Privacy policy
This policy explains what personal data we process, for what purpose, and what rights you have over that data, in accordance with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD) (the Spanish data protection act).
Data controller
- Controller: Alexandru Preda
- Tax identification number (NIF): Y5912948F
- Address: Calle Antonio Díaz 4, 28224 Pozuelo de Alarcón (Madrid)
- Contact: info@noventisbeauty.com
What data we process and why
| Purpose | Data | Legal basis |
|---|---|---|
| Managing your order, payment and delivery | Name, delivery and billing address, email, telephone number, payment details | Performance of the contract (art. 6(1)(b) GDPR) |
| Responding to your enquiries | Name, email and the content of your message | Consent and legitimate interest (art. 6(1)(a) and 6(1)(f)) |
| Sending you marketing communications | Name and email | Consent (art. 6(1)(a)), which may be withdrawn at any time |
| Accounting and tax obligations | Billing data | Legal obligation (art. 6(1)(c)) |
| Analysing use of the site and measuring advertising | Browsing data and cookie identifiers | Consent (art. 6(1)(a)) |
Who has access to your data
We do not sell your data. We disclose it only to those who need it in order to provide the service to you:
- Shopify International Ltd. — store platform and payment gateway.
- Logistics operator (Latvia) — order preparation and dispatch. It receives your name and delivery address.
- Carriers — for delivery.
- Public authorities — where there is a legal obligation.
International transfers
Some providers may process data outside the European Economic Area. In such cases the transfer is based on adequacy decisions of the European Commission or on standard contractual clauses.
How long we keep it
- Order and billing data: six years, under commercial and tax obligations.
- Contact data for marketing: until you withdraw your consent.
- Browsing data: for the period stated in the cookie policy.
Your rights
You may request access to your data, its rectification or erasure, the restriction of processing, its portability, and you may object to the processing, by writing to the contact address given above. If you consider that we have not dealt with your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (the Spanish Data Protection Agency) (aepd.es).
Minors
This site is not aimed at children under 14 and we do not knowingly collect their data.
Security
We apply reasonable technical and organisational measures to protect your data. Payments are processed through an encrypted gateway and we never store your card details.