Privacy Policy

“Yourcadeaux” is deeply committed to complying with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set out therein, as well as the implementation of the security measures provided for in the General Data Protection Regulation (GDPR) (EU) 2016/679 of 27 April, and in Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require you to provide certain personal data via registration or contact forms, or by sending emails, and that this data will be processed by “Yourcadeaux”, the Data Controller, whose details are:

eMail: info@yourcadeaux.com

Company name: Garden Seeds Trading, S.L.

VAT number: B73603805

Registered Office: C/ Villanueva del Río Segura, nave 5. P.I. La Polvorista – Molina de Segura – 30500 (Murcia)

Telephone: 968 629 309

Collection and Processing of Personal Data

Personal data is any information relating to an individual: name, email address, postal address, telephone number, tax identification number (NIF/NIE), etc. Furthermore, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their internet service provider.

“Yourcadeaux”, as the Data Controller, has a duty to inform Users of its website about the collection of personal data that may take place, either through the sending of emails or by completing the forms included on the website.

Only the data necessary to provide the contracted service, or to respond appropriately to the User’s request for information, will be collected. The data collected is identifying and corresponds to a reasonable minimum required to carry out the activity in question. In particular, no specially protected data is collected at any time. Under no circumstances will the data be used for any purpose other than that for which it was collected.

Contact forms/email

Purpose: To respond to your request for information submitted via our contact form(s).

Legal basis: The legal basis for this processing is the User’s consent, which may be withdrawn at any time.

Data transfer: Personal data will be processed via servers managed by OVH, which will act as the Data Processor.

Registration forms / Customer sign-up forms / Contract forms

Purposes:

  • Manage your User registration on our website.
  • Manage purchases made.
  • Provide information on the processing and status of purchases.
  • Historical record of purchases made on our website.
  • Comments and content management.
  • Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or status of orders.

Legal basis: The legal basis for this processing is the performance of a contract.

Data disclosure: “Yourcadeaux” will not disclose or transfer your data to any third party, except in cases provided for by law or where it is strictly necessary for the provision of a service. Specifically, data may be disclosed to:

  • Technology or IT service providers.
  • Payment service providers.
  • Courier and parcel companies.
  • Third parties or intermediaries, as service providers, operating in our own name (agency, consultancy, etc.).

Any transfer of data will be carried out in strict confidence, using the necessary measures, such as the signing of confidentiality agreements or adherence to the privacy policies set out on their respective websites. The User may object to the transfer of their data to Data Processors by submitting a written request via any of the channels mentioned above.

Furthermore, where necessary, Customer data may be transferred to certain bodies in compliance with a legal obligation: the Spanish Tax Agency, banks, the Labour Inspectorate, etc.

Feedback form

Purpose: make a comment or review for publication on the website.

LegitimationThe legal basis for this processing is the consent of the User, which may be revoked at any time.

Transfer of dataPersonal data will be processed through the servers of this website, managed by OVH which shall be considered as the Data Processor.

Minors

Only individuals aged 14 or over may provide personal data on this website. In accordance with the LOPD and GDPR, in the case of children under the age of 14, the consent of their parents or guardians is required for us to process their personal data.

User Registration

When the User registers via the relevant form, the information we collect includes:

  • Name and surname
  • Email and/or telephone
  • Shipping addresses
  • IP
  • Username/password

In addition, the User must accept the Terms and Conditions, which are set out in a separate section of the website.

The User must also provide a password, which must meet certain security requirements. Passwords do not expire. To recover their password, the User must go to the specific recovery form and enter their email address to continue the process and change it by clicking on the link that will be sent to the email address provided. The User is responsible for keeping their password confidential, as well as for all uses made of it. They must notify “Yourcadeaux” of any unauthorised use of their account or password as soon as possible.

Once registered, the User has access to a private dashboard, where they can view certain content, a record of purchases made, etc. They can also manage their account settings, such as their password or User details.

Users may receive the following notifications:

When they unsubscribe or delete their account.

When they register on the platform (account verification email).

When making purchases, such as receipts, issues, shipments, etc.

For comments made, and replies to them.

For password recovery (as specified in the previous field).

Safety Measures

Users of the “Yourcadeaux” website are hereby informed that we have implemented all reasonable security, technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access and theft of data, thereby ensuring the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current data protection legislation. The personal data collected via the forms is processed solely by “Yourcadeaux” staff or by the designated Data Processors.

The “Yourcadeaux” website also features SSL encryption, which allows Users to securely submit their personal data via the website’s contact or registration forms.

Accuracy of the data

The User confirms that all the information provided is true and accurate and undertakes to keep it up to date. The User shall be liable for the accuracy of their information and shall be solely responsible for any disputes or litigation that may arise as a result of any inaccuracies therein. It is important that, in order for us to keep personal data up to date, the User informs “Yourcadeaux” whenever there has been any change to such information.

Disclosure of data

“Yourcadeaux” will not transfer or disclose your data to any third party, except in cases provided for by law or where the provision of a service requires a contractual relationship with a data processor. Accordingly, the User agrees that some of the personal data collected may be provided to these Data Processors (payment platforms, administrative agencies, intermediaries, etc.), where necessary for the effective provision of a contracted service or purchased product. The User also accepts that, in the event of the provision of services, these may be, in whole or in part, subcontracted to other individuals or companies, who shall be considered Data Processors, with whom the relevant confidentiality agreement has been entered into, or who have adhered to their privacy policies, as set out on their respective websites. The User may object to the transfer of their data to Data Processors by submitting a written request via any of the means referred to above.

Furthermore, where necessary, Customer data may be transferred to certain bodies in compliance with a legal obligation: the Spanish Tax Agency, banks, the Labour Inspectorate, etc.

Exercising User Rights

The LOPD, GDD and GDPR grant data subjects the right to exercise a number of rights relating to the processing of their personal data. To do so, the User must contact us, providing documentation proving their identity (ID card or passport), either by email to info@yourcadeaux.com, or by writing to the address given in our Legal Notice. Such communication must include the following information: the User’s full name, the purpose of the request, their address and supporting documentation.

The exercise of rights must be carried out by the User themselves. However, they may be exercised by a person authorised as the User’s legal representative, provided that documentation proving such representation is supplied.

The User may request the exercise of the following rights:

  • Right to request the access to personal data, which is the right to obtain information on whether their own personal data are being processed, the purpose of the processing which, where applicable, is being carried out, as well as the information available on the origin of such data and the communications made or envisaged of the same.
  • Right to request your rectificationif the personal data is incorrect or inaccurate, or deletion of data that proves to be inadequate or excessive.
  • Right to request the limitation of their processing, in which case only the data strictly necessary for the exercise or defence of claims will be kept by “Yourcadeaux”.
  • Right to object to the processing: this refers to the data subject’s right not to have his or her personal data processed or to cease processing in those cases in which his or her consent is not necessary for the processing, in the case of commercial prospecting files or for the purpose of taking decisions regarding the data subject and based solely on the automated processing of his or her data, unless for legitimate reasons or for the exercise or defence of possible claims, the data must continue to be processed.
  • Right to portability Data portability: in case you want your data to be processed by another company, “Yourcadeaux” will provide you with the portability of your data in an exportable format.

Where consent has been given for a specific purpose, the User has the right to withdraw the consent at any timewithout affecting the lawfulness of processing based on consent prior to its withdrawal.

We undertake to process all such requests within the maximum legal timeframe (1 month).

If a User believes there is an issue with the way in which “Yourcadeaux” is handling their data, they may address their complaints to the Data Protection Officer or the relevant data protection authority; in the case of Spain, this is the Spanish Data Protection Agency.

Data retention

The personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent given is withdrawn.

The Customer’s personal data will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary, and may be retained for up to:

  • 4 years: Law on Offences and Penalties in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of wages…); Arts. 66 ff. of the General Tax Law (accounting books…)
  • 5 years: Art. 1964 Civil Code (personal actions without special time limit)
  • 6 years: Art. 30 Commercial Code (accounting books, invoices…)
  • 10 years: Art. 25 Prevention of Money Laundering and Terrorist Financing Act.
  • No deadline: disaggregated and anonymised data.

In the case of the processing of candidates’ data (CVs), “Yourcadeaux” may retain your CV for a maximum of two years for inclusion in future recruitment rounds, unless the candidate objects.

Recruitment

Any applicant who sends electronic communications to “Yourcadeaux” for the purpose of applying for the data controller’s recruitment processes authorises us to review the documents submitted (e.g. CVs), all content directly accessible via internet search engines (e.g. Google), any profiles held on professional social media platforms (e.g. LinkedIn), data obtained from entrance tests, and information disclosed during the job interview, for the purpose of assessing their application and, where appropriate, offering them a job. Should the candidate not be selected, “Yourcadeaux” may retain their CV for a maximum of two years, to be considered for future vacancies, unless the candidate states otherwise. The legal basis for this processing is the data subject’s consent, which may be withdrawn at any time.

Confidentiality

Any information provided by the User shall, in all circumstances, be treated as confidential and may not be used for any purposes other than those described herein. “Yourcadeaux” undertakes not to disclose or reveal any information regarding the User’s requirements, the reasons for the advice sought, or the duration of its relationship with the User.

Validity

This privacy and data protection policy was drawn up by ExpertosLOPD®, a firm specialising in data protection for online shops, on 14 June 2021, and may be subject to change in line with any future changes in legislation and case law; it is the data subject’s responsibility to read the updated document in order to be aware of their rights and obligations in this regard at all times.