Privacy policy
The purpose of this Privacy Policy is to inform you of how we treat and protect your personal data collected while you browse, purchase products or services on our website: https://soulful-hearts.com.
We guarantee that we comply with the current data protection regulations as set out in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD) and the General Data Protection Regulation (GDPR) (EU) 2016/679 of the European Parliament and the Council of 27 April 2016.
By using our website, you accept this Privacy Policy and the conditions contained in the Legal Notice.
Controller's identity: Controller: Cristina Madrid. Tax ID: 70070151F Address: Calle Granada 39, Madrid - Spain. Email: cristina@soulful-hearts.com Website: https://soulful-hearts.com
Data Processing Principles: We apply the following principles, which are in accordance with the European data protection regulations (GDPR), when processing personal data:
Lawfulness, fairness, and transparency: We will always require your consent to process personal data, which may be for one or more specific purposes, and we will inform you beforehand with absolute transparency.
Data minimization: We will only request data that is strictly necessary for the purpose(s) for which it is being requested.
Limitation of retention period: We will only retain personal data collected for the time strictly necessary for the purpose(s) for which it was collected. We will inform you of the relevant retention period for each purpose.
Integrity and confidentiality: We guarantee the security, confidentiality, and integrity of the personal data collected. We take necessary measures to prevent unauthorized access or misuse of our users' data by third parties.
Personal Data Collection: You are not required to provide any personal data to browse our website.
The following are the only cases in which you will be required to provide personal data:
When purchasing a product or contracting a service.
When subscribing to a newsletter or form managed by Squarespace.
Rights: As a user, you have the following rights with respect to your personal data:
The right to access your stored data.
The right to request rectification or erasure of your data.
The right to request the limitation of your data processing.
The right to object to the processing of your data.
You cannot exercise the right to data portability.
These rights are personal and must be exercised directly by you, as an interested party, by making a request to us. Any client, subscriber, or collaborator who has provided their personal data may contact us to request information on the data we hold and how we obtained it, request the rectification of their data, object to the processing, limit its use, or request its deletion from our files.
To exercise your rights, please send your request, along with a photocopy of your National ID or equivalent, to the email address: cristina@soulful-hearts.com .
Please note that exercising these rights does not include any data that we are obliged to retain for administrative, legal, or security purposes.
You also have the right to an effective judicial remedy and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data concerning you infringes the GDPR.
Purpose of Personal Data Processing
When you connect to the website to send an email to the owner, subscribe to their newsletter, or contract a product or service, you provide personal information of which the owner is responsible. This information may include personal data such as your IP address, name and surname, physical address, email address, phone number, and other information. By providing this information, you consent to your information being collected, used, managed, and stored by SERED SL only as described on the following pages:
Legal Notice Privacy Policy
The personal data and purpose of the processing by the owner are different depending on the information capture system:
Product or service contracting forms:
The owner requests personal data including name and surname, identification document (tax identification number, foreigner identification number, passport or residence permit), email address, postal address, telephone number, and payment information (payment methods or bank details) to maintain a business relationship with the user, send orders, provide the contracted services, and perform billing and payment for the contracted products or services.
Content subscription forms:
The owner requests the following personal data: name and surname, email address, phone number, and website address to manage the subscription list, send newsletters, promotions, and special offers. Personal data provided to the owner will be located on the servers of Squarespace.
There are other purposes for which the owner processes personal data:
To ensure compliance with the conditions set forth on the Legal Notice page and applicable law. This may include the development of tools and algorithms that help the website ensure the confidentiality of the personal data it collects.
To support and improve the services offered on this website.
To analyze user browsing. The owner collects other non-identifying data obtained through the use of cookies that are downloaded onto the user's computer when browsing the website. The characteristics and purpose of these cookies are detailed on the Cookie Policy page.
To manage social networks. The owner has a presence on social networks. If you become a follower of the owner on social networks, the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies, and access regulations that belong to the corresponding social network, which you have previously accepted.
You can consult the privacy policies of the main social networks in these links:
YouTube
The owner will process your personal data to properly manage your presence on the social network, inform you of their activities, products or services, as well as for any other purpose that social network regulations permit.
Under no circumstances will the owner use social media follower profiles to send individual advertising.
Security of personal data To protect your personal data, the owner takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorized access, disclosure, alteration, or destruction.
The website is hosted by Squarespace. Data security is guaranteed, as all necessary security measures are taken. You can consult their privacy policy for more information.
Content from other websites : The pages of this website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.
Cookie Policy
To ensure proper website functionality, cookies must be used, which is information that is stored in your web browser.
You can consult all information regarding the cookie collection and processing policy on the Cookie Policy page.
Legitimacy for data processing
The legal basis for the processing of your data is:
Consent of the interested party.
Execution of the contract or the application of pre-contractual measures with the interested party, in order to provide a product or service acquired to the Data Controller.
To comply with legal obligations.
Categories of personal data:
The categories of personal data processed by the Data Controller are:
Identifying data.
No categories of particularly protected data are processed.
Retention of personal data: The personal data provided to the Data Controller will be kept until the interested party requests their deletion.
Recipients of personal data: Squarespace. More information at: https://squarespace.com . Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the Data Controller analyze how Users use the Website. The information generated by the cookie about the use of the Website (including the IP address) will be directly transmitted and stored by Google on servers in the United States. More information at: https://analytics.google.com You can check how Google manages privacy regarding the use of cookies and other information on Google's Privacy Policy page: https://policies.google.com/privacy?hl=en
You can also see a list of the types of cookies used by Google and its partners and all information regarding the use of advertising cookies at:
Types of cookies used by Google
How Google uses cookies in advertising.
Web Navigation:
When browsing the Website, non-identifiable data may be collected, which may include IP address, geolocation, a record of how services and sites are used, browsing habits, and other data that cannot be used to identify you.
The Website uses the following third-party analysis services:
Google Analytics. The Data Controller uses the information obtained to obtain statistical data, analyze trends, manage the site, study navigation patterns, and collect demographic information.
The Data Controller is not responsible for the processing of personal data carried out by the web pages that may be accessed through the different links contained on the Website.
Accuracy and truthfulness of personal data:
You undertake to ensure that the data provided to the Data Controller are correct, complete, accurate, and up-to-date, and to keep them duly updated.
As a User of the Website, you are solely responsible for the truthfulness and correctness of the data submitted to the Website, exonerating the Data Controller from any responsibility in this regard.
Acceptance and consent:
As a User of the Website, you declare that you have been informed of the conditions regarding the protection of personal data, accept and consent to the processing of the same by the Data Controller in the manner and for the purposes indicated in this Privacy Policy.
To contact the Data Controller, subscribe to a newsletter, or make comments on this Website, you must accept this Privacy Policy.
Changes to the Privacy Policy:
The Data Controller reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential novelties, as well as to industry practices.
These policies will be in force until they are modified by others duly published.