• Diary
Login

Language

Cart

Your cart is empty

Privacy Policy

1. INTRODUCTION

WE RECOMMEND THAT YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING YOUR PERSONAL DATA AND GIVING CONSENT FOR ITS PROCESSING.

The purpose of this PRIVACY POLICY (hereinafter "POLICY") is to communicate our commitment to the protection and security of any personal data you may provide to us, and to duly inform you about the processing of personal data we carry out that may be collected through forms on our website. All of this is in accordance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.

Your personal data is very important to THE COMPANY, which is why we are committed to treating it with the utmost confidentiality and discretion, as well as implementing all security measures deemed appropriate and reasonable.

This POLICY applies only to this WEB page.

2. IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER

RED HEMISPHERE SL, registered in the Madrid Mercantile Registry, Volume 32535, Folio 31, Page M-585613, Entry 1, with Tax Identification Number (NIF) B87034690 and registered office at Calle Fortuny, 33 – 28010 Madrid. (Hereinafter “THE COMPANY”)

Email address info@goldandroses.com

Phone: 91 308 36 65

3. DATA WE COLLECT

THE COMPANY will process the following data that USERS have previously voluntarily provided through a form on our website, purchase registration, calls to Customer Service, etc.

  • Identification data . Information concerning a natural person that allows them to be distinguished from others within a community (for example: first name, last name, tax identification number, date of birth (verification that only adults can access the service), etc.)

  • Contact information . Information that allows us to maintain or contact you in order to properly manage shipments of our products purchased through our website, among others (for example: address, email, landline phone number, mobile phone number, city, province, country).

  • Economic and transactional information (for example: your payment or card details, information about your purchases, orders, returns, etc.)

  • Commercial information (for example: if you are subscribed to our newsletter)

When we ask you to fill in your personal information to give you access to a feature or service, we will mark some fields as Mandatory* , as this information will be necessary to provide you with the service and give you access to the functionality in question. Please note that if you choose not to provide this information, you may not be able to complete your customer registration, complete a purchase, or simply enjoy our services and features.

4. PURPOSES OF THE PROCESSING OF PERSONAL DATA

THE COMPANY collects your data to process your requests and offer you services and products that may be of interest to you:

  • Respond to inquiries, complaints, requests, or incidents submitted through our contact channels and contact you to provide the requested information or necessary solutions.

  • Respond to queries made through the Chat on our website.

  • Improve our website, its services and products.

  • Allow you to make purchases through our website.

  • Process requests for custom orders or reservations.

  • Development, fulfillment, and execution of the sales contract, which includes order preparation and delivery management, payment management and, where applicable, returns, invoicing, and sending the invoice for purchases made on our website.

  • Manage billing for accounting compliance and tax obligations.

  • Process the warranty for purchased products.

  • Sending personalized commercial communications (promotions and offers, invitations to special events, loyalty programs, sweepstakes, newsletters) via any remote electronic means of communication.

  • Comply with our legal obligations that apply to us and regulate our activity.

5. LEGITIMATION OF THE PROCESSING OF YOUR PERSONAL DATA

THE COMPANY, in compliance with current regulations regarding data protection, information society services, and electronic commerce, informs you that it will collect any personal data you have provided or voluntarily provided to access any of the services provided on our website, and will incorporate it into files owned by THE COMPANY.

The processing of personal data is also legitimized from the moment you make a purchase through our website, thereby initiating a contractual or pre-contractual relationship, if you contact us to request a specific product, customize a product, or request a quote.

To send commercial communications via remote electronic communication, you must have previously authorized us to do so by checking the box on the form(s) on our website.

6. DURATION OF PROCESSING AND DATA RETENTION PERIOD

The personal data provided will be retained in accordance with the periods established in current regulations:

THE CIVIL CODE . It will be five years from the new wording of Article 1964.

THE COMMERCIAL CODE . It will be six years, in accordance with the provisions of Article 30.

THE GENERAL TAX LAW . It will be four years in accordance with the provisions of articles 66 to 70.

In any case, even if you request the deletion of your personal data, THE COMPANY will have the right to retain and maintain it, under appropriate security measures, for the period necessary to comply with its legal obligations and to make it available to the competent authorities in the various applicable matters.

7. SENDING COMMERCIAL COMMUNICATIONS

If you have authorized us through our form(s), THE COMPANY will send you information about its products, activities, personalized services, etc.

For commercial communications, the retention periods will be maintained until you unsubscribe , since we will assume that you are still interested in receiving our communications until then.

You may revoke your consent to receive commercial communications at any time , communicating your desire to revoke through the following channels:

  • Email that must be sent to the following address: info@goldandroses.com

  • Postal mail addressed to: RED HEMISPHERE SL, Calle Fortuny, 33 – 28010 Madrid.

  • In the commercial communication we send you electronically, a link will be enabled – UNSUBSCRIBE .

The processing period for this withdrawal will be 48 to 72 hours from the receipt of the request, so it is possible that during this time you may continue to receive some commercial communications.

8. AUTOMATED DECISIONS AND PROFILING

Our website does not make automated decisions or create profiles.

9. INTERNATIONAL DATA TRANSFERS

THE COMPANY does not carry out any International Data Transfer.

10. RECIPIENTS

During the period in which your personal data is processed, THE COMPANY may transfer your data to third parties, including the following recipients:

  • Accounting and/or Tax Consulting, for the correct preparation of THE COMPANY's accounting and tax obligations.

  • Public bodies and entities with jurisdiction in the matter.

  • Judges and Courts.

  • State Security Forces and Corps.

  • To the various competent authorities, when there is a legal obligation to provide personal data.

11. SOCIAL NETWORKS

Social networks are part of the daily lives of many Internet users, and LA SOCIEDAD has created different profiles on some of them for them.

All users who visit our website have the opportunity to join our social networks or groups.

However, please note that, unless we request your information directly from them (for example, through marketing actions, contests, promotions, or any other valid means), your data will belong to the corresponding Social Network. Therefore, we recommend that you carefully read their terms of use and privacy policies, and ensure that you configure your preferences regarding data processing.

12. ACCURACY OF THE DATA

The interested party guarantees that the personal data provided to us is true, accurate, complete and up-to-date; he/she undertakes to inform us of any changes to the data provided, through the channels enabled for this purpose and indicated in the point 2. of this POLICY.

If you fail to do so, you will be liable for any direct or indirect damage or loss that may result from your failure to comply with this obligation.

If the interested party provides data about third parties, they declare that they have their express consent and undertake to provide them with the information contained in this clause, exempting THE COMPANY from any liability arising from failure to comply with this obligation.

13. EXERCISE OF RIGHTS AND CLAIMS BEFORE THE AEPD

As a result of the processing of your personal data by THE COMPANY, current legislation grants you a series of rights.

The exercise of your rights is free of charge, except if the requests are manifestly unfounded or excessive (for example: of a repetitive nature), then THE COMPANY, as the controller of the personal data, may charge a fee proportional to the administrative costs incurred.

The applications will be answered within ONE MONTH , although, taking into account the complexity and number of requests, Can the deadline be extended for another two months? (which will be communicated to you within one month of receiving your request)

You can exercise your rights of access, rectification, deletion, opposition, portability and limitation of processing through any of the following means, always accompanying a copy of your ID or equivalent identification document along with the corresponding form :

  • Email that must be sent to the following address: info@goldandroses.com

  • Postal mail addressed to: RED HEMISPHERE SL, Calle Fortuny, 33 – 28010 Madrid.

If the application is submitted electronically, the information will be provided electronically, unless the interested party requests otherwise.

We offer a brief explanation of each of these rights to make it easier for you to exercise them:

  • RIGHT OF ACCESS : In the right of access, interested parties will be provided with a copy of the personal data held, along with the purpose for which they were collected, the identity of the recipients of the data, the expected retention periods or the criteria used to determine it, the existence of the right to request the rectification or deletion of personal data as well as the limitation or opposition to its processing, the right to file a claim with the Spanish Data Protection Agency and, if the data have not been obtained from the interested party, any available information about their origin. The right to obtain a copy of the data may not adversely affect the rights and freedoms of other data subjects . DOWNLOAD HERE THE FORM TO EXERCISE THE RIGHT OF ACCESS .

  • RIGHT TO RECTIFICATION : The right to rectification shall be used to modify the data of interested parties that are inaccurate or incomplete, taking into account the purposes of the processing. The interested party must indicate in the request which data it refers to and the correction to be made, providing, where necessary, supporting documentation for the inaccuracy or incompleteness of the data being processed. If the data controller has communicated the data to other controllers, they must notify them of the rectification, unless it is impossible or requires a disproportionate effort, providing the interested party with information about said recipients, if requested.  DOWNLOAD HERE THE FORM FOR THE EXERCISE OF THE RIGHT OF RECTIFICATION .

  • RIGHT TO ERASURE : Under the right to erasure, data subjects' data will be deleted when they state their objection to processing and there is no legal basis to do so, the data is no longer necessary in relation to the purposes for which it was collected, they withdraw the consent given and there is no other legal basis legitimizing the processing, or it is unlawful. If the erasure results from the exercise of the data subject's right to object to the processing of their data for marketing purposes, the data subject's identifying data may be retained to prevent future processing. If the data has been communicated by the controller to other controllers, they must notify them of the erasure unless this is impossible or requires a disproportionate effort, providing the data subject with information about said recipients, if requested.  DOWNLOAD HERE THE FORM FOR EXERCISING THE RIGHT TO DELETION .

     

  • RIGHT TO OBJECT : Under the right to object, when data subjects express their refusal to the processing of their personal data to the controller, the controller will cease processing them unless there is a legal obligation to do so. When processing is based on a mission of public interest or the legitimate interest of the controller, in response to a request to exercise the right to object, the controller will cease processing the data unless compelling reasons prevail over the interests, rights, and freedoms of the data subject or are necessary for the formulation, exercise, or defense of legal claims. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.  DOWNLOAD HERE THE FORM FOR THE EXERCISE OF THE RIGHT TO OPPOSE .

  • RIGHT TO PORTABILITY : Under the right to portability, if the processing is carried out by automated means and is based on consent or is carried out within the framework of a contract, data subjects may request to receive a copy of their personal data in a structured, commonly used, and machine-readable format. They also have the right to request that their personal data be transmitted directly to a new controller, whose identity must be communicated, where technically feasible.  DOWNLOAD HERE THE FORM TO EXERCISE THE RIGHT TO PORTABILITY .

  • RIGHT TO LIMITATION OF PROCESSING : Under the right to restriction of processing, data subjects may request the suspension of the processing of their data to challenge its accuracy while the controller carries out the necessary verifications or, in the event that the processing is carried out based on the controller's legitimate interest or in compliance with a mission of public interest, while it is verified whether these reasons prevail over the interests, rights, and freedoms of the data subject. The data subject may also request the retention of the data if they consider the processing to be unlawful and, instead of deletion, request the restriction of processing, or if, even if the controller no longer needs the data for the purposes for which it was collected, the data subject requires it for the formulation, exercise, or defense of legal claims. The circumstance that the processing of the data subject's data is restricted must be clearly stated in the controller's systems. If the controller has communicated the data to other controllers, they must notify them of the restriction of their processing, unless it is impossible or requires a disproportionate effort, providing the data subject with information about these recipients, if requested. DOWNLOAD HERE THE FORM FOR EXERCISING THE LIMITATION OF PROCESSING .

WHERE APPROPRIATE , you may also exercise your right not to be subject to a decision based solely on automated processing . This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, that produces legal effects on you or significantly affects you in a similar way.

Regarding profiling, this refers to any form of processing of your personal data that evaluates personal aspects, in particular analyzing or predicting aspects related to your performance at work, economic situation, health, personal preferences or interests, reliability, or behavior.

Nevertheless, As we indicated in point 8 of this POLICY, our WEBSITE does not make automated decisions or create profiles.

14. MODIFICATIONS/UPDATE

This PRIVACY POLICY may be modified/updated based on established legal requirements or in order to adapt said POLICY to the instructions issued by the Spanish Data Protection Agency or changes to our WEBSITE.

For this reason, we advise our USERS to periodically visit our POLICY.