PRIVACY POLICY

Privacy Policy

We welcome you to our website and thank you for coming this far.

This section contains all the information related to the management of your personal data and our treatment policy for them.

Your privacy is very important to us. In this privacy statement we explain what personal data we collect from our users and how we use it. We encourage you to read these terms carefully before providing your personal data on this website.

In the case of minors under thirteen years of age, the consent of their parents or guardians is required for the processing of their personal data.

In no case will data relating to the professional, economic situation or privacy of the other family members be collected from the minor, without their consent.

If you are under thirteen years of age and have accessed this website without notifying your parents, you should not register as a user.

On this website, the personal data of users is respected and cared for. As a user you should know that your rights are guaranteed.

We have made an effort to create a safe and reliable space and that is why we want to share our principles regarding your privacy:

• We never request personal information unless it is really necessary to provide you with the services you require.
• We never share our users' personal information with anyone, except to comply with the law or in case we have your express authorization.
• We never use your personal data for a purpose other than that expressed in this privacy policy.

It should be noted that this Privacy Policy could vary depending on legislative requirements or self-regulation, so users are advised to visit it periodically. It will be applicable in the event that users decide to fill out a contact form where personal data is collected.

We have adapted this website to the requirements of Organic Law 15/1999, of December 13, Protection of Personal Data (LOPD), and Royal Decree 1720/2007, of December 21, known as the Development Regulation of the LOPD. It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural persons (RGPD), as well as Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSICE or LSSI).

Who is responsible for the processing of personal data?

• Owner: Aesthetic Clothing Company SL (hereinafter, "Owner of the web")
• Registered office: C/ Antonio García Martín 3 2* J, 09007, Burgos, Spain
• CIF: B46293700
• Trade name: Lithe
• Web address: litheapparel.com
• Email: info@litheapparel.com
• Activity: We sell retail textiles.

Data Protection Officer (hereinafter, "DPO"):

• DPO Contact Information: Javier Rioja
• Telephone: 0034 647 08 68 74
• Email: info@litheapparel.com
• Web address: litheapparel.com

For the purposes of the provisions of the aforementioned General Data Protection Regulation, the personal data that you send me through the web forms will receive the data processing of "Web users and subscribers".

For the treatment of our users' data, we implement all the technical and organizational security measures established in the current legislation.

Basic information on data protection

Main purposes of the treatment:

• Manage your registration as a user on our platform.
• Manage the purchase of products.
• Sending commercial communications.
• Resolution of queries raised through the web.

Main legitimizing bases:

• Contract execution.
• Legitimate interest.
• Compliance with legal obligations.

Main recipients:

• Banks and financial entities.
• Security forces and bodies.
• Service providers.
• International data transfers are anticipated.

Rights:

Among others, the right of access, rectification, deletion, opposition and portability of the data, the right to oppose the treatment at any time, for reasons related to your particular situation, in case the treatment is based on legitimate interest.

Origin:

• Provided by the owner.
• Obtained on browsing behavior.

Principles we will apply to your personal information

In the processing of your personal data, we will apply the following principles that comply with the requirements of the new European data protection regulation:

• Principle of legality, loyalty and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you in advance with absolute transparency.
• Principle of data minimization: We will only request data that is strictly necessary in relation to the purposes for which we require it. The minimum possible.
• Principle of limitation of the conservation period: the data will be kept for no longer than necessary for the purposes of the treatment, depending on the purpose, we will inform you of the corresponding conservation period, in the case of subscriptions, we will periodically review our lists and eliminate those records inactive for a considerable time.
• Principle of integrity and confidentiality: Your data will be treated in such a way that adequate security of personal data is guaranteed and confidentiality is guaranteed. You should know that we take all necessary precautions to prevent unauthorized access or improper use of our users' data by third parties.

How have we obtained this data?

The personal data that we process on our website may come from:

• Contact Form
• Purchase process form
• Out of Stock Item Form
• Via email

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation on whether or not we are processing personal data that concerns you on our website.

Interested persons have the right to:

• Request access to personal data relating to the interested party
• Request its rectification or deletion
• Request the limitation of your treatment
• Oppose the treatment
• Request data portability

Interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, the interested parties may oppose the processing of their data. The DPO will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. As an interested party, you have the right to receive the personal data that concerns you, that you have provided us and in a structured format, of common use and mechanical reading, and to transmit them to another data controller when:

• The treatment is based on consent.
• The data has been provided by the person concerned.
• The treatment is carried out by automated means.

By exercising your right to data portability, you will have the right to have personal data transmitted directly from controller to controller when technically possible.

Interested parties will also have the right to effective judicial protection and to file a claim with the control authority, in this case, the Spanish Agency for Data Protection, if they consider that the processing of personal data that concerns them violates the Regulation.

For what purpose do we process your personal data?

When a user connects to this website, for example, to send an email to the owner, or to make a purchase, they are providing personal information for which the owner of the website is responsible. That information may include personal data such as your IP address, name, physical address, email address, telephone number, and other information. By providing this information, the user gives their consent for their information to be collected, used, managed and stored by this website, only as described in the Legal Notice and in this Privacy Policy.

On this website there are different systems for capturing personal information and we treat the information provided by interested persons with the following purpose for each capture system (forms):

Contact Form

We request Name, Email and Telephone, to respond to the requirements of the users of this website. For example, we can use this data to respond to your request and respond to any doubts, complaints, comments or concerns you may have regarding the information included on the website, the services provided through it, the treatment of your personal data, questions regarding the legal texts included on the website, as well as any other questions you may have that are not subject to the contracting conditions.

We inform you that the data you provide us in this form is received by email and will be located on the servers of our email provider. Our mail server belongs to Google and can be inside or outside the EU, these providers are currently covered by the security agreement between the EU and the US (Privacy Shield), so it guarantees adequate levels of security if international transfer is necessary of your data. By completing this form, you expressly consent to said international transfer of data. More information about the data protection of G Suite by Google at https://gsuite.google.com/ .

Purchase process form

In this case, we request Name, Surname, Company Name, CIF, Full address, Telephone, Email, Bank details, to manage the sale, billing and shipping of the products. We may also use this data to send related newsletters, promotions and special offers.

We inform you that the data you provide us in this form will be located on the servers of our Hosting provider within the EU. Our hosting provider is Shopify International Limited, more information at https://www.shopify.com/legal/privacy.

We inform you that the data you provide us in this form is also received by email and will be located on the servers of our email provider. Our mail server belongs to Google and can be inside or outside the EU, these providers are currently covered by the security agreement between the EU and the US (Privacy Shield), so it guarantees adequate levels of security if international transfer is necessary of your data. By completing this form, you expressly consent to said international transfer of data. More information about the data protection of G Suite by Google at https://gsuite.google.com/ .

We inform you that the data you provide us in this form can be shared with Stripe and will be located on their servers, with the sole purpose of charging for your purchase. Stripe's server can be inside or outside the EU, this provider is currently covered by the security agreement between the EU and the US (Privacy Shield), so it guarantees adequate levels of security if the international transfer of your data is necessary. By completing this form, you expressly consent to said international transfer of data. Learn more about Stripe at https://stripe.com .

The electronic bulletins or newsletter that we send to subscribers are managed by MailChimp. Some of the data that you provide us in this form, in this case only the name and email, may be located on MailChimp servers outside the EU, this provider is currently covered by the security agreement between the EU and the US (Privacy Shield ), which guarantees adequate levels of security in the international transfer of your data. By completing this form, you expressly consent to said international transfer of data. Learn more about MailChimp at https://mailchimp.com .

Out of stock product form

In this case, we only ask for your email address for the sole purpose of notifying you by email when the product you are interested in is back in stock.

We inform you that the data you provide us in this form will be located on the servers of our Hosting provider within the EU. Our hosting provider is Our hosting provider is Shopify International Limited, more information at https://www.shopify.com/legal/privacy.

There are other purposes for which we process your personal data:

• To ensure compliance with the terms of use and applicable law. This may include the development of tools and algorithms that help this website to guarantee the confidentiality of the personal data it collects.
• To support and improve the services offered by this website.
• Other non-identifying data is also collected that is obtained through some cookies that are downloaded to the user's computer when browsing this website that we detail in the cookie policy.
• To manage the social networks of our website we can have a presence on social networks. The treatment of the data that is carried out of the people or companies that become followers in the social networks of the official pages of this website, will be governed by this section. As well as those conditions of use, privacy policies and access regulations that belong to the social network that is appropriate in each case and previously accepted by the user of this website. It will process your data for the purpose of correctly managing your presence on the social network, informing about activities, products or services on our website. As well as for any other purpose that the regulations of social networks allow. In no case will we use the profiles of followers on social networks to send advertising individually.

We can share your data collected in our contact forms with service providers such as the agency that handles our accounting and billing or the company in charge of managing our website and marketing. In this case, your data is only processed for the purpose for which they are contracted. For more information about these companies, do not hesitate to contact us.

In accordance with the provisions of the European data protection general regulation (RGPD) 2016/679, the Owner of the website will be responsible for the processing of the data corresponding to Users of the website and subscribers.

We do not sell, rent or transfer personal data that can identify the user, nor will it do so in the future, to third parties without prior consent. However, in some cases collaborations with other professionals can be carried out, in these cases, consent will be required from the users informing about the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest safety standards.

Remarketing

The remarketing function allows us to reach people who have previously visited our website and associate a specific audience with a specific message. Remarketing is a method of getting users who have visited our site to do so again.

As a user of our website, we inform you that we are collecting information for this remarketing function.

The information we collect thanks to this function is collected by Google Adwords cookies. You can find out about the data that these cookies collect in the following privacy policies of the service.

If you do not want your information to be collected by these cookies, you can disable Google's use of cookies through the Google Ad Settings.

Legitimation for the processing of your data

The legal basis for the processing of your data is: consent.

To contact or make comments on this website, consent is required with this privacy policy.

The prospective or commercial offer of products and services is based on the consent that is requested, without in any case the withdrawal of this consent conditioning the execution of the subscription contract.

data category

The categories of data that are processed are identifying data.

Categories of specially protected data are not processed.

How long will I keep your data?

The personal data provided will be kept until its deletion is requested by the interested party or until they are eliminated from the database or mail server due to lack of activity.

To which recipients will your data be communicated?

Many tools that we use to manage your data are contracted by third parties.

To provide services strictly necessary for the development of the activity, the Owner of the website shares data with the following providers under their corresponding privacy conditions:

Google Analytics: A web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses "cookies", which are text files located on your computer, to help cuidatuvista.com analyze the use made by users of the website. The information generated by the cookie about your use of our website (including your IP address) will be directly transmitted to and stored by Google on servers in the United States.

Hosting: Our hosting provider is Shopify International Limited c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. It treats the data in order to provide us with its hosting services.

Email marketing: The email marketing service we use is through MailChimp, with address at 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308. More information at: https://mailchimp.com. MailChimp processes the data in order to perform its email marketing services to Aesthetic Clothing Company SL. We inform you that the data you provide us may be located on MailChimp servers outside the EU, this provider is currently covered by the security agreement between the EU and the US (Privacy Shield), which guarantees adequate levels of security in the transfer international of your data.

Mail server: Service that is responsible for hosting our company's emails and some of the forms on our website. Our mail server belongs to Google Ireland Limited with registered office at Gordon House, Barrow Street, Dublin 4, Ireland and may be inside or outside the EU, these providers are currently covered by the security agreement between the EU and the US (Privacy Shield) , therefore it guarantees adequate security levels if the international transfer of your data is necessary. By completing this form, you expressly consent to said international transfer of data. More information about the data protection of G Suite by Google at https://gsuite.google.com/ .

Third-party services such as: AdSense, AdWords and Google Analytics are included in this type of cookies, as well as a series of DoubleClick brand services. When you visit this page, cookies from those services are sent to your browser. See more information about the types of cookies that Google uses , and discover how Google uses these cookies .

In the case of cookies generated by Google Analytics, Google Adwords or DoubleClick related to Google's analytics and advertising services, they do not expire automatically.

You can use your ad settings to manage the Google ads shown to you and to opt out of interest-based ads. Even if you opt out of these types of ads, they may still appear based on factors such as your general location derived from IP address, browser type, and recent and past searches related to your current search. If you would like more information about this practice and to learn about your choices to prevent these companies from using this information, click here .

Navigation

When browsing our website, non-identifiable data may be collected, which may include IP addresses, geographic location (approximately), a record of how the services and sites are used, and other data that cannot be used to identify the user. Among the non-identifying data are also those related to your browsing habits through third-party services. This website uses the following third-party analysis services:

• google analytics

We use this information to analyze trends, administer the site, track users' movements around the site, and to gather demographic information about our user base as a whole. This also allows us to carry out personalized promotions in a timely manner.

Privacy and data security

This website is committed to the use and treatment of the personal data of the users, respecting their confidentiality and using them in accordance with the purpose of the same, as well as to comply with their obligation to save them and adapt all measures to avoid alteration. , loss, treatment or unauthorized access, in accordance with the provisions of current data protection regulations.

This website includes an SSL certificate. It is a security protocol that makes your data travel in an integral and secure way, that is, the transmission of data between a server and a web user, and in feedback, is totally encrypted or encrypted.

The Owner of the web cannot guarantee the absolute impregnability of the Internet network and therefore the violation of the data through fraudulent access to them by third parties.

With respect to the confidentiality of the processing, the Owner of the website will ensure that any person who is authorized by this website to process the client's data (including its staff, collaborators and providers), will be under the appropriate obligation of confidentiality (either a contractual or legal duty).

When a security incident occurs, upon realizing the Owner of the web , he must notify the client without undue delay and must provide timely information related to the Security Incident as it is known or when the Client reasonably requests it.

Accuracy and veracity of the data

As a user, you are solely responsible for the veracity and correctness of the data that you send to this website, exonerating the Owner of the website from any responsibility in this regard.

Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

Acceptance and consent

The user declares to have been informed of the conditions on the protection of personal data, accepting and consenting to the treatment thereof by the Owner of the website in the manner and for the purposes indicated in this privacy policy.

revocability

The consent given, both for the treatment and for the transfer of the data of the interested parties, is revocable at any time by notifying the Owner of the website in the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case be retroactive.

Privacy Policy Changes

The Owner of the website reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as industry practices. In such cases, the Owner of the website will announce on this page the changes introduced with reasonable anticipation of their implementation.

commercial mail

In accordance with the LSSICE, this website does not carry out SPAM practices, so it does not send commercial emails that have not been previously requested or authorized by the user. Consequently, in each of the forms on the web, the user has the possibility of giving their express consent to receive the newsletter, regardless of the commercial information promptly requested.

In accordance with the provisions of Law 34/2002 on Services of the Information Society and electronic commerce, this website undertakes not to send communications of a commercial nature without properly identifying them.