Privacy policy

This policy explains how the personal data of those who visit or make purchases on this website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD, the Spanish Data Protection Act).

Data controller

Alberto González Nieves
NIF: 32898671T
Calle Traviesas 8D, 11405 Jerez de la Frontera, Cádiz, Spain
hola@lumeraslp.com

What data we process and for what purpose

Order management. First name, surname, postal address, email address, telephone number and billing details. Legal basis: performance of the contract. Retention: for the duration of the commercial relationship and, thereafter, for the statutory tax and accounting retention periods (6 years).

Customer service. Contact details and the content of the enquiry. Legal basis: performance of the contract, or legitimate interest in dealing with requests. Retention: for as long as the matter is being handled and for the applicable limitation periods.

Marketing communications. Email address and name. Legal basis: consent, which you may withdraw at any time. Retention: until you ask to unsubscribe.

Browsing analytics. Technical data on use of the site. Legal basis: consent given through the cookie banner. See the Cookie policy.

Recipients

Your data is disclosed only to the providers needed in order to deliver the service: the e-commerce platform that hosts the store, the payment providers, and the logistics provider responsible for preparing and shipping the order. It is also disclosed to the public authorities where there is a legal obligation to do so.

International transfers

Some of these providers are located outside the European Economic Area. In particular, shipping data (name, address and telephone number) is disclosed to our logistics provider located in China, without which it would not be possible to deliver the order. These transfers are made under the standard contractual clauses approved by the European Commission or under the other safeguards provided for in Chapter V of the GDPR.

Your rights

You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, and you may also withdraw any consent given, by writing to hola@lumeraslp.com and stating the right you wish to exercise. We will reply within a maximum of one month.

If you consider that the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), at www.aepd.es.

Security

We apply reasonable technical and organisational measures to protect the data. The store operates over an encrypted connection and full payment card details are never stored by the controller, but are processed directly by the payment providers.