Privacy policy

INFORMATION ON PERSONAL DATA

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The data controller is [OTITRENDEE2021], S.L. (“CARMEN SAYS”), with NIF B- [05274485]. The contact details of CARMEN SAYS are the following:

Postal address: [Camino de la Fou 25, 08640 Olesa de Montserrat, Barcelona, España].
Phone: [ (+34) 639 834 418]
Email: [hello@carmensays.com]

The interested party is informed that CARMEN SAYS has appointed a Data Protection Delegate to whom he may raise any question regarding the processing of his personal data. The interested party may contact the Data Protection Delegate through the following contact information: [hello@carmensays.com], postal address: [Camino de la Fou 25, 08640 Olesa de Montserrat, Barcelona, España].

WHAT KIND OF PERSONAL INFORMATION DOES CARMEN SAYS COLLECT?
CARMEN SAYS may collect the following personal information from users of the CARMEN SAYS website and / or the CARMEN SAYS mobile application (“WEB / APP”) through the corresponding forms: name, email address, postal address , phone number, date of birth, gender and credit card.

In addition, CARMEN SAYS collects all the information related to your browsing on the WEB / APP and your interaction with the brand.

All the personal data that CARMEN SAYS collects comes from the interested party.

FOR WHAT PURPOSE DO WE TREAT PERSONAL DATA?
The personal data of the interested party will be treated with the following purposes as applicable:

Management and development of the registration on the WEB / APP. Registration will involve the creation of profiles of the user's browsing on the WEB / APP. Said profiling consists of the use of the client's personal data and information on their browsing such as the products seen or added to the basket, the sections of the WEB / APP visited, the location to evaluate their preferences and / or personal interests. In order to offer you the contents of the WEB / APP, the offers, the services and the products appropriate to your profile.
Management and development of online shopping. We use the customer's personal information to process and deliver their order, inform them by email and / or SMS of the status of their order and carry out anti-fraud checks. In case of receiving the consent of the interested party, we will keep the data of your credit card for future purchases.
Management and sending of information on exclusive promotions, latest news and personalized information adapted to the profile, interests and needs of the interested party as a client through email, SMS, postal mail or any other communication channel and / or digital platform. Sending this information will involve the creation of user profiles, which consists of using personal data, the history of their purchases, if applicable, as well as browsing information on the WEB / APP to evaluate certain aspects related to their personal preferences, with the aim of offering you commercial communications appropriate to your profile. Where appropriate, certain personal information of the client may be used to personalize communications in digital media.
Personalization of the communications sent to the client based on their interests.
Commercial prospecting and promotional action.
Response to the exercise of privacy rights (detailed below), as well as to queries and possible claims by the interested party.
Management and issuance of accrediting sales documents: simplified electronic invoice, sales invoice or Tax Free.

HOW LONG WILL WE KEEP PERSONAL DATA?
CARMEN SAYS will keep personal data only for the period of time that is reasonably necessary, taking into account the needs to respond to questions that arise or solve problems, make improvements, activate its services and meet the requirements required by applicable legislation. This means that you can keep personal data for a reasonable period of time even after the interested party has stopped using CARMEN SAYS services or has stopped using the WEB / APP. After this period, personal data will be blocked from all CARMEN SAYS systems.

WHAT DOES LEGITIMATE US TO PROCESS THE DATA?
CARMEN SAYS has the following legitimate bases to be able to process personal data:

Execution of the contract
The legal basis for the processing of the personal data of the interested party that is collected is the execution of the sale contract. In this sense, the interested party is obliged to provide the data that are necessary for its execution. If you do not provide us with these data, it will not be possible to carry out the sale.

Compliance with a legal obligation
In relation to the following purposes, the legal basis for the processing of the personal data of the interested party will be the fulfillment of a legal obligation:

The management and issuance of the sales invoice
Response to the exercise of privacy rights (detailed below), as well as queries and possible claims by the interested party.
Consent
In relation to the following purposes, the legal basis for the processing of the personal data of the interested party will be their consent, if it has been provided: - Management of the registration on the WEB / APP.

Management of sending information on exclusive promotions, latest news and personalized information adapted to the profile of the interested party.
Preservation of payment card data for future purchases.
The withdrawal of consent to these treatments by the interested party will not condition the execution of the sale contract concluded between him and CARMEN SAYS.
Legitimate Interest
In relation to the following purposes, the legal basis for the processing of the personal data of the interested party will be the legitimate interest:

The creation of profiles by browsing the WEB / APP by a user registered in it, as well as by all those users who have provided us with their data for any other purpose.
The creation of profiles to send information on exclusive promotions, latest news and personalized information adapted to the profile of the interested party.
Sending satisfaction surveys on products purchased or services used by customers to request their opinion and to offer improvements.
Our legitimate interest consists of being able to guarantee that our WEB / APP remains secure, as well as to help CARMEN SAYS to understand the needs, expectations and the level of satisfaction of the users and, therefore, to improve the services, products and brands. All these actions are carried out in order to improve the level of customer satisfaction and ensure a unique browsing and shopping experience.

¿TO WHO DO WE COMMUNICATE YOUR DATA?
The personal data of the interested party may be transferred / communicated to the following recipients:

Companies of the CARMEN SAYS Group.
Public Administrations and Bodies when required by tax, labor, Social Security or any other applicable regulations.
Companies in charge of data processing (providers of fraud detection and prevention, technological services, customer service services, advertising and marketing services, etc.) and, in general, third-party providers that are necessary for the provision of the services offered. by CARMEN SAYS (providers of courier and transport services, etc.).
International data transfers may also occur at the headquarters of the previous assignments / communications for which CARMEN SAYS will use the Standard Contractual Clauses adapted by the European Commission and the EU-US Privacy Shield. as a guarantee for those transfers made to countries that do not have an adequacy decision from the European Commission. In any case, the third parties with whom certain personal data are shared will have previously accredited the adoption of adequate technical and organizational measures for the correct protection of the same.

CARMEN SAYS does not sell customer data to third parties.

¿HOW DO WE PROTECT YOUR DATA?
The WEB / APP uses information security techniques such as firewalls, access control procedures and cryptographic mechanisms, all with the aim of preventing unauthorized access to data and guaranteeing their confidentiality. To achieve these purposes, the user accepts that CARMEN SAYS obtain data for the purposes of the corresponding authentication of access controls.

Additionally, any transaction carried out through the WEB / APP is carried out through secure payment systems. The confidential payment data is transmitted directly and in an encrypted form (SSL) to the corresponding entity.

CARMEN SAYS states that it has adopted all the technical and organizational measures necessary to guarantee the security and integrity of the personal data it deals with, as well as to prevent its loss, alteration and / or access by unauthorized third parties.

¿WHAT ARE YOUR RIGHTS?
You have the following rights, which may be enforced at the following email address [hello@carmensays.com]:

Right of access You have the right to obtain confirmation on whether or not CARMEN SAYS is treating personal data that concerns you, as well as to access the personal data that CARMEN SAYS has about you.
Right of rectification You have the right to request that CARMEN SAYS rectify personal data when it is inaccurate or to complete it when it is incomplete. If you are registered on our WEB / APP, it may be easier for you to correct them directly by modifying the profile.
Right to erasure / right to be forgotten You can request that personal data be deleted when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Limitation Right You have the right to request the limitation of the processing of the data, in which case we will only keep them for the exercise or defense of claims.
Portability Right You have the right to receive personal data in a structured, commonly used and machine-readable format, and to transmit them to another controller when the treatment is based on consent or a contract, and is carried out by automated means.
Opposition Right You can object to the processing of personal data based on the public or legitimate interest pursued by CARMEN SAYS, including profiling. In this case, CARMEN SAYS will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.
Automated individual decisions You have the right not to be the subject of a decision based solely on automated processing, including profiling, that produces legal effects on you or significantly affects you in a similar way. However, it will not be possible to exercise this right if the decision is necessary for the conclusion or execution of a contract between you and CARMEN SAYS; is authorized by the law applicable to CARMEN SAYS provided that it establishes adequate measures to safeguard its rights, freedoms and legitimate interests; or is based on your explicit consent.
Right to file a complaint You have the right to file a claim with the Spanish Data Protection Agency or with the competent local Control Authority.
In order to process your request, we will have to validate your identity.

USE OF OUR WEBSITE
The user undertakes to make appropriate use of the contents of the Web, being obliged to (i) provide truthful and accurate information about the data requested in the registration or order form, and keep them updated, whenever they do use of the website; (ii) not to engage in illicit, illegal or contrary to good faith and public order activities; (iii) not to disseminate content or propaganda of a racist, xenophobic, discriminatory nature based on race, sex, ideology, religion or that in any way violates morality, public order, fundamental rights, public freedoms, honor, the privacy or the image of third parties and in general the current regulations; (iv) not cause damage to the physical and logical systems of the Web, the providers of CARMEN SAYS or third parties, nor introduce or spread computer viruses or any other physical or logical systems that are likely to cause damage. previously mentioned; (v) not to use the contents of the Web and its information to send advertising, or send messages for any other commercial purpose, or to collect or store personal data of third parties; (vi) not try to access and, where appropriate, use the email accounts of other users and modify or manipulate their messages.

CARMEN SAYS reserves the right to make the modifications it deems appropriate on its website without prior notice, being able to change, delete or add both the content and services provided through it and the way in which they are presented or located on your portal.

INTELLLECTUAL PROPERTY
All the intellectual and industrial property rights of the Web and its contents, including but not limited to the images, sound, audio, video, designs, texts, graphics, logos, icons, color combinations, structure, buttons, as well as the software , trade names, trademarks, works, illustrations, photographs or industrial drawings and any other signs susceptible of industrial and commercial use are the property and ownership of CARMEN SAYS or third party owners who have duly authorized their inclusion on the Web.

The reproduction, distribution and public communication, including the method of making them available, of all or part of the contents of the Web, for commercial purposes, in any medium and by any technical means, without the authorization of CARMEN SAYS. The user agrees to respect the intellectual and industrial property rights owned by CARMEN SAYS.

The user may use the Web and its contents for their personal and private use. Any other use is prohibited and will require the user to obtain the express prior written authorization of CARMEN SAYS. The user must refrain from deleting, altering, evading or manipulating any protection device or security system that was installed on the Web.

RESPONSIBILITY DERIVED FROM THE USE OF THE WEBSITE
CARMEN SAYS is not responsible, in any case, for damages of any nature that may cause, by way of example: errors or omissions in the content, lack of availability of the portal or the transmission of viruses or malicious or harmful programs in the contents, despite having adopted all the necessary technological measures to avoid it.

From the client's website it is possible that it is redirected to the content of third-party websites. Given that the provider cannot always control the content posted by third parties on their websites, it does not assume any responsibility for such content. In any case, the provider declares that it will proceed to the immediate withdrawal of any content that could contravene national or international legislation, morality or public order, proceeding to the immediate withdrawal of the redirection to said website, informing the competent authorities the content in question.

CARMEN SAYS is not responsible for the information and content stored, by way of example but not limited to, in forums, chats, blog generators, comments, social networks or any other means that allows third parties to publish content independently on the Web. However, CARMEN SAYS is made available to all users, authorities and security forces, and actively collaborating in the withdrawal or, where appropriate, blocking of all those contents that could affect or contravene national or international legislation, rights of third parties or morality and public order. In the event that the user considers that there is any content on the Web that could be subject to this classification, please notify the Web administrator immediately.

The website has been reviewed and tested to ensure that it works properly. In principle, correct operation can be guaranteed 24 hours a day, 7 days a week, all year round. However, CARMEN SAYS does not rule out the possibility of certain programming errors, or that causes of force majeure, natural disasters, strikes, or similar circumstances may occur that make access to the Web impossible.

The introduction of hyperlinks for commercial purposes on web pages outside of CARMEN SAYS that allow access to the Web is prohibited, without the prior consent of CARMEN SAYS.

CARMEN SAYS is not responsible for the use or content of third party web pages that may link to CARMEN SAYS.com.