"Mumy Room" is deeply committed to complying with Spanish and European regulations for the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures set forth in the General Regulations of Data Protection (RGPD) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform that the use of our blog may require that certain personal data to be provided through registration or contact forms, or by emails, and that these will be processed by "Mumy Room", Responsible for its treatment, whose data are:

• Company Name: Kosenrufu, S.L.

• CIF: B86993243

• Registered Office: C/ Augusto Figueroa, 22, 28004, Madrid

• Telephone: 911 377 708

• eMail: [email protected]

 

Obtaining and Processing of Personal Data

 

Personal data is any information related to a person: name, email, address, telephone number, NIF / NIE ... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.

"Mumy Room", as Data Controller, has the duty to inform the Users of its website about the collection of personal data that can be carried out, either by sending emails or by filling in the forms included in the website.

Only the precise data will be obtained to be able to perform the contracted service or to be able to respond adequately to any information requested by the User. The data collected is identifying and corresponds to a reasonable minimum to carry out such activity. In particular, there is no collection of any special protected data. In no case will the data be used differently than the purpose for which it has been collected.

 

Contact / email forms

 

Purpose: To respond to your request for information made through our contact form / s.

Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.

Data transfer: Personal data will be processed through servers managed by Sysprovider, which will be considered by the Data Controller.

 

Registration forms in the mailing list (newsletter)

 

Purpose: The sending of communications, some of them commercial, of interest to the Users according to the theme of the blog. As established by the LSSICE, "Mumy Room" undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to clients for the maintenance of the existing contractual relationship, if any, will not be considered as commercial communication.

Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.

Data transfer: Personal data will be processed through servers managed by Mailchimp, which will be considered by the Data Controller.

 

Customer registration / registration forms /

Purposes:

• Manage your User registration on our website.

• Manage purchases made.

• Provide information about the processing and status of purchases.

• Historical record of purchases made on our website.

• Manage comments and content.

• Sending communications through email and / or telephone, in order to inform the User of possible incidents, errors, problems and / or order status.

Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.

Data transfer: "Mumy Room" will not transfer or communicate your data to any third party, except in the cases provided by law or when the provision of a service implies the need for a contractual relationship with a Treatment Manager. Thus, the User accepts that some of the personal data collected be provided to these Treatment Managers (payment platforms, agency, intermediaries, etc.), when necessary for the effective performance of a contracted service or purchased product. The User also accepts that some of the services may be, totally or partially, subcontracted to other people or companies, who will be considered Data Managers, with whom the corresponding confidentiality contract has been agreed, or adhered to their policies of privacy, established in their respective web pages. The User may refuse the transfer of your data to the Treatment Managers, by written request, by any of the aforementioned means.

In addition, in those cases in which it is necessary, Customer data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspection, etc.

 

Feedback form

 

Purposes: make a comment or review for publication on the website.

Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.

Data transfer: Personal data will be processed through the servers managed by Google,company that manages the specific module of web comments, and that will be considered in charge of the treatment.

 

Minors

 

Only people over 14 years may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition so that we can process their personal data.

On the other hand, only people over 18 years may contract our services. In the case of minors under 18 years , the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

 

User Registration

 

When the User registers through the corresponding form, the information we collect includes:

• Name and surname

• Email and / or phone

• Shipping addresses

• IP

• Username Password

They may also register through "social login" (through Facebook or Google).

In addition, the User must accept the Contract Conditions, set out in another section of the website.

The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter email to continue with the process and be able to modify it, by clicking the link that will be sent to the email address provided. The User is responsible for keeping his/her password confidential, as well as all the use that is made of it. You must notify "Mumy Room" of any unauthorized use made on your account or of your password as soon as possible.

The User, once registered, has access to a private panel, where certain content, record of purchases made, etc. can be seen. You can also manage your account options, such as password or User data.

The User may receive the following notifications:

• When registering on the platform (account validation email).

• When shopping, such as a confirmation or incidents and shipments made, etc.

• The User receives the store's newsletter if has registered on it, from which they can unsubscribe at the User panel and in the corresponding links included at the bottom of the newsletter.

• For password recovery (specified in the previous field).

• By unsubscribing or deleting the account.

 

Security measures

 

Users of the "Mumy Room" website are informed that the security, technical and organizational measures within our reach have been adopted to prevent the loss, misuse, modification, unauthorized access and theft of data, and that the confidentiality, integrity and quality of the information contained is guaranteed therein, in accordance with the provisions of current regulations on data protection. The personal data that is collected in the forms is subject to treatment only by "Mumy Room´s" staff or the designated Treatment Managers.

The "Mumy Room" Website also has SSL encryption, which allows the User to send their personal data safely through the contact or registration forms of the website.

 

Data veracity

 

The User declares that all the data provided is true and correct and commits to keep it updated. The User will be liable for the veracity of the data and will be the only responsible for any conflicts or litigation that may result from their falsity. It is important that, in order for us to keep the personal data updated, the User informs "Mumy Room" when changes are done.

 

Exercise of User Rights

 

The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. That’s why the User must provide documentation that proves their identity (ID or passport), by email to [email protected], or by written communication to the address that appears in our Legal Notice. This communication must reflect the following information: name and surname of the User, the object of the request, the address and the supporting data.

The exercise of rights must be carried out by the User alone. However, they may be executed by a person authorized as the User's legal representative, providing the documentation that proves such representation.

The User may request the exercise of the following rights:

• Right to request access to personal data, which is the right to obtain information about whether the own personal data is being processed, the purpose of the processing that, where appropriate, is being carried out, as well as the information available on the origin of such data and the communications made or planned thereof.

• Right to request rectification in case the personal data is incorrect or inaccurate, or deletion of the data that turns out to be inappropriate or excessive.

• Right to request the limitation of its treatment, in which case "Mumy Room “will only be keep the data strictly necessary for the exercise or defense of claims.

• Right to oppose the treatment: refers to the right of the interested party stop the treatment of their personal data or to cease it in the cases in which a consent is not necessary for the treatment, in the case of files of commercial projection or that have the purpose of adopting decisions related to the interested party and only based on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims they have to continue to be treated.

• Right to data portability: in case you want your data to be processed by another company, "Mumy Room" will facilitate the portability of your data in exportable format.

In case that consent has been granted for a specific purpose, the User has the right to withdraw such consent at any time, without affecting the legality of the treatment based on the prior consent to its withdrawal.

We guarantee the execution of all these rights within the maximum legal term (1 month).

If a User considers that there is a problem with the way "Mumy Room" is handling their data, they can present the claims to the Security Manager or to the corresponding data protection authority, being the Spanish Agency for Data Protection the one indicated in the case of Spain.

 

Data retention

 

The personal data of the Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to meet the request for information, or until the consent granted is revoked.

The Client's personal data will be processed until the contractual relationship ends. The period of conservation of personal data will be the minimum necessary, and can be kept until:

• 4 years: Law on Violations and Sanctions in the Social Order (obligations regarding affiliation, registration, cancellation, contributions, payment of salaries ...); Arts. 66 and following General Tax Law (accounting books ...)

• 5 years: Art. 1964 Civil Code (personal actions without special term)

• 6 years: Art. 30 Commercial Code (accounting books, invoices ...)

• 10 years: Art. 25 Law for the Prevention of Money Laundering and Terrorism Financing.

• No deadline: non-added and anonymous data.

For its part, the Users´ data who register in the bulletin or newsletter will be kept indefinitely, until the consent granted is revoked.

In the case of data processing of candidates (C.V.), "Mumy Room" may keep your resume stored for a maximum of two years to incorporate it into future calls, unless the candidate states otherwise.

 

Social Media

 

"Mumy Room" has profiles on some of the main social media on the Internet (Facebook, Pinterest, Instagram), being Responsible anyway for the treatment of the data of its followers, fans, subscribers, commentators and other User´s profiles (hereinafter, followers) published by “Mumy Room”.

The purpose of data processing by "Mumy Room", when the law does not forbids it, will be to inform its followers about its activities and sales, throughout social media possibilities, as well as to provide personalized attention service to user. The legal basis that legitimizes this treatment will be the consent of the interested party; this may be revoked at any time.

In no case "Mumy Room" will extract data from social networks, unless the User's consent is specifically and expressly obtained for it (for example, to carry out a contest).

 

International Data Transfers

 

"Mumy Room" uses Mailchimp, services to send communications a company located in the United States that does not have the adequate level of protection by the European Commission. In addition, "Mumy Room" makes use of US social media such as Facebook, Instagram or Pinterest. The User, whenever appropriate, expressly and unequivocally grants the consent for the processing of the data and for the international transfer of such data to this service provider company.

 

Staffs selection

 

The applicant who sends electronic communications to "Mumy Room" in order to apply for staff selection processes authorizes us to analyze the documents that are sent (for example, the CV), all the content that is directly accessible Through Internet search engines (for example, Google), the profiles that you maintain in professional social media (for example, LinkedIn), the data obtained in the access tests and the information that you reveal in the job interview, with the aim to assess your candidacy and be able, where appropriate, to offer you a job. In the event that the candidate is not selected, "Mumy Room" may keep the C.V. rendered for a maximum of two years, to be included in future calls, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.

 

Confidentiality

 

The information provided by the User will, in any case, be considered confidential, without it being used for purposes other than those described here. "Mumy Room" undertakes not to disclose or reveal information about the User's claims, the reasons for the advice requested or the duration of its relationship with the User.

 

Validity

 

This privacy and data protection policy has been drafted by ExpertosLOPD®, an office specialized in data protection for online stores, as of October 1, 2020, and may vary depending on the changes in regulations and jurisprudence that are taking place, being the responsibility of the owner of the data to read the updated document, in order to know their rights and obligations in this regard at all times.