PERSONAL DATA PROTECTION POLICY

Who is responsible for handling your personal data?

Identity: DEPORVILLAGE, S.L. (“DEPORVILLAGE”)

Business Address:  Carrer Les Tines nº32, 08272 Sant Fruitós de Bages (Barcelona)

C.I.F no.: B- 65272742

Email:  [email protected]

Telephone: (+34) 902.732.338

For what purpose do we handle your personal data?

We process  the information provided by the user  for the following purposes:

• Manage the online purchase of the products listed on our Website/App including the management of product shipments and returns.

• Manage requests for information made through the Website/App, through the channels established on the web (e.g. form or chat).

• To send you communications about news or commercial offers from DEPORVILLAGE about products sold on our website that may be of interest to you (also via e-mail).

• If you have given your consent, to send you commercial communications from third parties with whom DEPORVILLAGE has signed a sponsorship agreement in the sectors shown in this link (1).

• In order to trace the activity and profile the customers on the basis of the purchases they have made and their browsing behaviour on the website/app, the legal basis will be the legitimate interest.

• Manage requests for complaints and claims from users through the Website/App for resolution.

• Prevention and detection of fraud, in order to comply with applicable regulations on the prevention of money laundering and financing of terrorism.

• To manage your participation in the draws organised on our social networks.

• In case you request means of payment that require it, to carry out evaluations of patrimonial solvency.

For how long will we retain your data?

The personal data provided on the basis of the consent of the interested party will be stored until the latter revokes such consent.

However, the personal data of users who contract products through the Website / App, will be kept for a maximum period of six years in accordance with current regulations.

What is the legitimation for handling your data?

• For the management of the requests made through the Website/App and, where applicable, the online purchases made including the management of product shipments and returns, the legitimate basis shall be the execution of a contract.

• For the prevention and detection of fraud, the legal basis for processing shall be the legitimate interest.

• For the sending of commercial communications about news or offers from third party sponsors, the consent of the interested party will be the basis for legitimizing such communications. However, when the user is a Deporvillage customer, the sending of commercial communications about DEPORVILLAGE’s own products will be protected by the legitimate interest of DEPORVILLAGE.

• In order to trace the activity and profile the customers on the basis of the purchases they have made and their browsing behaviour on the website/app, the legal basis will be the legitimate interest.

• In order to evaluate the creditworthiness of the user through the payment platforms that DEPORVILLAGE offers on the Website/App, it will be the legitimate interest to prevent fraud and the fulfilment of legal obligations by the financial service providers with which Deporvillage has agreements.

• To manage requests for information, complaints and/or claims under the terms of the consent given when the information is requested.

In the forms of the Web Site / App, it will be necessary for the user to fill in the fields marked as “compulsory”. Failure to provide all the personal data required by DEPORVILLAGE may result in incomplete completion of the required application or, where appropriate, the purchase made, and the impossibility of receiving commercial communications.

The user must inform DEPORVILLAGE of their current personal details so that the information contained in their files is up to date and free of errors.

The user has the right to revoke his or her consent at any time without retroactively affecting the processing of personal data carried out up to that time.

To which recipients will your data be communicated?

We may share your data with the above-mentioned sponsors to send you electronic commercial communications that may be of interest to you.

Likewise, for the purchase of any product through the Website / App, the user’s data may be transferred to courier and logistics companies such as ASM, DHL EXPRESS, PAACK, GLS, MONDIAL RELAY, COLISSIMO, POSTE ITALIANA or PUNTO PACK, in order to carry out the delivery and/or return of the products and companies or payment platforms such as ADYEN, PAGANTIS or PAYPAL.

In the case of return of products purchased through the Website / App, DEPORVILLAGE may communicate the data of users to BANCO SANTANDER, CAIXABANK, DEUTSCHE BANK, BANKIA or BANCO SABADELL ATLANTICO so that they can make the refund of the order.

Are there international data transfers?

For commercial communications, DEPORVILLAGE has contracted the service with MAILCHIMP under the EU-US Privacy Shield agreement available at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active and SALES FORCE under the EU-US Privacy Shield agreement available at https://www.privacyshield.gov/participant?id=a2zt0000000KzLyAAK&status=Active.

For the management of customer service communications, DEPORVILLAGE has contracted the service with ZENDESK under the EU-US Privacy Shield agreement available at https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active.

What are your rights when you provide us your personal data?

Any user has the right to obtain confirmation as to whether  DEPORVILLAGE is processing personal data concerning them.

Users may exercise their right of access to personal data, as well as request the rectification of inaccurate data or, where appropriate, request their cancellation or deletion when the data is no longer necessary for the purposes for which it was collected.

Users may also request the limitation, portability and opposition of the processing of their data, under certain circumstances and for reasons related to their particular situation.

The user may exercise the aforementioned rights, under the terms and conditions provided for in current legislation, at the registered office of DEPORVILLAGE or by sending an e-mail to [email protected].

In the event that the response you receive is not satisfactory or if you wish to make a complaint or receive more information about any of these rights, you can refer to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (www.agpd.es  – C/ Jorge Juan, 6 de Madrid).

(1) Government service, health service, telecommunication and communication service such as Criteo, Google, Facebook or Instagram, bank service, legal service, catering, tourism and commerce, transport and security, financial, sanitary, food, drinks, education, chemistry, mechanical and textile companies#