Data privacy statement of Hijos de J. Cardoso, S.L.
(hereinafter referred to as ‘CARDOSO’)
(As of: February 2022)
Thank you for your interest in our website. Protecting your privacy is very important to us. The following provides you with detailed information about how we handle your data.
Storage of access data in server log files
When you visit our web pages, what is known as usage data are temporarily stored on our web server as a log for statistical purposes, in order to improve the quality of our web pages. This data protection consists of
- the page from which the file was requested,
- the name of the file,
- the data and time of the request,
- the amount of data transferred,
- the access status (file transferred, file not found),
- the description of the type of web browser used,
- the IP address of the computer making the request, but shortened so that it can not be used to identify an individual.
The aforementioned log data are only saved anonymously.
We take various technical and organisational measures in order to protect your data as effectively as possible against unwanted access. We use an encryption method on our websites. Your information will be transferred over the internet from your computer to our server and vice versa via TLS encryption. You will recognise this by the fact that the padlock symbol is closed in the status bar of your browser, and the address line begins with https://.
Data collection and use for contract execution and opening a customer account
We collect personal data if you voluntarily provide us with these in the course of placing an order, when contacting us (e.g. via a contact form or email) or when setting up a customer account. The data that is collected can be seen on the respective input forms. We use the data that you have provided to execute our contract and process your requests. After the complete execution of the contract or the deletion of your customer account, your data will be blocked from further use and deleted after the expiry of the tax and commercial storage periods, unless you have expressly consented to the further use of your data or in cases where we reserve the right to use such data, if this is legally permitted, and about which we inform you below. Your customer account may be deleted at any time. This may be done by either sending a message to the contact options listed below or by using the dedicated function within the customer account.
The legal basis for data processing is in accordance with Article 6, Paragraph 1, lit. b) of the General Data Protection (EU) 2016/679 (GDPR).
Data transfer for the purpose of fulfilling the contract
In order to fulfil our contractual obligations, we will pass your data on to the shipping company responsible for the delivery, insofar as this is necessary for the delivery of the goods that have been ordered. In order to process payments, we will pass on the necessary payment data to the credit institution tasked with executing the payment and any payment service providers working on our behalf, or to the payment service that you selected during the ordering process.
Provided that there are no statutory storage periods, the data will be deleted upon conclusion of the contract. The legal basis for data processing is in accordance with Article 6, Paragraph 1, lit. b) of the GDPR.
Data usage when registering for the email newsletter
If you register for our newsletter, we use the necessary information or the data provided separately by you to send you our email newsletter on a regular basis. The data will be processed accordingly, in line with Article 6, Paragraph 1, lit. a of the GDPR. You may deregister from the newsletter at any time, either sending a message to the contact options listed below or by clicking on the dedicated link within the newsletter.
In order to use our contact form, we need your name and email address. You may provide us with other information if you wish, but this is not required. We use your data in order to send the requested information. We will process your request in accordance with Article 6, Paragraph 1, lit. b) of the GDPR. We will delete your request as soon as it is no longer required for processing.
We use session cookies on our websites. These are processed in line with Article 6, Paragraph 1, lit. f of the GDPR to optimise user guidance. You can also take part in polls on our website. These use a session cookie to prevent multiple voting.
Data transfer to third parties
We treat your personal data confidentially and do not transmit it to unauthorised third parties.
In the course of operating these websites and the processes associated with them, we also rely on other service providers (e.g. for hosting and web development). These service providers are strictly bound by our instructions and contractually obligated under the terms of Article 28 of the GDPR.
Your rights as a user
The GDPR grants you certain rights as a website user in terms of the processing of your personal data:
1.) Right of access (Article 15 of the GDPR):
You have the right to request confirmation of whether personal data relating to you has been processed. If this is the case, you have a right to information about this personal data and to the information specified in Article 15 of the GDPR
2.) Right to correction and deletion (Articles 16 and 17 of the GDPR):
You have the right to request the immediate correction of any incorrect personal data and, if necessary, the completion of any incomplete personal data.
You also have the right to request that personal data relating to you be deleted immediately, provided that one of the reasons specified in Article 17 of the GDPR applies, e.g. is the data is no longer needed for the intended purposes.
3.) Right to the limitation of processing (Article 18 of the GDPR):
You have the right to request the restriction of processing, provided that one of the conditions set out in Article 18 of the GDPR applies, if you have lodged an objection to such processing, for the duration of any necessary investigation.
4.) Right to data portability (Article 20 of the GDPR):
In certain cases, specified in Article 20 of the GDPR, you have the right to request any personal data relating to you in a structured, accessible and machine-readable format, or to request the transmission of this data to third parties.
5.) Right of objection (Article 21 of the GDPR):
If data are collected in line with Article 6, Paragraph 1, lit. f (data processing in order to protect legitimate interests), you have the right to lodge an objection to such processing at any stage due to reasons arising from a particular situation. We will then cease to process your personal data unless there are demonstrably compelling protection-related reasons why the data requires such processing, and which outweigh the interests, rights and freedoms of the person affected, or if such processing is required for the purpose of enforcing, exercising or defending legal claims.
Right of appeal to a supervisory authority
In accordance with Article 77 of the GDPR, you have the right to complain to a supervisory authority if you believe that data relating to you has been processed in a manner that violates data protection laws. In particular, the right to appeal may be asserted to a supervisory body in the member state of your place of residence, your place of work or the place of the alleged violation.
Contact details for our data protection officer
Feel free to send any requests for information or suggestions to our company data protection officer:
Mr Javier Cardoso Solís
data protection responsible from CARDOSO
Telephone: +34 926215393