Visiting this website does not mean that the interested party is obliged to provide their personal data.
In the event that the interested party provides personal data (“Data”), the data will be treated in a fair and lawful manner, respecting at all times the principles and rights set out in Regulation (EU) 2016/679 of the Parliament and the Council of April 27, 2016 regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data (“GDPR”) and other applicable national regulations.
Data Controller
Kaiet Lascurain Odriozola y OTRA CB (hereinafter MARGARILAB), with NIF E67722363, and located at Mazmela Elizatea Auzoa 2 Abadetxea, 20540 Eskoriatza.
E-mail: info@margarilab.eus
What do we do with your data?
“New client”
The main purpose of the processing is the management of registered users on our website. Legitimation: Art. 6.1.a) RGPD: express consent. The data will be kept until the user deletes their personal account.
“Place or process an order”
The data will be processed for the purpose of managing your purchase: shipping, collection, after-sales procedures. The basis that legitimizes the treatment is the execution of the contractual sales relationship in accordance with Art. 6.1.b) RPGD. The data may be communicated to the technical departments of the manufacturers when it is necessary to process the warranty of a product. This communication is legitimized by Art. 6.1.c) RGPD, the treatment is necessary to comply with the legal obligation of guarantee stipulated by Royal Legislative Decree 1/2007, of November 16, which approves the consolidated text of the General Law for the Defense of Consumers and Users and other complementary laws. The data will be kept until the user deletes their personal account. Subsequently, they will be kept blocked until the date of prescription of legal actions (for example, legal guarantee of the product or preservation of invoices). After this period, the data will be irreversibly deleted.
To process the delivery of your order, the delivery person may request identification data in order to identify your identity and prevent fraudulent deliveries (such as ID number, name or surname). We inform you that your data will only be processed for this purpose. In no case will the delivery person be authorized to capture an image of your identification document; they will not be able to take photographs or videos by any means.
In the event that the collection is carried out by a person other than the one who processed the order, you are informed that the processing of the data is strictly necessary for the prevention of fraud in accordance with Recital 47 RGPD, the basis that legitimizes the processing is the legitimate interest. The data will not be communicated to third parties, nor will it be subject to international transfer. The data will be kept during the delivery verification period and will subsequently be duly blocked until the date of prescription of legal actions. After this period, personal data will be irreversibly deleted. Likewise, you are informed that the image of your identity document can never be captured by the delivery person.
“Newsletter and advertising delivery”
You will only be sent advertising related to your own products and services when you give express consent for this purpose. The legitimizing basis is express consent in accordance with Art. 6.1.a) RPGD. The data will be kept until the user expresses their opposition to the processing through a simple and accessible unsubscription procedure in each advertising communication.
The interested person will be able to process the unsubscription in a simple way through the link available in each communication.
“Raffles”
The data will be processed to manage the participation of people interested in the draw, as well as to communicate the prizes to the winners. The basis that legitimizes the treatment is Art. 6.1.b) RPGD, execution of the contractual relationship. The data will be kept until the legal actions are prescribed, then they will be deleted.
“Contact Form”
The data will be processed to process a request for information. The legitimizing basis of the treatment is Art. 6.1.a) RPGD, the express consent of the interested party. The data will be kept only for the period necessary to process the query.
Data recipients
Upon purchase, your data may be communicated to the following recipients:
- Banking entities for payment of purchases by card and/or study of purchase financing and obtaining consumer credit. The basis that legitimizes the communication is Art. 6.1.b) execution of the contractual relationship.
- Entities that provide fraud investigation, discovery and prevention services, as well as minimizing the risk of its commission, based on the legitimate interest recognized by current regulations. The legitimizing basis for the transfer is Art. 6.1.c) legal obligation.
- To the Consumer and User Office in the event of any complaint. The legitimizing basis for the transfer is Art. 6.1.c) legal obligation.
- To transport and parcel shipping companies. The legitimizing basis for the transfer is Art. 6.1.b) execution of the contractual relationship.
- In legally established cases, as is the case of the Security Forces and Bodies. The legitimizing basis of the transfer is Art. 6.1.c) legal obligation.
- To public administrations to whom we have to provide information at the request of a request. The legitimizing basis for the transfer is Art. 6.1.c) legal obligation.
Rights of interested parties
The interested person can exercise the following rights.
- You may request information about stored personal data that concerns you (access).
- You may request that the inaccuracy of your personal data be corrected (rectification).
- You may request the deletion or limitation of the processing of your personal data and (deletion and limitation).
- You may also request that your personal data be made available to you in a structured, current and machine-readable format (portability).
- Opposition to processing, for example, against receiving advertising (opposition).
To do this, you may exercise your rights in writing by sending an email to the address: info@margarilab.eus. If MARGARILAB has reasonable doubts regarding the identity of the natural person submitting the request, it may ask you to provide additional information necessary to confirm the identity of the interested person.
The interested party also has the right to file a claim with the data protection authorities (Spanish Data Protection Agency). However, if you have any question related to the data, we invite you to contact us to resolve it.
Data quality
Users must guarantee the veracity, accuracy, authenticity and validity of the personal data collected from them.
Protection of children
We do not collect personal data from minors. It is the responsibility of the parent/legal guardian to ensure the privacy of minors, doing everything possible to ensure that they have authorized the collection and use of the minor’s personal data.
Social networks
Through our website you can access the social networks Facebook or Instagram with open access to all users. These are websites where the user can register and follow us for free. In these social networks, users will be able to learn about our activities, opinions, and access photos and videos. Users of these social networks must be aware that this place is independent of the website www.margarilab.eus and is open, that is, it is visible to all its users, and the privacy policies to apply to these contents are those established for each social network. MARGARILAB is not the owner of the social networks.
