMPANY will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
- Automated individual decisions: You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.
However, it will not be possible to exercise such right in the event that the decision is necessary for the conclusion or performance of a contract between you and THE COMPANY; is authorized by law applicable to THE COMPANY provided that it establishes adequate measures to safeguard your rights, freedoms and legitimate interests; or is based on your explicit consent. - Right to file a complaint: You have the right to file a complaint with the Spanish Data Protection Agency.
In order to process the request, we may ask you to prove your identity.