PRIVACY POLICY
https://bylorenzoquinn.com
QUINN CREATIONS, S.L., informs users of the website about its policy regarding the processing and protection of personal data of users and customers.
And guarantees at all times full and complete compliance with the obligations set forth in the regulations on data protection and information society services: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSIce).
RESPONSABLE FOR THE PROCESSING
QUINN CREATIONS, S.L.
C.I.F.: B64615818
Adress: GAVÀ PARK – C/ DE LA CREATIVIDAD, 11 – 08850 – GAVÀ (BARCELONA)
Registered in the Barcelona Mercantile Registry, Volume 39801, Folio 144, Page B-351732. 1st entry.
Phone number: +34 936 590 072
Email address: info@bylorenzoquinn.com
PURPOSES OF DATA PROCESSING
The data provided by the User is used for various purposes, which are listed below:
| Purpose of processing | Legal basis for processing |
|---|---|
| Manage enquiries or any type of request made through the contact forms available on the website. | Legitimate interest of the Company to respond to requests for information via the website. Consent expressly given at the time of data collection via web forms. |
| Sending newsletters, commercial communications, and promotions. | Consent expressly given at the time of data collection via web forms. |
| Create and manage your registration as a User. | Consent expressly given at the time of data collection via web forms. |
| For the development, fulfilment, and execution of the sales or service contract you have entered into through our website. | Consent expressly given at the time of data collection via web forms. |
| We believe that we have a legitimate interest in carrying out the necessary checks to detect and prevent possible fraud when you make a purchase. | Execution of a contract. |
| Perform accounting management. | Execution of a contract. |
| Comply with current tax obligations. | Compliance with legal obligations that apply to us. |
| Manage incidents and website maintenance. | Legitimate interest of the Company. |
DATA RETENTION PERIOD
| Purpose of processing | Retention period |
|---|---|
| Manage enquiries or any type of request made through the contact forms available on the website. | We will process your data for as long as necessary to respond to your request or enquiry. |
| Sending newsletters, commercial communications, and promotions. | We will process your data until you unsubscribe. |
| Create and manage your registration as a User. | We will process your data for as long as you remain a registered user (i.e. until you decide to unsubscribe). |
| For the development, fulfilment, and execution of the sales or service contract you have entered into through our website. | We will process your data for the time necessary to manage the purchase of the products or services you have acquired, including any returns, complaints or claims associated with the purchase of the particular product or service. |
| Perform accounting management. | We will process your data for the time necessary to comply with the applicable statutory limitation periods. |
| Comply with current tax obligations. | We will process your data for the time necessary to comply with the applicable statutory limitation periods. |
| Manage incidents and website maintenance. | We will process your data for the time necessary to comply with the applicable statutory limitation periods. |
DATA RECIPIENTS
In order to fulfil the purposes indicated in this Privacy Policy, we need to give access to your personal data to third parties who support us in the services we offer you (Data Processors), namely:
- Financial institutions
- Technology service providers
- Suppliers and partners providing logistics, transport and delivery services
- Suppliers and collaborators of services related to marketing and advertising.
Those responsible for processing data for the execution of a contract or provision of a service to the Data Controller, thereby following their instructions at all times and ensuring the same levels of security.
COOKIES
With regard to the use of cookies and other tracking technologies, please refer to this Website’s Cookie Policy. In this case, the legal basis for the processing of your data is your consent given by accepting the loading of cookies in your browser.
USER RIGHTS
The user has the right to:
- Request access to your personal data being processed and receive this information in writing by the requested means.
- Request the rectification of inaccurate personal data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purpose for which it was collected.
- Request the restriction of the processing of your data.
- Object to the processing of your personal data where appropriate, in which case your data will no longer be processed except for legitimate reasons.
- Right to the portability of your personal data when the processing is based on consent and is carried out by automated means. The data will be provided in a structured, commonly used and machine-readable format.
- Right to withdraw consent given.
- Right to lodge a complaint with the Spanish Data Protection Agency.
The User may exercise the aforementioned rights by writing to the Controller’s postal or email address, proving their identity with a scanned copy of their ID card or equivalent document, and specifying the right they wish to exercise.
SOURCE OF DATA
Personal data will be provided by the interested party on a completely voluntary basis. Failure to provide certain data or answers to questions that may be asked during the registration process or in the various electronic forms presented to the User may make it impossible to access certain services for which personal data is essential. In such cases, the Data Controller will inform the User of the mandatory and/or necessary nature of providing personal data for the service to function.
The Data Controller assures you of the confidentiality of your personal data and guarantees its security, taking the necessary measures to prevent its alteration, loss, unauthorised processing or access.
INFORMATION PROVIDED BY THE USER
Minors under the age of 18 may not disclose their personal data without the prior consent of their parent and/or legal guardian.
By entering their details in the contact forms or download forms, Users expressly, freely and unequivocally accept that their details are necessary for the Data Controller to respond to their request, and that the inclusion of details in the remaining fields is voluntary.
The User guarantees that the personal data provided is accurate and is responsible for communicating any changes thereto.
All data requested through the website is necessary for the provision of an optimal service to the User. If all the data is not provided, it cannot be guaranteed that the information and services provided by the Data Controller will be completely tailored to your needs.
SAFETY MEASURES
In accordance with current regulations on personal data protection, the Data Controller complies with all provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, which are processed in a lawful, fair and transparent manner in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The Data Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of Users and has provided them with the appropriate information so that they can exercise them.
SECURITY BREACHES
The Data Controller shall report any security breach affecting the database used by this website, or affecting any of our third-party services, to each and every person whose data may have been affected, and to the authorities, within 72 hours of detecting the breach.
APPLICABLE LAW AND JURISDICTION
It reserves the right to bring any civil or criminal actions it deems necessary for the improper use of the Website and its Content.
The relationship between the User and the Data Controller shall be governed by the regulations in force and applicable in Spain. Should any dispute arise in relation to the interpretation and/or application thereof, the parties shall submit their disputes to the ordinary courts, submitting to the judges and courts that correspond in accordance with the law.