PRIVACY AND TRANSPARENCY POLICY

Your privacy is important to us:

The collection and processing of personal data was delineated to be in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data repealing Directive 95/46/EC (General Data Protection Regulation).

Browsing Excitasy’s website and registering as a customer in the online shop presupposes the understanding and acceptance of this Privacy and Data Protection Policy.

Excitasy maintains a constant concern for the protection of personal data privacy and a proactive approach to the security of the website and the protection of the data of its customers and visitors.

The data collected requires the person responsible for the Data Processing to provide the information required by art. 14 of the RGPD, which is considered to be provided by the reading of this privacy policy.

Our Privacy Policy explains:

•          What information we collect and why we collect it.
•          How we use that information.
•          The choices we offer, including how to access and update information.

Excitasy values your privacy, so whether you are a new or long-time user, please take the time to learn about our practices and, if you have any questions, contact us.

1. Responsible for the processing of personal data

The data controller is LUNYVAN S.L., CIF B02907574, with registered office at Gran Vía, 4, 28013 Madrid, Spain. You can contact the data controller at any time with any questions concerning data protection or by e-mail to : sales@lunyvan.com

2. Legal basis for the collection and processing of personal data

We are entitled to carry out the present processing in accordance with Art. 6 para. 1 a) and b) of the GDPR.

The purpose of the collection of personal data is to manage the contractual relationship with Excitasy's clients.

Under the terms of the provisions of Article 3, 4 and 5 of Regulation (EU) 2016/679, LUNYVAN S.L. collects data to act effectively and to be able, through our Services, to provide the best experiences. At some point, we will process your data for other purposes. Your personal data will be processed lawfully, fairly and transparently.

3. Purposes of the processing of personal data

The data provided by you to LUNYVAN S.L. is used for the marketing, import and export of natural and dietetic products, computer materials and equipment and their consumables, underwear and outdoor clothing, leather goods and costume jewellery, computer programming services, graphic and web design and web hosting.

All your personal data will only be kept for the legally obligatory period, while respecting the guarantees of confidentiality and secrecy recommended by the RGPD.

4. Categories of personal data we process

In general terms, personal data are collected in two situations directly deriving from the activity of Excitasy:

4.1.1 User registration: creation of the customer-account and purposes of data processing

In order to create a customer-account, a personal area is provided where the customer will have to insert the necessary data to identify him/her as a customer. The completion of the first purchase will depend on the provision of additional personal data necessary for the processing of the order and its delivery. The obligatory fields in the forms available for those phases of registration are marked with an asterisk (*).

LUNYVAN S.L. protects the customer's data and will not pass them on to third parties without the knowledge or consent of the owner, as required by law.

In the course of processing the customer's order, it is possible that certain personal data may be disclosed to third parties for the sole purpose of prevention and detection of fraud and always in the sequence of interpellation for this purpose by the competent authorities.

LUNYVAN S.L. works with an invoicing system developed internally to comply with the legal obligations to which it is subject.

In addition, when you make a purchase on the site, you will also be asked for data relating to delivery address and payment details, in order to ensure the greatest possible efficiency and compliance with delivery times.

In order to enable the delivery of orders, some of your data will be passed on to transport companies, namely: Nacex, DHL, DPD and when it is the customer's option, orders can be sent by post.

4.1.2 Dropshipping:

DROPSHIPPING is a service from Excitasy where the shipment is made directly to the final customer.

Data collected: Name, address and telephone number.

Purpose: Identification of the final customer, possibility of contact.

4.2 Cookies

Excitasy uses "cookies" to help determine the usefulness, interest and number of accesses, allowing a quick and efficient navigation, eliminating the need to repeatedly enter the same information. A cookie is a small file with a list of characters, which are sent to your computer when you visit a certain page. When you return to that page, the cookie allows your browser to recognise your browser. Cookies can store user preferences and other information. Note that it is possible to reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website functionalities or services may not function properly without cookies.

4.2.1 Enabling and disabling cookies and similar technologies

Newsletters and other communication may, for statistic purposes, contain information that allows knowing if they are open by weblinks on them.

However, it is always granted to the customer the right to cancel the sending of the newsletter or e-mail communication through the specific option mentioned therein.

The access to the Excitasy online shop presupposes the use of cookies, and their deactivation may condition the navigation on the site.

For more information, we suggest consulting the information offered in each of the browsers or consulting articles with specific information on the subject.

5. Period of conservation of personal data

LUNYVAN S.L. keeps users' data for the time necessary for the operations for which they have been collected, in accordance with the legislation in force.

The data supplied will be kept for the strictly necessary period, which normally corresponds to the period of existence of the customer account. For this reason, as soon as the customer cancels his account, the personal data will be definitively deleted, with the exception of the data necessary for the fulfilment of legal obligations, which will be stored in our own database for this purpose and for the absolutely necessary period of time. If the customer intends to place a new order on the site, he/she must proceed to a new initial registration, being subject to the terms and conditions in force at the date of the same.

6. Security of the processing of your personal data

LUNYVAN S.L. guarantees the protection of your personal data against any loss, destruction, alteration, access, or improper or unauthorised use, adopting all legally required measures for this purpose.

For these purposes, LUNYVAN S.L., has technical and organisational measures that aim to guarantee the security of the information and protect it against any deliberate or accidental act that could cause its manipulation, destruction, loss or unauthorised use.

Despite our efforts, we warn that the Internet is not a secure place of communication. In fact, information transmitted via the Internet can be intercepted by third parties. Therefore, we cannot guarantee the security of the information collected. By using Excitasy’s website and posting information on it, you expressly agree that you do so at your own free will and at your own risk.

7. Right of access, rectification and elimination of personal data. Right to limitation of processing, right to object to processing and right to portability of personal data.

Under the terms of the General Data Protection Regulation, the data subject has the right to request from the data controller access to personal data concerning him/her, as well as their rectification or elimination. The data subject still has the right to demand, in certain circumstances, the restriction of the processing of personal data, as well as the right to object to the processing and the right to data portability.

In the event of automated decisions, including profiling, you may object to such decisions, under the terms and for the purposes of Art. 22.

You will be able to exercise these rights of access, rectification, deletion, limitation to the treatment, opposition to the treatment or portability with LUNYVAN S.L., by sending an e-mail to sales@lunyvan.com or by written communication to the following address:

LUNYVAN S.L.

Gran Vía, 4

28013 Madrid

Spain

(The exercise of these rights may prejudice the possibility of maintaining the legal basis for data processing).

8. Right to lodge a complaint to a supervisory authority

Under the terms of the GDPR, the data subject is informed that the data subject has the right to lodge a complaint to the competent supervisory authority, in this case, the National Data Protection Commission.

9. Data Protection Officer (DPO)

You can contact the LUNYVAN S.L. DPO at any time with any questions regarding the protection of personal data by email to sales@lunyvan.com

10. Contact

Questions, comments and requests regarding this Privacy and Transparency Policy and your inherent rights should be sent to the addresses indicated in point 7.