We can obtain your personal data if you provide it to us yourself, through:

• The contact form of the website.
• Registration as a user of the website.
• Placing an order.
• Subscription to the newsletter.
• By sending an email query or request, as well as any message received on our social networks associated with www.verdevela.es
• Through the acceptance of the use of cookies and other storage devices.

1.5 LEGITIMATION OF THE TREATMENT:

• The contact form on the website : In this case, the legitimate basis for processing your personal data is the consent you give us when contacting us, but in addition, Júlia Ballesteros also has, as a legitimate basis, a legitimate interest to attend to the queries that you make to us through the different means of contact that we provide you on the web. If these inquiries have to do with purchases or orders made, we will process your data based on the execution of the contract .
• Registration as a user of the website: The processing of your data is necessary for the execution of the terms that regulate the use of the website. In order for you to register as a user on the website, we need to process your personal data, since otherwise we would not be able to manage your registration. In the event that you choose to use access or login through a social network, the reason why we are entitled to process your data is the consent you give at the time of authorizing the transfer of your data from the social network.
• Placing an order : The processing of your personal data is necessary for the contract execution of sale that links us to you.
• Subscription to the newsletter : The legitimate basis for processing your personal data for marketing/advertising purposes is the consent you give us, for example, when you subscribe to our newsletter and agree to receive personalized information.
• By sending an email query or request : In this case, the legitimate basis for processing your personal data is the consent you give us when you contact us, but also, Júlia Ballesteros also has, as a legitimate basis, a legitimate interest to attend to the queries that you make to us through the different means of contact that we provide you on the web. If these inquiries have to do with purchases or orders made, we will treat your data based on the execution of the contract, which links us to you.
• Through the acceptance of the use of cookies and other storage devices : The legitimate basis for processing your personal data for marketing/advertising purposes is the consent you give us, for example, when you accept the cookie policy of our page Web.

1.6 DATA PROCESSORS:

Klaviyo: used to automate commercial information bulletins and send advertising of the products and/or services offered on the website to the email address of the data owner. Service provided by the company Klaviyo, Inc, located in Boston, Massachusetts. It has a security agreement called Privacy Shield, in accordance with the requirements of the European Committee for Data Protection, which can be found here: https://www.privacyshield.gov /list. You can consult more information about their privacy policy here: https://www.klaviyo.com/legal/privacy-policy

Google : Tool used to save files in the cloud with customer data, through the Drive and Spreadsheets tool, analyze website visits through Google Analytics, create forms through Google Forms and manage email through the Gmail tool. This service is run by the company Google LLC, located in Mountain View, California, United States of America, has subscribed to the Privacy Shield between the EU-USA. which can be consulted at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active . You can consult more information about its privacy policy here: https://policies.google.com/privacy

Apple: Platform used to register contacts, communicate with clients and use physical tools such as computers, mobiles and tablets. This service is provided by the company Apple Inc., which can be contacted through the link https://www.apple.com/la/contact/ and whose privacy policy can be seen at https://www.apple.com/legal/privacy/en-ww/

PayPal (Europe) S.à rl et Cie, SCA: company used to manage payments by debit and credit card on the website. Located at 22-24 Boulevard Royal L-2449, Luxembourg. You can consult more information about its privacy policy here: https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=es_ES

Stripe Inc : used to manage debit and credit card payments on the website. This company is located in the United States, has a security agreement called Privacy Shield, in accordance with the requirements of the European Committee for Data Protection that can be found here https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4&status=Active . You can consult more information about its privacy policy here: en https://stripe.com/us/privacy

WhatsApp: Tool used for communication with some users, buyers, customers and participants through the WhatsApp Ireland Limited company (for those located in Europe), can be contacted through the link https://www.whatsapp.com/contact/?subject=messenger . You can consult more information about its privacy policy here: https://www.whatsapp.com/legal?eea=1#privacy-policy

Shopify Inc. : Company that provides Web Hosting, as well as to process payments by debit and credit card on the website. Located in Ottawa, Canada. You can consult their privacy policy here: https://www.shopify.com/legal/privacy

Loox: Tool used to automate commercial information bulletins and send advertising of the products and/or services offered on the website to the email address of the data owner. You can check their privacy policy here: https://loox.app/legal/privacy-policy-merchants and here: https://loox.app/legal/data-processing-addendum

Shopgram: Tool used to automate notifications to users who subscribe to receive notices when a product is back in stock. Company located in Vancouver, Canada. You can check their privacy policy here: https://shopgram.app/privacy-policy/

Packlink Shipping, SL: Company used to manage the shipment of your order (execution of your contract). Company located in Madrid, Spain. You can check their privacy policy here: https://pro.packlink.es/politica-de-privacidad/

Sociedad Estatal Correos y Telégrafos, SA, SME: Company used to manage the shipment of your order (execution of your contract). Company located in Madrid, Spain. You can consult their privacy policy here: https://www.correos.es/es/es/legales/privacidad-web

Correos Express Paquetería Urgente SA, SME: Company used to manage the shipment of your order (execution of your contract). Company located in Madrid, Spain. You can check their privacy policy here: https://www.correosexpress.com/web/correosexpress/politica-de-proteccion-de-datos

1.7 TRANSFER OF PERSONAL DATA

In general, Júlia Ballesteros will not transfer your personal data to third parties unless we are legally obliged to do so or you have expressly authorized us to do so when using our services.

However, to comply with the purposes described in these clauses, we inform you that some entities that provide us with services could access some personal data, such as:

• Financial institutions or electronic payment services.
• Technology service providers.
• Shipping and/or transportation service providers.
• Marketing and advertising service providers.
• Web analytics service providers.

Some of these providers may be located outside the territory of the EU, such as the United States. In these cases, we inform you that we transfer this data with the appropriate guarantees since these providers are certified in Privacy Shield, a certification that you can consult at the following link: https://www.privacyshield.gov/welcome .

1.8 RIGHTS OF INTERESTED PARTIES

We promise to respect the confidentiality of your personal data and guarantee the exercise of your rights. In particular, regardless of the purpose or legal basis for which we process your data, you have the right to:

• Right of access: allows the interested party to know and obtain information about their personal data submitted to treatment.
• Right of rectification: It allows errors to be corrected, data that turns out to be inaccurate or incomplete to be modified and guarantees the certainty of the information that is the object of treatment.
• Right of deletion: Allows you to request the deletion of the data subject to treatment.
• Right of opposition: Right of the interested party not to carry out the processing of their personal data or to cease it.
• Treatment limitation: In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
• Data portability: Interested persons may request to receive the data that concerns them and that they have provided us or that – whenever technically possible – we send them to another data controller of their choice, in a structured format for common use and mechanical reading.
• Right not to be subject to automated individual decisions (including profiling): Right not to be subject to a decision based on automated processing that produces effects or significantly affects.

Likewise, you have the right to withdraw the consent given at any time, without affecting the legality of the treatment based on the consent given at the time of providing us with your data.

If you wish to exercise any of the exposed rights, please send us an email addressed to holaverdevela@gmail.com with all your personal data, as well as a copy of your ID to verify your identity.

Finally, we inform you of your right to file a claim with the relevant data protection control authority, in particular, with the Spanish Agency for Data Protection (AEPD, www.aepd.es).