Privacy Policy

Data protection

In accordance with the personal data protection legislation in force, we inform you that your data will be entered into the processing system owned by CHULO DESIGN SL, tax ID B02920148, with its registered office at CAMINO DE LA CRUZ SN, LOMAS DE REY B4 2D, 29602 MARBELLA (MÁLAGA). Details of the processing we carry out are set out below:

PROCESSING WE CARRY OUT

Handling online product purchases

Purpose: collecting, recording and processing data in order to handle payment for and delivery of the products.

Retention period: 5 years under tax law, and 10 years for tax documentation under Organic Law 7/2012.

Lawful basis: compliance with a legal obligation.

Types of data: basic data — name and surname, postal address, email address, signature, financial or insurance data.

Disclosures: where necessary, your data will be disclosed to the Spanish Tax Agency, banks, savings institutions and public bodies or authorities with competence in the matter, in order to meet the tax obligations set out in the applicable legislation. The lawful basis for this disclosure is compliance with a legal obligation.

Marketing activity / website form

Purpose: collecting, recording and processing data in order to answer your enquiries and requests, and for advertising and commercial prospecting.

Retention period: for as long as your consent stands, unless a legal obligation requires otherwise.

Lawful basis: the data subject’s consent.

Types of data: basic data — name and surname, email address.

Newsletter

Purpose: managing newsletter subscriptions so that the mailings can be sent.

Retention period: for as long as your consent stands.

Lawful basis: the data subject’s consent.

Types of data: basic data — name and surname, email address.

Managing website users

Purpose: collecting, recording and processing user data.

Retention period: for as long as your consent stands, unless a legal obligation requires otherwise.

Lawful basis: the data subject’s consent.

Types of data: basic data — name and surname, email address.

Setting cookies

Purpose: managing and setting cookies.

Retention period: for as long as your consent stands.

Lawful basis: the data subject’s consent.

Types of data: basic data — email address, IP address.

Handling the website form

Purpose: answering your enquiries and requests.

Retention period: for as long as your consent stands.

Lawful basis: the data subject’s consent.

Types of data: basic data — name and surname, email address, IP address.

Your rights as a data subject

CHULO DESIGN SL informs Users that they may exercise, before the Data Controller, their rights of access, rectification, restriction, erasure, portability and objection to the processing of their personal data, as well as the right not to be subject to automated decisions including profiling, and the right to withdraw consent.

Right of access:

The user’s right to obtain confirmation as to whether their data is being processed and, if so, which personal data is processed and the legal information about that processing (purposes, lawful basis, retention periods, disclosures, source of the data, and so on).

Right to rectification:

The right to have inaccurate or incomplete data corrected. In relation to the website, it can only be met for information under the website’s control — for example, removing comments posted on the site itself, or images or web content containing the user’s personal data.

Right to restriction of processing:

The right, in certain circumstances, to have the purposes originally envisaged by the controller restricted.

Right to erasure:

The right to have the user’s personal data erased, except as provided for in the GDPR itself (freedom of expression and information, retention obligations, the establishment, exercise or defence of legal claims, and so on).

Right to data portability:

The right to receive the personal data the user has provided in a structured, commonly used, machine-readable format, and to transmit it to another controller, where the processing is based on consent or on the performance of a contract and is carried out by automated means.

Right to object:

The user’s right to prevent the processing of their personal data, or to have the website stop processing it, where the processing is based on legitimate interest or public interest, or where it is for direct marketing.

Right not to be subject to automated decision-making, including profiling:

Where the processing is not necessary for entering into or performing a contract, is not authorised by European Union or Member State law, and is not based on consent, you have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you.

Right to withdraw consent:

For any processing based on your consent, you have the right to withdraw it at any time, free of charge.

To exercise any of the data protection rights described above, please follow these instructions:

Send a written request to CAMINO DE LA CRUZ SN, LOMAS DE REY B4 2D, 29602 MARBELLA (MÁLAGA), marked for the attention of CHULO DESIGN SL, or by email to rusadze@chulointeriors.com.

A request sent by the data subject to exercise these rights should take the following into account:

– You must prove your identity. If there is any doubt about who is making the request, you will be asked to put this right — for example by supplying further information such as your ID number, a copy of your ID document, or the email address you originally gave.

– The request may be made by a legal or appointed representative, provided they are properly identified and authorised by the data subject through an express authorisation to exercise the personal rights set out in data protection legislation.

– State clearly what you are asking for (which right or rights you wish to exercise). If you do not refer to a specific processing activity, you will receive an answer covering every processing activity affecting your personal data; if you ask about one specific activity, you will receive information on that one only. Requests made by telephone will be directed to writing, and you will be told how to do that and where to send it. Information is never given over the telephone.

– A postal or email address for notifications.

– Any documents supporting your request, where these are needed.

– The person making the request should use a method that provides proof that the request was sent and received.

Finally, you have the right to lodge a complaint with the Spanish Data Protection Agency if you become aware of, or believe there has been, a breach of the applicable data protection legislation.

CHULO DESIGN SL undertakes to put in place the technical and organisational measures required by the level of risk involved in the processing described in this section, so as to guarantee the integrity, confidentiality and availability of the data.