Privacy policy
Who is responsible for processing your data?
Identification of the Data Controller:
CREACIONES MIRTO, S.A.U.
C/ Emilio Muñoz, 57 – 28037 Madrid – Spain
VAT number A-28100717
Registered in the Commercial Register of Madrid, Sheet M-82896, Folio 146, Volume 5.053, Inscription 28th.
Email: datos@mirto.com
Phone: +34 91 440 29 56
What are the purposes of processing your data?
The data collected on the website will be processed to manage the registration and creation of an account in MIRTO where Users will have the possibility to consult the company's products and services and access offers and promotions. Likewise, the information may be completed for the management of online purchases.
Users who wish to do so may subscribe to the Newsletter service, where the requested data will be processed for the electronic sending of the latest news, offers, and promotions of the brand.
Users have the WhatsApp channel where they can make any type of inquiry.
MIRTO undertakes to collect only strictly necessary data. Users will be informed, if applicable, of the obligation to provide certain data.
Categories of data:
Regarding registration with MIRTO, the personal data that may be subject to processing are identifying data that includes name, surname, and email; when completing the user profile to manage an order, data related to the complete address, company, telephone number, as well as economic information, including information from the bank card (name of the holder, card number, expiration date, and control digits) will be processed.
Users who wish to subscribe to the newsletter service must provide their email address.
No specially protected data is processed.
How have we obtained your data?
The data processed by MIRTO is that which the User has voluntarily provided to MIRTO through the Channels of the website.
Legitimization
The legal basis for the processing of your data is the execution of a sales contract with the purpose of managing the purchase of products through the website. Likewise, the legal basis for the processing of your data is the voluntary consent given by the User for the management of the user's account on the website and the management of Newsletter shipping.
The Data Controller guarantees the confidentiality and security of the data provided by the Users. The User will voluntarily include the personal data of which he/she is the owner and is duly informed of the identity of the collector, the purposes of the collection, as well as the possibility and procedure to exercise his/her rights regarding Data Protection in accordance with the current law.
In this case, the User will be responsible for the veracity of the data provided, reserving MIRTO the right to exclude from registered services any User who has provided false data, without prejudice to any other actions that may be taken under the law.
To which recipients will your data be communicated?
The data will not be communicated to third parties, except for legal obligation. In any case, MIRTO collaborates with third-party service providers who have access to your personal data and process such data on behalf and under the instruction of MIRTO as a result of their provision of services. Specifically, MIRTO will contract with third-party providers who carry out their activity, for example but not limited to, in the following sectors: technology service providers, IT service providers, infrastructure management and maintenance companies, call center service providers, payment service providers, and transportation companies.
In order to offer you Klarna's payment methods, we may transmit to Klarna during the purchase process your personal data included in the contact form and order details, so that Klarna can evaluate whether you meet the requirements to access their payment methods and to adapt such payment methods to your profile. Your personal data is processed in accordance with Klarna's privacy policy.
International data transfers
No international data transfers are made.
Will automated decisions be made and profiles be created?
Users are informed that no automated decisions will be made, nor will profiles be created on the basis of which decisions are made that produce legal effects for them or significantly affect them in a similar way. However, MIRTO may tailor the information sent to the users' interests.
Rights of the Users:
Users may exercise the following rights at any time and free of charge:
- Right of access to the personal data of the data subject: the data subject may obtain confirmation as to whether the company is processing personal data concerning them.
- Right to rectification: the data subject has the right to request rectification of inaccurate or incomplete data.
- Right to erasure: the data subject may request that their data be deleted without undue delay, among other reasons because it is no longer necessary, consent has been withdrawn, etc.
- Right to restriction of processing: the data subject may ask that their personal data not be applied to the processing operations that would correspond in each case, in which case we will only keep them for the exercise or defense of claims.
- Right to data portability: the data subject may receive their data in a structured, commonly used and machine-readable format; likewise, the data subject may request that their data be transmitted to another data controller, as long as this is technically possible.
- Right to object: the data subject objects to the processing and the company will stop processing their data, except for compelling legitimate reasons or the exercise or defense of possible claims.
Users may exercise these rights by sending a written communication, duly signed and accompanied by a photocopy of their ID, to CREACIONES MIRTO, S.A.U. – C/ Emilio Muñoz, 57 – 28037 Madrid – Spain or by email to datos@mirto.com indicating "Data Protection" as reference or subject.
If you have any questions about this Privacy Policy, please contact us by sending an email to datos@mirto.com.
Likewise, if the User has any questions about the exercise of their rights, they can contact the Spanish Data Protection Agency to resolve any doubts about them.
How long will we keep User data?
The identification and banking data provided by the user when making a purchase through this website will be kept until deletion is requested by the user.
The personal identification data provided by the user when creating an account on this website will be kept until deletion is requested by the user.
Finally, the personal identification data provided by the user to manage the sending of information through the Newsletter will be kept until deletion is requested by the user.
Security measures.
MIRTO will treat all data under the strictest confidentiality, applying the security measures, technical and organizational, that correspond in accordance with the applicable legislation.
MIRTO maintains the levels of security for the protection of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data, and has established all technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the data that the User provides through the website, without prejudice to informing them that security measures on the Internet are not impregnable.
MIRTO undertakes to comply with the duty of secrecy and confidentiality with respect to the personal data processed in accordance with applicable legislation, as well as to provide them with secure treatment in the transfers that may occur, if any.
Right to lodge a complaint with the Control Authorities
Likewise, interested parties have the possibility of contacting the Spanish Data Protection Agency regarding any doubts in the exercise of their rights, to resolve any incident in the processing of their data or to lodge a complaint. The Spanish Data Protection Agency has the function of ensuring compliance with the legislation and monitoring its application. Interested parties may lodge a complaint with the Spanish Data Protection Agency, especially when they have not obtained satisfaction in the exercise of their rights, at Calle de Jorge Juan, 6, 28001 Madrid, https://www.aepd.es and on the contact telephone number: 900 293 183.
Last update: April 2023.
