Privacy policy
PRIVACY POLICY
1. Data controller
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Organic Act 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), and other applicable regulations, we inform you that the controller of the personal data is:
Group Invexlaters S. L.
CIF: B44631505
Registered address: Calle de Clara Campoamor 2, 3.º E, 11600 Ubrique (Cádiz), España
Email: info@chollobar.com
WhatsApp: 622 872 311
Website: www.chollobar.com
2. Purpose of the processing
The personal data provided by users may be processed for the following purposes:
• Managing the purchase and delivery of the products bought.
• Processing payments, returns, warranties and incidents.
• Handling enquiries made by email, WhatsApp or contact forms.
• Managing the commercial relationship with customers and suppliers.
• Sending information related to orders.
• Sending commercial communications when the user has given consent or there is a legal basis that allows it.
• Complying with applicable legal obligations.
3. Data we collect
We may process, among others, the following data:
• First name and surname.
• Shipping and billing address.
• Identity document when legally necessary.
• Phone.
• Email.
• Information about the orders placed.
• Information relating to payments (without storing the full bank card details).
• Communications held with our customer service.
4. Legal basis for the processing
The processing of personal data is based on:
• The performance of the sales contract.
• Compliance with legal obligations.
• The consent of the data subject where necessary.
• The legitimate interest in handling enquiries, improving our services and preventing fraud.
5. Retention of data
Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods established by tax, commercial or any other applicable legislation.
6. Recipients of the data
The data may only be disclosed where necessary to provide the contracted service, including:
• Transport companies.
• Financial institutions and payment platforms.
• Technology providers necessary for the operation of the online shop.
• Public authorities where there is a legal obligation.
Under no circumstances will we sell or transfer personal data to third parties for commercial purposes.
7. International transfers
Some of our technology providers may process data outside the European Economic Area.
When this occurs, such transfers will be made only with providers that offer adequate safeguards in accordance with the General Data Protection Regulation.
8. User rights
The user may exercise the following rights at any time:
• Right of access.
• Right of rectification.
• Right of erasure.
• Right to object.
• Right to restriction of processing.
• Right to data portability.
• Right to withdraw consent when the processing is based on it.
To exercise any of these rights you may contact us at the email address given in this policy, proving your identity where necessary.
Likewise, if you consider that your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
9. Information security
Chollobar applies the technical and organisational measures necessary to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the state of the art and the existing risks.
However, no information transmission or storage system can guarantee absolute security.
10. Commercial communications
We will only send commercial communications when the user has authorised it or when there is a legal basis that allows it.
The user may request to stop receiving such communications at any time using the means provided for this purpose or by contacting us.
11. Minors
This website is not aimed at persons under 18 years of age.
We do not knowingly collect personal data from minors. If we detect that a minor's data has been provided without the corresponding authorisation, we will proceed to delete it.
12. Changes to this policy
Chollobar may amend this Privacy Policy to adapt it to legislative, technical or operational changes to the online shop.
The version published at any given time will be the one that applies.
13. Applicable law
This Privacy Policy is governed by Regulation (EU) 2016/679 (GDPR), Organic Act 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), Act 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) and the rest of the applicable Spanish legislation.