Privacy Policy
Informative Clause on the LOPD and GDPR
In accordance with the current regulations on the Protection of Personal Data, PAULA GRENOUILLE collects and processes your personal data in order to handle your orders and provide the services you request.
PAULA GRENOUILLE informs you that all required security measures have been implemented, and the data will be retained for the strictly necessary period. PAULA GRENOUILLE will process your data confidentially, lawfully, fairly, transparently, appropriately, relevantly, accurately, and up-to-date. You may exercise your rights of access, rectification, restriction of processing, erasure, data portability, and objection to the processing of your personal data, as well as withdraw the consent provided for their processing, by contacting us via email at help@paulagrenouille.com.
Data Collection and Processing
To provide its services, PAULA GRENOUILLE may request personal data through forms. These data will generally be processed in accordance with the General Data Protection Regulation (EU Regulation 2016/679 of April 27, 2016) (GDPR) and the Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
PAULA GRENOUILLE may collect the following categories of personal data:
- Identification and contact data (e.g., names, postal addresses, email).
- Transactional data, associated with operations and services requested.
The data collected will not be processed without a legitimate basis. The purpose of processing includes managing, improving, and delivering services requested by users.
Recipients, Data Sharing, and Transfers
PAULA GRENOUILLE shares your data only with the providers it needs to run the shop, and only for that purpose:
- Shopify (shop platform, checkout and payment processing): your order, contact and payment details.
- Correos and its delivery partners: your name, address and phone number, to deliver your order.
- Google (email): the messages you send us.
- PostHog (analytics and session recording, hosted in the EU).
Some of these providers may process data outside the European Economic Area, under the safeguards provided by the GDPR. Your data is not sold or shared for any other purpose unless required by law.
Data Retention Period
Data will be stored for as long as necessary to fulfill services and comply with applicable legal obligations, particularly regarding liability prescription periods.
User Rights
Users may exercise their rights regarding their personal data at any time, including:
- Access, rectification, and erasure of your data.
- Restriction or objection to data processing.
- Data portability.
Requests should be sent to help@paulagrenouille.com. Users may also contact the Spanish Data Protection Agency (AEPD) for additional information.
Processing Records
Clients:
- Data processed: Name, surname, NIF, address, email, bank account.
- Purpose: Managing client relationships, including invoicing, service delivery, and loyalty programs.
Suppliers:
- Data processed: Name, NIF, address, email, bank account.
- Purpose: Managing supplier relationships and payments.
Cookies Policy
This website uses essential cookies to make the cart work.