Privacy Policy
1. GENERAL INFORMATION In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter "GDPR") and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter "LOPDGDD"), we provide you with the following information on the processing of your personal data.
Data controller:
Name: Viktória Szabó
Address: Lugar de Oliveira 15. Corcubión 15130. Coruña
E-mail: info@viktoriaszabo.art
Telephone: 0034 644 74 95 79
2. DATA COLLECTED AND PURPOSE OF PROCESSING We collect and process the following personal data for the following purposes:
Identification data (name, surname, email, telephone): For order management and customer service.
Shipping and billing addresses: For the delivery of purchased products and issuing of invoices.
Payment detailsUsed exclusively by secure payment platforms (Stripe, PayPal or others), without us having access to your bank details.
Browsing data and cookiesTo improve the user experience and perform statistical analysis.
3. LEGAL BASIS FOR PROCESSING We process your personal data on the following legal bases:
Execution of a contract: For the management of orders and shipments.
User consent: For the sending of commercial communications and the use of cookies.
Legitimate interestTo ensure the security of the website and to improve the services offered.
Compliance with legal obligationsTo comply with tax and accounting regulations.
4. DATA RETENTION Personal data will be retained:
For the duration of the contractual relationship and for as long as necessary to fulfil legal obligations (up to 5 years in the case of invoices).
Until the user requests the deletion of his or her data in cases where the processing is based on consent.
5. RECIPIENTS OF THE DATA We do not share your personal data with third parties, except in the following cases:
Courier and transport companies for the delivery of orders.
Secure payment platforms.
Tax authorities and public bodies in compliance with legal obligations.
6. USER RIGHTS As a user, you have the following rights over your personal data:
AccessKnow what data we process.
Correction: Modify incorrect or incomplete data.
SuppressionRequest the deletion of your data when they are no longer needed.
OppositionRefuse to have your data processed for certain purposes.
Treatment limitationRequest to restrict the use of your data.
PortabilityReceive your data in a structured format for transfer to another data controller.
To exercise these rights, you can contact us at [Contact e-mail], enclosing a copy of your identity document.
7. SECURITY MEASURES We take appropriate technical and organisational measures to ensure the security of your personal data and to prevent unauthorised access, alteration, loss or destruction.
8. USE OF COOKIES We use cookies to improve your experience on our website. You can find more information in our [Cookie Policy].
9. MODIFICATIONS TO THE PRIVACY POLICY We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on our website and will be effective upon posting.
10. CONTACT If you have any questions about this Privacy Policy, you can contact us via email at [Contact email].
Date of last update: 06.04.2025.
Data Retention and Data Security
We are committed to protecting the privacy and integrity of the personal data we collect. Our retention policy and the security measures in place are detailed below:
Data Retention
- Conservation Period:
The data will be kept for the time strictly necessary to fulfil the purposes for which they were collected, such as the provision of our services, the maintenance of a commercial relationship and the fulfilment of legal obligations. - Criteria for Determination:
The retention period is set according to the relevance of the information to the contractual relationship, the legitimate interest of keeping accurate records and compliance with current regulations. At the end of this period, the data will be securely deleted or anonymised.
Data Security
- Technical and Organisational Measures:
We have implemented various measures to ensure the security of your data, such as:- Encryption: We use encryption protocols to protect information during transmission and storage.
- Access Controls: Strict access controls are applied to ensure that only authorised personnel can access information.
- Audits and Updates: We conduct regular audits and update our security systems to adapt to industry best practices and regulations.
These actions are designed to protect your data against unauthorised access, alteration, disclosure or loss. We are committed to maintaining a secure environment that ensures the integrity and confidentiality of information.