In compliance with the provisions of data protection regulations (EU Regulation 2016/679, of April 27, 2016), transposed into national law by Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, MERY SALES XXXXXX (hereinafter, “The Owner”) establishes the following Privacy Policy, which will be followed in the processing of personal data. This policy is understood, in any case, without prejudice to the provisions set forth in the corresponding Legal Notice and the applicable Cookie Policy.

1.- Identity of the Data Controller
Data Controller: MERY SALES XXXXXXX
Registered Address: XXXXXXXX (Castellón), Spain
Phone: XXXXXXXX
Email: XXXXXXXXXXXXXXXXX

2.- Contact Details of the Data Protection Officer:
The data that may be requested from users of this Website through contact forms, other data provided merely by accessing the Website (cookies), data related to possible comments on the various corporate social media pages linked from this Website, personal data that the user enters in the enabled sections, or data provided through other available communication channels (e.g., email) will be processed by the data controller indicated above.
3.- Purposes of the Processing
The purposes depend on the type of data processing carried out:
• Simply by visiting the Website, certain information is collected on the servers providing hosting services. This information includes the IP address from which the Website is accessed. The purpose of this processing is to facilitate your navigation on the Website. We may also collect certain information (cookies), which will be processed according to the specific Cookie Policy that you can consult.
• If you provide us with your data through one or more of the enabled forms, the purpose will be the one indicated in the corresponding form. For example, if you provide your data through contact forms, the purpose will be to respond, where applicable, to the inquiry submitted. In the case of using the chat service, we will process the data in relation to the query made, if applicable.
• If you provide information through one or more of the social media platforms maintained by this entity and linked through this Website, with this entity assuming the role of Data Controller for the provided data (for example, photos uploaded by us or third parties, comments made by the user regarding our posts, etc.), we will process the information exclusively in relation to your query, management, or comment, and always within the social network and in its context. Under no circumstances will we extract this data unless we obtain the user’s consent.
However, the use of these platforms is subject to full acceptance of their terms and conditions, which implies the processing of your data under conditions different from those set forth here. The official profiles on the social networks linked from this Website have been created to allow you to better understand our activity and to provide an alternative communication channel with individuals interested in our entity and the services we offer. Nevertheless, we disclaim any responsibility for the data processing carried out by the companies managing these social networks.
• If you provide us with personal data via email or through other means (traditional or otherwise), we will generally process your data in relation to the management or inquiry submitted. In compliance with Law 34/2002, on Information Society Services and Electronic Commerce, the Owner will not send commercial communications without identifying them as such and without prior notice. For these purposes, any information sent to the users will not be considered a commercial communication, provided that it is intended to maintain the contractual relationship, respond to their request, or convey other information directly related to their inquiry, if applicable.
• If you place an order through our online store, the purpose will be related to customer management, payment processing, and the handling and delivery of the product, if applicable, to the indicated address. We may also use the data for sending commercial communications.
• The retention period of your data will depend on the type of processing carried out:
• Data related to the cookies on this Website have a retention period specified in the Cookie Policy.
• Data provided to us through the means made available on this Website (forms, email, purchases) will be retained for as long as the relationship with the user lasts or until the user withdraws their consent, if applicable. Subsequently, we will retain the data according to whether there is a legal obligation, in any case respecting the minimum period required depending on the relationship or the management being carried out.
• Data provided on the social media platforms linked through this Website will be retained by us until the user withdraws their consent. However, it is possible that the responsible entities retain this data according to other processing policies, for which we assume no responsibility.
4.- Legal Basis for Processing
The legal basis depends on the type of data processing carried out:
• The existence of one or more legal obligations requiring us to process the data. For example, we will retain billing data due to tax and accounting legal obligations for 6 years.
• You have given us your consent to process your data under the terms stated, by checking the corresponding acceptance box during the registration process. This applies, for example, to the sending of commercial communications.
• There is a legitimate interest for the processing. For example, if the user provides us with their data in relation to a requested service, we will process it because we consider it necessary to provide an appropriate response.
• There is a prior contractual relationship. This is the case with the online purchase of products from our online store.
5.- Recipients of Your Data
In addition to the Data Controller mentioned above, the data may be processed by other entities depending on the nature of the data processing:
• Entities responsible for the social media platforms linked from this Website, in case the user provides information through them.
• Certain companies responsible for the cookies stored on your device simply by visiting this Website may have information associated with your IP address, browsing habits, etc., as described in the corresponding Cookie Policy.
• Certain service providers related to this Website. For example, the entity providing hosting services and the entity responsible for the transportation of the purchased product(s).
• By legal obligation, the Spanish Tax Agency may also require us to provide tax-related information, which we are obliged to supply.
6.- Rights of Data Subjects and How to Exercise Them
Any individual has the right to obtain confirmation as to whether this entity is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of claims.
In other circumstances, and for reasons related to their particular situation, data subjects may object to the processing of their data.
In cases where you have given your consent, we also inform you that you have the right to withdraw it at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal. If requested, this entity will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.
You may also request that your data be processed by another entity, with this entity facilitating the portability of your data to the new controller. For this purpose, specific forms have been prepared (available upon request) so that you can exercise your rights of access, rectification, deletion, restriction of processing, objection to processing, objection to automated individual decision-making including profiling, and data portability. In any case, if you believe that these rights have not been properly fulfilled by us, you are informed that you may file a complaint with the supervisory authority (Spanish Data Protection Agency, Jorge Juan 6, 28001, Madrid, or via its electronic headquarters https://sedeagpd.gob.es).
In any case, you may send your communications and exercise the rights of access, rectification, deletion, and objection by mail addressed to the address indicated for the Owner and the address specified in section 1 of this document. To exercise these rights and in compliance with Instruction 1/1998 of January 19, issued by the Spanish Data Protection Agency, you must prove your identity by sending a copy of your National Identity Document or any other legally valid means.
7.- Source of Data When Not Obtained from the Data Subject
The Owner maintains several pages and/or profiles on various social media platforms linked through this Website. The Owner is not responsible for content published by third parties on these social networks. The use and processing of data by third parties on these social networks will be subject to their own general or specific terms, different from those set forth herein.
8.- Acceptance and Consent
The User declares that they have been informed of the conditions regarding the protection of personal data and accepts and consents to its processing by the Owner in the manner and for the purposes indicated in this Privacy Policy.