DATA PROTECTION

Website owner data

COMPANY NAME SHOW YOUR MAGIC GROUP SL
NIF B85772846
DOMAIN https:/companiafantastica.com
MAILING ADDRESS C/ Orellana 10, ground floor right, Madrid
E-MAIL eshop@ciafantastica.com
TELEPHONES 915552505
REGISTRATION NUMBER / ADDITIONAL DATA Volume: 27015 Folio: 145 Sheet: M-486729

Data protection

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by SHOW YOUR MAGIC GROUP SL with NIF B85772846 and registered office located at ORELLANA 10 BAJO DERECHA, 28004 MADRID (MADRID). Below, we indicate the most notable aspects of the treatments carried out:

Form Management

Purpose: To respond to your queries and/or requests.

Retention period: as long as consent is maintained. Legitimate basis:

The consent of the interested party.

Data Type:

Basic data: Name and surname, Email address, IP address

Commercial actions web form

Purpose: Collection, registration and processing of data for the purposes of responding to your queries and/or requests, as well as for advertising and commercial prospecting.

Retention period: as long as consent is maintained, unless legally required.

Legitimate basis: The consent of the interested party.

Data Type:

Basic data: Name and surname, Email address, IP address

Online product purchase management

Purpose: Collection, registration and processing of data in order to manage the payment and delivery of products.

Conservation period: 5 years in compliance with tax law and 10 years for tax documentation in compliance with LO 7/2012.

Legitimate basis: Compliance with a law.

Data Typology:

Basic data: Name and surname, Postal address, Email address, Signature, Financial or insurance data

Assignments: your data will be communicated, if necessary, to the Tax Agency, Banks, Savings Banks and Organizations and/or public administration with jurisdiction in the matter in order to comply with the tax and fiscal obligations established in the applicable regulations. In addition, it is reported that the legitimate basis for the assignment is compliance with a law.

User registration

Purpose: Collection, registration and processing of data in order to register as a user.

Retention period: as long as consent is maintained, unless legally required.

Legitimate basis: The consent of the interested party.

Data Type:

Basic information: Name and surname, Telephone, NIF, Postal address, Email address

Web User Management

Purpose: Collection, registration and processing of user data. Retention period: as long as consent is maintained, unless legally required.

Legitimate basis: The consent of the interested party.

Data Typology:

Basic information: Name and surname, Email address:

Newsletter

Purpose: Management of the newsletter subscription, to make the corresponding shipments.

Retention period: as long as consent is maintained.

Legitimate basis: The consent of the interested party.

Data Typology:

Basic information: Name and surname, Email address

Installation of cookies

Purpose: Management and installation of cookies.

Retention period: as long as consent is maintained.

Legitimate basis: The consent of the interested party.

Data Typology:

Basic data: Email address, IP address

Rights of interested parties

SHOW YOUR MAGIC GROUP SL informs Users that they may exercise their rights of access, rectification, limitation, deletion, portability, opposition to the processing of their personal data and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the right to withdraw the consent given.

  • Right of Access: This is the user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data processed and legal information on the processing (purposes, legitimate basis, retention periods, transfers, origin of the data, etc.)
  • Right of Rectification: This is the right of the affected party to have data that is found to be inaccurate or incomplete modified. In relation to the website, this right may only be fulfilled in relation to information that is under the control of the website, for example, deleting comments published on the website itself, images or web content containing personal data of the user.
  • Right to Limitation of Processing: This is the right to have the purposes of processing originally intended by the data controller limited in certain cases.
  • Right to Deletion: This is the right to delete the user's personal data, except as provided for in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defense of claims, etc.).
  • Right to Portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit them to another controller when the processing is based on consent or the execution of a contract and is carried out by automated means.
  • Right to Object: This is the user's right to prevent the processing of their personal data or to stop the processing of said data by the website when the processing is based on legitimate interest or public interest or when it involves direct marketing processing.
  • Right not to be subject to automated decisions, including profiling: Where processing is not necessary for entering into or performing a contract, is not authorised by Union or Member State law and is not based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you.
  • Right to withdraw consent: For any processing based on your consent, you have the right to withdraw it, at any time and free of charge.

To exercise any of the data protection rights described above, you must follow these instructions:

  • Submission of a written request to the address ORELLANA 10 BAJO DERECHA,28004 MADRID(MADRID) (to the attention of SHOW YOUR MAGIC GROUP SL) or by email to eshop@ciafantastica.com.
  • The letter sent by the owner of the personal data (interested party) requesting the exercise of rights must take into account the following:
  • The applicant must provide reliable identification and, if there are any doubts about the identity of the applicant, he/she will be asked to correct the request (e.g. by requesting more information, such as the ID number, the ID document, the email address provided, etc.)
  • The request may be made by the representative, legal or voluntary, when he or she is duly identified and authorized by the owner of the data (through express authorization from the owner to exercise the very personal rights regulated in the regulations on the protection of personal data).
  • Request specifying the application (Right/s that you intend to exercise). If you do not refer to a specific treatment, you will be provided with a response in relation to all the treatments that affect your personal data. If you request information about a specific treatment, only the information about it. If you request it by telephone, you will be told to do so in writing and you will be informed of how you can do so and the address to which you must send it. You will never be given information over the telephone.
  • Postal or electronic address for notification purposes
  • Documents supporting the request you make, if necessary
  • The applicant must use any means that allows proof of the sending and receipt of the application.

Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency if you become aware of or consider that a fact may constitute a breach of the applicable data protection regulations.

SHOW YOUR MAGIC GROUP SL undertakes to adopt the necessary technical and organisational measures, in accordance with the level of risks that accompany the treatments carried out by them and indicated in the section on the terms and conditions of use, in order to guarantee their integrity, confidentiality and availability.

In order to offer you Klarna's payment methods, we may pass on your personal data in the form of contact details as well as order details during the checkout process to Klarna, so that Klarna can assess whether you qualify for its payment methods and also adapt the payment methods available to you. Your transferred personal data is processed in accordance with Klarna's privacy notice.