Privacy Policy

WE RECOMMEND YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING YOUR PERSONAL DATA AND GIVING CONSENT FOR THEIR PROCESSING

1.- Who is responsible for processing your data?

Identity: ECOALF RECYCLED FABRICS, S.L.

CIF: B85910610

Telephone: 91 319 68 01

Email: gdpr@ecoalf.com.

2.- What data of yours do we process?

2.1.- Data that has been provided to us when registering in the online store (www.ecoalf.com) and that corresponds to the following personal data: name, surname, email, address, postal code, city, province, country, DNI/NIE/passport and telephone number.

2.2.- Request for Newsletters, and that correspond to the following personal data: email.

2.3.- Customer Service and that correspond to the following personal data: email.

2.4.- Data that has been provided to us when registering in the physical store and that corresponds to the following personal data: name, surname, gender, date of birth, email and mobile.

Please keep in mind that if you decide not to provide us with this data, you may not be able to complete your registration as a user or you may not be able to enjoy the requested service.

3.- For what purpose do we treat your personal data and what is the legal basis?

We have your data with the following purposes, legal basis and retention periods described below

3.1. Online store customer registration

Purpose: The main purpose is to manage your registration as a user of the online store, for the development, fulfillment and execution of the sales contract. The accessory purpose is the elaboration of profiles and marketing.

Legal basis: Main purpose (the Contract) and ancillary purpose (legitimate interest).

Retention periods: The personal data you provide will be kept for a period of 6 years from the last purchase made, keeping them blocked until the prescription of possible liability actions.

3.2. newsletter

Purpose: The main purpose is to send personalized electronic communications about our products, via email. The accessory purpose is the elaboration of profiles and marketing.

Legal basis: Main purpose (consent) and ancillary purpose (legitimate interest), in order to send you communications tailored to your interests.

Retention periods: The personal data provided will be kept as long as you do not request your withdrawal, since until then we will understand that you are still interested in receiving our communications.

Regarding the preparation of profiles and marketing, we consider that we have a legitimate interest in profiling with the information we have about you (such as the browsing you do and/or your purchase history) and the personal data you have provided us, since We understand that the processing of this data is also beneficial for you because it allows you to improve your user experience and access information according to your preferences. To this end, ECOALF has weighed the interests and rights of the interested parties, and the measures adopted by the person in charge to comply with its general obligations in terms of proportionality and transparency, and has concluded that:

1.- the impact on the fundamental rights and public freedoms of people is reduced;

2.- said treatment can be reasonably foreseen by the interested party;

3.- The processing of data for the above purposes does not give rise to exclusion, discrimination, defamation, or situations that jeopardize the reputation of the interested party and/or the power of negotiation.

3.3. Customer service

Purpose: The purpose is to manage or resolve your request or request.

Legal basis: Contract and legitimate interest.

Retention periods: We will treat your data for as long as necessary to meet your request or request, keeping them blocked until the prescription of possible liability actions.

3.4. Physical store customer registration

Main purpose: Sending personalized commercial communications by email (Newsletter, advertising information and brand news, promotions and exclusive offers, invitations to exclusive events, contests and raffles).

The accessory purpose is the elaboration of profiles and marketing, in order to send you communications adapted to your interests.

Legal basis: Main purpose (consent) and accessory purpose (legitimate interest).

Retention periods: The personal data you provide will be kept as long as you do not request your cancellation, since until then we will understand that you are still interested in receiving our communications.

3.5. Acceptance of Cookies on the web pages of www.ecoalf.com. You will find additional information in our Cookies Policy.

4.- Who is the recipient of your data?

4.1. Data communication.

The personal data processed is only communicated to third parties, in compliance with legal obligations.

4.2. Treatment Managers.

ECOALF will have the collaboration of third-party service providers that may have access to your personal data and that will process said data in the name and on behalf of the Company, as a result of their provision of services. ECOALF follows strict criteria for the selection of service providers in order to comply with its data protection obligations, and undertakes to sign the corresponding data processing contract with them.

Specifically, ECOALF will contract the provision of services by third-party providers who carry out their activity, by way of example and not limitation, in the following sectors: logistics services, legal advice, supplier approval, multidisciplinary professional service companies, related companies with maintenance, technology service providers, IT service providers, physical security companies, instant messaging service providers, infrastructure management and maintenance companies and call center service companies.

For service efficiency, some of the aforementioned providers may be located in territories outside the European Economic Area that do not provide a level of data protection comparable to that of the European Union, such as the United States. In such cases, we inform you that we transfer your data with adequate guarantees and always keeping your data secure, by signing the Standard Contractual Clauses approved by the Commission, whose content you can consult at the following link: https://ec .europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contractstransfer-personal-data-third-countries_en.

4.3. Co-responsibility in the processing of customer data.

ECOALF customers can register through the network of own stores located in Spain, as well as through own stores located in Germany. For these purposes, it is expressly stated that in said case there is co-responsibility in the treatment, with the company Ecoalf Germany GmbH with address at Alteschönhauser Str. 5 - 5a, 10119, Berlin, Germany, commercial registration number ME 39/2017 and with tax identification number No. 30/271/50289.

The Co-responsibility of the treatment indicates that both the person in charge of the treatment and the co-responsible, have regulated, treat and protect, jointly, the personal data.

4.4. Security measures.

ECOALF uses information security techniques such as firewalls and access control procedures, all with the aim of preventing unauthorized access to data and guaranteeing their confidentiality. To achieve these purposes, the user accepts that ECOALF obtain data for the purposes of the corresponding authentication of access controls.

Additionally, any transaction made through ECOALF is carried out through secure payment systems. Confidential payment data is transmitted directly and in encrypted form (SSL) to the corresponding entity.

ECOALF states that it has adopted all the necessary technical and organizational measures to guarantee the security and integrity of the personal data it processes, as well as to prevent its loss, alteration and/or access by unauthorized third parties.

5.- What are your rights when you provide us with your data?

The rights that assist you for the processing of personal data in relation to ECOALF are:

Right to request access to your personal data
Right to request rectification or deletion
Right to request the limitation of your treatment
Right to data portability
Right to object to treatment
Right to opt out of automated decisions, including profiling

6.- What does the right of access consist of?

You will have the right to obtain confirmation of whether or not personal data concerning you is being processed, and to the following information: the purposes of the treatment; the categories of data that are processed; the recipients or categories of recipients to whom they have been communicated or will be communicated; if possible, the expected period of conservation of the personal data or, if not possible, the criteria used to determine this period.

In these cases, we will provide you with a copy of the personal data being processed. In addition, when you request it by electronic means, the information will be provided in a commonly used electronic format.

To exercise the right of access, send an email to: gdpr@ecoalf.com or send a letter to the Data Protection Department, with address at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

7.- What does the right of rectification consist of?

You will have the right to obtain the rectification of inaccurate personal data that concerns you, for this purpose. You will have to accompany, when necessary, the supporting documentation of the inaccuracy or incompleteness of the data object of the treatment.

To exercise the right of rectification, send an email to: gdpr@ecoalf.com or send a letter to the Data Protection Department, with address at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

8.- What does the right of suppression consist of?

You will have the right to obtain the deletion of the personal data that concerns you when one of the following circumstances occurs: that they are not necessary in relation to the purposes for which they were collected or processed; that you withdraw your consent and the treatment is not based on another legal basis; that you oppose the treatment and other legitimate reasons for the treatment do not prevail; that have been illicitly processed.

To exercise the right of suppression, send an email to: gdpr@ecoalf.com or send a letter to the Data Protection Department, with address at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

9.- What does the right to limitation of processing consist of?

You will have the right to obtain the limitation of data processing when any of the following conditions are met:

a) when you have challenged the accuracy of your personal data, during the period that allows the person responsible for the file to verify the accuracy of the same;
b) in the event that you consider that the treatment is unlawful and the person responsible for the file has opposed the deletion of personal data and request instead the limitation of its use;
c) that the person responsible for the file no longer needs the personal data for the purposes of the treatment, but you need them for the formulation, exercise or defense of claims;
d) in the event that you have objected to the treatment, while verifying whether the legitimate reasons of the person responsible for the file prevail over yours.
When you have obtained the limitation of treatment in accordance with this section, you will be informed by the person responsible for the file.

To exercise the right to limit processing, send an email to: gdpr@ecoalf.com or send a letter to the Data Protection Department, with address at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

10.- What does the right to data portability consist of?

You will have the right to receive the personal data that concerns you, that you have provided to the data controller, in a structured, commonly used and machine-readable format, and to transmit them to another data controller when: the processing is based on consent, and done by automated means.

By exercising your right to data portability, you will have the right to have personal data transmitted directly from controller to controller when technically possible.

The right to portability will not extend to the data that the person responsible for the file would have inferred from data derived directly from the use by said person in charge of the services provided.

To exercise the right of portability, send an email to gdpr@ecoalf.com or send a letter to the Data Protection Department, with address at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

11.- What does the right of opposition consist of?

You will have the right to oppose the processing of data that concerns you, at any time. In the event that you exercise this right, the person responsible for the file will stop processing your personal data, unless we prove compelling legitimate reasons for the processing to prevail over your interests, rights and freedoms, or for the formulation, exercise or defense of claims. .

To exercise the right to object, send an email to: gdpr@ecoalf.com or send a letter to the Data Protection Department, with address at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

12.- What is the right not to submit to automated decisions, including profiles?

You will have the right not to be the subject of a decision based solely on automated processing, including profiling, which produces -said decisions- legal effects or affects you in a similar way; unless:

-said decision is necessary for the conclusion or execution of a contract,

- is authorized by law or

- is based on consent.

To exercise the right not to submit to automated decisions, send an email to: gdpr@ecoalf.com or send a letter to the Data Protection Department, with address at Calle Gran Vía 1, 2º Izq, 28013 Madrid.

Additionally, we inform you that you can contact the Spanish Data Protection Agency to obtain information.