Information about the processing of your personal data
I. PRIVACY AND DATA PROTECTION POLICY
In compliance with the provisions of current legislation, Esther Noriega (hereinafter, also the Website) undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected.
Laws incorporated in this privacy policy
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it respects the following rules:
Identity of the controller of personal data
The data controller of the personal data collected by Esther Noriega is: COOL AND CHIC ATELIER, S.L., with Tax ID: B-47663745 and registered in: Mercantile Registry of Valladolid with the following registration details: Act No.: 000243070 – Date of Act: 17/06/2010, whose representative is: Esther Noriega (hereinafter, Data Controller). Her contact details are as follows:
Address: Calle Gabriel y Galan, 10, 2C, Valladolid C.P. 47005
Contact telephone number: 639 788 233
Contact email: info@esthernoriega.es
Processing of personal data
In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by Esther Noriega through the forms provided on the website will be processed by the Data Controller in order to manage the relationship with the User, answer queries, process orders and comply with applicable legal and contractual obligations.
Automated Decisions and Profiling
Unless expressly indicated otherwise in a specific processing, no automated decisions are taken or profiles are created with legal effects on the User.
Principles applicable to the processing of personal data
The processing of the User’s personal data will be subject to the following principles:
Categories of Personal Data
The categories of personal data processed include: identification data (name, surname), contact data (email, telephone), postal address, browsing data (IP, cookies) and data related to the purchase.
Legal basis for processing personal data
The legal basis for the processing of personal data is the performance of a contract, compliance with legal obligations applicable to the Data Controller and the user’s consent to the sending of commercial communications or contact forms.
Retention periods for personal data
Personal data will be kept for the time necessary to fulfil the purpose for which they were collected. Data related to the purchase will be kept for the duration of the contractual relationship and thereafter for the periods required by the applicable tax and administrative regulations. Data used for commercial communications will be kept until the User requests their deletion.
Recipients of personal data
The User’s personal data may be communicated to: payment service providers (Stripe, PayPal or banks), transport and logistics companies, and technology providers necessary for the operation of the website.
Personal data of minors
Only those over 14 years of age may give their consent for the processing of their personal data in a lawful manner by Esther Noriega. If it is a minor under 14 years of age, the consent of the parents or guardians will be required.
Secrecy and security of personal data
Esther Noriega undertakes to adopt the necessary technical and organisational measures according to the level of security appropriate to the risk of the data collected. The website has an SSL certificate that ensures that personal data is transmitted securely and confidentially.
Rights derived from the processing of personal data
The User may exercise the following rights vis-à-vis the Data Controller: right of access, right of rectification, right of deletion, right to restriction of processing, right to data portability, right of opposition and right not to be subject to automated decisions.
To exercise these rights, the User may write to the following by means of a written communication with the reference “GDPR-www.esthernoriegacouture.com“:
Postal address: Calle Gabriel y Galan, 10, 2C, Valladolid C.P. 47005
Email: info@esthernoriega.es
Links to Third-Party Websites
The website may include hyperlinks to websites of third parties other than Esther Noriega, which have their own data protection policies.
International Transfers
The Website may involve international data transfers. In these cases, the Controller ensures that such transfers are carried out in accordance with the appropriate safeguards set out by the GDPR.
Complaints to the supervisory authority
In the event that they consider that there is a problem in the way their personal data is processed, the User has the right to file a complaint with the Spanish Data Protection Agency.
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
The User must have read and understood this Privacy Policy before providing their personal data. Esther Noriega reserves the right to modify its Privacy Policy according to its own criteria or motivated by a legislative change.
