In the course of providing and improving our products and services, we collect your personal information for the purposes described in this Privacy Policy. The following are the types of personal information that we collect:
Information that you provide
When you place an order at checkout, contact us directly, or otherwise use the Service, you may provide some or all of the following information:
- Purchases. In order to complete transactions and fulfil orders, we collect data related to your order on the Service (e.g. transaction history), payment information required to complete the transaction (e.g. payment card number or other third-party payment information required for payment), your shipping address (e.g. city, state, country of residence, postal code), and recipient contact information (e.g. name, mobile phone number). We also collect your region on a country basis. For some shipping addresses in Spain, including Ceuta, Melilla and the Canary Islands, Spanish customs regulations require the Identification number (e.g. NIF(CIF) or NIE) of the user. This ID information will be stored securely and used solely for the purpose of processing customs clearances (including sharing with carriers and customs officials) for this order, future orders, and product returns.- Customer Support Activity. When you communicate with our customer service team through customer support functions, social media, or any other means, we will collect your communication history with us as an ongoing effort to improve customer service and support.- User-generated Content. Such as profile pictures, photos, images, videos, audio, comments, questions, messages, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata.- Promotion and Event Participation. We collect information that you actively share when you participate in a contest, promotion, or survey, such as contact information provided when you enter a sweepstakes, contest, or giveaway through the Service. We do this to notify you of a win, to verify your identity, and/or to send you a prize. In some cases, we may require additional information as part of the participation process, such as your desired prize selection. Such sweepstakes and contests are voluntary. We recommend that you read the rules and other relevant information for each sweepstake and contest that you enter. In addition, we collect information about your preferences for receiving marketing communications from us as well as your interactions with them.- Other data not explicitly listed here. We will use other data that you provide as described in this Privacy Policy or for any other purpose disclosed to you at the time we collect your information.
How and Why We Use Your InformationWe use the personal information that we collect for various purposes, including to develop, improve, support, and provide the Service, allowing you to use its features while fulfilling and enforcing our Terms of Use. We may use your personal information for the following purposes:
- Orders and delivery of products and services. We use your personal information to receive and process orders, deliver products and services, process payments, and communicate with you regarding orders, products and services, and promotional offers.
- Improve and optimize services and troubleshooting. We use your personal information to optimise features, analyse performance metrics, fix errors, and improve the Service and our business. As part of these activities, we may create aggregated or otherwise deidentified data based on the personal information we collect.
- Deidentified information. We may deidentify your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except solely for the purpose of determining whether our deidentification process satisfies legal requirements.
- Personalise your experience. We use your personal information to recommend features, products, and services that may be of interest to you. Personal information will also be used to determine your preferences and personalise your experience with the Service.
- Communicate with you and provide customer support. We use your personal information to communicate with you (e.g. announcements, updates, security alerts, support, and administrative messages) and provide customer support for your requests, questions, and feedback.
- Marketing. We and our service providers may collect and use your personal information for marketing purposes in accordance with your stated preferences and applicable law. We may send you direct marketing communications and abandoned cart reminders (enabled as described via the use of cookies that we collect). You may opt out of our marketing communications or abandoned cart reminders as described in the “Your Rights and Choices” section below.
- Fraud prevention and security. We use your personal information to prevent, detect, investigate, and respond to fraud, unauthorised access to or use of the Service, violations of the Terms of Use, or other misconduct.
- Compliance and legal obligations: We may use your personal information for compliance purposes and to comply with the applicable law, laws, lawful requests, and legal processes (e.g. responding to subpoenas or requests from government authorities) associated with your country of residence; to protect our, yours, and other users' rights, privacy, safety, or property (including introducing and defending legal claims); audit internal processes to ensure compliance with legal and contractual requirements and our internal policies; enforce the terms and conditions that govern the Service; prevent, identify, investigate, and deter fraudulent, harmful, unauthorised, unethical, or illegal activities, including cyberattacks and identity theft.
- With your consent. In some cases, we may specifically ask for your consent to collect, use, or share your personal information, where required by applicable law.
Rights of the Data Subject
Under the GDPR, you have the right to:

request access to your personal data;
request the rectification of your personal data;
request the deletion of your personal data;
request the restriction of the processing of personal data;
object to the processing of personal data;
request the transfer of personal data.
The data controller shall provide you with information on the actions taken in response to your request without undue delay - in any case, within one month of receiving the request. If necessary, the one-month period may be extended by a further two months due to the complexity of the request or the number of requests.

In any case, the data controller will inform you of such an extension within one month of receiving the request, along with the reasons for the delay.

Right of access to personal data (Article 15 of the GDPR)
You have the right to obtain from the data controller information about whether your personal data is being processed.

If the controller processes your personal data, you have the right to:

access personal data;
obtain information about the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipients of the data, the planned period of storage of your data or the criteria for determining this period, the rights you have under the GDPR, the right to lodge a complaint with a supervisory authority, the source of the data, automated decision-making, including profiling, and the safeguards in place regarding the transfer of data outside the European Union;
obtain a copy of your personal data.
If you wish to request access to your personal data, please submit your request to: moc.liamg%40f4elitxet

Right to rectification of personal data (Article 16 of the GDPR)
If your personal data is incorrect, you have the right to request the rectification of your personal data without undue delay.

You also have the right to request the completion of your personal data.

If you wish to request the rectification or completion of your personal data, please submit your request to: moc.liamg%40eohnalak.a

If you have registered in the online store, you can rectify and complete your personal data yourself after logging into the online store.

Right to erasure of personal data, the so-called "right to be forgotten" (Article 17 of the GDPR)
You have the right to request the deletion of your personal data when:

your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you have withdrawn specific consent, to the extent that the personal data was processed based on your consent;
your personal data was processed unlawfully;
you objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing of personal data is related to direct marketing;
you objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the data controller or a third party.
Despite your request for the deletion of personal data, the data controller may continue to process your data to establish, assert, or defend claims, which you will be informed about.

If you wish to request the deletion of your personal data, please submit your request to: moc.liamg%40eohnalak.a

Right to request the restriction of processing of personal data (Article 18 of the GDPR)
You have the right to request the restriction of the processing of your personal data when:

you question the accuracy of your personal data - the data controller will restrict the processing of your personal data for a period that allows the accuracy of the data to be verified;
the processing of your data is unlawful, and instead of deleting personal data, you request the restriction of the processing of your personal data;
your personal data is no longer needed for processing purposes, but it is necessary to establish, assert, or defend your claims;
you have objected to the processing of your personal data - pending verification of whether the legitimate interests of the data controller override the grounds indicated in your objection.
If you wish to request the restriction of the processing of your personal data, please submit your request to: moc.liamg%40eohnalak.a

Right to object to the processing of personal data (Article 21 of the GDPR)
You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the data controller or a third party;
processing for direct marketing purposes.
If you wish to object to the processing of your personal data, please submit your request to: moc.liamg%40eohnalak.a

Right to request the transfer of personal data (Article 20 of the GDPR)
You have the right to receive your personal data from the data controller in a structured, commonly used, and machine-readable format and to transmit it to another data controller.

You may also request that the data controller transmit your personal data directly to another data controller (if technically feasible).

If you wish to request the transfer of your personal data, please submit your request to: moc.liamg%40eohnalak.a

Right to withdraw consent
You can withdraw your consent to the processing of your personal data at any time.

The withdrawal of consent to the processing of personal data does not affect the lawfulness of the processing carried out based on your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, please submit your request to: .moc.liamg%40eohnalak.a