PERSONAL DATA PROTECTION
Data Controller
Contact details of the person responsible: Timber Brothers, S.L. and contact email: hola@clairecharlotte.com.
YOUR DATA PROTECTION RIGHTS
How to exercise your rights: You may send a written communication to the registered office of CLAIRECHARLOTTE.COM or to the email address indicated in the header of this legal notice. In both cases, you must include a photocopy of your ID card or other similar identification document to request the exercise of the following rights:
-
Right to request access to personal data: You may ask CLAIRECHARLOTTE.COM if the company is processing your data.
-
Right to request rectification: In the event that the data is incorrect.
-
Right to request limitation of processing: In which case the data will only be kept by CLAIRECHARLOTTE.COM for the exercise or defense of claims.
-
Right to object to processing: CLAIRECHARLOTTE.COM will stop processing the data in the manner you indicate, unless they must continue to be processed for legitimate reasons or for the exercise or defense of possible claims.
-
Right to data portability: Should you wish for your data to be processed by another firm, CLAIRECHARLOTTE.COM will facilitate the portability of your data to the new controller.
-
Right to erasure (Right to be forgotten): Unless there is a legal imperative, data will be deleted following your confirmation.
Models, forms, and more information about your rights: Official website of the Spanish Data Protection Agency (AEPD).
Possibility to withdraw consent: If you have given consent for a specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
How to complain to the Supervisory Authority: If you consider that there is a problem with the way CLAIRECHARLOTTE.COM is handling your data, you can direct your complaints to the Security Manager of CLAIRECHARLOTTE.COM (indicated above) or to the corresponding data protection authority, which in Spain is the Spanish Data Protection Agency.
Right to be forgotten and access to your personal data
You have the right to review, retrieve, anonymize, and/or delete, in whole or in part, the data stored on the website at any time. Simply send an email to hola@clairecharlotte.com to request it.
Online store customer data: The retention period for personal data will vary depending on the service the customer contracts in our online store. In any case, it will be the minimum necessary, and may be kept up to:
-
4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries...); Arts. 66 et seq. General Tax Law (accounting books...).
-
5 years: Art. 1964 of the Civil Code (personal actions without a special term).
-
6 years: Art. 30 of the Code of Commerce (accounting books, invoices...).
-
10 years: Art. 25 of the Law on Prevention of Money Laundering and Terrorist Financing.
Email feed subscriber data: From the time the user subscribes until they unsubscribe.
Newsletter subscriber data: From the time the user subscribes until they unsubscribe.
User data uploaded by CLAIRECHARLOTTE.COM to social media profiles: From the moment the user gives consent until it is withdrawn.
Data Secrecy and Security
CLAIRECHARLOTTE.COM is committed to the use of data, respecting its confidentiality and using it in accordance with its purpose, as well as complying with its obligation to store it and adapt measures to prevent alteration, loss, unauthorized processing, or access, in accordance with the provisions of EU Regulation 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD). You guarantee that the personal data provided through the forms is truthful, and you are obliged to communicate any modification thereof.
Furthermore, you guarantee that all information provided corresponds to your real situation and is up to date and accurate. You must also keep your data updated at all times, being solely responsible for the inaccuracy or falsity of the data provided and any damages that may be caused to CLAIRECHARLOTTE.COM or third parties.
Security Breaches
CLAIRECHARLOTTE.COM adopts reasonably adequate security measures to detect the existence of viruses, brute force attacks, and code injections.
Visitors' IP addresses, logged-in user IDs, and login usernames are logged conditionally to check for malicious activity and protect the site from specific types of attacks. Examples of conditions under which logging occurs include login attempts, logout requests, suspicious URL requests, changes to site content, and password changes.
This information is kept for 180 days. This site has also been scanned for malware and potential vulnerabilities using Sucuri SiteCheck. We do not send personal information to Sucuri; however, Sucuri may find publicly posted personal information (such as in comments) during its analysis. For more details, see Sucuri's privacy policy. You should be aware that security measures for computer systems on the Internet are not entirely reliable; therefore, CLAIRECHARLOTTE.COM cannot guarantee the absence of viruses or other elements that may cause alterations to the User's computer systems or electronic documents.
However, CLAIRECHARLOTTE.COM has an Active Security Monitoring System that reports on every user activity and possible breaches. If a breach is detected, CLAIRECHARLOTTE.COM undertakes to inform users within a maximum period of 72 hours.
WHAT INFORMATION DO WE COLLECT FROM USERS AND WHAT DO WE USE IT FOR?
All products and services offered on the CLAIRECHARLOTTE.COM website refer to contact forms, comment forms, user registration forms, newsletter subscriptions, and/or purchase orders. This website always requires the prior consent of users to process their personal data for the indicated purposes. You have the right to withdraw your prior consent at any time. Data processing activities record.
Web and hosting: CLAIRECHARLOTTE.COM features SSL TLS v.1.2 encryption, which allows for the secure transmission of personal data through standard contact forms hosted on the servers that CLAIRECHARLOTTE.COM has contracted with Webempresa.
Data collected through the web: The personal data collected will be subject to automated processing and incorporated into the corresponding files owned by CLAIRECHARLOTTE.COM.
- Your IP address will be received and used to verify the origin of the message in order to provide you with information, protection against SPAM comments, and to detect potential irregularities (for example: opposing parties in the same case writing on the website from the same IP), as well as data related to your ISP.
- Likewise, you may provide us with your data through email and other communication methods indicated in the contact section.
Comments form: On the website, there is the possibility for users to leave comments on the site's posts. A cookie exists that stores the data provided by the user so they do not have to enter it again on each new visit; the email address, name, website, and IP address are also collected internally. The data is stored on the servers of Webempresa Europa S.L. User registration: Not allowed unless expressly requested.
Purchase form: To access the products and services offered in our online store, the user has a purchase form subject to the contracting conditions specified in our purchase terms, where contact and payment details will be required. The data is stored on the servers of Webempresa Europa S.L.
We collect information about you during the checkout process in our store. This information may include, but is not limited to, your name, address, email, phone number, payment details, and others necessary to process your orders. Managing this data allows us to:
• Send you important information about your account / order / service.
• Respond to your requests, complaints, and refund applications.
• Process payments and prevent fraudulent transactions.
• Set up and manage your account, provide technical and customer service, and verify your identity. Additionally, we may also collect the following information:
• Location and traffic data (including IP address and browser) if you place an order or if we need to estimate taxes and shipping costs based on your location.
• Product pages visited and content viewed while your session is active.
• Your comments and product reviews if you choose to leave them.
• Shipping address if you request shipping costs before making a purchase while your session is active.
• Essential cookies to track the contents of your cart while your session is active.
• Account email and password to allow you to access your account, if you have one.
• If you create an account, we keep your name, address, and phone number to be used for your future orders.
Newsletter subscription forms: CLAIRECHARLOTTE.COM uses the newsletter delivery service (email newsletters) from MailerLite UAB, a company located in the European Union, which stores your email data, name, and subscription acceptance. You can unsubscribe from the newsletter at any time through a specific link located at the bottom of every mailing you receive.
Email: Our email service provider is Google, Inc., through Google Apps for Business.
Instant messaging: CLAIRECHARLOTTE.COM provides service through instant messaging, such as WhatsApp, Facebook, or Instagram.
Payment service providers: Through CLAIRECHARLOTTE.COM, you can access, via links, third-party websites such as PayPal or Stripe to make payments for services provided by CLAIRECHARLOTTE.COM. At no time does CLAIRECHARLOTTE.COM staff have access to the bank details (for example, credit card number) that you provide to said third parties.
Embedded content from other websites
Articles on CLAIRECHARLOTTE.COM may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor had visited the other website. These websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Other services: Certain services provided through the CLAIRECHARLOTTE.COM website may contain specific conditions with particular provisions regarding personal data protection. It is essential to read and accept them before requesting the service in question. Purpose and legitimacy: The purpose of processing this data will be solely to provide you with the information or services you request from us.
Social Networks
• Presence on networks: We have profiles on some of the main social networks on the Internet.
• Purpose and legitimacy: The processing that CLAIRECHARLOTTE.COM will carry out with the data within each of the mentioned networks will be, at most, what the social network allows for corporate profiles. Thus, CLAIRECHARLOTTE.COM may inform its followers—when not prohibited by law—by any means the social network allows about its activities, presentations, and offers, as well as provide personalized customer service.
• Data extraction: In no case will CLAIRECHARLOTTE.COM extract data from social networks unless the user's express and specific consent is obtained.
• Rights: When, due to the nature of social networks, the effective exercise of the follower's data protection rights is subject to the modification of the follower's personal profile, CLAIRECHARLOTTE.COM will assist and advise to that effect to the extent of its possibilities.
Data processors outside the EU
• Storage and encryption: CLAIRECHARLOTTE.COM uses encrypted storage services from Google Inc. via Google Drive.
• Email: CLAIRECHARLOTTE.COM's email service is provided using Google Inc. services through Google Apps.
• Social Networks: CLAIRECHARLOTTE.COM makes use of the US social networks YouTube, Facebook, and Twitter, to which an international transfer of data of an analytical and technical nature is made in relation to the website. CLAIRECHARLOTTE.COM processes through their servers the data that users, subscribers, or browsers deliver to or share with the firm CLAIRECHARLOTTE.COM.
• Payment providers: To enable payment via PayPal or Stripe, CLAIRECHARLOTTE.COM will send the strictly necessary data to these payment processors for the issuance of the corresponding payment request. Your information is protected according to our privacy and cookies policy.
By activating a subscription or providing your payment details, you understand and accept our privacy and cookies policy. You will always have the right to access, rectify, delete, limit, port, and exercise the right to be forgotten regarding your data. From the moment you register as a user on this website, CLAIRECHARLOTTE.COM has access to: Username and email, IP address, postal address, ID (DNI / CIF), and payment details. In any case, CLAIRECHARLOTTE.COM reserves the right to modify, at any time and without prior notice—though informing the user—the presentation and configuration of the CLAIRECHARLOTTE.COM website as well as this legal notice.
Commitments and obligations to our users
Access to and/or use of CLAIRECHARLOTTE.COM attributes the status of user to the person, who accepts, from this moment, fully and without reservation, this legal notice in relation to certain services and contents of CLAIRECHARLOTTE.COM. In using CLAIRECHARLOTTE.COM, the user agrees not to engage in any conduct that could damage the image, interests, and rights of CLAIRECHARLOTTE.COM or third parties, or that could damage, disable, or overload the CLAIRECHARLOTTE.COM portal, or that prevents, in any way, the normal use of CLAIRECHARLOTTE.COM.
