El Armario De Franxu

Privacy Policy

This Privacy Policy explains how the personal data of users of this website is collected and processed, in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI).

Identity of the responsible party

Responsible: Francesc Colomer Bañón

VAT ID: ES46356431T

Address: Carrer de Jerusalem 2, 4th floor, 08001, Barcelona (Spain)

Email: info@elarmariodefranxu.com

Website: elarmariodefranxu.com

Activity

“El Armario De Franxu” is an online store dedicated to selling costume jewelry and accessories through the website elarmariodefranxu.com.

 

Personal data that we process

Through the website we may process the following categories of personal data:

  • Identifying information: name, surnames.
  • Contact information: email, telephone (if requested), postal address.
  • Shipping and billing information: delivery address, information required for issuing invoices.
  • Payment details: managed directly by the Stripe payment gateway; “El Armario De Franxu” does not have access to your complete card details.
  • Browsing data: IP address, device identifiers, connection and browsing data obtained through cookies or similar technologies, as detailed in the Cookie Policy.

The data requested in the website forms are, in general, mandatory (unless otherwise indicated) to fulfill the established purposes; if they are not provided or are not provided correctly, we will not be able to process your request or manage your order.

Purposes of the treatment

We process your personal data for the following purposes:

  • Manage the purchase of products made through the online store, including order processing, payment, shipping and handling of returns or incidents.
  • Manage the queries, requests or communications that you send through the contact email.
  • Comply with applicable legal obligations in tax, accounting, consumer and data protection matters.
  • To improve website performance, security and user experience through basic navigation analysis, where applicable and according to cookie settings.

Under no circumstances will automated decisions with legal effects for the user be made based solely on the automated processing of their data, without human intervention.

Legitimization of the processing

The legal basis that allows us to process your personal data is:

  • Contract execution: the purchase of products on elarmariodefranxu.com and the management of associated services (processing, collection and shipment of the order).
  • Compliance with legal obligations: in tax, accounting, consumer and data protection matters.
  • Legitimate interest: to ensure the security of the website, prevent fraud and improve the quality of service, always within the limits allowed by data protection regulations.

When the legal basis is consent (for example, for certain non-technical cookies if they are used), you can withdraw it at any time by following the corresponding instructions, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Data recipients

In general, your data will not be transferred to third parties, except when necessary to fulfill the purposes indicated, there is a legal obligation or you have your express consent.

 

In particular, the following data processors, with whom the corresponding contracts have been signed in accordance with Article 28 of the GDPR, may have access to your data:

 

  • Web hosting and website maintenance provider, for the technical management of the website elarmariodefranxu.com.
  • Payment gateway provider: Stripe Payments Europe, Ltd. (or other competent Stripe group entities), for the secure management of card payments or other means supported by Stripe.
  • Courier or transport companies used to ship orders to the address provided by the customer.

These processors will only process the data following instructions from the controller and will not use it for their own purposes.

International data transfers

Stripe and other potential technology providers may transfer data internationally outside the European Economic Area. In these cases, an adequate level of protection will be ensured through the adoption of safeguards provided for by the GDPR (such as the signing of standard contractual clauses approved by the European Commission or other mechanisms valid at any given time).

Storage periods

We will retain your personal data for as long as strictly necessary to fulfill the purpose for which it was collected and to determine any possible liabilities that may arise from said purpose and processing.

 

For guidance purposes:

  • Data related to the purchase of products (invoicing, accounting): will be kept for the legally required periods, generally 5-6 years due to tax and accounting regulations.
  • Data related to inquiries or communications: will be kept as long as necessary to address the request and, at most, for 1–2 years from the last reasonable interaction.
  • Browsing data and cookies: in accordance with the Cookies Policy and, in any case, for the retention periods indicated for each type of cookie.

When they are no longer needed, the data will be blocked for the limitation periods of any potential liabilities and will subsequently be securely deleted.

User rights

You can exercise the following data protection rights at any time:

  • Right of access: to know what personal data of yours we process.
  • Right of rectification: to request the correction of inaccurate or incomplete data.
  • Right to erasure: request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
  • Right to object: to object to the processing of your data for reasons related to your particular situation, in the cases provided for by the regulations.
  • Right to restriction of processing: request that the processing of your data be restricted in certain circumstances.
  • Right to portability: to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another controller where technically possible.

To exercise these rights, you can send a written request to:

  • Postal mail: Francesc Colomer Bañón, Carrer de Jerusalem 2, 4º, 08001, Barcelona (Spain).
  • Email: info@elarmariodefranxu.com

In both cases, indicate the right you wish to exercise and attach a copy of your ID card or equivalent identification document to verify your identity.

 

Likewise, if you believe that your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD), through www.aepd.es.

Data security

“El Armario De Franxu” applies appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in order to protect personal data against accidental or unlawful destruction, loss or alteration, and against unauthorized disclosure or access.

 

However, even with reasonable security measures in place, no system is completely secure, so the absolute invulnerability of the network and information system cannot be guaranteed.

Minors

The products and services offered on elarmariodefranxu.com are not intended for children under 14 years of age. If the unintentional collection of personal data from children under this age is detected without the consent of their parents, guardians, or legal representatives, it will be deleted immediately.

Changes to the Privacy Policy

“El Armario De Franxu” reserves the right to modify this Privacy Policy to adapt it to new legislation or case law, as well as to changes in service provision or website configuration. In the event of significant changes, users will be informed through notices on the website itself and, where appropriate, by email.