Privacy Policy

This privacy policy provides the user with information regarding the processing of their personal data in accordance with the European General Data Protection Regulation 679/2016 of 27 April, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data, as well as Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights.

We will now proceed to provide all the necessary information regarding the processing of personal data carried out through this website and other processing activities that we consider necessary to publish and make available to users.

The user agrees that all their personal data will be fully transferred to Aplazame from the moment the user has started the process of hiring the deferred payment service offered by the latter when choosing the payment method. This acceptance also extends to third parties who may need to access the files for the successful completion of the contract.

1. IDENTIFICATION OF DATA CONTROLLERS

The data controller of your personal information will be LOLINA BY CAROLINA ORTS S.L.Whose identifying and contact information is provided in the Sales Terms and Conditions.

If you would like to get in touch with our Data Protection Officer (DPO)If you wish to do so, you can send an email to dpd@cecotec.co.uk.

2. ORIGIN, PURPOSE, LEGAL BASIS OF PROCESSING, AND STORAGE PERIOD

All personal data processed by LOLINA comes directly or indirectly from the user, through any of the following channels:

Email
Contact Form;
User Account Creation
Online Customers;
Marketing Communications;
Reception and Management of Curriculum Vitae;
Social Media

Below, we provide you with information about the data processing we carry out with your personal data in relation to how you provide it to us.

(1) Email

When you send us an email requesting information of any kind, the way we will handle your personal data will be as follows:

Data Categories: The data we will process will be your contact and identification data (your email address and any other data you provide us in the body of the message).
The purpose of the processing is to deal with the inquiries received.
The legitimacy varies depending on the type of query received. Therefore, we can identify the following purposes and legal bases:
- Data Subject Consent, Art. 6.1.a) of the GDPR, in cases where users first contact us requesting any type of information (not related to orders, claims, etc.).
- Execution of a contract, art. 6.1.b.) of the GDPR, in cases where customers call requesting information about the status of their orders, cancellations, etc.
- Compliance with a legal obligation, art. 6.1.c) of the GDPR, in cases where customers contact us to manage the warranty of their products, in accordance with the Consumer Rights Act 2015 and other complementary laws.

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Retention period: your data will be kept for as long as necessary to address the inquiry and complete the resulting management, without prejudice to being kept blocked for a longer period, as explained at the end of this section ("Retention periods applicable to all processing").

(2) Contact Form

If you decide to get in touch with us through our contact form, the process will have the following features:

Data Categories: The data we will process will be contact and identifying data, as requested in the form itself (email address and personal data that may be included in the body of the message and attachments).

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Retention period: your data will be kept for as long as necessary to address the inquiry and complete the resulting management, without prejudice to being kept blocked for a longer period, as explained at the end of this section ("Retention periods applicable to all processing").

As stated on the form, all the requested data are necessary in order to address your inquiry. Therefore, if you do not provide them, we will not be able to proceed with the indicated treatment.

(3) User account creation

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Data category: This includes identification and contact information, specifically, first and last name, email address, password.

All the requested data to create the user account are necessary in order to manage your account. Therefore, if you do not provide them, we will not be able to carry out the indicated processing.

(4) Online Customers

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Data Category: Contact and identification data (full name, National Insurance Number, email address, password, address, telephone number, and credit or debit card details for payment or PayPal account.

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Data retention period: until the user decides to unsubscribe, which must be communicated to the DPO by sending an email to dpd@cecotec.co.uk Please send an email to [email protected] with the subject line "Unsubscribe from web account". However, please note that your data will be retained but blocked, as explained at the end of this section ("Retention periods applicable to all processing").

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Communication: Your data will not be disclosed to third parties except in cases of legal obligation or with prior consent.

All the requested information is necessary to process your order (issue the invoice and send you the order). Therefore, if you do not provide it, we will not be able to carry out the necessary processing and your purchase order will not be able to be processed.

(5) Marketing communications:

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Legitimisation: explicit consent for commercial communications via electronic means, in case you have subscribed to our Newsletter (art. 21.1. of Law 34/2002 and art. 6.1.a) of the GDPR); and legitimate interest (6.1. f) of the GDPR) when article 21.2 of the Law 34/2002 is applicable.

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Retention period: until the individual decides to unsubscribe. If the customer chooses to no longer receive commercial communications, they can do so directly by clicking on the link that can be found in each email or by requesting it from our Data Protection Officer by sending an email to dpd@cecotec.co.uk Subject: Unsubscribe from Newsletter

(6) CV Submission:

Source: The data may come from the individual themselves or, in the event that Lolina starts the search with the help of third parties, they will come from job portals, social networks, third-party websites, and others.
Data: the data included in the CV, the profiles maintained on professional social networks, the data obtained in access tests, and the information revealed during the job interview.
Purpose: To evaluate the applicant's candidacy and, if appropriate, offer a job position.
Legitimation: the application of contractual measures in which the candidate may be involved if selected (art. 6.1.b. of the GDPR).
Retention period: until the selection process is completed. If the candidate is not selected, the data will be deleted, but will be kept blocked until the statutory limitation periods expire. If the individual wishes for their data to be included in the job pool of the business group Lolina Innovations. S.L., you will need to authorize it beforehand.
Privacy: Your data will not be shared with third parties. In the event that there are job openings in group companies, you will need to authorize it beforehand.

(7) Social Media:

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Data: the data published or that users themselves send privately to the corporate profile that Lolina has on the social networks Facebook, Instagram, and Pinterest.

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Purpose: that which the social network allows in its legal terms for corporate profiles. Therefore, Lolina will be able to inform its followers, when the law does not prohibit it, through any means allowed by the social network about its products, offers, promotions, as well as provide personalised customer service. Thus, by using the functionalities of these social networks such as giving a "Like" or "Follow" to Lolina's content or profile on said social networks, you accept this privacy policy and may see on your timeline or profile of the social network in question, news with this type of information.

I'm sorry, but it seems like there was an issue with the text you provided for translation. Could you please provide me with the text in Spanish so I can translate it into British English for you? Thank you! Retention period: until the provision of the requested service ends, in other words, until the user decides to stop following Lolina's corporate profiles on the specified social media platforms.

In relation to this matter, the user is informed that Lolina has no connection with any of the social networks where it has a corporate profile. Therefore, the user must first accept the terms and conditions of each social network in which they decide to create an account. Lolina is not responsible for the data processing carried out by the social network beyond what is mentioned in this privacy policy.

Retention periods applicable to all processing.In certain cases and under the authorization of a mandatory law, it may be necessary for Lolina to retain the data for a longer period than indicated. Some examples are as follows:

4 years: in accordance with article 66 of the General Tax Law and article 4 of the Law on Offenses and Penalties in the Social Order.
5 years: general prescription period for actions without a specific deadline, article 1964 of the Civil Code.
6 years: art. 30 of the Commercial Code.
10 years: Article 25 of the Anti-Money Laundering and Counter-Terrorist Financing Act.

3. INTERNATIONAL DATA TRANSFER

It is possible that for some of the data processing carried out by Lolina, your data may be transferred outside the European Economic Area, as Lolina has suppliers located outside the European Economic Area.

However, international data transfers will be carried out with adequate safeguards, using standard contractual clauses approved by the European Commission between the parties involved.

4. DATA SUBJECT RIGHTS

Under Regulation (EU) 2016/679, data subjects will be able to exercise the following rights regarding data protection:

Right of Access. You may request access to your data from the controller to verify what personal data they are processing, for what purpose, the retention period, and other relevant information.
Right to rectification. You can request that they correct your data when it is no longer accurate.
Right to erasure or deletion. You can request for your data to stop being processed and deleted. In this case, your data will most likely be blocked, but not deleted, as it must be kept for the periods of prescription of actions previously indicated. However, you will be duly informed, if applicable.
Right to restriction. They will be kept for legitimate interest or the exercise or defense of possible claims.
Right to object. You may object to Lolina continuing to process your data, in which case they may only retain your data for legitimate interest or the exercise or defense of potential claims.
Right to portability. If you want your data to be processed by another data controller.

Models, forms, and more information about the rights referred toYou can access the rights application forms on the official website.Information Commissioner's Office.You can exercise your rights by post to the address provided in the contact details of the data controller, or by email at dpd@cecotec.co.uk. In order to verify your identity, in cases where your ID card has been requested for the purpose of processing your data, you must provide a copy or the number of your ID card to verify your identity. If you are acting through a representative, you must also provide a document proving the representation along with the representative's ID card. In the rest of the data processing in which Lolina has not requested the ID card, it will not be necessary to provide it. Likewise, it will not be necessary to verify your identity in cases where you request to opt out of receiving electronic commercial communications, as it will be sufficient to send an email to: dpd@cecotec.co.uk and indicating "Unsubscribe from newsletter" or unsubscribing yourself by clicking on the "Unsubscribe" link that you will find in every email received.

Option to withdraw consentIf consent has been given for a specific purpose, the individual has the right to withdraw consent at any time, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.

Complaint to the Regulatory AuthorityYou also have the option to lodge a complaint with the relevant authority if you believe that Lolina is not handling your data properly, and you can do so by lodging a complaint with the Information Commissioner's Office (ICO) in the UK.

Regarding the... automated decision-making, please be informed that The processing of data will not aim to make decisions about your information based solely on automated processing., including profiling. Therefore, your data will not be processed for profiling purposes in an automated manner without human intervention to evaluate personal aspects related to you, such as analyzing or predicting aspects related to economic situations, health, personal preferences or interests, reliability or behavior, the situation of the data subject, all to the extent that it has legal consequences for you or significantly affects you. In any case, this would only apply when required by law, necessary for the performance of a contract, or when you have explicitly consented. In these cases, you will be informed in advance, and such processing will be subject to appropriate safeguards, including the right to obtain human intervention; to express your point of view; to receive an explanation of the decision made after such evaluation, and to challenge the decision.

5. DATA ACCURACY

Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and they undertake to keep it duly updated. To update the data, they can do so directly through their web account or by contacting the Data Protection Officer via dpd@cecotec.co.uk.

6. AGE VERIFICATION

You must be over 18 years old to make purchases on our website and for us to process your personal data. The user certifies, under their own responsibility, that they are of legal age.

7.- AMENDMENT TO THIS PRIVACY POLICY

Lolina reserves the right to modify this policy to adapt it to future legislative developments, as well as to future uses that it may project to make of your personal data. If such modification affects you in relation to the processing of your data, for example, because some additional processing is going to be carried out, not previously informed, we will proceed to notify you about it.

8. SECURITY MEASURES

At Lolina, we take all necessary security measures to ensure the confidentiality, integrity, and availability of your data, implementing the technical, organisational, and legal measures required to protect them from third parties.

Therefore, your data will only be processed by the parties strictly necessary for the processing of your data and will be stored on physical servers located in the European Union using an SSL certificate. The SSL certificate is a security protocol that ensures that data travels in an integral and secure manner, meaning that the transmission of data between a server and a user, and vice versa, is completely encrypted.

CUSTOMER SERVICE

COMPANY

PROFILE

New Account Register

Existing Account Login Login to your account

Reset Password

New Account Register