Privacy policy
At CASTROSEIS.COM, we care about our users and customers and are committed to protecting their rights and privacy.
This policy sets out how we process and protect the personal data of all individuals who interact with CASTROSEIS.COM via this website.
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, CASTROSEIS.COM hereby informs you that, by accepting this Privacy Policy, you give your informed, express, free and unambiguous consent for the data you provide to be processed by CASTROSEIS.COM, as the data controller, and that the security, technical and organisational measures provided for in current legislation apply to such data.
Warning regarding minors
In accordance with the provisions of Article 8 of the GDPR and Article 7 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, only those aged 14 or over may give their consent for the lawful processing of their personal data by CASTROSEIS.COM. In the case of a child under the age of 14, the consent of their parents or guardians is required for such processing, and this will only be considered lawful to the extent that they have authorised it.
If you are under 14 years of age and have accessed this website without informing your parents, you must not register as a user.
Data controller
Legal representative: SQUIRREL & FRIENDS S.L.
Tax Identification Number (CIF): B70599709
Address: CALLE EMILIA PARDO BAZÁN 12. 15005 – A CORUÑA
Commercial Registry Details: A CORUÑA MERCANTIL, NOVOA SANTOS 5-7-9 FIRST FLOOR, 15006 – A CORUÑA Town: A CORUÑA Volume: 3697 Page: 130 Book: 1 Sheet: C-58787 Date: 27/09/2019
How do we obtain your data?
SQUIRREL & FRIENDS S.L. manages the website: CASTROSEIS.COM, which provides information about the online shop featuring leading Nordic design brands, niche brands, emerging artists and responsibly produced products.
The personal data we process on each of these pages comes from our own users and is collected via:
- Contact form
- Registration forms
- Sales form
- Subscription form
Legal basis for processing your data
To contact us and subscribe to our newsletter, you must give your consent to this privacy policy.
We process your personal information for purposes related to marketing and sales activities based on consent.
The legal basis for processing the data of individuals who purchase products or services offered by CASTROSEIS.COM is the performance of the contract for online sales.
Where indicated on our websites at the time personal information is collected from customers in accordance with our legitimate interest in promoting our products and services.
CASTROSEIS.COM undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.
The User shall have the right to withdraw their consent at any time. Withdrawing consent shall be as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Online Shop.
On occasions where the User must or may provide their data via forms to make enquiries, request information or for reasons related to the content of the Online Shop, they will be informed if the completion of any of these forms is mandatory because they are essential for the proper execution of the transaction carried out.
Categories of data we process
The categories of data processed by CASTROSEIS.COM are solely identification data and data relating to transactions carried out in our Online Store. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.
The personal information that CASTROSEIS.COM collects and processes includes:
- Name and physical address, email addresses and telephone numbers;
- Transaction data, such as products and services ordered, financial details and payment methods;
- Unique identifiers, such as your mobile device identifier or your browser’s cookie identifier;
- IP address and information derived from the IP address, such as geographical location;
- Information about a device you use, such as the browser, device type, operating system, presence or use of applications, screen resolution, and preferred language;
For what purpose do we process your personal data?
Personal data is collected and managed by CASTROSEIS.COM for the purpose of facilitating, streamlining and fulfilling the commitments established between the Online Store and the users and customers of the Online Store, or maintaining the relationship established in the forms completed by the latter, or to respond to a request or enquiry.
We may use users’ personal information to improve our commercial and promotional initiatives and to analyse the pages visited and searches carried out by users, in order to improve our range of content and products, and to personalise said content, its presentation and services. Likewise, the data may be used for commercial purposes relating to personalisation, operations and statistics, and activities falling within the corporate purpose of CASTROSEIS.COM, as well as for data extraction, storage and marketing studies to tailor the Content offered to the User, and to improve the quality, functioning and navigation of the Online Store.
When personal data is collected via the various forms included in the Online Store, the User will be informed of the specific purpose or purposes for which the personal data will be processed; that is, the use or uses to which the collected information will be put.
In summary:
- Contact form: to respond to requests from users who contact us via this channel.
- Subscription form: to send an informative newsletter containing offers and commercial proposals from the shops in our Online Store.
- Registration forms: so that you can create an account on our Online Shop and gain access to its features as a buyer. Users who register on CASTROSEIS.COM via their personal account on a social network (‘Personal Account’), or in any way access CASTROSEIS.COM via their Personal Account, expressly consent to CASTROSEIS having access, at any time, to all the information contained in their Personal Account, including Personal Information, interests, preferences, contacts and any other content hosted on their Personal Account.
- Sales form: We also process data to manage the purchase, including order management, payment and all operations related to the procurement of the chosen service or product. This includes sending follow-up emails, replies, invoices, receipts, etc.
There are other purposes for which we process your personal data:
- To comply with our legal obligations: We will process your data to comply with a legal obligation that requires it, for example, to respond to legal proceedings or a request from a competent supervisory authority, such as:
- Protecting the rights and safety of our Users and third parties, as well as our own.
- Complying with legal requirements, including compliance with court orders, requests and other appropriate legal mechanisms.
- Providing information to representatives and advisers, including lawyers and tax advisers, to help us comply with legal, tax or security requirements.
- To support and improve the services offered by this website.
- We also collect other non-identifying data obtained through certain cookies that are downloaded to the user’s computer when they browse this website, as detailed in the cookie policy.
- To manage social media. The various domains associated with CASTROSEIS.COM have a presence on social media. The processing of data relating to individuals who follow the official CASTROSEIS.COM pages on social media shall be governed by this section, as well as by the terms of use, privacy policies and access regulations applicable to the relevant social media platform in each case and previously accepted by the user. CASTROSEIS.COM will process your data for the purpose of properly managing its presence on the social media platform, informing you of activities, products or services, as well as for any other purpose permitted by the social media platform’s regulations. Under no circumstances will we use followers’ social media profiles to send individualised advertising.
CASTROSEIS.COM does not sell, rent or transfer personal data that could identify the user, nor will it do so in the future, to third parties without prior consent. However, in some cases, users’ personal data may be sent to retailers selling their products in our Online Shop; in such cases, users’ consent will be required, and they will be informed of the retailer’s details, the identity of the data controller and the purpose for which the retailer will use their information. This will always be carried out in accordance with the strictest security standards.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether CASTROSEIS.COM is processing personal data concerning them or not.
It is expressly agreed that at any time, a user registered with CASTROSEIS.COM may request the cancellation or closure of their registration application, and/or the closure or deletion of their account and information from the CASTROSEIS.COM database. Please review the section ‘Rights of access, cancellation and rectification of personal information’
Data subjects have the right to:
- Request access to personal data relating to the data subject
- Request its rectification or erasure
- Request its erasure
- Request the restriction of its processing
- Object to the processing
- Request data portability
Data subjects may access their personal data, as well as request the rectification of inaccurate data or, where applicable, request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case I will only retain it for the purpose of exercising or defending legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data by CASTROSEIS.COM; at that point, CASTROSEIS.COM will cease processing the data, except for compelling legitimate grounds, or the exercise or defence of potential claims. As a data subject, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and to transmit it to another data controller where:
- The processing is based on consent.
- The data has been provided by the data subject.
- The processing is carried out by automated means.
When exercising your right to data portability, you shall have the right to have the personal data transmitted directly from one controller to another where technically feasible.
Data subjects shall also have the right to an effective judicial remedy and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them infringes the Regulation.
To exercise these rights, we have provided a specific form at HELLO@CASTROSEIS.COM
How long will we retain your data?
The data processed will be retained until the statutory retention periods for data have expired, if there is a legal obligation to retain it, or, in the absence of such a statutory period, until the data subject requests its erasure or withdraws the consent given.
We will therefore retain your personal data for as long as necessary or permitted in accordance with the purposes for which it was obtained. The criteria used to determine retention periods include the duration of the relationship we have maintained with you and of the contracted service provision, as well as our legal obligations.
To whom will your data be disclosed?
In accordance with the uses of personal information, we may disclose your personal information to recipients who assist us in promoting or supporting our services or the services of our users (“service providers”).
All service providers enter into a contract with CASTROSEIS.COM, which protects personal information and restricts the use of any personal information in accordance with this policy.
In order to provide services strictly necessary for the conduct of its business, CASTROSEIS.COM shares data with the following providers under their respective privacy policies:
- External service providers (e.g. credit card processing services, order processing, analytics, marketing campaign management, website management, email distribution, audits and other similar service providers) so that they may perform business functions on behalf of CASTROSEIS.COM.
- In order to offer you Klarna’s payment methods, at the time of payment, we may transmit to Klarna during the purchase process your personal data included in the contact form and order details, so that Klarna can assess whether you meet the requirements to access their payment methods and to tailor those payment methods to your profile. Your personal data is processed in accordance with the provisions of Klarna’s privacy policy.
- CASTROSEIS.COM distributors for further tracking of user interests, specific suppliers offering complementary products and services.
- Courier companies for order delivery
And also:
- Hosting provider name: Shopify
- Customer management and invoicing tool: Shopify
- Email marketing tool: Klaviyo
- Messaging and communication: WhatsApp Business
Data confidentiality and security
CASTROSEIS.COM undertakes to use and process users’ data, including personal data, whilst respecting its confidentiality and using it in accordance with its intended purpose, as well as to fulfil its obligation to safeguard it and take all necessary measures to prevent its alteration, loss, unauthorised processing or access, in accordance with the provisions of current data protection legislation.
This website includes an SSL certificate. This is a security protocol that ensures your data is transmitted securely and in its entirety; in other words, the transmission of data between a server and a web user, and vice versa, is fully encrypted. It also includes anti-spam measures, measures against attacks and phishing.
With regard to the confidentiality of processing, CASTROSEIS.COM shall ensure that any person authorised to process the customer’s data (including its staff, collaborators and service providers) is subject to an appropriate obligation of confidentiality (whether a contractual or legal duty).
Should a security incident occur, upon becoming aware of it, CASTROSEIS.COM shall notify the Customer without undue delay and shall provide timely information relating to the Security Incident as it becomes known or when reasonably requested by the Customer.
Security notification and breach reporting
At CASTROSEIS.COM, we take reasonable and appropriate measures to protect personal information against loss, misuse and unauthorised access, disclosure, alteration and destruction, taking into account the risks involved in the processing and the nature of the personal information; however, if CASTROSEIS.COM determines that your service data has been misappropriated (including by a CASTROSEIS.COM employee), has been exposed due to a security breach, or has been improperly acquired by a third party, CASTROSEIS.COM will immediately inform you of such security breach, misappropriation or improper acquisition.
Remarketing activities
The remarketing function allows this website to reach people who have previously visited CASTROSEIS.COM and to associate a specific audience with a particular message. In other words, remarketing is a method to encourage users who have visited this site to return.
As a user of CASTROSEIS.COM, you should be aware that the website collects information for this remarketing function. The information collected through this feature is gathered by Facebook and Pinterest cookies. You can find out what data these cookies collect in the following privacy policies for each service:
• Facebook Pixel and Pinterest Pixel
You can opt out of third-party cookies via the Network Advertising Initiative opt-out page.
These types of services allow you to interact with social media or other external platforms directly from the pages of this website. Interactions and the information obtained by this website will always be subject to the user’s privacy settings on each social network. If a service is installed that allows interaction with social networks, it is possible that, even if users do not use the service, it may collect web traffic data relating to the pages on which it is installed.
Browsing
When browsing CASTROSEIS.COM, non-identifiable data may be collected, which may include IP addresses, approximate geographical location, a record of how the services and sites are used, and other data that cannot be used to identify the user. Non-identifiable data also includes information relating to your browsing habits via third-party services. This website uses the following third-party analytics services:
- Analytics
We use this information to analyse trends, administer the site, track users’ movements around the site and to gather demographic information about our user base as a whole.
Accuracy and truthfulness of data
As a user, you are solely responsible for the truthfulness and accuracy of the data you submit to CASTROSEIS.COM, thereby exempting CASTROSEIS.COM from any liability in this regard.
Users guarantee and are responsible, in all cases, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information in the contact or subscription form.
Changes to the privacy policy
CASTROSEIS.COM reserves the right to amend this policy to bring it into line with new legislation or case law, as well as industry practices. In such cases, CASTROSEIS.COM will announce the changes on this page a reasonable time before they come into effect.
Queries and questions regarding this policy
If you have any questions regarding this policy or if you have privacy concerns regarding access to or the correction of personal information, you may contact us via our enquiry form or write to us at the following address:
HELLO@CASTROSEIS. COM
Although most questions and issues regarding access can be dealt with quickly, complex requests may require further investigation and time. In such cases, the issues will be resolved or you will be informed of the nature of the problem and the appropriate next steps within thirty days.