Privacy policy

WE RECOMMEND THAT YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING US WITH YOUR PERSONAL DATA AND GRANT US CONSENT FOR IT TO BE PROCESSED

1. - Who controls your data?

Identity: ECOALF RECYCLED FABRICS, S.L.

Tax ID: B85910610

Telephone No.: 91 319 68 01

Email: gdpr@ecoalf.com

2. - What data of yours do we process?

• Data that has been provided to us when you registered at the online store (www.ecoalf.com) and which corresponds to the following personal data: name, surname, email address, postal address, postal code, city, county, ID number/Foreigner’s ID number/Passport number and telephone number.

• Request for Newsletters, and which corresponds to the following personal data: email address.

• Customer Service, and which corresponds to the following personal data: email address.

• Data that has been provided to us when you registered at the store and which corresponds to the following personal data: name, surname, gender, date of birth, email address and mobile number.

3. - What is the purpose for processing your personal data and what is the legal basis?

We keep your data with the following purposes, legal basis and retention periods as stated below

• Online store client registration

Purpose: The main purpose is to handle your registration as a user at the online store, for the performance, compliance and implementation of the purchase agreement. The additional purpose is for creating profiles and marketing.

Legal basis: Main purpose (the agreement) and additional purpose (legitimate interest).

Retention periods: The personal data that you provide shall be retained for a 6-year period from the date of the last purchase, blocking this data until there is a requirement for any potential liability actions.

• Newsletter

Purpose: The main purpose is for sending personalised electronic notifications about our products via email. The additional purpose is for creating profiles and marketing.

Legal basis: Main purpose (consent) and additional purpose (legitimate interest), with the aim of sending notifications suitable to your interests.

Retention periods: The personal data will be retained until you request to be delisted, given that up until that moment we will have the understanding that you are still interested in receiving our notifications.

With regard to creating profiles and marketing, we believe that we have legitimate interest for creating a profile with the information that we have about you (like the browsing you do and/or purchase history) and the personal data that you have provided because we understand that processing this data is also beneficial to you as it allows you to improve your experience as a user and to access the information in accordance with your preferences. To that end, ECOALF has deliberated the interests and rights of the interested parties, and the measures adopted by the controller to fulfil the general conditions in terms of commensurability and transparency, and they have drawn the conclusion that:

1. - The impact on fundamental rights and public freedoms of the people is lower;

2. - The processing may be reasonably intended by the interested party;

3. - The data processing with the previous purposes does not give rise to the exemption, discrimination, defamation, or situations that could put the reputation of the interested party and/or their negotiation power at risk.

• Customer service.

Purpose: The purpose is to handle or resolve your application or request.

Legal basis: Agreement and legitimate interest.

Retention periods: We will process your data for the time necessary to deal with your application or request, blocking it until there is a requirement for potential liability actions.

• Store client registration

Main purpose: Sending personalised marketing notifications via email (Newsletter, advertising information and updates about the brand, advertising and exclusive offers, invitations to exclusive events, competitions and prize draws).

The additional purpose is for creating profiles and marketing, with the aim of sending notifications suitable to your interests.

Legal basis: Main purpose (consent) and additional purpose (legitimate interest).

Retention periods: The personal data provided will be retained until you request to be delisted, given that up until that moment we will have the understanding that you are still interested in receiving our notifications.

Accepting cookies on the www.ecoalf.com websites. You will find more information in our Cookies Policy.

4. - Who is the recipient of your data?

4.1. Data communication.

The processed personal data will only be communicated to third parties, in compliance with legal obligations.

4.2. Data Processors.

ECOALF will have collaboration from third-party service providers who will have access to your personal data and will process said data in name and representation of the company as a result of their service provision. ECOALF follows very strict criteria when selecting its service providers with the aim of fulfilling its obligations in terms of data protection, and it is committed to subscribing to the corresponding data protection agreement with them.

More specifically, ECOALF will contract the service provision from third party providers that are active, including but not limited to, in the following sectors: logistics services, legal guidance, provider accreditation, multi-disciplinary professional service companies, companies related to maintenance, companies providing technology services, companies providing IT services, physical security companies, instant messaging service providers, infrastructural maintenance and management companies and call centre service companies.

For service efficiency, some of the aforementioned providers may be located in territories outside the European Economic Area that do not provide a level of data protection comparable to that of the European Union, such as the United States. In such cases, we inform you that we transfer your data with adequate guarantees and always keeping the security of your data, by signing the Standard Contractual Clauses approved by the Commission, whose content you can consult at the following link: https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en

4.3. Co-responsibility in the treatment of customer data.

ECOALF customers can register through the network of ECOALF's own stores located in Spain, as well as through ECOALF's own stores located in Germany. For these purposes, it is expressly stated that in this case there is a co-responsibility in the treatment, with the company Ecoalf Germany GmbH with address at Alteschönhauser Str. 5 - 5a, 10119, Berlin, Germany, commercial registration number ME 39/2017 and with tax identification number No. 30/271/50289.

The Co-responsibility of the treatment indicates that both the person responsible for the treatment and the co-controller have jointly regulated, processed and protected personal data.

4.4. Data Processors.

ECOALF uses information security techniques such as firewalls and access control procedures, all with the aim of preventing unauthorized access to data and guaranteeing its confidentiality. To achieve these ends, the user accepts that ECOALF obtains data for the purposes of the corresponding authentication of access controls.

Additionally, any transaction carried out through ECOALF is carried out through secure payment systems. The confidential payment data is transmitted directly and in an encrypted form (SSL) to the corresponding entity.

ECOALF states that it has adopted all the technical and organizational measures necessary to guarantee the security and integrity of the personal data it deals with, as well as to prevent its loss, alteration and / or access by unauthorized third parties.

5. - What are your rights when you provide us with your data?

The rights that you have for personal data processing with reference to ECOALF are:

• The right to request access to your personal data
• The right to request its rectification or withdrawal
• The right to request a processing restriction
• The right to data transfer
• The right to oppose processing
• The right not to subject oneself to automatic decisions, including profiles 

6. - What does the right of access consist of?

You will have the right to obtain conformation regarding whether or not your personal data is being processed, and to obtain the following information: the processing purposes; the categories of the data that is being processed; the recipients or the categories of recipients that have been sent it or will be sent it; where possible, the expected time frame for retaining the personal data, or where it is not possible, the criteria used to determine this time frame.

In such cases, we will provide you with a copy of the personal data that is being processed. Further to this, when you make the request electronically, the information will be provided in a usable digital format.

You will be able to exercise this right every six months, unless there is a legitimate reason for requesting it more than once within this six month period, and we will inform you about the follow-up from your request within one month.

To exercise your right of access, send an email to: gdpr@ecoalf.com or a letter to the Department of to Calle Gran Vía 1, 2º Izq, 28013 Madrid.

7. - What does the right to rectification consist of?

You will have the right to rectify any incorrect personal data that concerns you and to do so; you will have to submit, where necessary, the documentation justifying the incorrectness or incomplete nature of the data being processed.

To exercise your right to rectification, send an email to: gdpr@ecoalf.com or a letter to the Department of to Calle Gran Vía 1, 2º Izq, 28013 Madrid.

8. - What does the right to withdrawal consist of?

You will have the right to withdraw any personal data that concerns you when one of the following circumstances is applicable: when it is not necessary for the purposes that it was gathered or processed; when you withdraw consent and the processing has no further legal basis; when you oppose the processing and there are no further legitimate reasons for the processing; when it has been processed illegally.

To exercise your right to removal, send an email to: gdpr@ecoalf.com or a letter to the Department of to Calle Gran Vía 1, 2º Izq, 28013 Madrid.

9. - What does the right to the process limitation consist of?

You will have the right to limit your data from being processed when one of the following conditions is fulfilled:

a) when you have contested the accuracy of your personal data during the time frame which will allow the file controller to verify its accuracy;

b) in the event that you consider the processing to be illegal and the file controller opposes the withdrawal of the personal data and requests that its use is instead limited;

c) when the file controller no longer needs the personal data for the processing purposes, but you need it in order to formulate, exercise or defend complaints;

d) in the event that you have opposed the processing, whilst a check is being made on whether the file controller’s legitimate reasons prevail over your own.

When you have obtained the processing restriction in accordance with this section, you will be informed of it by the person responsible for the file.

To exercise your right to processing restriction, send an email to: gdpr@ecoalf.com or a letter to Calle Gran Vía 1, 2º Izq, 28013 Madrid.

10. - What does the right to data transfer consist of?

You will have the right to receive the personal data that concerns you that you provided to the data controller in a structured, usable and readable format, and the right to send it to another data controller when: the processing is based on consent, and it is done automatically.

On exercising your right to the data transfer, you will have the right to have your personal data sent directly from controller to controller where it is technically possible.

The right to transfer will not be extended to data that the file controller may have inferred from data resulting directly from the use by said controller of the provided services.

To exercise your right to data transfer, send an email to: gdpr@ecoalf.com or a letter to the Department of Calle Gran Vía 1, 2º Izq, 28013 Madrid.

11. - What does the right of opposition consist of?

You will have the right to oppose your data being processed at any time. If you choose to exercise this right, the file controller will stop processing your personal data, unless we can demonstrate compelling legitimate reasons for the processing to prevail over your interests, rights and freedoms, or to formulate, exercise or defend complaints.

To exercise your right of opposition, send an email to: gdpr@ecoalf.com or a letter to the Department of to Calle Gran Vía 1, 2º Izq, 28013 Madrid.

12. - What does the right to not subject oneself to automatic decisions, including profiles consist of?

You will have the right not to be subjected to a decision that is solely based on automatic processing, including the creation of profiles which may give rise to (said decisions) legal effects or which may affect you in a similar way; unless:

- said decision is necessary for entering into or implementing an agreement,

- is authorised by a law or

- is based on consent.

To exercise your right not to subject oneself to automatic decisions, send an email to: gdpr@ecoalf.com or a letter to the Department of to Calle Gran Vía 1, 2º Izq, 28013 Madrid.

We also inform you that you may approach the Spanish Data Protection Agency to obtain more information about your rights.

Furthermore, in the event that you have granted your consent for a specific purpose, you have the right to withdraw your consent at any time without this affecting the legality of the processing based on the consent given prior to its withdrawal.

Likewise, we inform you that you may submit a complaint to the competent Data Protection Supervisory Authority, the Spanish Data Protection Agency (https://www.aepd.es), especially when you are not satisfied with how your rights have been obtained.

In the case of residents in Germany, you can find a list of control authorities at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.