Privacy Policy

1. INTRODUCTION

WE RECOMMEND THAT YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING YOUR PERSONAL DATA AND GIVING CONSENT TO THEIR PROCESSING.

The objective of this PRIVACY POLICY (hereinafter "POLICY"), is to inform you of our commitment to the protection and security of the personal data that you may provide us, duly inform you about the processing of personal data carried out by us that may be collected. through form/s on our WEB. All this, in accordance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 December. April 2016.

Your personal data is very important to THE COMPANY, therefore we undertake to treat it with the utmost confidentiality and discretion, as well as to implement all those security measures that are considered appropriate and reasonable.

This POLICY applies only to this WEB page.

2. IDENTIFICATION AND CONTACT DATA OF THE RESPONSIBLE

RED HEMISPHERE S.L., registered in the Mercantile Registry of Madrid, in Volume 32535, Folio 31, Page M-585613, Entry 1, with NIF B87034690 and registered office at Calle Fortuny, 33 – 28010 Madrid. (Hereinafter "THE COMPANY")

Email address info@goldandroses.com

Telephone: 91 308 36 65

3. DATA WE COLLECT

THE COMPANY will process the following data that the USERS will have previously provided voluntarily through a form on our WEBSITE, purchase registration, call the Customer Service, etc.

Identification data. Information concerning a natural person that allows to differentiate it from others in a community (for example: name, surnames, tax identification number, date of birth - verification that only adults access the service-, etc)
Contact details. Information that allows you to maintain or contact us to properly manage shipments of our products purchased through our WEB, among others (for example: address, email, landline, mobile phone, location, province, country)
Economic and transactional information (for example: your payment or card details, information about your purchases, orders, returns, etc.)
Commercial information (for example: if you are subscribed to our newsletter)

When we ask you to fill in your personal data to give you access to some functionality or service, we will mark some fields as obligatory*, since they are data that will be necessary to be able to provide the service to give you access to the functionality in question. Please note that if you decide not to provide us with this data, you may not be able to complete your registration as a customer or complete a purchase or simply enjoy our services and features.

4. PURPOSES OF THE PROCESSING OF PERSONAL DATA

THE COMPANY collects your data in order to manage your requests and offer you the services and products that may be of interest to you:

Address queries, complaints, requests or incidents made through our contact channels and be able to contact you to send the requested information or necessary solution.
Address queries made through the Chat on our website.
Improve our page, its services and products.
Allow you to make purchases through our WEB.
Process requests for personalized orders or reservations.
Development, compliance and execution of the sales contract, which includes the preparation of the order and delivery management, payment management and, where appropriate, return, billing and sending of the invoice for purchases made on our WEB.
Manage billing for the purposes of accounting compliance and tax obligations.
Process the warranty of the purchased products.
Sending by any means of remote electronic communication, personalized commercial communications (promotions and offers, invitations to special events, loyalty programs, raffles, Newsletter).
Comply with our legal obligations that are applicable to us and regulate our activity.

5. LEGITIMATION OF THE PROCESSING OF YOUR PERSONAL DATA

THE COMPANY, following current regulations both in terms of data protection and in terms of services of the information society and electronic commerce, informs you that it will collect the personal data that you have provided or provided voluntarily for your access to any of the services provided on our WEB, and will be incorporated into files owned by THE COMPANY.

The processing of personal data is also legitimized from the moment you make a purchase through our WEB, initiating a contractual or pre-contractual relationship with this act, if you contact us to request a specific product, or personalization. of a product, or request a quote.

For the sending of commercial communications by means of remote electronic communication, you will have previously authorized it by checking the box that authorizes us to do so, in the form(s) of our WEB.

6. DURATION OF THE TREATMENT AND PERIOD OF CONSERVATION OF THE DATA

The personal data provided will be kept in accordance with the terms established in current regulations:

THE CIVIL CODE. It will be five years from the new wording of the 1964 article.

THE COMMERCE CODE. It will be six years, in accordance with the provisions of article 30.

THE GENERAL TAX LAW. It will be four years in accordance with the provisions of articles 66 to 70.

In any case, and even if you request the deletion of your personal data, THE COMPANY will have the right to keep and maintain them, under the appropriate blockade, for the period necessary to comply with the corresponding legal obligations, as well as to make them available. before the competent Authorities in the different matters of application.

7. SENDING COMMERCIAL COMMUNICATIONS

In the event that you have authorized us through our form(s), THE COMPANY will send you information about its products, activities and personalized services, etc.

For sending commercial communications, the retention periods will be maintained as long as you do not request their withdrawal., since we will understand that until that moment you are still interested in receiving our communications

You can revoke your consent to receive commercial communications at any time, communicating your will to revoke through the following channels:

E-mail that should be addressed to the following address: info@goldandroses.com
Postal mail addressed to: RED HEMISPHERE S.L., Calle Fortuny, 33 – 28010 Madrid.
In the commercial communication that we send you by electronic means, a link will be enabled –BAJA.

The term for processing this cancellation will be 48 to 72 hours from the receipt of the request, so it is possible that it is that time continue to receive some commercial communication.

8. AUTOMATED DECISIONS AND PROFILING

Our WEB does not make automated decisions or create profiles.

9. INTERNATIONAL DATA TRANSFERS

THE COMPANY does not carry out any International Data Transfer.

10. RECIPIENTS

During the period of duration of the processing of your personal data, THE COMPANY may transfer your data to third parties, these being the following recipients:

Accounting and/or Tax Advice, for the correct preparation of accounting and tax obligations of THE COMPANY.
Organisms and Public Entities with competence in the matter.
Judges and Courts.
State Security Forces and Bodies.
To the different competent authorities, when there is a legal obligation to provide personal data.

11. SOCIAL NETWORKS

Social Networks are part of the daily life of many Internet users, and for them THE COMPANY has created different profiles in some of them.

All users who visit our WEB page have the opportunity to join our social networks or groups.

However, you must bear in mind that, unless we request your data directly in them (for example, through marketing actions, contests, promotions, or any other valid way), your data will belong to the corresponding Social Network. Therefore, we recommend that you carefully read their terms of use and privacy policies, as well as make sure to set your preferences regarding data processing.

12. ACCURACY OF THE DATA

The interested party guarantees that the personal data provided to us is true, exact, complete and up-to-date; committing to report any change regarding the data provided, through the channels enabled for this purpose and indicated in the point 2. of this POLICY.

If you do not do so, you will be responsible for any damage or loss, both direct and indirect, that may be caused as a result of the breach of this obligation.

In the event that the interested party provides data from third parties, he declares that he has their express consent and undertakes to transfer the information contained in this clause, exempting THE COMPANY from any liability arising from the lack of compliance with this obligation. .

13. EXERCISE OF RIGHTS AND CLAIMS BEFORE THE AEPD

As a consequence of the processing of your personal data by THE COMPANY, current legislation grants you a series of rights.

The exercise of your rights is free of charge, except if the requests are manifestly unfounded or excessive (for example: of a repetitive nature), then THE COMPANY, as responsible for the processing of personal data, may charge a fee proportional to the administrative costs incurred.

Requests will be answered within ONE MONTH, although, if the complexity and number of requests are taken into account, the term can be extended another TWO MORE MONTHS (which will be communicated to you within one month of receiving your request)

You can exercise your rights of access, rectification, deletion, opposition, portability and limitation of treatment through any of the following means, always accompanying a copy of your DNI or EQUIVALENT IDENTIFICATION DOCUMENT together with the corresponding form:

E-mail that should be addressed to the following address: info@goldandroses.com
Postal mail addressed to: RED HEMISPHERE S.L., Calle Fortuny, 33 – 28010 Madrid.

If the request is submitted by electronic means, the information will be provided by this same means, unless the interested party requests otherwise.

We offer a summary explanation of each of these rights to facilitate your exercise:

RIGHT OF ACCESS: In the right of access, the interested parties will be provided with a copy of the personal data that is available together with the purpose for which they have been collected, the identity of the recipients of the data, the planned conservation periods or the criteria used. to determine it, the existence of the right to request the rectification or deletion of personal data as well as the limitation or opposition to its treatment, the right to file a claim with the Spanish Agency for Data Protection and if the data has not been obtained from the interested, any available information about its origin. The right to obtain a copy of the data may not negatively affect the rights and freedoms of other data subjects. DOWNLOAD HERE FORM FOR THE EXERCISE OF THE RIGHT OF ACCESS.
RIGHT OF RECTIFICATION: In the right of rectification, the data of the interested parties that were inaccurate or incomplete will be modified according to the purposes of the treatment. The interested party must indicate in the request to which data it refers and the correction that must be made, providing, when necessary, the supporting documentation of the inaccuracy or incompleteness of the data subject to treatment. If the data has been communicated by the controller to other controllers, you must notify them of the rectification of these unless it is impossible or requires a disproportionate effort, providing the interested party with information about said recipients, if requested. DOWNLOAD HERE FORM FOR THE EXERCISE OF THE RIGHT OF RECTIFICATION.
RIGHT OF DELETION: In the right of suppression, the data of the interested parties will be eliminated when they express their refusal to treatment and there is no legal basis that prevents it, they are not necessary in relation to the purposes for which they were collected, they withdraw the consent given and they do not there is another legal basis that legitimizes the treatment or it is illegal. If the suppression derives from the exercise of the right of opposition of the interested party to the processing of their data for marketing purposes, the identification data of the interested party may be kept in order to prevent future processing. If the data has been communicated by the controller to other controllers, you must notify them of the deletion of these unless it is impossible or requires a disproportionate effort, providing the interested party with information about said recipients, if requested. DOWNLOAD HERE FORM FOR THE EXERCISE OF THE RIGHT OF SUPPRESSION.
RIGHT OF OPPOSITION: In the right of opposition, when the interested parties express their refusal to process their personal data before the person in charge, the person in charge will stop processing them as long as there is no legal obligation that prevents it. When the treatment is based on a mission of public interest or on the legitimate interest of the person in charge, before a request to exercise the right of opposition, the person in charge will stop processing the data unless compelling reasons are proven that prevail over the interests, rights and freedoms of the interested party or are necessary for the formulation, exercise or defense of claims. If the interested party opposes the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. DOWNLOAD HERE FORM FOR THE EXERCISE OF THE RIGHT OF OPPOSITION.
RIGHT OF PORTABILITY: In the right of portability, if the treatment is carried out by automated means and is based on consent or is carried out within the framework of a contract, the interested parties may request to receive a copy of their personal data in a structured format, of common use and mechanical reading. Likewise, they have the right to request that they be transmitted directly to a new person in charge, whose identity must be communicated, when technically possible. DOWNLOAD HERE FORM FOR THE EXERCISE OF THE RIGHT OF PORTABILITY.
RIGHT OF LIMITATION TO TREATMENT: In the right of limitation of the treatment, the interested parties can request the suspension of the treatment of their data to contest its accuracy while the person in charge carries out the necessary verifications or in the event that the treatment is carried out based on the legitimate interest of the person in charge or in fulfillment of a mission of public interest, while verifying whether these reasons prevail over the interests, rights and freedoms of the interested party. The interested party can also request the conservation of the data if he considers that the treatment is illegal and, instead of deleting it, requests the limitation of the treatment, or if the person in charge does not need them anymore for the purposes for which they were collected, the interested party you need them for the formulation, exercise or defense of claims. The circumstance that the processing of the interested party's data is limited must be clearly stated in the controller's systems. If the data has been communicated by the controller to other controllers, you must notify them of the limitation of their treatment unless it is impossible or requires a disproportionate effort, providing the interested party with information about said recipients, if requested. DOWNLOAD HERE FORM FOR THE EXERCISE OF THE LIMITATION OF TREATMENT.

WHEN APPROPRIATE, you can also exercise your right not to be subject to of a decision based solely on automated processing. This right is intended to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, which produces legal effects on you or similarly significantly affect you.

Regarding this profiling, it is about any form of treatment of your personal data that evaluates personal aspects, in particular analyzing or predicting aspects related to your performance at work, economic situation, health, personal preferences or interests, reliability or the behaviour.

However, as we indicate in point 8 of this POLICY, our WEB does not make automated decisions or create profiles.

14. CHANGES/UPDATE

This PRIVACY POLICY may be modified/updated based on the established legal requirements or in order to adapt said POLICY to the instructions issued by the Spanish Data Protection Agency or changes to our WEBSITE.

For this reason, we advise our USERS to periodically visit our POLICY.