Skip to content

Privacy Policy

I. PRIVACY AND DATA PROTECTION POLICY

In accordance with current legislation, Vereness (hereinafter also referred to as the Website) is committed to adopting the necessary technical and organizational measures appropriate to the level of security required for the risk associated with the collected data.

Laws incorporated into this privacy policy:
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

 

Identity of the Data Controller:
The data controller of personal data collected through Vereness is Juan Manuel García Cayetano, NIF/CIF: 75880427T. Address: C. López de Ayala, 44. 06480. Montijo. Badajoz. Spain. Phone: +34 655140893. Email: info@vereness.com

Processing of Personal Data:
In compliance with the GDPR and LOPD-GDD, personal data collected through the Vereness Website will be processed by the Controller for the purposes described in this Privacy Policy, including the management of orders, payments, invoicing, shipping, inquiries, subscriptions and other interactions with Users.

Principles applicable to personal data processing:
The processing of User data will be subject to the following principles, as outlined in Article 5 of the GDPR and the applicable provisions of Organic Law 3/2018:

  • Lawfulness, fairness and transparency: personal data will be processed only where there is a valid legal basis under applicable data protection law, and Users will be provided with clear information about such processing.
  • Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.
  • Data minimization: Only data strictly necessary for the intended purpose will be collected.
  • Accuracy: Data must be accurate and kept up to date.
  • Storage limitation: Data will be stored only as long as necessary for processing.
  • Integrity and confidentiality: Data will be processed securely and confidentially.
  • Accountability: The Controller is responsible for ensuring compliance with these principles.

 

Categories of personal data:
The categories of personal data processed by Vereness may include identification and contact data, billing and shipping information, order and transaction data, communications with the User, and technical or browsing data generated through the use of the Website. Vereness does not intentionally process special categories of personal data within the meaning of Article 9 GDPR.

Legal basis for data processing:
The legal basis for processing depends on the purpose of the processing. Data necessary to manage orders, payments, invoicing, shipping and the contractual relationship are processed for the performance of a contract and, where applicable, compliance with legal obligations. Processing based on consent, such as certain marketing communications or non-essential cookies, will only be carried out where the User has given valid consent. Where necessary, Vereness may also process limited personal data on the basis of its legitimate interests in preventing fraud, ensuring the security of the Website and transactions, and establishing, exercising or defending legal claims, provided that such interests do not override the rights and freedoms of the User. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

Purposes of data processing:
Personal data is collected and managed by Vereness to facilitate the fulfillment of commitments with the User, manage inquiries, or maintain the relationship reflected in submitted forms. This includes the management of orders, payments, invoicing and the shipment and delivery of purchased products.
Where applicable, personal data may also be processed for Website analytics and improvement, fraud prevention and security, and to send newsletters or promotional communications where permitted by law. Analytics and advertising technologies requiring consent will only be activated after the User has given such consent through the Website’s consent mechanism.

Users will be informed at the time of data collection about the specific purposes of processing.

Data retention periods:
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected. Data relating to orders, invoicing and the contractual relationship will be retained for the duration of that relationship and thereafter for the applicable statutory retention and limitation periods. Data processed on the basis of consent will be retained until the User withdraws consent or requests deletion, unless continued retention is required by law.

Recipients of personal data:                                                                                                                                                                    User data may be shared with the following:

 
  • Google Analytics (Google LLC, USA) – for website usage analytics. More info: https://policies.google.com/privacy?hl=en
  • Google Ads (AdWords) – for conversion tracking and ad personalization. More info: https://policies.google.com/privacy?hl=en 
  • The Rocket Science Group LLC d/b/a Mailchimp (an Intuit company) – for newsletter subscription management and the sending of marketing communications. More info: https://mailchimp.com/legal/
  • Stripe Payments Europe, Ltd. – for secure online payment processing. More info: https://stripe.com/en/privacy
  • Sered – for website hosting and maintenance. More info: https://sered.net/
  • Shipping and logistics companies – for items delivery. By default, UPS is used (including its affiliates or logistics partners in the destination country). Alternatively, GLS or Correos España (and their respective affiliates or logistics partners in the destination country) may be used upon explicit request by the buyer before completing the purchase process.
Some service providers may process personal data outside the European Economic Area, in particular in the United States. Where this occurs, international transfers will be carried out on the basis of an adequacy decision, including the EU-U.S. Data Privacy Framework where applicable, or other appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Further information about the applicable safeguards may be obtained from the privacy policies of the relevant providers or by contacting Vereness.
 

Minors’ personal data:
Where processing is based on consent, individuals aged 14 or over may generally provide their own consent in accordance with Spanish law. For children under 14, consent must be provided or authorised by the holder of parental responsibility, except where applicable law provides otherwise.

Data confidentiality and security:
Vereness implements appropriate technical and organizational measures to ensure the security of personal data. The Website uses SSL (Secure Socket Layer) encryption.
While Vereness cannot guarantee total internet invulnerability, it commits to informing affected Users without undue delay of a personal data breach likely to result in a high risk to their rights and freedoms, where required by applicable law.

All personal data will be treated as confidential. The Controller will ensure confidentiality is upheld by employees, partners, and third parties.

User rights under GDPR and Spanish Law:                                                                                                                                                Users may exercise the following rights:

  • Access: Confirm whether Vereness processes their data and access that data.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure (Right to be Forgotten): Request deletion of data when it is no longer necessary or lawfully processed.
  • Restriction of Processing: Request limitation under certain conditions.
  • Data Portability: Receive their data in a structured, commonly used format and transmit it to another controller.
  • Objection: Oppose the processing of their personal data.
  • Automated Decision-Making: Not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except where permitted by applicable law.

Requests to exercise these rights may be sent to the Controller, clearly indicating the right the User wishes to exercise and providing sufficient information to identify the relevant data or account. Where Vereness has reasonable doubts concerning the identity of the person making the request, additional information necessary to confirm their identity may be requested.

Requests can be sent to postal address: C. López de Ayala, 44. 06480. Montijo. Badajoz. Spain or email: info@vereness.com

Links to third-party websites:
The Website may contain links to third-party websites. These are not operated by Vereness, and such third parties are responsible for their own privacy practices.

Complaints to the Supervisory Authority:
If the User believes that their data is being mishandled or that regulations are being violated, they have the right to file a complaint with a supervisory authority, particularly in their country of residence, place of work, or where the violation allegedly occurred. In Spain, the relevant authority is the Spanish Data Protection Agency: https://www.aepd.es/ 

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

Users are encouraged to read this Privacy Policy carefully in order to understand how Vereness processes their personal data. Where a particular processing activity requires consent, such consent will be requested separately through an appropriate affirmative mechanism.

Vereness reserves the right to modify this Privacy Policy at its sole discretion, or due to legislative, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency.
Users are encouraged to review this Privacy Policy periodically. Where required by applicable law, Users will be informed of material changes affecting the processing of their personal data.

This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 and Organic Law 3/2018 on personal data protection and digital rights.