The website co2sostenible.com processes personal data provided by the User in order to fulfill and, additionally, confirm the Terms and Conditions, to process orders and online shipments, and for the communication necessary during the period of time established by law.
General rules
- The data controller, in accordance with the GDPR, is O.C.R. located at C/ Velas nº 6, 45200, in the municipality of Illescas (Toledo), Spain.
- The Controller’s contact details are: e-mail info@co2sostenible.com, Tel. ESP. +34 607 74 34 85.
- Personal data refers to any information relating to an identified or identifiable natural person.
The source of the personal data
- The controller processes personal data obtained with the Client’s consent, collected through the purchase order and the fulfillment of the order placed in the online store www.co2sostenible.com.
- The controller processes only the Client’s identification and contact data that are necessary for the fulfillment of the purchase contract.
- The controller processes personal data for order shipping and accounting purposes, and for the communication necessary between the contracting parties for the time stipulated by law. Personal data will not be made public and will not be transferred to other countries.
Purpose of data processing
The controller processes the Client’s personal data for the following purposes:
- Registration on the website www.co2sostenible.com in accordance with Chapter 4, Section 2 of the GDPR.
- For the fulfillment of the online order created by the Client (name, address, email, phone number).
- To comply with the law and regulations arising from the contractual relationship between the Client and the Controller.
- Personal data is necessary for the fulfillment of the purchase contract. The contract cannot be concluded without the personal data.
Duration of personal data storage
- The controller stores personal data for the period necessary to fulfill the rights and obligations arising from the contractual relationship between the controller and the client, and for the following 3 years after the conclusion of the contractual relationship.
- The controller must delete all personal data after the expiration of the period stipulated for the storage of personal data.
Recipients and processors of personal data
Third parties that process the Client’s personal data are subcontractors of the Controller. The services of these subcontractors are essential for the successful fulfillment of the purchase contract and the processing of the online order between the Controller and the Client.
The controller’s subcontractors are: the hosting company, the shipping company, and Google Analytics (website analytics).
Client’s rights
In accordance with the Regulation, the Client has the right to:
- The right of access to personal data.
- The right to rectification of personal data.
- The right to erase personal data.
- The right to object to the processing of personal data.
- The right to data portability.
- The right to withdraw consent to the processing of personal data, in writing or by email sent to info@co2sostenible.com.
- The right to lodge a complaint with the supervisory authority in the event of suspected non-compliance with the Regulation.
Security of personal data
- The controller declares that it has taken all necessary technical and organizational precautions to protect personal data.
- The controller has taken technical precautions to protect the spaces where data is stored, in particular to ensure password-protected access to systems, the use of antivirus software, and the regular maintenance of equipment.
Final provisions
- By placing an electronic order on the website www.co2sostenible.com, the client confirms that they have been informed of all personal data protection conditions and accepts them in full.
- The client accepts these rules by checking the checkbox on the order purchase form.
- The controller may update these Rules at any time. The updated version must be published on its website.
These Rules will take effect on 1/01/2019.