Privacy Policy
November 2024 Version
1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
LOLA CASADEMUNT, S.L., a company that operates the sale of products under the Lola Casademunt and Lola Casademunt by Maite brands (hereinafter, “LOLA CASADEMUNT”):
- Tax ID (CIF): B-58527680
- Postal address: Ctra. C-251 km. 5.5, 08440 – Cardedeu (Barcelona)
- Email: rgpd@lolacasademunt.com
2. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Depending on how you interact with LOLA CASADEMUNT, we will process your personal data for the following purposes:
To manage your registration as a user of our Platforms
In the event that you decide to register as a user on our Platforms (Website or App), we need to process your data to identify you as a user of them and give you access to their different functionalities, products, and services available to you as a registered user. You can cancel your registered user account by contacting us through Customer Service.
Likewise, on occasion, we carry out quality actions and surveys intended to know the degree of satisfaction of our users and to detect areas where we can improve.
For the development, compliance, and execution of the purchase contract or services you have contracted with us
This purpose includes processing your data, primarily to:
- Manage the business relationship that unites us in all its areas, in execution of the purchase contract and/or provision of services, with everything that entails, such as invoicing, payment collection, and maintaining contact.
- Contact you regarding updates or informative communications related to the functionalities, products, or services contracted, including sending quality surveys regarding the products or services provided.
- Activate the necessary mechanisms to prevent potential fraud against you and against Us during the purchasing process. If we consider that the transaction may be fraudulent, this processing may result in the blocking of the transaction.
- Manage potential returns once you have made a purchase and manage requests for information regarding the availability of garments, product reservations through the Platform, as such options are available at any given time.
3. To respond to requests or petitions you make through Customer Service or Contact channels
We only process the personal data that are strictly necessary to manage or resolve your request or petition.
4. For marketing purposes
This purpose includes processing your data, primarily to:
- Send commercial communications, including via email and other equivalent electronic means of communication, about our products and services, as well as information about events and occurrences related to the fashion world. Likewise, we may send you this information via push notifications in the event that you have activated them on your mobile device.
- Remember that you can unsubscribe at any time and free of charge through the instructions we provide in each communication we send. If you do not wish to receive push notifications, you can deactivate this option on your mobile device.
- Carry out promotional actions (for example, to develop contests or send your list of saved items to the email you indicate). By participating in any promotional action, you authorize us to process the data you provide to us according to each promotional action and to communicate them through various media such as social networks or the Platform itself. In each promotional action in which you participate, you will have available the legal terms and conditions where we will provide you with more detailed information about the processing of your data.
5. To assist people seeking new job opportunities who send us their CV to work with us.
In case you want to submit your application to work in our offices or stores, we will process the personal data you provide, as well as your curriculum vitae for the purpose of selecting candidates for current and future job positions offered by our company.
6. To keep a record and control of visitors at the company's facilities.
In case you come to visit us at our offices, we will request your personal data for the purpose of keeping a visitor log.
7. Video surveillance
We process your personal data for the purpose of video surveillance of our offices and establishments.
8. Whistleblowing channel
We process the data that you freely provide to us for the purpose of managing reports received through our Whistleblowing Channel.
9. Images
We process your data for the purpose of video recording and taking photographs at events, and your image may appear as an attendee and/or participant in our events, and be disseminated on our social networks.
3. WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR DATA?
The legal basis that allows us to process your personal data also depends on the purpose for which we process it, as explained in the following table:
1. Manage your registration as a user of our Platforms
The processing of your data is necessary for the execution of the terms that regulate the use of our Platforms. In other words, for you to register as a user on the Platforms, we need to process your personal data, as otherwise, we could not manage your registration and use of the platforms.
We consider that we have a legitimate interest in analyzing the usability of the Platforms and the degree of user satisfaction, as we understand that the processing of this data is also beneficial for you because the purpose is to improve the user experience and offer a higher quality service.
2. Development, compliance, and execution of the purchase or service contract
The processing of your data is necessary for the execution of the purchase contract or service provision that binds us to you.
We consider that we have a legitimate interest in carrying out the necessary checks to detect and prevent potential fraud when you make a purchase. We understand that the processing of this data is positive for all parties involved when a purchase payment occurs and, in particular, for you, as it allows us to put measures in place to protect you against fraud attempts made by third parties.
3. Customer Service / Contact
We consider that we have a legitimate interest in responding to the requests or queries you raise through the various existing contact means. We understand that the processing of this data is also beneficial for you insofar as it allows us to properly assist you and resolve the queries raised.
When you contact us, in particular, for the management of incidents related to your order or the product/service acquired through the Platform, the processing is necessary for the execution of the purchase contract.
4. Marketing
The legal basis for processing your data for marketing purposes is the consent you provide to us, for example, when you agree to receive our commercial communications through various media, when you authorize the sending of push notifications on your mobile device, or when you accept the legal terms to participate in a promotional action.
5. Submission of your application to work with us.
The legal basis for the processing of your personal data when you send us your CV via the form enabled on our website is the obtaining of your consent to the processing.
6. Visitor log
The legal basis for processing your data for the purpose of keeping a record and control of people who visit us at our facilities is the obtaining of your consent.
7. Video surveillance
The legal basis for the processing of your data is the obtaining of your consent, as you have accessed our premises and facilities after having seen the informative sign regarding video surveillance.
8. Whistleblowing channel
The legal basis for the processing of your data is compliance with a legal obligation.
9. Images
The legal basis for the processing of your data is the obtaining of your consent, in accordance with the provisions of Art. 6.1.a of the GDPR, by attending and/or participating in our events freely and having been previously informed.
4. HOW LONG WILL WE KEEP YOUR DATA?
The retention period for your data will depend on the purposes for which we process it, as explained below:
1. Manage your registration as a user of our Platforms
We will process your data for the time you maintain your status as a registered user (that is, until you decide to unsubscribe).
2. Development, compliance, and execution of the purchase or service contract
We will process your data for the time necessary to manage the purchase of the products or services you have acquired, including potential returns, complaints, or claims associated with the purchase of the particular product or service, except for legal retention periods or liabilities that could arise.
3. Customer Service
We will process your data for as long as necessary to attend to your request or petition.
4. Marketing
We will process your data until you unsubscribe from receiving commercial communications.
If you participate in promotional actions, we will keep your data for a period of 6 months after the action ends.
5. Work with us
We will process the data you have provided via your CV for 6 months. After the retention period has elapsed, your CV will be destroyed.
6. Visitor log
We will process your data for a period of 3 months.
7. Video surveillance
Images captured by video surveillance cameras will be kept for one month.
8. Whistleblowing channel
The data will be kept for the time necessary for the investigation of the facts, not exceeding the maximum period of three months from its introduction, after which they must be deleted from the reporting system. However, they may continue to be kept and processed by the body to which it corresponds, outside the reporting system, for as long as the actions and processes necessary to follow up on the reports received last.
9. Images
Graphic and audiovisual material will be kept indefinitely to serve as a record of the events.
5. WILL WE SHARE YOUR DATA WITH THIRD PARTIES?
1. Manage your registration as a user of our Platforms
No data will be communicated to third parties
2. Development, compliance, and execution of the purchase or service contract
Your data may be provided to financial institutions and fraud detection and prevention entities for the management of the payment process. No other communications will be made except those legally mandatory.
3. Customer Service
No data will be communicated to third parties
4. Marketing
No data will be communicated to third parties
5. Work with us
No data will be communicated to third parties.
6. Visitor log
No data will be communicated to third parties.
7. Video surveillance
No data will be communicated to third parties.
8. Whistleblowing channel
The data may be communicated to third parties when necessary for the processing of judicial proceedings that, where appropriate, may arise.
9. Images
Graphic and audiovisual material will be uploaded to the company's social media.
At LOLA CASADEMUNT, we will have the collaboration of third-party service providers that we may have contracted in each case and who, for the provision of said service, may need to have access to your personal data, but who will process it with all the required legal guarantees, following our instructions and subject to the signing of a data protection agreement in which we require, among others, that they process the data exclusively for the agreed purposes, apply appropriate technical and organizational measures, and delete or return the data upon completion of the service.
At LOLA CASADEMUNT, we follow strict criteria for selecting third-party service providers in order to comply with our data protection obligations.
6. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
We commit to respecting the confidentiality of your personal data and to guaranteeing the exercise of your rights. Any person has the right to obtain confirmation as to whether or not we at LOLA CASADEMUNT are processing personal data concerning them.
Likewise, you have:
- The right to request access to your personal data.
- The right to request its rectification.
- The right to request its deletion.
- The right to request the limitation of its processing.
- The right to object to the processing.
- The right to data portability.
- The right to withdraw the consent given.
- The right to information.
- The right not to be subject to automated individual decisions.
To exercise your rights, send a written request attaching a copy of your ID card to:
LOLA CASADEMUNT, S.L.
Exercise of data protection rights
Ctra. C-251, km 5.5
08440 – CARDEDEU (Barcelona)
or send an email to: rgpd@lolacasademunt.com
Likewise, we inform you that you can contact the Spanish Data Protection Agency (www.agpd.es) to obtain additional information or to file a complaint, for example, if you have not been satisfied in the exercise of your rights.