PRIVACY POLICY

Basic information on data protection

  • Controller: Elena Moreno Henríquez
  • Purpose: Order management, customer service, sending commercial communications (if you have given your consent)
  • Legal basis: Contract performance, data subject's consent, legitimate interest
  • Recipients: Service providers necessary for the activity (web platform, payment gateway, courier company)
  • Rights: Access, rectification, erasure, objection, restriction, data portability
  • Additional information: You can consult additional and detailed information on data protection below

Who is responsible for processing your data?

For what purpose do we process your personal data?

At CASA MORENO, we process the information provided by interested parties for the following purposes:

A) Order management and contractual relationship

  • Data processed: Name, surname, shipping and billing address, telephone, email, payment details.
  • Purpose: To process and manage orders placed through the website, manage payments and returns, issue invoices, and respond to inquiries related to orders.
  • Legal basis: Performance of the purchase contract (Art. 6.1.b GDPR).
  • Retention: During the term of the contractual relationship and subsequently for the limitation period of legal actions arising therefrom (5 years according to the Spanish Civil Code). Invoices will be kept for 6 years due to legal tax obligations.

B) Sending commercial communications

  • Data processed: Email, name.
  • Purpose: Sending newsletters, commercial offers, product news, and content related to CASA MORENO.
  • Legal basis: Express consent of the data subject (Art. 6.1.a GDPR).
  • Retention: Until you revoke your consent or request to unsubscribe from communications.

C) Handling inquiries and requests

  • Data processed: Name, email, content of the inquiry.
  • Purpose: To address and respond to inquiries, requests, or petitions made through the contact form or email.
  • Legal basis: Consent of the data subject when sending the inquiry (Art. 6.1.a GDPR).
  • Retention: For the time necessary to answer the inquiry and subsequently for 1 year.

D) Browsing analysis and website improvement

  • Data processed: Browsing data (technical and analytical cookies).
  • Purpose: To analyze user behavior on the website to improve the shopping experience and optimize the site.
  • Legal basis: User consent (non-technical cookies) or legitimate interest (essential technical cookies).
  • Retention: As specified in the Cookie Policy.

What is the legal basis for processing your data?

The legal basis for processing your data is based on:

  • Contract performance: When you place an order, processing is necessary to perform the purchase contract.
  • Consent: For sending commercial communications and the use of non-technical cookies.
  • Legitimate interest: For fraud prevention and website security.
  • Legal obligation: To comply with tax, accounting, and commercial obligations.

To which recipients will your data be communicated?

Your data may be communicated to the following recipients for operational reasons:

  • E-commerce platform: Shopify Inc. (for hosting and managing the online store)
  • Payment gateway: Stripe, PayPal, or other payment gateways (to process transactions)
  • Courier company: For order delivery
  • Accounting/tax advisory service: For compliance with tax and accounting obligations
  • Public administrations: When there is a legal obligation (Tax Agency, etc.)

All service providers with whom we work are subject to confidentiality and security obligations and comply with current data protection regulations.

No international data transfers will be made, except those necessary for the contracted services (for example, Shopify has servers in the United States under the EU-US adequacy framework).

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation as to whether CASA MORENO is processing personal data concerning them.

Interested parties have the right to:

  • Access their personal data
  • Request the rectification of inaccurate data
  • Request their erasure when, among other reasons, the data are no longer necessary
  • Request the restriction of their processing in certain circumstances
  • Object to the processing of their data for reasons related to their particular situation
  • Request data portability in the cases provided for in the regulations
  • Withdraw the consent given at any time

How to exercise these rights?

You can exercise your rights by sending an email to hola@bycasamoreno.com, indicating "Data Protection - [Right you wish to exercise]" in the subject line and attaching a copy of your ID or equivalent identification document.

Right to file a complaint:

If you consider that your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Security of personal data

CASA MORENO undertakes to adopt the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

7. Privacy Policy Update

CASA MORENO reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as industry practices. When significant changes occur, you will be notified through the website or by email to registered users.