This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from https://casapletorica.com (the “Site”). This Privacy Policy sets out CASA PLETÓRICA’s commitment to your privacy. We value the personal information we collect from you. We want to make sure that we do not use your data in a way that you wouldn’t expect. Our Privacy Policy tells you how we use your data and how you can control the use of your data.
By doing business with CASA PLETÓRICA you expressly agree to the collection and use of your information for the purposes set out in this privacy policy.
CASA PLETÓRICA is a Spanish company that sells artisanal products. We are a registered company NIF B67879833 in Madrid, Spain.
We are committed to protecting personal data that you provide us. Please read this privacy policy carefully as it contains important information about our use of your information. It explains what information we collect about you, and how we use it, including when we might disclose it to third parties.
For this purpose, the data controller is PLETÓRICA DESIGNS, S.L. This website ensures the respect for the guarantees, rules and procedures provided for in the legal system to protect the rights to personal and family privacy and the protection of personal data:
Spanish Organic Law 3/2018, of December 5th, for the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27th, 2016 regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (GDPR).
Spanish Law 34/2002, of July 11th, on services of the information society and electronic commerce (LSSI).
The personal data that may be collected will be treated confidentially and will be incorporated into the corresponding treatment activity owned by the website.
The collection and use of data is essential to be able to offer you our services. However, you should know that we are only going to request information that is strictly adequate, relevant and limited to what is necessary for the purposes described below.
The personal data that we request helps us to manage, provide and improve the services you have requested, as well as to manage the queries you send us. These are the data that we can request, its purposes and regulation framework:
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
“Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, click here.
“Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
“Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information.”
Our shop is hosted with Webflow Inc and this platform allows us to sell products and services. Your payment information is then safely kept by the payment gateways available on our site: PayPal, Stripe and Apple Pay.
Your payment data will only be kept as long as it's necessary to process the transaction. Your data is encrypted through Secure Socket Layer technology (SSL). Please check each provider's terms and conditions for more details on data protection. Follow these links for Paypal, Stripe and Apple Pay policies.
When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.
We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, and advertising networks) and may receive information about you from them.
For communication purposes such as: name, surname, address, telephone, email, identification document number.
The legitimacy for the treatment of this data is CONTRACT-Art. 6.1b of the RGPD: the treatment is necessary for the execution of a contract in which the interested party is a party.
*Period of conservation of this data: Generally, we will retain your personal data for the period necessary to provide you with our services. This includes data that you or others have provided us or data generated or inferred during our services.
Can be obtained because you voluntarily provide them to us, through our subscription form located on the web or through the contact form on the website.
These are the data that we can request: name, surname, address, telephone, email.
The legitimacy for the treatment of this data is CONSENT -Art. 6.1a of the RGPD: the interested party gave their consent for the processing of their personal data for one or more specific purposes.
The Period of conservation of this data: They will be kept indefinitely as long as the interested party does not request their deletion.
You can navigate through most of the website pages without providing any personal information, but in some cases this information is necessary to provide you with the electronic services that you request.
The purpose of these data is:
Improve the user experience of the web.
Maintain the security of the web by monitoring malicious activities and detecting fraud.
Answer your questions through the contact questionnaire.
Create an account.
Create a profile that helps us get more out of our services.
Manage your purchases.
** Keep you informed about news, events or promotions about our services that interest you.
These are the data that we can request:
Contact: name, surname, address, telephone, email, identification document, signature.
Financial: account number, credit card.
Technological data: time spent on the web, pages visited, language preferences, IP address, device type, browser type operating system, screen resolution.
The legitimacy for the treatment of this data is CONSENT -Art. 6.1a of the RGPD: the interested party gave their consent for the processing of their personal data for one or more specific purposes.
* The Period of conservation of this data: Generally, we will retain your personal data for the period necessary to provide you with our services. This includes data that you or others have provided us or data generated or inferred during our services.
As part of the registration process for our newsletter, we collect personal information. We use that information for a couple of reasons: to tell you about stuff you’ve asked us to tell you about; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don't rent or trade email lists with other organizations and businesses.
We use a third-party provider, Mailchimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see Seguno’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing us at hello@casapletorica.com
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
We process the data you provide in order to perform a contract or where there is a contractual relationship between us, in compliance with Article 6 1 b) of the EU General Data Protection Regulation (GDPR) which states that data can be processed in relation to a contract or when someone is thinking about entering into a contract. Where you are not in contract with us the legal basis for us to process your data is ‘consent’ Art 6 1 a). Other legitimate reasons that make it legal for us to process your data are our legitimate interest and compliance with legal obligations.
When you contact us through the form available on our website, by email, post, fax or telephone, the data you have been requested to provide are necessary to process your request for information, complaints, claims, comments or suggestions that you may wish to make to CASA PLETÓRICA and in order to provide you with the most appropriate response or solution and communicate it to you.
We will not elaborate commercial profiles, nor make automated individual decisions based on your personal data.
When you use our website you will be able to access this privacy policy and our terms and conditions which can be found in the footer area of our website.
We may use the information collected to personalize your experience on our website, to help you to log-in in future and to continue to use the website. Details of how we do this are included in the cookie section.
We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
Communicate with you
Screen our orders for potential risk or fraud
When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
When you submit your information your data will be retained as long as our commercial relationship lasts, or during the prescription period of legal and financial obligations so that we can manage and audit our business, or until you request the erasure of your data.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
* We may keep your personal information even after this need ends if necessary to comply with any legal obligation. The data would remain blocked for the time necessary to comply with the period established by the Law and then proceed to its elimination.
** You can choose not to receive our electronic communications, you can request it by sending an email to the website with the following subject "I do not wish to receive commercial communications".
The Site is not intended for individuals under the age of 18. We do not intentionally collect Personal Information from children. If you are the parent or guardian and believe your child has provided us with Personal Information, please contact us at the address below to request deletion.
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Webflow to power our online store —you can read more about how Webflow uses your Personal Information here.
We also use Google Analytics to help us understand how our customers use the Site —you can read more about how Google uses your Personal Information here. You can also opt-out of Google Analytics here.
We use Google Workspaces to manage email for communications with customers and to manage the contact form at hello@casapletorica.com. This service is run by Google LLC, located in the US. It follows the security agreement called Privacy Shield, in accordance with the requirements of the European Data Protection Committee. You can check their Privacy Policy here.
We use Mailchimp to provide our newsletter subscription. We collect the personal data about you that you choose to give us: contact email address, name and last name. By providing this information and subscribing to our newsletter, you agree to receive our communications via email. You’ll be able to opt out at any time using the unsubscribe link in the email. You can read more about how Mailchimp uses your Personal Information here.
We use Monto to help reach out via email to customers who have left items in the shop cart and would like to finish their purchase. You can read more about how Monto uses your Personal Information here.
We may use various advertising services and business tools on Facebook in connection with our Website. The services and tools we may use are summarized on Facebook’s website here. In connection with our use of these services and tools, Facebook may use cookies, web beacons, and other storage technologies to collect or receive information from the Website and elsewhere on the Internet and use that information to provide measurement services and target ads to you and others. One particular advertising service we use on Facebook is called Facebook Pixel. This service helps us (1) measure and track the results of our advertising on Facebook, and (2) better target our advertisements on Facebook to new potential users. In connection with this service we may provide your e-mail address to Facebook along with the e-mail addresses of our other users, and Facebook uses this information to find other Facebook users with similar demographics and interests as indicated in the profiles and activities on Facebook of our users generally, to help us better target our advertising efforts on Facebook to those other Facebook users. You can opt out of certain Facebook advertising features by visiting the Network Advertising Initiative’s Consumer Opt-Out and the Digital Advertising Alliance’s Consumer Assistance or by adjusting the privacy settings in your Facebook profile. Because those opt-outs, preference control pages and privacy settings are specific to the individual browser used to visit it or the individual Facebook profile, and because those opt-outs, preference control pages and privacy settings are not operated or controlled by us, we are unable to perform the opt-outs, set your preferences or adjust the privacy settings on your behalf.
We use reCaptcha, a service provided by Google in order to protect the security of the communications submitted through forms on our site and prevent spam. These are their Terms of Use and Privacy Policy.
We use Packlink Pro to manage our shipments to our clients. You can read more about the customer information that they require we share with them and their Privacy Policy here.
Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
If you choose a direct payment gateway to complete your purchase, one of these companies will store your credit card details: Stripe or Apple Pay. In any case, it will be encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only to the extent necessary to complete the transaction. After it's completed, your transaction information is deleted.
All direct payment gateways adhere to the standards set by PCI-DSS as outlined by the PCI Security Standards Council, a joint effort of brands such as Visa, MasterCard, American Express, and Discover.
PCI-DSS requirements help ensure the secure handling of credit card information from stores and their service providers.
For a clearer explanation, you may also want to read Stripe, PayPal and Apple Pay Terms of Service. When you provide them with your credit card information, that information is encrypted using Secure Socket Layer (SSL) technology and stored with AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, they all follow all PCI-DSS requirements and implement additional industry-accepted standards.
To make this site work properly, we sometimes place small data files called cookies on your device. Most big websites do this too.
A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another.
A number of our pages use cookies to remember:
if you have already replied to a survey pop-up that asks you if the content was helpful or not (so you won't be asked again)
if you have agreed (or not) to our use of cookies on this site
Enabling these cookies is not strictly necessary for the website to work but it will provide you with a better browsing experience. You can delete or block these cookies, but if you do that some features of this site may not work as intended.
The cookie-related information is not used to identify you personally and the pattern data is fully under our control. These cookies are not used for any purpose other than those described here.
You can control and/or delete cookies as you wish – for details, see aboutcookies.org. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
The website will not rent or sell personal information or share your personal information with any advertiser or ad networks for advertising without your explicit permission.
We may disclose personal data to the extent permitted or required under any enactment, by rule of law, order of the Court, as requested by other government law enforcement authority, to enforce our legal rights, to operate our systems properly, or to protect ourselves or our users and customers.
When you provide us with your personal information to complete a transaction, verify your credit card or create an order, we understand that you agree to the collection and use for that specific reason only.
When you provide us with your email information through a subscription form, we understand that you agree to receive email marketing campaigns from CASA PLETÓRICA.
If we ask for your personal information for a secondary reason, such as personalized marketing purposes, we will ask you directly for your express consent, or we will give you the opportunity to refuse.
You acknowledge and agree that while using our website www.casapletorica.com, or doing business with us, certain information about you will be captured electronically or otherwise and transmitted to us or and, potentially, to any third parties as set out above, or to third parties who host our web servers or assist us in maintaining this website.
Under the GDPR any interested person has the following rights:
To know that your data is being processed and to make a ‘Subject Access Request’;
To access your personal data free of charge;
To receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without undue delay;
To have your information corrected if inaccurate (Including ensuring any third party puts right any inaccuracy);
To request that your data be erased, for example, when the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
To restrict processing under certain circumstances stipulated in Art. 18 of the GDPR. Where processing has been restricted such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
To object to processing for direct marketing purpose, including profiling and;
To rights relating to automated decision making and profiling.
To rights relating to automated decision making and profiling.
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
You can exercise your rights:
By sending a written request to CASA PLETÓRICA, Calle Fernando VI, 6 3D 28280 El Escorial, Spain, or
By making a request via email to hello@casapletorica.com
If you are a California resident, you have certain rights with respect to your personal information. Those rights and how you may exercise them are described below.
Right to Request Information about Disclosure to Third Parties for their Direct Marketing Purposes: To make such request, please email us at hello@casapletorica.com
Right to Know: To request the last 12 months’ list of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting or “selling” the information, and the categories of “third parties” to whom we disclosed or “sold” that information please email us at hello@casapletorica.com
Right to opt out of “sale” of personal data: We do not transfer your information to third parties in exchange for money and we will not do so. However, we do transfer personal information when necessary for legal requirements and in order to operate our business. If you are a California resident, you have the right to opt out of the “sale” of your personal information to “third parties.”. Please note that “Sale” is defined very broadly and includes, not only the exchange of data for money, but any transfer of personal information to a “third party” in exchange for “other valuable consideration.” Note that the law creates certain exceptions to the opt out.
The GDPR requires that we follow strict security procedures in the storage and disclosure of information which you have provided via this website or otherwise, to prevent unauthorized access. All information is held securely, archived and managed in line with our Information Security Management System (ISMS) Policy.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
We reserve the right to add to or change the terms of this privacy policy in our sole discretion, without prior notice to you. If we change this privacy policy, we will post the new privacy policy on the website, and it will become effective from the time of posting to the website. Please visit this privacy policy on a regular basis to make sure you have read the latest version and you understand what we do with your information. Wherever possible, we will give you notice of any changes prior to their implementation.
If you data is collected by CASA PLETÓRICA and you are unhappy with any aspect of personal privacy as part of our service or business relationship you may complain to us by sending an e-mail to hello@casapletorica.com and, if you are dissatisfied once we have dealt with your complaint you are entitled to contact the Spanish Data Protection Agency (AEPD) whose contact information is available at www.aepd.es where you can also find further information about data protection issues.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at hello@casapletorica.com.
Madrid, January 2023
.png)
