Privacy Policy

At ELORA SMART SL we are committed to protecting and respecting your privacy. This Privacy Policy explains what personal data we collect, how we use it and what your rights are. We recommend that you read it carefully before providing us with your data.

Data Controller

Notice Regarding Minors

Persons over the age of fourteen may use the services of elorasmart.com without the prior consent of their parents or guardians. Such consent is required for persons under the age of fourteen. Under no circumstances will data be collected from minors regarding the professional or financial situation or the privacy of other family members.

Data We Collect and How We Obtain It

The personal data we process comes from the following forms:

• Contact form: name and email address, in order to respond to your enquiries.
• Purchase form: first name, surname, email address, telephone number, delivery address and billing details, in order to process and deliver your order.
• Subscription to the Elora Club: name and email address, in order to send you commercial communications and give you access to pre-sales.
• Cookies and browsing data: IP address, browser type, pages visited and time spent on the site, in anonymised form for statistical analysis.

Purposes of Processing

• To manage and process orders placed through the Website.
• To respond to enquiries and requests for information.
• To send commercial and promotional communications to Elora Club subscribers (with their express consent).
• To improve the browsing experience and the services of the Website through statistical analysis.
• To comply with applicable legal obligations (accounting, taxation, fraud prevention).
• To manage our presence on social media.

Legal Basis for Processing

• Performance of a contract: where processing is necessary to process your order.
• Consent of the data subject: for sending commercial communications and for the use of non-essential cookies.
• Legitimate interest: for the security of the Website and fraud prevention.
• Legal obligation: for compliance with tax and accounting obligations.

Principles Applied to Processing

• Lawfulness, fairness and transparency: we will always ask for your consent for specific purposes.
• Data minimisation: we only collect the data that is strictly necessary.
• Storage limitation: data is kept for as long as necessary for the purpose for which it was collected and, in any event, for the periods required by law.
• Integrity and confidentiality: we apply technical and organisational measures to ensure the security of your data.

Retention Period

Customer data is kept for the duration of the contractual relationship and, once it has ended, for the applicable legal periods (generally 5 years for tax obligations and 6 years for commercial obligations). Subscriber data is kept until you ask to unsubscribe. Contact data is kept for 1 year from the last communication.

Disclosure of Data to Third Parties

ELORA SMART SL does not sell, rent or transfer your personal data to third parties, except in the following cases:

• Carriers and logistics companies: for the delivery of orders (name, address and contact telephone number).
• Banks and payment gateways: to process payments securely (ABANCA through its Cecabank gateway, PayPal and seQura).
• Technology service providers: hosting, email and analytics tools, under data processing agreements with appropriate safeguards.
• Legal obligation: where required by the competent judicial or administrative authorities.

International Transfers

No international transfers of data are made outside the European Economic Area, except through providers that offer appropriate safeguards in accordance with the GDPR (standard contractual clauses, adequacy decisions, etc.).

Your Rights

You may exercise the following rights at any time:

• Access: to know what personal data we process about you.
• Rectification: to correct inaccurate or incomplete data.
• Erasure (‘right to be forgotten’): to request the deletion of your data when it is no longer necessary.
• Restriction of processing: to request that we suspend processing in certain circumstances.
• Portability: to receive your data in a structured, commonly used format.
• Objection: to object to the processing of your data on grounds relating to your particular situation.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise your rights, send a written request to [email protected] or by post to Avda. da Mahía, 17, bajo 2 — 15220 Bertamiráns (AMES), stating your first name, surname, Spanish ID number (DNI/NIE) and the right you wish to exercise.

If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

Security

ELORA SMART SL has implemented appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or accidental disclosure. Communications are carried out using the HTTPS protocol with SSL/TLS encryption. Payments are processed through the secure ABANCA gateway (Cecabank), and ELORA SMART SL does not store any bank card details.

Commercial Communications

If you have given your express consent when subscribing to the Elora Club or during the purchase process, we may send you commercial communications about our products, promotions and news. You may unsubscribe at any time by clicking the unsubscribe link included in each email or by writing to us at [email protected].

Changes to the Privacy Policy

ELORA SMART SL reserves the right to amend this Privacy Policy to adapt it to legislative changes or changes to its services. We will notify you of any relevant changes through the Website or by email.

Contact

For any questions about this Privacy Policy, you can contact us at [email protected] or call us on +34 614 45 19 01.