phone

Privacy policy

This Privacy Policy has been developed in accordance with the provisions of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter GDPR, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and digital rights (hereinafter, LOPDGDD) and other applicable regulations.

This Privacy Policy aims to inform individuals who provide their personal data, and/or those of the person they represent, regarding which information is being collected, the specific aspects related to the processing of their data, the purposes of the processing, the contact details to exercise the rights that assist them, the retention periods of the information, and the security measures, among other things.

WHO IS RESPONSIBLE FOR THE PROCESSING?

In terms of data protection, INTERNET RETAIL COMPANY, S.L should be considered the Data Controller regarding the personal data processing carried out by this entity. Below are the contact details of the Data Controller:

  • Identity of the controller: INTERNET RETAIL COMPANY, S.L
  • NIF: B12046926
  • Physical address: P.I. VÍA EUROPA. C/ POBLA TORNESA, NAVE 5, APTO CORREOS 137, 12550, ALMAZORA/ALMASSORA, CASTELLÓN
  • Email: info@inretailshop.com
  • Phone: 964 62 65 15

WHAT PERSONAL DATA DO WE PROCESS?

All information collected by INTERNET RETAIL COMPANY, S.L will be treated fairly, lawfully, and transparently. Furthermore, the data requested in each of the processing activities carried out will consist solely of those strictly necessary to achieve the intended and informed purpose in each case. Thus, the data collected will be adequate, relevant, and not excessive concerning the purposes for which they are processed in each case. Additionally, your personal data will be collected for specific, explicit, and legitimate purposes, not being further processed in a manner incompatible with those purposes. Moreover, they will be updated whenever necessary.

In general terms, within the framework of the different processing activities carried out by the organization, the following types of data are collected:

  • Identification data.
  • Commercial Information.
  • Transactions of goods and services.
  • Economic and Financial data.

WHERE DO THE PERSONAL DATA COME FROM?

As a general rule, personal data is always collected directly from the data subject; however, in certain exceptions, the data may be collected through third parties, entities, or services different from the data subject. In this regard, this will be informed to the data subject through the informational clauses contained in the different means of collecting information and within a reasonable period or during the first communication made to the data subject.

FOR WHAT PURPOSE DO WE PROCESS PERSONAL DATA?

In general terms, personal data is processed for the following purposes:

  • ChatBot: Personalized customer service for your purchase and to respond to any other type of question that users may send via the chat.
  • Internal Information System (whistleblowing channel): Processing of personal data to manage the internal whistleblowing channel or ethical channel, investigate the facts, and propose resolution measures, prevent regulatory breaches and correct those already detected, as well as contribute to the efficient functioning of the Organization through the continuous improvement of internal processes for managing and controlling illegal behaviors or those contrary to the ethical culture of the Organization.
  • Commercial communications: Send information through the provided means about news, events, products, and services related to us or our sector.
  • Contact: Respond to information requests received about the products and services we offer, as well as respond to any other type of question that users may send.
  • User registration management: The information you provide us in the registration form will be processed to manage users on our platform. After registration, you can check your order history, redeem gift cards or discount vouchers, modify your personal data and/or shipping and billing addresses, wish lists, reviews, or alerts.
  • Management, fulfillment, and execution of the purchase contract: Specifically, personal data will be used for the formalization of the purchase contract; for the management of transaction payments; to contact you in case of any incident related to your order; for the management of billing and delivery of purchase tickets and invoices; for the management of returns of purchased products; to inform you about the availability of requested products; and/or for the management of coupons or gift cards that you redeem on the web or in our stores.
  • Customers: Perform the management of the sale of goods and services, billing, accounting, collections, unpaid amounts, offers, budgets, and contracts, customer service, contact, and commercial relations.

Through these processes, no profiles of users browsing the web are created, and therefore, no automated decisions are made based on this data.

WHAT IS THE LEGITIMATION FOR DATA PROCESSING?

As a general rule, the consent of the data subject is the legal basis for data processing according to the purposes described above. This consent is manifested through a statement or a clear affirmative action, such as checking a box provided for this purpose, voluntary subscription, or sending data through forms. This consent can be revoked at any time by contacting the company through its contact means and, generally, we will request your consent for uses for purposes other than those initially provided.

Specifically, for the treatments indicated below, the following legal bases are used:

  • TREATMENT(S): Customers, Internal Information System (whistleblowing channel), purchase.
  • Compliance with legal and regulatory obligations: By way of illustration and not limitation. General Law for the Defense of Consumers and Users, General Tax Law, Corporate Tax Law, Audit Law, Value Added Tax Law, Civil Code, Commercial Code, as well as the existence of a specific law or regulation authorizing or requiring the processing of the data subject's data, which will be indicated in the corresponding informational clause.
  • Internal Information System (whistleblowing channel): The purpose of the processing is legitimized by a legal obligation: Law 2/2023 of February 20, regulating the protection of persons who report regulatory breaches and the fight against corruption.
  • TREATMENT(S): User registration management, purchase.
  • Performance of a contract: for the prior management of a contracted service or product, development of contract execution, or subsequent actions derived from such operations.
  • TREATMENT(S): Commercial communications.
  • Legitimate interest: Data processing based on the legitimate interest of the controller will be mainly established for sending commercial communications or events about products or services similar to those contracted. According to Article 21.2 of the Law on Information Society Services, this processing will only be valid when, being a client, you have not expressly objected at the time of data collection or in any of the communications we carry out.

HOW LONG DO WE RETAIN PERSONAL DATA?

In general, personal data is processed for the time necessary to fulfill the purpose for which it was collected, while the service is provided or the contractual relationship is maintained, there is a mutual interest, and/or during the time provided for in the applicable regulations. Once the established time limits have been met, the data will be canceled. This cancellation will result in the blocking of the data, which will be retained solely at the disposal of Public Administrations, Judges, and Courts, to attend to possible liabilities arising from the processing, during the limitation period of these liabilities, after which the information will be destroyed.

Specifically, for the treatments indicated below, the data are retained for the following periods:

  • Internal Information System (whistleblowing channel): The data will be retained as long as necessary to fulfill the purpose for which they were collected. In any case, three months after the introduction of the data, they will be deleted from the whistleblowing system unless the purpose of the retention is to provide evidence of the operation of the crime prevention model by the legal entity. After the mentioned period, the data may continue to be processed by the body responsible for investigating the reported facts, not being retained in the internal whistleblowing information system.

WHO DO WE SHARE PERSONAL DATA WITH?

Your personal data will be communicated in the following cases and always in accordance with the applicable legislation:

  • With transport service providers for the delivery of your order.
  • With assembly providers who will set up your order at your premises.
  • Among the companies of the NEWS COMUNICACIÓN E IMAGEN group.
  • To comply with legal provisions and requests from the public administration or, as necessary, regarding audit, control, and corporate governance functions.
  • To combat fraud or criminal activities and to protect our rights or those of the group companies, business partners, and users, or as part of legal proceedings affecting us.
  • In response to a subpoena or legal process, including different public control institutions, regulators, and courts.
  • Internal Information System (whistleblowing channel): The personal data collected may be communicated to the competent public administration and third parties when necessary for the adoption of disciplinary measures or the processing of judicial procedures that may be appropriate.

WHAT RIGHTS CAN YOU EXERCISE?

According to European regulations, the rights that assist you are the following:

  • Right of Access: The right to request information from the controller about whether your personal data is being processed.
  • Right of Rectification: The right that allows the affected person to request the modification of data that are inaccurate or incomplete.
  • Right of Opposition: The right of a person to oppose the processing of their personal data or to request the cessation thereof.
  • Right of Automated Individual Decisions: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on them or significantly affects them in a similar way.
  • Right of Restriction: The right to suspend the processing of the user's personal data in certain circumstances.
  • Right to Erasure or Right to be Forgotten: The right to erasure of the data subject's personal data.
  • Right to Data Portability: The right to request the controller to provide personal data in a structured and clear format to another controller.
  • Right to file a complaint: The right to file a complaint with the competent supervisory authority if you consider that the processing does not comply with the current regulations.

HOW TO EXERCISE YOUR RIGHTS?

The applicant can exercise their rights through the following means:

  • Email to info@inretailshop.com.
  • Postal mail to P.I. VÍA EUROPA. C/ POBLA TORNESA, NAVE 5, APTO CORREOS 137, 12550, ALMAZORA/ALMASSORA, CASTELLÓN.

In both cases, if necessary, documentation proving the identity of the applicant may be required. In any case, you can request the protection of the Spanish Data Protection Agency through its website. In this regard, your request will be handled as soon as possible and taking into account the deadlines provided in the data protection regulations.

WHAT COULD BE THE CONSEQUENCES OF NOT PROVIDING THE INFORMATION?

The data requested in the fields marked with an asterisk, or identified as mandatory, or provided in the means where the information is provided, are those strictly necessary in relation to the purpose for which they are collected, either for the provision of an optimal service to the interested party or due to a legal obligation imposed on the data controller or a requirement necessary to enter into a contract, with the inclusion of data in the remaining fields being voluntary.

If all the data is not provided, it is not guaranteed that the information and services provided will be fully adjusted to your needs. Therefore, if the required data is not provided or is incorrect or incomplete, your request cannot be processed, making it impossible to provide the requested information or carry out the service contract. Similarly, the user guarantees that the information transmitted in any of the forms is truthful, accurate, and corresponds to their own data of which they are the holder.

WHAT SECURITY MEASURES HAVE WE IMPLEMENTED?

The security measures adopted by INTERNET RETAIL COMPANY, S.L are those required in accordance with Article 32 of the GDPR. In this regard, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons, appropriate technical and organizational measures have been established to ensure a level of security appropriate to the risk. In any case, INTERNET RETAIL COMPANY, S.L has implemented sufficient mechanisms to:

  • Ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services.
  • Restore the availability and access to personal data quickly, in the event of a physical or technical incident.
  • Verify, evaluate, and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the security of processing.
  • Enable the encryption of data and communications.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be revised from time to time to update changes in current legislation, update procedures for collecting and using personal information, the appearance of new services, or the exclusion of others. These changes will be effective from their publication on the website, so it is important that you regularly review this Privacy Policy to stay informed about any changes.

New Account Register

Already have an account?
Log in instead Or Reset password