Privacy Policy

This privacy policy provides information to the user regarding the processing of their personal data as required by the European Regulation on Data Protection 679/2016 of April 27, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data, and Organic Law 3/2018 of December 5, on Data Protection and guarantee of digital rights.

In this way, we proceed to provide all the information required regarding the processing of personal data carried out through this website and other processing activities that we consider necessary to publish and make available to users.

The user agrees that all their personal data will be fully transferred to Aplazame from the moment the user starts the contracting process of the deferred payment service offered by the latter when choosing the payment method. This acceptance extends to third parties that may need to access the files for the successful completion of the contract.

1. IDENTIFICATION OF THOSE RESPONSIBLE FOR PROCESSING

The person in charge of processing your personal data will be LOLINA BY CAROLINA ORTS S.L.Whose identifying and contact information is indicated in the Sales Terms.

If you want to contact our Data Protection Officer (DPO)), you can do so by sending an email to dpd@cecotec.es.

2. ORIGIN, PURPOSE, LEGAL BASIS OF PROCESSING, AND STORAGE PERIOD

All personal data processed by LOLINA comes directly or indirectly from the user themselves, through any of the following channels:

Email
Contact form;
User account creation
Web clients;
Commercial communications;
Reception and management of resumes;
Social media

Below, we provide you with information about the data processing treatments we carry out with your personal data in relation to the way you provide it to us.

(1) Email

When you send us an email requesting information of any kind, the treatment we will perform on your personal data will be as follows:

Data categories: The data we will process will be your contact and identifying data (your email address and any other data you provide in the body of the message).
The purpose of the treatment is to address the inquiries received.
Legitimization varies depending on the type of consultation received. Thus, we can identify the following purposes and legal bases:
- Consent of the data subject, art. 6.1.a) of the GDPR, in cases where users contact us for the first time requesting any type of information (not related to orders, claims, etc.).
- Execution of a contract, art. 6.1.b.) of the GDPR, in cases where customers call requesting information about the status of their orders, cancellations, etc.
- Compliance with a legal obligation, art. 6.1.c) of the GDPR, in cases where customers contact us to manage the warranty of their products, in accordance with the Royal Legislative Decree 1/2007, of November 16, which approves the revised text of the General Law for the Defense of Consumers and Users and other complementary laws.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Retention period: your data will be kept for as long as necessary to address the query and finalize the related management, without prejudice to them being kept blocked for a longer period, as explained at the end of this section ("Retention periods applicable to all processing").

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Communication: your data will not be disclosed to third parties except under legal obligation or with prior consent.

Contact form

If you decide to contact us through our contact form, the treatment will have the following characteristics:

Data Categories: The data we will be processing will be contact and identification data, as requested in the form itself (email address and any personal data that may be included in the body of the message and attachments).

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. The purpose will be to manage the query you send us.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Legitimation: your consent, art. 6.1.a) of the GDPR

As indicated on the form, all the requested data is necessary in order to attend to your inquiry. Therefore, if you do not provide them, we will not be able to carry out the indicated treatment.

(3) User account creation

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Data category: This includes identifying and contact information, specifically, name and surname, email address, password.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Purpose: process the registration and manage your user account on the website.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Storage period: until the user decides to unsubscribe.

All the requested data to create the user account are necessary in order to manage your account. Therefore, if you do not provide them, we will not be able to carry out the indicated treatment.

(4) Web clients

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Data category: contact and identification data (name and surname, National ID number, email address, password, address, telephone number, and credit or debit card information or PayPal account to be used for payment.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Purpose: to manage the purchases made through our website.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Legitimation: to execute a contract or apply pre-contractual measures, art. 6.1.b) of the GDPR.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Retention period: until the user decides to unsubscribe, which must be communicated to the Data Protection Officer by sending an email to [email address]. dpd@cecotec.es and indicating in the subject line "Web account cancellation". However, your data will be stored but blocked as explained at the end of this section ("Retention periods applicable to all processing").

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Communication: your data will not be shared with third parties except as required by law or with prior consent.

All the requested data is necessary to manage your order (issue the invoice and send you the order). Therefore, if you do not provide them, we will not be able to carry out the indicated processing and your purchase order cannot be processed.

(5) Commercial communications:

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Data category: Contact information (email).

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Purpose: Commercial, promotional, and statistical for direct marketing purposes.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Legitimation: explicit consent for commercial communications via electronic means, in case you have subscribed to our Newsletter (art. 21.1. of Law 34/2002 and art. 6.1.a) of the GDPR); and legitimate interest (6.1. f) of the GDPR) when article 21.2 of Law 34/2002 is applicable.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Retention period: until the interested party decides to unsubscribe. In the event that the client decides not to receive any more commercial communications, they can do so directly by clicking on the link that can be found in each email or by requesting it from our Data Protection Officer by sending an email to [email address]. dpd@cecotec.es indicating in the subject line "Unsubscribe Newsletter".

(6) Reception of CVs:

Source: the data may come from the interested party themselves or, in case Lolina starts the search with the help of third parties, they will come from job portals, social networks, third-party websites, and others.
Data: the data included in the CV, the profiles you maintain on professional social networks, the data obtained in access tests, and the information revealed in the job interview.
Purpose: evaluate the candidacy and, if applicable, offer a job position.
Legitimization: the application of contractual measures in which the candidate may be involved in case of being selected (art. [number]). 6.1.b. of the GDPR).
Data retention period: until the selection process is completed. If the candidate is not selected, the data will be deleted, but they will be kept blocked until the expiration of the statute of limitations. If the individual wishes for their data to be included in the job pool of the business group Lolina Innovaciones. S.L., you must authorize it beforehand.
Communication: your data will not be shared with third parties. In the event that there are vacancies in companies within the group, you will need to authorize it beforehand.

(7) Social Networks:

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Data: the data published or that users themselves send privately to the corporate profile that Lolina has on the social networks Facebook, Instagram, and Pinterest.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Purpose: that which the social network allows in its legal terms for corporate profiles. Therefore, Lolina may inform its followers, when the law does not prohibit it, through any means allowed by the social network about its products, offers, promotions, as well as provide personalized customer service. Thus, by using the functionalities of these social networks by giving a "Like" or "Follow" to Lolina's content or profile on these social networks, you accept this privacy policy and may see on your feed or profile of the respective social network, news with this type of information.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Legitimation: consent, art. 6.1.a) of the GDPR.

I'm sorry, but it seems like you did not provide any text for me to translate. Please provide the text you would like me to translate from Spanish to English. Retention period: until the provision of the requested service ends, in other words, until the user decides to stop following Lolina's corporate profiles on the specified social networks.

Regarding this treatment, the user is informed that Lolina has no connection with any of the social networks in which it has a corporate profile, and therefore, the user must first accept the terms and conditions of each social network in which they decide to create an account. Lolina is not responsible for the data processing that the social network does unrelated to those discussed in this privacy policy.

Conservation deadlines applicable to all treatments.In certain cases and under the authorization of an imperative law, it may be necessary for Lolina to retain the data for a longer period than indicated. Some examples are the following:

4 years: in accordance with article 66 of the General Tax Law and article 4 of the Law on Offenses and Penalties in the Social Order.
5 years: general prescription period for actions that do not have a specific deadline, article 1964 of the Civil Code.
6 years: art. 30 of the Commercial Code.
10 years: article 25 of the Law on the Prevention of Money Laundering and Terrorism Financing.

3. INTERNATIONAL DATA TRANSFER

It is possible that for some of the data processing carried out by Lolina, your data may be transferred outside the European Economic Area, as Lolina has suppliers located outside the European Economic Area.

However, international data transfers will be carried out with adequate guarantees, including standard contractual clauses approved by the European Commission between the parties involved.

4. RIGHTS OF THE INTERESTED PARTIES

According to Regulation (EU) 2016/679, data subjects may exercise the following rights regarding data protection:

Right of access. You may request the person in charge to access your data in order to verify what personal information they are processing, for what purpose, and the storage period, among other information.
Right to rectification. You may request that your data be corrected when it has become inaccurate.
Right to erasure or deletion. You may request for your data to stop being processed and to be deleted. In this case, your data will probably be blocked, but not deleted, as it must be retained for the specified legal retention periods. However, you will be duly informed, if necessary.
Right to limitation. They will be stored for legitimate interest or for the exercise or defense of potential claims.
Right to object. You may object to Lolina continuing to process your data, in which case she may only keep your data for legitimate interest or for the exercise or defense of potential claims.
Portability right. If you want your data to be processed by another data controller.

Models, forms, and more information about the referenced rights: You can obtain the rights application forms on the official webpage.Spanish Data Protection Agency.The rights can be exercised by postal mail to the address indicated in the contact information of the data controller, or by email to [email address]. dpd@cecotec.es. In order to verify their identity, in cases where their ID has been requested for the purpose of processing their data, the user must provide a copy or number of their ID to verify their identity. If acting through a representative, they must also provide a document proving the representation along with the representative's ID. In the rest of the data processing cases where Lolina has not requested the ID, it will not be necessary to provide it. Likewise, it will not be necessary to verify their identity in cases where they request to opt-out of receiving electronic commercial communications, as it is sufficient to send an email to [email address]. dpd@cecotec.es and indicating "Unsubscribe from newsletter" or unsubscribing yourself through the link "Unsubscribe" that you will find in each email received.

Possibility to withdraw consentIn the event that consent has been granted for a specific purpose, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the prior consent given before its withdrawal.

Claim to the Supervisory AuthorityYou also have the option to file a complaint with the Control Authority if you believe that Lolina is not handling your data properly, and you can do so by filing a complaint with the Spanish Data Protection Agency (AEPD).

In relation to the automated decision-making, you are informed that The processing of data will not aim to make decisions about your information based solely on automated processing., including profiling. Therefore, your data will not be processed to create profiles in an automated manner without human intervention to evaluate personal aspects related to you, such as analyzing or predicting aspects related to economic situations, health, preferences or personal interests, reliability or behavior, the situation of the interested party, all to the extent that it has legal consequences for you or significantly affects you. In any case, this would only apply when required by law, necessary for the execution of a contract, or when you have expressly consented. In these cases, you will be informed in advance, and such processing will be subject to appropriate safeguards, including the right to obtain human intervention; to express your point of view; to receive an explanation of the decision made after such evaluation, and to challenge the decision.

5. DATA ACCURACY

Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and they commit to keeping it duly updated. To update the data, they can do so directly through their web account or by contacting the Data Protection Officer through. dpd@cecotec.es.

6. AGE CERTIFICATION

You must be over 18 years old to make purchases on our website and for us to process your personal data. The user certifies, under their responsibility, that they are of legal age.

7.- MODIFICATION OF THIS PRIVACY POLICY

Lolina reserves the right to modify this policy to adapt it to future legislative developments, as well as to future uses that it plans to make of your personal data. In case such modification affects you regarding the processing of your data, for example, because an additional processing is going to be carried out that was not previously informed, we will proceed to notify you about it.

8.- SECURITY MEASURES

At Lolina, we adopt all necessary security measures to ensure the confidentiality, integrity, and availability of your data, implementing the technical, organizational, and legal measures required to protect them from third parties.

Therefore, your data will only be processed by the strictly necessary parties in the data processing and will be stored on physical servers located in the European Union using an SSL certificate. The SSL certificate is a security protocol that ensures that data travels in an integral and secure manner. In other words, the transmission of data between a server and a user, as well as feedback, is completely encrypted.

CUSTOMER SERVICE

COMPANY

PROFILE

New Account Register

Existing Account Login Login to your account

Reset Password

New Account Register