For the purposes of the provisions of European Regulation 2016/679, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data, we inform you of the following basic information on the processing and protection of personal data that you may have voluntarily provided:
Who is the data controller?
Company name: LORENA MARCO.
Tax ID: 74363489G
Registered office: C/ Ruda 15, 28005, Madrid
Phone: 647 354 505
Email: floristeria@lorenamarco.com
Website: https://lorenamarco.com
More information about the data controller can be found in the Legal Notice.
How did we obtain your data and what data do we process?
The personal data voluntarily provided by you are collected through the forms on the website. The data provided belong to the following data categories:
Identification data: name and surname, ID and date of birth
Contact details: phone, email and postal address.
The data controller will not process information belonging to specially protected data categories for the purposes of this processing.
For what purposes do we process your data?
The data provided by you are processed for the following purposes:
Manage the sales service of the products contained on our website (e-commerce), including order confirmation and home delivery.
Attend to and respond personally to product exchanges and returns (after-sales service).
Attend to, respond to and manage your questions and queries about our products and services, sometimes through surveys and reviews.
Improve the browsing experience on our website and contact with our company.
Participate in contests and giveaways and send you commercial communications such as offers, discounts, newsletters and others.
What legitimizes us to process your personal data?
The data controller is legitimized to process your data based on the execution of a sales contract in compliance with the legal transaction established between the buyer (the interested party) and the seller (the controller).
Likewise, the data controller is legitimized based on your express consent freely, specifically, informed and unequivocally given by ticking the corresponding box to improve the browsing experience on our website and contact with our company, participate in contests and giveaways and send you commercial communications such as offers, discounts, newsletters and others.
How long will we keep your data?
The data will be kept in our files for the period necessary to carry out the purposes of the processing.
In any case, your data will be kept for the following periods according to the legal obligations outlined:
In accordance with Royal Decree 1619/2012, of November 30, which approves the Regulation on billing obligations, if the issuer or recipient is a natural person, the retention period for the invoice will be five years from its issuance.
In accordance with the provisions of article 32 of the Commercial Code, your personal data will be kept for the duration of the contractual relationship and, subsequently, for a period of six years.
In accordance with the regulations for the Prevention of Money Laundering, the documentation in which compliance with the obligations established in said law is formalized, which may contain personal data, will be kept for a minimum period of ten years.
The data used for sending commercial communications will be kept as long as you do not unsubscribe from our newsletters.
To whom do we transfer your data?
Your personal data will not be transferred to third parties, except by legal obligation to the competent authorities.
Who can access your data?
Access to your personal data by third parties will be regulated in all cases by an agreement between the controller and the processor, which will define what data can be accessed and its processing, based on the principle of data minimization and quality. In addition, the controller will ensure that the processors offer security in data processing and take appropriate technical and organizational measures for this.
The processors who may have access to your data are the IT services company, for the provision of maintenance services for IT equipment and the implementation of necessary security measures, the transport and courier company, for the provision of the product collection and home delivery service to the interested party, and the mailing company for the provision of the service of sending commercial communications and newsletters.
What are your rights as a data subject?
The data subject can exercise the following rights regarding their personal data before the data controller:
To obtain confirmation as to whether or not we are processing personal data concerning you.
To unsubscribe from commercial communications. To access your personal data and obtain a copy of the data subject to processing. To request the rectification of inaccurate data or their update.
To request the erasure of data when they are no longer necessary for the purposes for which they were collected. As a result of the application of the right to erasure of personal data processing in the online environment, data subjects have the right to be forgotten.
To object to the processing of your personal data.
In certain circumstances, to request the restriction of the processing of your data, in which case we will only keep them for the exercise or defense of claims.
To exercise any of the rights recognized to the data subject, you can send your request indicating your name along with a copy of your ID and the right you wish to exercise via email floristeria@lorenamarco.com
What other complaint channels are available to me?
If you consider that your rights have not been adequately addressed, you can file a complaint with the competent national authority, the Spanish Data Protection Agency, through the established procedures for this purpose, which you can consult on its website www.agpd.es.
