GDPR Privacy

ADDITIONAL INFORMATION ON DATA PROTECTION

We welcome you to this website and hope to resolve your doubts about its data protection.

Few users read privacy policies, and it is very important to do so because it is the way to know the degree of commitment that website owners establish with their users.

On this website, martelie.com assumes a permanent commitment to the privacy of subscriber, contact, and customer data, and guarantees the best practices in the use of personal data.

If you are under 18, you should not leave your data on this website unless authorized by your parents. In no case will data related to the professional or economic situation or the privacy of other family members be requested from minors without their consent.

What is and is not done with your personal data on this website can be found here.

This policy expresses how the personal information of all individuals who interact with MARTELIÈ through this website will be processed and protected. Please read all sections of the Legal Notice, the Cookie Policy, and this privacy policy before using this website.

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights, LUA I ANNETA SL informs you that, by accepting this Privacy Policy, you give your express, informed, free, and unequivocal consent for the data you provide, and to which the security, technical, and organizational measures provided for in current regulations apply, to be processed by LUA I ANNETA SL, as the data controller.

WHO IS RESPONSIBLE FOR THIS WEBSITE?

• Controller’s Identity: LUA I ANNETA SL
• Trade Name: MARTELIÈ
• NIF / CIF: B 66730797
• Address: Carrer Marià Cubí number 155, Barcelona (08021)
• Email: info@martelie.com
• Activity: Sale of Handcrafted Jewelry
• Contact details of the controller or representative and of the data protection officer , if applicable, LUA I ANNETA SL: Carrer Marià Cubí number 155, Barcelona (08021), info@martelie.com +34 931 87 53 73.
• Registered in the Commercial Register Limited Liability Company, registered in the Commercial Register of Barcelona in volume 45,287, folio 104, general section, sheet B 482921, inscription 1

WHAT PERSONAL DATA IS COLLECTED ON THIS WEBSITE?

For the purposes established in this Privacy Policy, MARTELIÈ collects and processes the Personal Data detailed below, which will depend on the different products or services requested on this website:

Identification data: name, surname.

Contact data: postal address, email, mobile phone number.

Contractual data: contractual operation data, ID, purchased products and services, financial operations, payment data.

Navigation data: IP address, device type and identification, browser type, domain through which you access the Website, navigation data, activity on the Website.

No specially protected data categories are processed.

Affiliate identification data.

WHAT IS THE LEGAL BASIS FOR PROCESSING THIS DATA?

We process your personal data on the following legal bases:

• The execution of a contract with MARTELIÈ, for the contracting of services, publishing advertisements, and managing the requested services.
• The user’s consent in relation to contact, subscription to content, and sending commercial communications, via mail, cookies, or messaging systems.
• The legitimate interest of the data controller to protect MARTELIÈ website users from abuses and fraud in the use of our services.

FOR WHAT PURPOSE WILL WE PROCESS YOUR DATA?

On this website, there are different forms, and in each of them, the information collected will be used as follows:

Content subscription forms: there are several forms to activate the subscription. The data provided will be used exclusively to send the Newsletter and keep you updated on news and specific offers, exclusive to martelie.com subscribers.

Comment form: The personal data entered in the form to insert these comments will be used exclusively to moderate and publish them.

Contact form: There is also a contact form for inquiries, suggestions, or professional contact. In this case, the email address will be used to respond to them and send the information the user requests through the website.

New account form: In this case, we request personal data: Name, Email, so you can create an account in our system and access its functionalities.

Sales form: We also process data to manage the purchase or sale of products and the management of the order, payment, and all operations related to the contracting of the chosen service or product. This includes sending follow-up emails, responses, invoices, receipts, etc.

Affiliate registration form: We request affiliate data, including payment data, to manage affiliate registration and settle the corresponding commissions.

Download Systems: On this website, different contents that are periodically incorporated in text, video, and audio format can be downloaded. In this case, an email is required to activate the subscription form. Your information is used for the purposes indicated for subscribers.

Data Protection Policy

martelie.com commits to the use and processing of data collected in the contact forms on this website, to respect their confidentiality and to use them in accordance with their purpose, as well as to comply with its obligation to store and adapt all measures to prevent alteration, loss, unauthorized processing or access, in accordance with the provisions of the Organic Law on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD) 3/2018, which adapts Spanish law to the model established by the General Data Protection Regulation (GDPR).

The User guarantees that the personal data provided through the different contact and subscription forms are truthful, and is obliged to communicate any modification thereof. Likewise, the User guarantees that all information provided corresponds to their real situation, is up-to-date, and accurate.

When using the contact forms, you will notice that some fields, such as name or email, have an asterisk (*); this means that these fields are mandatory, and the form cannot be sent if you leave these fields blank.

PERSONAL DATA RETENTION PERIOD

Customer data: The retention period for personal data will vary depending on the service the Client contracts. In any case, it will be the minimum necessary, and may be kept until:

– 4 years: Law on infringements and sanctions in the social order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…).

– 5 years: Art. 1964 of the Civil Code (personal actions without special term).

– 6 years: Art. 30 of the Commercial Code (accounting books, invoices…).

– 10 years: Art. 25 of the Law on the Prevention of Money Laundering and Financing of Terrorism.

Subscriber data: From the moment the user subscribes until they unsubscribe.

Prospective customer data: the data will be kept in any case for the duration of the established commercial relationship and, once concluded, for two years, unless the user requests its deletion earlier.

WHAT ARE YOUR RIGHTS REGARDING THE USE OF YOUR DATA?

Any person has the right to obtain confirmation as to whether or not MARTELIÈ is processing personal data concerning them.

Interested parties have the right to:

• Request access to personal data relating to the data subject.
• Request rectification or erasure.
• Request its cancellation
• Request the restriction of its processing.
• Object to the processing.
• Request data portability.

If you have given your consent for a specific purpose, you have the right to withdraw the granted consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

In the event that you feel your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you can file a complaint with the competent Data Protection Control Authority through its website: https://www.aepd.es/es

To exercise these rights, you can write to info@martelie.com

There is a form for exercising your rights , which you can request by email or, if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or accompanied by a photocopy of your ID.

If someone represents you, they must attach a copy of their ID, or it must be signed with their electronic signature.

Forms can be submitted in person, sent by letter, or by email to the address of the controller appearing at the beginning of this text.

Services offered by third parties on this website

External service providers (e.g., payment processing services, order processing, analytics, marketing campaign management, website management, email distribution, and other similar service providers) so that they can perform commercial functions on behalf of MARTELIÈ.

Your personal data may also be communicated to recipients located in countries outside the European Economic Area, including countries that do not provide an equivalent level of data protection to that of the Union. However, in these cases, they will be processed in strict compliance with European and Spanish legislation and, likewise, the guarantees indicated below will be implemented:

Messaging and newsletter services: Electronic newsletters or Newsletters are managed by Mailchimp. When using the services of these platforms for email marketing campaigns, subscription management, and newsletter sending, you should know that Mailchimp has its servers hosted outside the EU, in the USA.

• MailChimp: MARTELIÈ uses the MailChimp platform for sending email newsletters derived from subscription management.
  MailChimp’s Privacy Policy has its servers hosted in the USA. MARTELIÈ has signed with MailChimp the standard contractual clauses required by the EU regarding data protection.
• Analytics service: Google Analytics: a web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help martelie.com analyze how users use the website. The information generated by the cookie about your use of martelie.com (including your IP address) will be directly transmitted to and stored by Google on its servers in the United States.
• Stripe, Inc. We use Stripe to manage payments on the website. Stripe offers services that allow platforms and merchants to operate businesses and conduct online payment transactions securely. The legal basis for the transmission of data is Art. 6, paragraph 1, letter a) of the GDPR (consent) and Art. 6, paragraph 1, letter b) of the GDPR (processing for the fulfillment of a contract). Stripe complies with applicable laws to provide an adequate level of data protection for the transfer of your Personal Data to the USA. Stripe Inc. is certified under the EU-US and Switzerland-US Privacy Shield Frameworks.
  For more information, please consult Stripe’s Privacy Policy.
• PayPal: In the case of purchasing info-products, if you decide to pay via PayPal, your personal data will be transmitted to PayPal. The prerequisite for using PayPal is that you have an account with them. The legal basis for the transmission of data is Art. 6, paragraph 1, letter a) of the GDPR (consent) and Art. 6, paragraph 1, letter b) of the GDPR (processing for the fulfillment of a contract). The operator of the PayPal payment service is: PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg. By using the PayPal payment option, you grant your consent for your personal data, such as name, postal address, phone number, and email address, to be transmitted to PayPal. The data collected by PayPal is derived from PayPal’s corresponding data protection declaration.

To provide services strictly necessary for the development of our activity, I use the following providers under their respective privacy conditions:

• Hosting: CDmon. You should know that our hosting is 100% Spanish and 100% secure. It uses SSL (Secure Sockets Layer) protocols (secure connection layer). This is the standard security technology used on the Internet to establish a secure (encrypted) connection between a server (website) and your browser (e.g., Internet Explorer, Chrome, Firefox, etc.). This secure connection ensures that all data transmitted from the browser to the server remains private and that your data is safe from hackers or anyone trying to spy on/steal this information. One of the most common uses of SSL is to protect customer data during an online transaction thanks to data encryption.
• Web platform: WordPress.org more information at https://wordpress.org/ processes data for the purpose of providing its support services to martelie.com.

NOTIFICATION AND DECLARATION OF BREACHES

Security notification and breach declaration

At LUA I ANNETA SL, we implement security measures appropriate to the level of risk to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of personal information; however, if LUA I ANNETA SL determines that its service data has been misappropriated (even by an employee of LUA I ANNETA SL), exposed by a security breach, or improperly acquired by a third party, LUA I ANNETA SL will immediately inform you of such security breach, misappropriation, or improper acquisition.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Many tools used on this website to manage data are contracted by third parties. To provide services strictly necessary for the development of its activity, LUA I ANNETA SL shares data with the following providers under their respective privacy conditions:

External service providers (e.g., payment processing services, order processing, analytics, marketing campaign management, website management, and email distribution, and other similar service providers) so that they can perform commercial functions on behalf of LUA I ANNETA SL.

The web development and maintenance company, or the hosting company, may occasionally access this website. They have signed a service provision contract that obliges them to maintain the same level of privacy that applies to the processing carried out on this website.

Any international data transfer derived from the use of tools or service providers will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy, secrecy, and data security.

Specifically, this website uses the following tools:

• Email marketing tool
• Billing tool
• Analytics tools
• Online chat tool

DATA SECURITY

martelie.com commits to the use and processing of the user’s personal data, respecting their confidentiality, in accordance with their purpose; as well as to comply with its obligation to store and adapt all measures to prevent alteration, loss, unauthorized processing or access, in accordance with current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data travels completely and securely; that is, the transmission of data between a server and the web user and vice versa is fully encrypted.

martelie.com cannot guarantee the absolute impregnability of the Internet network, nor, therefore, the violation of data through fraudulent access to them by third parties.

Regarding the confidentiality of processing, LUA I ANNETA SL must ensure that any person authorized by LUA I ANNETA SL to process customer data (including its personnel, collaborators, and providers) will be under the appropriate obligation of confidentiality (whether a contractual or legal duty).

When a security incident occurs, upon becoming aware, LUA I ANNETA SL must notify the Client without undue delay and must provide timely information related to the Security Incident as it becomes known, or when the client reasonably requests it.

ACCURACY AND TRUTHFULNESS OF DATA

As a user, you are solely responsible for the truthfulness and correctness of the data you provide to martelie.com, exempting LUA I ANNETA SL (MARTELIÈ) from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

REVOCABILITY

The consent given, both for the processing and for the transfer of the data of the interested parties, is revocable at any time by communicating it to LUA I ANNETA SL (MARTELIÈ) in the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case have retroactive effect.

CHANGES TO THE PRIVACY POLICY

LUA I ANNETA SL (MARTELIÈ) reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as to industry practices. In such cases, it will announce the changes introduced on this page with reasonable anticipation of their implementation.

Last updated: June 2021