Privacy policy

PRIVACY POLICY

Website owner information

Company name: LA TORRE ROSA 1987, S.L

VAT nr: B62006531

Business address: C/ Francesc Tàrrega, 22, 08027 Barcelona

E-mail: info@torrerosa.com

Registration in the Mercantile Registry of Barcelona, Volume 31798, Invoice 14 Sheet B-196724, inscription 1º.

 

Data Protection Officer

The owner is responsible for personal data collected by browsing and use of this website in accordance with requirements established by REGULATION (EU) 2016/679 on data protection of natural persons, as well as in accordance with spanish Ley 34/2002 de 11 de julio de Servicios de la Sociedad de la Información y del Comercio Electrónico (LSSI-CE).

By using this website, we understand that you have read and understood information set out in relation to the processing of your personal data.

 

Data Protection Policy

Data controller applies the principle of active responsibility in processing of personal data, maintaining a constant updating and promotion of continuous improvement of data protection system in accordance with applicable legal requirements, ensuring in any case:

• respect for freedom and fundamental rights of natural persons
• data are processed in a lawful, fair and transparent manner
• data processed are accurate, adequate, relevant and limited in relation to purposes for which they are collected
• purposes for which they are collected are explicit and legitimate and are not processed in a way that is incompatible with those purposes

This document’s purpose is to inform you about what we do with your personal data, how it is collected, what it is used for, your rights, as well as all necessary legal information established by current legislation.

 

Data collected, purpose and lawfulness

Personal data processed are those provided by you through forms available on this website and are the minimum required to be able to:

• send you information about our products / services
• answer queries.
• send information about possible jobs.
• process orders, as well as to be able to prepare corresponding invoices, report on status of orders, attend to claims and any other management derived from service provision carried out through this website.
• respond to your comments.
• send you a newsletter with our website’s news and our activities.

While you visit our site, we will keep track of:

• Products that you have seen: We will use them to show you the products that you have recently seen, for instance.
• Location, IP address and browser type: we will use this for purposes such as estimating taxes and shipping costs.
• Shipping address: we will ask you to provide this so that we can, for example, estimate the cost of shipping before you place an order and send the order to you.

We also use cookies to keep track of the contents of the cart while you browse our site.

When you buy something to us, we ask you to provide information including your name, billing address, shipping address, email address, phone number, credit / payment card details, and optional additional information such as username and password. We will use this information for purposes such as:

• Send you information about your account and order
• Respond to your requests, including refunds and claims
• Process payments and avoid fraud
• Set up your account for our store
• Comply with any legal obligations we have, such as tax calculations
• Improve our store offers
• Send you promotional messages, if you choose to receive them

If you create an account we will store your name, address, email and phone number, which we will use for the payment process and future orders.

We normally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally obliged to keep it. For example, we will store order information for 5 years for tax and accounting purposes. This includes your name, email address, and billing and shipping addresses.

We also store comments or ratings, if you choose to leave them.

These purposes are based on legal principles of data processing collected by current regulations: for execution of a contract or provision of a service, for fulfilment of legal obligations, for legitimate interest and with your consent.

 

Web Forms

Personal data collected through web contact form is used to answer any query you ask through it.

The personal data collected through the web purchase form is used to fulfill your order, send you the products / services you purchased, prepare the corresponding invoices, keep track of your orders and any procedures derived from the contractual relationship that begins after the formalization of the online purchase.

Personal data collected in our newsletter form is intended to process data necessary to send you information about our activities, products, services and others.

The personal data collected through the work with us web form is used to be able to send information about possible vacancies.

Data processing is legitimized by contract execution or consent you give us by expressly accepting conditions of treatment informed through this privacy policy.

 

Who on our team has access to your data?

Members of our team have access to the information you provide us. For example, administrators and store managers can access:

• Order information, such as what was purchased, when it was purchased, and where it should be shipped, and
• Customer information, such as your name, email address, and billing and shipping information.

Members of our team have access to this information to help complete orders, process refunds, and support you.

 

Data recipients

Personal data obtained through web forms are recorded and stored on electronic media controlled and supervised by data controller.

Your personal data may be communicated to third parties, including:

• when data communication is covered by a legal obligation
• when, for the correct provision of the service or the execution of a contract, it is necessary to communicate your data to third parties in order to make the payment (payment gateways), as well as to manage the deliveries of the products (carriers), if applicable.

Such assignment is covered by the needs of the service.

In case of data communication to third parties is not covered by the legal bases established in the previous section, the communication of data to other recipients will only be carried out if you have given your express consent.

The function of the recipients of the data is to perform commercial functions on our behalf.

Strict criteria is maintained for the selection of treatment managers and the contractual commitment with each of them to comply with and enforce the obligations established in terms of data protection.

In the event that we communicate your personal data to third parties, these may be communicated to recipients located in countries outside the EU. Whatever the level of data protection in these countries, your data will be processed in compliance with European and Spanish legislation. In the event that, at any time, international data transfers take place, the transfer of your personal data is carried out in accordance with the applicable privacy laws and, in particular, that the contractual, technical and organizational requirements, such as standard contractual clauses approved by the European Commission.

For payment through payment gateways, we recommend that you read the privacy policy to understand how it handles personal information.

We use the following services and your data may be communicated to the following companies and for the indicated purposes:

– Payment services:

Redsys Servicios de Procesamiento, S.L. (“Redsys”): we use Redsys to manage payments on our website in a secure way.

If you decide to pay by credit / debit card through Redsys, your personal data will be transmitted to Redsys.

The legitimacy for the treatment and transmission of data is the processing for the fulfillment of a contract and consent.

You can read their privacy policy at:

http://www.redsys.es/en/legal/20200224_politica-privacidad_ENG.pdf

PayPal (Europe) S.à.r.l. et Cie, S.C.A. (“Paypal”): We use Paypal to manage payments on our website securely.

If you decide to pay via Paypal, your personal data will be transmitted to Paypal.

The legitimacy for the treatment and transmission of data is the processing for the fulfillment of a contract and consent.

You can read their privacy policy at:

https://www.paypal.com/webapps/mpp/ua/privacy-full

– Analysis services:

Google Tag Manager and Google Analytics: we use Google Tag Manager and Google Analytics to help us analyze how users use our website through cookies installed on your computer.

If you decide to accept Google Tag Manager and Google Analytics cookies, the information generated by the cookie (including your IP) will be sent to Google.

The legitimacy for the treatment and transmission of data is the consent accepting the Google Tag Manager and Google Analytics cookies.

You can read their privacy policy at:

https://policies.google.com/privacy?hl=en

– Services necessary for our activity (hosting, web platform, etc)

Dinahosting SL: we use Dinahosting as hosting to host our website.

If you decide to browse our website or fill in and send us one of our forms, your personal data will be transmitted to Dinahosting.

The legitimacy for the treatment and transmission of data is consent.

You can read their privacy policy at:

https://dinahosting.com/legal/proteccion-datos

WordPress.org – We use wordpress.org as our web platform.

If you decide to browse our website or fill in and send us one of our forms, your personal data could be transmitted to WordPress.org.

The legitimacy for the treatment and transmission of data is consent.

You can read their privacy policy at:

https://wordpress.org/about/privacy/

– Shipments of the products:

Correos: We use Correos as our shipping company to Spain / Europe / Rest of the world

If you decide to buy any of our products, we will send them through this company and your personal data will be transmitted to the Post Office.

The legitimacy for the treatment and transmission of data is the processing for the fulfillment of a contract and consent.

You can read their privacy policy at:

https://www.correos.es/es/en/legales/privacidad-web

– Advertising campaigns:

Facebook Ads: We use Facebook Ads as a platform for our advertising campaigns.

When publishing an ad, you can segment the audience by age, gender, hobbies, type of purchases, etc.

If you decide to fill in and send us one of our forms, your personal data will be transmitted to Facebook Ads.

The legitimacy for the treatment and transmission of data is consent.

You can read their privacy policy at:

https://www.facebook.com/privacy/explanation

Google Ads: We use Google Ads as a platform for our advertising campaigns.

When publishing an ad, you can segment the audience by age, gender, hobbies, type of purchases, etc.

If you decide to fill in and send us one of our forms, your personal data will be transmitted to Google Ads.

The legitimacy for the treatment and transmission of data is consent.

You can read their privacy policy at:

https://policies.google.com/privacy?hl=en

You can obtain more information about the processing of personal data of our organization by requesting it in the mail: info@torrerosa.com.

 

Technical and organisational data protection measures

Supports have necessary technical and organisational measures to guarantee confidentiality and conservation of personal data obtained through website.

Personal data collected from website are processed using HTML protocol with valid SSL certificate.

Staff involved in data processing operations: access, editing, deletion, etc… are qualified, trained and committed to this data protection policy.

 

Data Retention

The personal data obtained through the contact form, those collected through the purchase web form, those collected in the newsletter form or those collected through the work with us web form will be kept for the duration of the contractual relationship. as long as you do not exercise your right to delete, cancel and/or limit the processing of your data or 12 months after the last message.

Once contractual relationship is expired, we will keep information properly blocked, without making any use of it, as long as it may be necessary for the exercise or defense of claims or may derive some kind of judicial, legal or contractual liability from its treatment, which must be attended and for which its recovery is necessary.

If you have expressly agreed to receive marketing information from us, we will retain your contact details until you have informed us of your decision to opt out of receiving marketing information from us.

 

Information on existence of automated decisions (including profiling)

We do not normally make automatic decisions, but, if we do, we will make it clear that such a decision is being made.

We recognize the possibility of profiling in order to improve its product offering, to personalize sending of commercial offers or to give you a more personalized treatment.

 

Opposition to data being processed for advertising purposes

If you have given your consent for your data to be used for advertising purposes and you no longer wish to receive advertising, you may revoke your consent at any time by sending an e-mail to: info@torrerosa.com.

 

Privacy Policy Changes

We may change information contained in this Privacy Policy from time to time. If we do, we will notify you in a variety of ways through Platform (for example, through a banner, pop-up or push notification), or we will notify you at your email address when change in question is significant to your privacy so that you can review changes, assess them and, if applicable, object or unsubscribe to any service or functionality. In any event, we encourage you to review this Privacy Policy from time to time for minor changes or interactive enhancements.

 LAST UPDATE: May 17, 2023