Privacy Policy

  This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and free movement of these data (RGPD), to Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights (LOPDGDD), as well as in what is not contrary to the indicated regulations, to the Law Organic 15/1999, Protection of Personal Data (LOPD) and its implementing regulations, and / or those that could replace or update them in the future. Our organization is committed to the privacy of your personal data. The personal data provided is necessary to provide our services and are treated in a lawful, loyal and transparent manner, guaranteeing adequate security thereof, including protection against unauthorized or illegal treatment and against their loss, destruction or accidental damage through the application of technical and organizational measures. Through this document we want to offer you in a transparent and fair way all the necessary information regarding the processing of your personal data carried out by this organization.  

1.- RESPONSIBLE FOR THE TREATMENT

The person responsible for the purpose of the treatment and the security of the personal data provided is: "RAFAS TEXTILES, SL" with CIF B-53151254, and registered office at Av. Marina Baixa 114, 03530 La Nucia (Alicante). Contact: Rafa's Textiles, SL Telephone: 96 688 04 57 e-mail: info@rafasshop.es  

2.- RECIPIENTS OF PERSONAL DATA

  1. The personal data provided will not be subject to any transfer unless it is so provided in the specific treatments.
  2. Optionally, to administrations and other organizations when they are required in compliance with legal obligations.
  3. Optionally, for contracting cloud computing services and / or services for sending e-mails, communication, as well as other related computer services, personal data may be:
  • Assigned to IT service companies located within the European Economic Area (EEA)
  • Transferred to IT service companies located outside the EEA covered by the Privacy Shield protection, so they have adequate protection measures to guarantee the security of personal data. You can get more information by visiting this link: https://www.privacyshield.gov/welcome
 

3.- LEGAL BASIS THAT LEGITIMATES THE PROCESSING OF PERSONAL DATA

In each specific processing of personal data collected about you, we will inform you of the legal basis that legitimizes the processing of your personal data.  

4.- RIGHTS

Right of access It is the right to obtain from the person responsible for the treatment confirmation of whether or not they are treating personal data concerning the interested party and, in this case, the right of access to personal data and the following information: the purposes of the treatment, the categories of personal data in question, the recipients or the categories of recipients to whom the personal data were communicated or will be communicated, the conservation period or the criteria used to determine this period, the existence of the right to request from the person in charge the rectification or deletion of data personal data or the limitation of the processing of personal data relating to the interested party or to oppose such treatment, the right to file a claim with the Spanish Agency for Data Protection (AEPD), the existence, where appropriate, of automated decisions, including the preparation of profiles, when data is transferred to third countries the right to be informed of the appropriate guarantees to plicated. Right of Rectification It is the right to request the rectification of your personal data if they are inaccurate, including the right to complete information that appears incomplete. It must be borne in mind that by providing us with personal data by any means, you guarantee that they are true and accurate and you agree to notify us of any changes or modifications to them. Therefore, any damage caused by the communication of erroneous, inaccurate or incomplete information in the web forms will be the sole responsibility of the interested party. Right of Suppression It is the right to request the deletion of your personal data when, among other cases, they are no longer necessary for the purpose for which they were collected, or they are being treated in another way or you withdraw consent. It must be taken into account that the deletion will not proceed when the processing of personal data is necessary, among other cases, for the fulfillment of legal obligations or for the formulation, exercise or defense of claims. Right to Limitation It is the right to request the limitation of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to keep it beyond the necessary time when you may need it. Right to Withdraw Consent It is the right to withdraw the consent that you have provided by checking "I have read and accept the privacy policy" at any time and as specified in the corresponding section "Exercise of rights" or in the specific treatment of commercial communications or Newsletter. It must be taken into account that this right will not take effect if, among other cases, the processing of personal data is necessary for the fulfillment of a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or defense of claims. Likewise, the withdrawal of consent will not have retroactive effects, that is, it will not affect the legality of the treatment based on the consent prior to its withdrawal. Right to Portability It is the right to receive the personal data that concern you and that you have provided us, in a structured format, for common use and mechanical reading, and to transmit them to another person in charge, as long as the treatment is based on your consent and is carried out by means of automated or computerized. Right of Opposition It is the right to object to the processing of your personal data based on our legitimate interest. We will not continue to process your personal data unless we can prove compelling legitimate reasons for the treatment that prevail over your interests, rights and freedoms, or for the formulation, exercise or defense of claims. Right to File a Claim with a Control Authority If you consider that we treat your personal data in an incorrect way, you can contact us or you also have the right to file a claim with the Spanish Agency for Data Protection (AEPD): Spanish Agency for Data Protection C / Jorge Juan, 6 28001 -Madrid 901 100 099 91 266 35 17 https://www.agpd.es/portalwebAGPD/index-ides-idphp.php Exercise of rights You can exercise your rights by sending a letter to the postal address indicated above or by e-mail at info@rafasshop.es, attaching in both cases a copy of your NIF / NIE / Passport or similar document. The client and / or user of the website will be solely responsible for the veracity of the personal data provided as well as for updating them. From the customer control panel, you can also modify your data and even delete your account completely:

 

5.- PROCESSING OF PERSONAL DATA

Generic Provisions The personal data requested in each of the specific treatments are adequate, pertinent and limited to what is necessary in relation to the purposes for which they are processed, so the principle of data minimization is complied with. The personal data requested in each of the specific treatments is strictly necessary, the refusal to provide them would imply not being able to provide the requested service. The communications of personal data provided for in each of the specific treatments in some cases are necessary for the execution and maintenance of a contract and in other cases for the fulfillment of a legal obligation applicable to the person responsible for the treatment. Contact Form Personal data will be processed to channel requests for information, suggestions and complaints from users or clients. The legal basis that legitimizes the processing of personal data is express consent by checking "I have read and accept the privacy policy." Personal data will be kept for a period of two years from the moment they stop being processed, without prejudice to the exercise of the rights that assist you as an interested party. Electronic Commerce Form (E-commerce) Personal data will be processed to manage your online purchases by processing your orders and returns through our online services, send you notifications about the status of the delivery or in case of problems with the shipment of the items, manage your payments, manage any complaint or question about the guarantee of the products or services, identify you and validate your legal age to contract, as well as for and where appropriate, the formulation, exercise or defense of claims. The legal basis that legitimizes the processing of personal data is express consent by checking "I have read and accept the privacy policy." The personal data will be transferred to the transport company in order to send the order to your address as well as to payment service providers. Personal data will be kept as long as consent is not withdrawn, unless they must be kept for the maintenance of the relationship between the parties or during the years necessary to comply with legal obligations. Commercial Communications Form (Newsletter) Personal data will be processed to manage the subscription to our Newsletter, including the sending of personalized or non-personalized information about our products or services through various means such as telephone, email, SMS, applications for mobile devices, as well as by any procedure analogous. It must be taken into account that this type of data processing may entail the analysis of your user profile to determine what your preferences are and thus be able to send you information that is more appropriate to your interests. You can request cancellation for this type of treatment, depending on the means used, as follows:
  • Email: Through the link to that effect that you will find in each of the electronic communications or through an analogous procedure specified in the commercial communication.
  • WhatsApp (other apps): Requesting to unsubscribe.
  • SMS: Requesting to unsubscribe.
The legal basis that legitimizes the processing of personal data is the express consent given: by checking "I have read and accept the privacy policy" on the web, through a physical document or via email, depending on each case. It must be borne in mind that in the event that the means used is WhatsApp, personal data will be transferred to WhatsApp Ireland Limited which is located within the EEA. Personal data will be kept as long as you do not withdraw consent in the manner indicated in this section.  

6.- WHAT PERSONAL DATA WE COLLECT AND WHY WE COLLECT IT

Comments When visitors leave comments on the web, we collect the data that is displayed in the comments form, as well as the visitor's IP address and the browser's user agent chain to help detect spam. An anonymous string created from your email address (also called a hash) can be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile image is visible to the public in the context of your comment. Media coverage If you upload images to the web you should avoid uploading images with location data (GPS EXIF) included. Visitors to the web can download and extract any location data from the web images. Contact Forms If you send us a contact form, we can use your e-mail address to answer your question, but we will not automatically subscribe you without your consent to any mailing list. It will be used only to answer your query. Cookies If you leave a comment on our site you can choose to save your name, email address and web in cookies. This is for your convenience, so you do not have to re-fill your data when you leave another comment. These cookies will last one year. If you have an account and you connect to this site, we will install a temporary cookie to determine if your browser accepts cookies. This cookie does not contain personal data and is deleted when the browser is closed. When you log in, we will also install several cookies to save your login information and your screen display options. Login cookies last two days, and screen option cookies last one year. If you select "Remember Me", your login will last for two weeks. If you leave your account, the login cookies will be deleted. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not include personal data and simply indicates the ID of the article that you just edited. It expires after 1 day. You have detailed information about cookies, here: https://www.rafasshop.es/uso-de-cookies Embedded Content from Other Websites Articles on this site may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are connected to that website.