Privacy Policy
For the LUCIELA S.R.L. team, owner of this website, acting under the trade name LUCIELA.EU, the protection of personal information, its security and confidentiality is of extreme importance. We therefore recommend that you carefully read the following Privacy Notice, since the information that you, as a USER, provide through this website https://luciela.eu is protected under the terms of this Privacy Policy.
SUMMARY TABLE OF INFORMATION
BASIC INFORMATION ON DATA PROTECTION | |
Entity | LUCIELA S.R.L. / BE0769341741 |
Purposes | Manage your registration as a USER of the web Display the products offered Execution of the purchase contract Management and response to online queries Sending of promotions and advertising on the products offered Analysis of usability and quality of the web For more information continue reading. |
Legitimation | Consent of the interested party and execution of contracts of sale of the product. For more information continue reading. |
Recipients | No data will be transferred to third parties, unless legally required. Analytical results may be transferred at the request of installed tools. For more information, please consult our “Cookie Policy“. |
Rights | Access, rectify and delete data, limit and oppose data processing and data portability and withdraw consent. |
Additional information | Additional detailed information on data protection can be found by continuing to read this notice. |
WHAT DOES THE PROCESSING OF PERSONAL DATA MEAN?
The operations, managements and technical procedures that are carried out in an automated or non-automated way and that make possible the collection, storage, modification, transfer and other actions on personal data, are considered as personal data processing.
WHAT DOES THE USE OF THIS WEBSITE ENTAIL?
Prior to sending any request for information through any email address on the web https://luciela.eu the USER must read and accept this Privacy Policy, so that he/she gives his/her unequivocal, free, specific and informed consent to the processing of personal data for the purposes indicated. Our internal mechanisms prevent the sending of personal data without having clicked the express consent.
The aforementioned express consent implies the authorisation of the processing of your data by LUCIELA.EU in the terms set forth in this Privacy Policy, as well as those responsible for the treatment of the data and with whom LUCIELA.EU maintains a contractual relationship and compliance control.
WHO IS THE DATA CONTROLLER?
-
- Responsible for data processing: LUCIELA S.R.L.
- C.I.F.: BE0769341741
- Address: Rue du Panama 31, 6250 Aiseau-Presles, Belgium
- Email: hello@luciela.eu
LUCIELA.EU guarantees the confidentiality and privacy of personal data collected, having adopted security measures to prevent alteration, loss, treatment or unauthorised access and ensure the integrity and security of personal data, in accordance with the provisions of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, which develops the Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantees of Digital Rights, providing for this purpose the necessary technical means to prevent any alteration, loss, unauthorised access or misuse of the data processed, according to the nature of the data, the state of technology, and the risks to which they are exposed.
FOR WHAT PURPOSE WILL WE USE THE DATA COLLECTED?
LUCIELA.EU informs you that the personal data you provide through this website, including IP address, will be processed for the following purposes:
- To provide the requested product or service adequately and with all the guarantees.
- To respond to inquiries about our products, our sales and return policies or any other doubt caused during the sales process, made through any of the communication mechanisms offered on this website.
- To respond and send information to the data subject about our Privacy Policy or in response to a request to exercise the Data Protection rights.
- To manage our social networks with respect to the data of the people who become followers. In this regard, the processing of data is governed by the provisions of this Privacy Policy and the terms and conditions, privacy policies and access regulations specific to each social network.
- To comply with the relevant legal obligations, as well as prevent fraud.
We will not use your information for any other purpose not expressly stated in this Privacy Policy, nor will we send you additional information not requested with your express consent.
WHAT IS THE LEGITIMACY OF THE DATA PROCESSING?
The legitimacy of the various processing activities carried out by LUCIELA.EU are:
-
- For the purpose of selling the product, the processing is based on the execution of a contract between the parties.
- For the purpose of customer service, the processing is based on the consent of the data subject.
- For marketing and commercial management purposes, the processing is based on the consent of the data subject.
- For purposes related to the fulfillment of legal obligations, the processing is based on the legal basis provided for this purpose in the GDPR.
DO WE SHARE DATA?
LUCIELA.EU undertakes not to transfer data to third parties without having obtained the express consent of the USERS. However, it may transfer metrics and analytics requested by software tools installed on the website owned by other than LUCIELA.EU, and some of these services may be owned by third parties residing outside the European Union (Google, WordPress, etc.). For more information please see our “Cookie Policy“.
LUCIELA.EU tries and usually uses secure tools whose servers are preferably located in a member state of the European Union, or comply with European legality according to the guidelines and recommendations of the Spanish Data Protection Agency, the European Commission and the Community reference agreements.
WHAT IS OUR POLICY ON DATA PROCESSORS?
At LUCIELA.EU we only share personal information with third parties in order to provide services or conduct business operations on the terms described in this Privacy Policy or when we believe that the law permits or requires it. Most of the time, what we share with third parties is non-personal, anonymous or statistical data. When we share personal information, we do so in accordance with the privacy and data security requirements previously informed in each case and under the signing of private data processor contracts, which ensures that our suppliers comply with the appropriate security measures for full data protection and legal compliance.
WHAT DO WE DO WITH THE DATA ON SOCIAL NETWORKS?
LUCIELA.EU has profiles on the social networks Instagram, Facebook and Pinterest, with the main purpose of publishing and disseminating information about the products offered through the website LUCIELA.EU, interact with USERS and serve as a channel of attention and social interaction.
In the event that you access this website using an application that connects a social network with this website, you will be authorising the social network to share some data with LUCIELA.EU.
It is important for you to know that if you have geolocated your social media accounts, your location information when sharing on social media will be visible to third parties with whom you share or share your information.
You can obtain more information about the use of your data on these social networks by consulting the individual privacy policy of each one of them.
WHAT RIGHTS DOES THE USER HAVE?
HOW ARE RIGHTS EXERCISED?
How can you exercise your rights? At any time the USER may withdraw their consent and exercise their rights of access, rectification, deletion, limitation, opposition and portability provided for in the Data Protection Regulation 679/2016 and LO 3/2018 on Data Protection and Guarantee of Digital Rights, by sending an email to hello@luciela.eu or by sending postal mail addressed to Rue du Panama 31, 6250 Aiseau-Presles, Belgium.
WHAT DO WE NEED TO VERIFY YOUR IDENTITY?
The USER must attach a copy of his/her national identity card, passport or other valid document that identifies him/her.
IS THERE A MODEL FOR THE EXERCISE OF RIGHTS?
You can request our model by e-mail or by coming to our headquarters (both addresses previously described).
You can also make use of the models and forms for the exercise of these rights available on the website of the Spanish Data Protection Agency, which can be found at the following address:
http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/principales_derchos/index-ides-idphp.php
WHAT DO THESE RIGHTS CONSIST OF?
-
- Right to information: the data subject must be previously informed in an express, precise and unequivocal manner of, among others, the existence of a file, the possibility of exercising his/her rights and the data controller.
- Right of access: allows the citizen to know and obtain free of charge information about their personal data subject to processing.
- Right of rectification: this right is characterised because it allows correcting errors, modifying data that turns out to be inaccurate or incomplete and guaranteeing the accuracy of the information being processed.
- Right of cancellation: allows the deletion of data that proves to be inadequate or excessive without prejudice to the duty of blocking contained in the LOPD.
- Right of objection: the right of objection is the right of the data subject not to have his or her personal data processed or to have it stopped.
- Right of limitation: the USER has the right to decide which personal data he/she does not want to be processed in the future, being able to exercise this right when he/she has previously challenged the accuracy of the data or when the processing is unlawful and instead of exercising the deletion of the data he/she decides to limit it for future processing. In case of restriction of processing, the restriction may be lifted if there is consent of the data subject, the possibility that the processing affects the protection of the rights of another natural or legal person, judicial proceedings that justify it, or there is an important reason of public interest based on the legislation in force.
- Right of portability: you have the right to receive the personal data provided or for LUCIELA.EU to transmit them to another controller, in a structured format for common use and machine readable, provided that the processing is carried out by automated means and the processing is based on the consent that one day the USER provided for one or more specific purposes, or for the performance of a contract to which he/she was a party. The right to portability shall not apply when the transmission is technically impossible, nor when it may adversely affect the rights and freedoms of third parties, nor when the processing has a public interest mission based on the legislation in force.
- Right to file a complaint with the Supervisory Authority: you have the right to file a complaint with the Spanish Data Protection Agency (supervisory authority in Spain) through the following link: https://www.aepd.es/
OTHER RIGHTS
-
- Right to be forgotten: removal of names from the search engine results list.
- Advertising rights: right of exclusion from telephone directories, right not to receive unwanted advertising, rights of subscribers and users of telecommunications services.
WHAT SECURITY MEASURES DO WE HAVE IN PLACE FOR THE PROCESSING OF PERSONAL DATA?
At LUCIELA.EU for the protection of personal data of our USERS we have security protocols and implementation of appropriate technical and organisational measures taking into account the scope, context and purposes of processing, as well as the risks of varying likelihood and severity to the rights and freedoms of data subjects, in an effort to ensure the confidentiality, integrity, availability and resilience of systems and processing services.
In addition, we take care to ensure the correct choice of your data processors, in compliance with the Data Protection regulations.
In particular LUCIELA.EU has the following measures:
- Privacy and security risk assessment strategy and disaster recovery plan designed to safeguard the continuity of our services and to protect our staff and data.
- Implementation of Technical and Organizational Security Measures: we apply the technical and organisational measures to the functions described in this Privacy Policy.
- Incident log: LUCIELA.EU staff use the incident log to report any incident related to the security of information and personal data included in the files with personal data they process.
- Regular training and sensitisation of our staff and partners to avoid errors in data management.
- Identification and authentication system: to give access only to the necessary data and to the specific profile that uses it.
NOTIFICATION OF PERSONAL DATA SECURITY BREACHES
In case of a breach of security of personal data, provided that such security breach is not unlikely to constitute a risk to the rights and freedoms of individuals, LUCIELA.EU shall notify the Spanish Data Protection Agency within 72 hours after the incident has been recorded, describing the nature of the violation, the possible consequences that may arise and the measures taken or proposed to remedy the security breach; and if possible, the categories and the approximate number of data subjects and data affected.
In addition, LUCIELA.EU will notify data subjects as soon as possible when the breach of security of personal data is likely to involve a high risk to the rights and freedoms of natural persons, describing the possible consequences that may arise and the measures taken or proposed to remedy the security breach.
FOR HOW LONG DO WE KEEP PERSONAL DATA?
Personal data provided to LUCIELA.EU will be deleted once the relevant period for the exercise of claims has elapsed. In cases where the treatment is based on the consent of the person concerned, the data will be retained until you request cancellation or deletion, or withdraw your own consent, or the data are no longer necessary to serve the purpose for which they were collected.
COOKIE POLICY
In our “Cookie Policy” we inform you that this website LUCIELA.EU may use cookies (small information files that the server sends to the computer of the USER accessing this website) to perform certain functions that are considered essential for the proper functioning and display of the site, to share on social networks.
The IP address is considered personal data, but LUCIELA does not associate IP addresses, or other data yielded by the use of cookies, or the results of metrics, with personally identifiable information, or to collect personal information, although occasionally it may serve to direct advertising or segment USERS to whom to direct it.
It is necessary that, as a USER, you know that we use Internet tools and platforms that install cookies that do not depend on us, so it is possible that the owners of such tools use such data for other uses.
For this reason, it is advisable for you to read our “Cookie Policy” to understand which cookies are of a proprietary nature, which are third-party cookies and which are permanent, temporary or session cookies.
PRIVACY OF MINORS
Pursuant to Article 7 of Law 3/2018 of December 5, 2018, on the Protection of Personal Data and guarantee of digital rights, minors under 14 years of age must not transfer their personal data to LUCIELA.EU without the prior consent of their parents or guardians.
In case LUCIELA.EU detects USERS who may be under 16 years, we reserve the right to request a copy of their ID or equivalent document or, where appropriate, the authorisation of parents or guardians, ceasing delivery of any services to them in case of failure to prove compliance with this requirement or lack of response.
USER RESPONSIBILITY
As a USER you agree and warrant that the personal data you provide are truthful, being solely responsible for any loss or damage, direct or indirect, that may be caused to LUCIELA.EU as responsible for this website or third parties, if you fill out any form with false information of your own or of third parties causing deception, damage or injury.
Please inform us of any changes that may occur in the data provided by sending an email to hello@luciela.eu.
At LUCIELA.EU we store the USER’s personal data on secure servers, protected against the most common types of attacks and located in Spain. However, since there is no invulnerable technology, the USER must also use means at their disposal to maintain the level of security of their data, using strong passwords, the periodic modification of their passwords, avoiding using the same password in different accounts, as well as avoiding taking note of them in any physical or unencrypted media.