Privacy and Data Protection Policy

Lalura Diseño Textile SL, with registered office in Spain at Juan Flórez, 125-10ºD .15005 A Coruña, makes this privacy policy available to you in order to inform you, in detail, about how we treat your personal data and protect your privacy and the information you provide us. If we introduce changes to it in the future, we will notify you through the website or through other means so that you can be aware of the new privacy conditions introduced.

In compliance with Regulation (EU) 2016/679, General Data Protection Regulation and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, we inform you of the following:

Data controller:

Owner: LALURA TEXTILE DESIGN SL
NIF: B56913585
Address: JUAN FLÓREZ, 125-10ºD
Email: laluraweb@gmail.com
Website URL: www.laluradesign.com

For what purpose do we process your personal data?

It is not necessary to provide any personal data to browse this website. The following cases may require that data be provided:

  1. If you buy in the store.
  2. If you sign up for the mailing list to receive the newsletter.
  3. If you contact us using the contact form.
  4. If you send an email to the contact address.

In each case, the data may be incorporated into a file, for which Lalura diseño textil SL is responsible for its management and processing. The security of the data is guaranteed, since the necessary security measures are taken at all times. The data will only be used for the purpose for which it has been provided. Under no circumstances will your data be marketed.

How do we collect your information?

We collect your personal information through different means, but you will always be informed at the time of collection through clauses regarding the data controller, the purpose and legal basis thereof, the recipients of the data and the retention period of your information, as well as the way in which you can exercise your rights in terms of data protection.

In general, the personal information we process is limited to identification data (name and surname, ID, address and email), contracted services and payment and billing data.

Lalura Diseño Textile SL uses social media and this is another way of reaching you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social media have their own privacy policies that explain how they use and share your information, so we recommend that you consult them before using them to confirm that you agree with the way your information is collected, processed and shared.

User Responsibility

By providing us with your data through electronic channels, the user guarantees that he or she is over 14 years of age and that the data provided to Lalura are true, accurate, complete and up to date. For these purposes, the user confirms that he or she is responsible for the veracity of the data provided and that he or she will keep said information updated so that it reflects his or her real situation, assuming responsibility for any false or inaccurate data that he or she may provide, as well as for any direct or indirect damages that may arise.

How long do we retain your information?

We will only retain your information for the period of time necessary to fulfill the purpose for which it was collected, comply with the legal obligations imposed on us and address any potential liabilities that may arise from fulfilling the purpose for which the data was collected.

If at any time we have collected your data to contact you as a potential user of our services or to respond to a request for information made by you, said data will be kept for a maximum of 6 months from its collection, and will be deleted after this period if a contractual relationship has not been formalized or at the time you request it from us.

In any case, and as a general rule, we will keep your personal information as long as there is a contractual relationship that binds us or you do not exercise your right to erasure and/or limitation of processing, in which case, the information will be blocked without use beyond its conservation, as long as it may be necessary for the exercise or defense of claims or some type of liability that must be addressed may arise.

To whom do we communicate your data?

In general, we do not share your personal information, except for those transfers that we must make based on imposed legal obligations.

In any case, in the event of being transferred to a third party, prior information will be provided requesting express consent for such transfer.

Entities involved in any phase of processing are required to observe professional secrecy and to adopt the levels of protection and the technical and organisational measures necessary within their reach to guarantee the security of personal data.

Although this is not a transfer of data, in order to provide you with the requested service, third-party companies, acting as our suppliers, may access your information to carry out the service we have contracted them to. These managers access your data following our instructions and cannot use it for a different purpose and maintaining the strictest confidentiality.

  • 1&1 IONOS España SLU (identified with the trademark 1&1), with registered office at Avenida de la Vega, 1 Edificio Veganova 3 Planta 5 Puerta C de Alcobendas, CP 28108, Madrid, which provides web hosting services. The privacy policy and other legal aspects of said company can be consulted at the following link: https://www.ionos.es/terms-gtc/terms-privacy/
  • Redsys Servicios de Procesamiento, SL .: company used to manage debit and credit card payments on the website, with CIF B-85955367 and address at C/ Francisco Sancha, 12 – 28034 Madrid For more information http://www.redsys.es/legal/20200224_poli%CC%81tica_de_privacidad.pdf
  • If you subscribe to the mailing list (newsletter), you will receive news from the website, promotions, offers. The campaigns are sent through the Flodesk email manager, owned by the company Flodesk Inc., 2093 PHILADELPHIA PIKE #3380, CLAYMONT, DE 19703 United States of America, whose servers are hosted in the United States.
  • Likewise, your personal information will be available to Public Administrations, Judges and Courts, to address any potential liabilities arising from the processing.

International data transfers

We have agreed with our suppliers that, in order to provide the contracted service, they will use servers located in the EEA and if, in the future, we need to use servers located outside the EU territory, appropriate measures will be adopted, which will be incorporated into this Privacy Policy .

What are your rights regarding the processing of your data and how can you exercise them?

Data protection regulations allow you to exercise your rights of access, rectification, deletion and portability of data and opposition and limitation to its processing, as well as not to be subject to decisions based solely on the automated processing of your data, where applicable.

These rights are characterized by the following:

– Its exercise is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case Santa Pazienzia may charge a fee proportional to the administrative costs incurred or refuse to act.

– You can exercise your rights directly or through your legal or voluntary representative.

– We must respond to your request within one month, although, taking into account the complexity and number of requests, the deadline may be extended by another two months.

– We are obliged to inform you about the means to exercise these rights, which must be accessible and we cannot deny you the exercise of the right for the sole reason of choosing another means. If the request is submitted by electronic means, the information will be provided by these means whenever possible, unless you request otherwise.

– If we do not process the request, you will be informed, within one month at the latest, of the reasons for our failure to act and the possibility of filing a complaint with a Control Authority.

In order to facilitate your exercise, we provide you with the links to the application form for each of the rights:

Form for exercising the right of access

Form for exercising the right to rectification

Form for exercising the right to object

Form for exercising the right to erasure (right to be forgotten)

Form for exercising the right to restrict processing

Form for exercising the right to portability

Exercise form not to be subject to automated individual decisions

To exercise your rights we provide you with the following means:

  1. By written and signed request addressed to Lalura diseño textile SL, Juan Flórez, 125-10D, 15005 a Coruña, Ref. Exercise of Rights LOPD.
  2. By sending the scanned and signed form to the email address hola@laluradesign.com indicating in the subject Exercise of LOPD Rights.

In both cases, you must prove your identity by attaching a photocopy or, where appropriate, a scanned copy of your ID or equivalent document in order to verify that we only respond to the interested party or their legal representative, and in this case you must provide a document proving the representation.

Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a claim with the national control authority by contacting the Spanish Data Protection Agency , C/ Jorge Juan, 6 – 28001 Madrid.

How do we protect your information?

We are committed to protecting your personal information.

We use reasonably reliable and effective physical, organizational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and guaranteeing its privacy.

Furthermore, all personnel with access to personal data have been trained and are aware of their obligations in relation to the processing of your personal data.

In the case of the contracts we sign with our suppliers, we include clauses requiring them to maintain a duty of confidentiality regarding the personal data to which they have had access by virtue of the assignment carried out, as well as to implement the technical and organisational security measures necessary to guarantee the permanent confidentiality, integrity, availability and resilience of the systems and services for processing personal data.

All these security measures are reviewed periodically to ensure their suitability and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable, so if any information being processed and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Control Authority and, where appropriate, notify those users who may have been affected so that they can take appropriate measures.

Finally, please note that access to this website may involve the use of cookies. More information: cookie policy .

If you have questions about your privacy, contact laluraweb@gmail.com