Privacy Policy

1. Data Controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), the following information is provided:

Data Controller: J. Antonio Buzón
Trading name: PAPELDECOR
Tax ID (NIF): ES28605294X
Address: C/ AZAFRAN, 41089 DOS HERMANAS
Email: info @ papeldecor.es

2. Personal data we process

PAPELDECOR processes the personal data necessary to manage its commercial activities and respond to requests from users and customers.

Depending on your relationship with us, this data may include:

• First name and surname.
• Billing and delivery address.
• Email address and telephone number.
• Tax identification details where required for invoicing.
• Data relating to your customer account.
• Information concerning orders, purchases, returns, warranties and incidents.
• Communications with PAPELDECOR through the contact form, email or telephone.
• Technical data necessary for the operation and security of the website.

PAPELDECOR does not store the full details of bank cards used to make payments.

3. Purposes and legal bases for processing

Enquiries and requests for information

Data provided through the contact form, email or telephone will be used to respond to enquiries and requests made by the data subject.

Where an enquiry relates to a potential purchase, the legal basis is the taking of pre-contractual measures at the request of the data subject. In other cases, processing is based on PAPELDECOR's legitimate interest in responding to communications related to its business activities.

Registration and customer account

A customer account is required to make purchases from PAPELDECOR. The data provided during registration will be used to create and manage the account and to provide access to its associated features.

The legal basis is the performance of the contractual relationship and the taking of pre-contractual measures at the request of the data subject.

Order management and commercial relationship

Data will be used to process orders, manage payments, prepare and deliver products, handle incidents, returns and warranties, and provide customer service.

The legal basis is the performance of the sales contract.

Invoicing and legal obligations

The necessary data will be processed to issue invoices, maintain accounting records and comply with tax and other legal obligations applicable to the business.

The legal basis is compliance with the legal obligations applicable to PAPELDECOR.

Website security and operation

Certain technical data may be processed to ensure the proper operation and security of the online store, prevent unauthorised access, spam, fraud and other abusive activities, and protect systems and information.

The legal basis is PAPELDECOR's legitimate interest in ensuring the security of its systems, services and users.

Analytics and Google services

PAPELDECOR uses Google services, including Google Analytics and Google Ads, to obtain statistical information about the use of the website and, where applicable, to measure the effectiveness of its commercial activities.

Where these services require information to be stored on or accessed from the user's device, they will be used in accordance with the preferences expressed through the cookie management system.

Certain pages and forms also use Google reCAPTCHA as a security measure to detect and prevent automated submissions, spam and other abusive activities.

Further information about the cookies and similar technologies used is available in our Cookie Policy.

4. Recipients of personal data

PAPELDECOR does not sell or trade the personal data of its customers or users.

Personal data may be disclosed or made accessible to third parties where necessary to manage the commercial relationship, provide the requested services or comply with legal obligations. These may include:

• Transport and logistics companies, to arrange delivery and, where applicable, collection of orders.
• Manufacturers and distributors, where an order is shipped directly from their facilities to the customer.
• Payment service providers, such as PAYCOMET and PayPal, when used to make or manage a payment.
• Banking institutions, where payment is made by bank transfer or where necessary to manage payments, refunds or payment-related incidents.
• Technology service providers necessary for the operation of the online store, hosting and email services. PAPELDECOR currently uses IONOS services.
• Tax and accounting advisers, where necessary for administrative, accounting and tax management.
• Public authorities, tax authorities, courts and other competent authorities, where there is a legal obligation to provide the information.

Where a service provider processes personal data on behalf of PAPELDECOR, such processing will be governed in accordance with the obligations established by applicable data protection legislation.

5. Direct shipments from manufacturers or distributors

Certain products may be shipped directly to the customer from the facilities of the manufacturer or distributor.

When this delivery method is used, PAPELDECOR will provide only the information necessary to prepare and deliver the order, such as the recipient's name, delivery address, telephone number and, where necessary for delivery management, email address.

This information will be used exclusively to manage the order and arrange its delivery.

6. Payments

Payment methods available at PAPELDECOR may include:

• PAYCOMET payment gateway.
• PayPal.
• Bank transfer.

PAPELDECOR does not store full bank card details. When a customer uses a payment gateway, the data required to authorise and manage the transaction is processed by the corresponding payment service provider in accordance with its own privacy policy and applicable legal obligations.

7. Data retention

Personal data will be retained for the time necessary to fulfil the purpose for which it was collected and subsequently for the periods necessary to comply with legal obligations and address any potential liabilities arising from the relationship.

Data relating to orders, invoicing and commercial transactions will be retained for the periods required under applicable tax, commercial and other legislation.

A request to delete a customer account will not result in the deletion of data that PAPELDECOR is legally required to retain or that is necessary to address potential liabilities. In such cases, the data will be retained with processing restricted to those purposes for the corresponding period.

Data relating solely to enquiries will be retained for the time necessary to deal with them and subsequently for a reasonable period where necessary to address potential liabilities arising from the communication.

8. International data transfers

Some of the technology and service providers used by PAPELDECOR may process personal data outside the European Economic Area.

Where international transfers of personal data take place, they will be carried out using the mechanisms and safeguards provided for by the GDPR, such as European Commission adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses or other legally recognised safeguards.

Providers that may carry out international processing include certain Google and PayPal services. Further information about their respective processing activities and safeguards is available in their privacy policies.

9. Data subject rights

Any person has the right to obtain confirmation as to whether PAPELDECOR is processing personal data concerning them.

Data subjects may exercise the following rights, where applicable:

• Access: to obtain information about the personal data we process.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure: to request the deletion of personal data where the legally established requirements are met.
• Objection: to object to processing in the circumstances provided for by law.
• Restriction: to request restriction of processing in certain circumstances.
• Data portability: to receive personal data in a structured, commonly used and machine-readable format and transmit it to another controller where legally applicable.

To exercise these rights, please contact:

info@papeldecor.es

The request must allow the data subject to be identified and must indicate the right they wish to exercise. Where there are reasonable doubts concerning the identity of the person making the request, PAPELDECOR may request additional information necessary to verify their identity.

The exercise of these rights is free of charge under the terms established by applicable legislation.

10. Right to lodge a complaint

If you believe that the processing of your personal data does not comply with applicable data protection legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

11. Data required to make a purchase

Certain information requested during registration and the purchasing process is necessary to create a customer account, process the order, issue the corresponding invoice and arrange delivery.

Failure to provide information marked as mandatory may prevent registration, completion of the purchase or correct delivery of the order.

12. Automated decision-making

PAPELDECOR does not make decisions that produce legal effects or similarly significantly affect users based solely on automated processing of their personal data.

13. Data security

PAPELDECOR implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss or alteration and against unauthorised access, use or disclosure, taking into account the nature of the data processed and the risks associated with the processing.

14. Changes to this Privacy Policy

PAPELDECOR may update this Privacy Policy where necessary as a result of regulatory or technical changes or changes to the processing of personal data carried out by the business.

The current version will always be the version published on this page.