Privacy Policy (Website/App)

Data Controller

The company responsible for the processing of your data under this Privacy Policy is:

TRADEINN RETAIL SERVICES
NIF: B17527524
Registered office: C/ Pirineus, 9 17460 - Celrà (GIRONA)
Email address: lopd@tradeinn.com
Website: www.tradeinn.com
Telephone: +34 93 220 00 89
Registered with the Girona Commercial Registry - Volume 1123 / Folio 108 / Sheet GI20086 - Registration 1ª

At TRADEINN RETAIL SERVICES, we recognise the importance of protecting your personal information and are committed to processing it responsibly and in compliance with data protection laws.

This Privacy Policy aims to regulate all aspects relating to the processing of data of the different users who browse or provide their personal data through the various forms available on the website.

Personal Data

Personal data is information that identifies you or makes you identifiable. Through the website, in the fields provided for this purpose, we collect the personal data that the user provides to us: first name, surname, email address, telephone number, postal address, town/city, etc., as well as any other data that the user voluntarily provides through any of the social networks on which the user is registered. In this case, privacy will depend on the configuration established by the user as well as on the terms and conditions of the social network itself.

The user´s visit to the website does not imply that they must provide any information regarding their personal data. However, if they do provide such information, the data will be processed lawfully, subject at all times to the principles and rights set out in the GDPR 2016/679 of 27 April 2016 and the LOPDGDD 3/2018 of 5 December.

Through the API, we only collect and search for the ID of a particular video; the ID is stored in our database hosted on Google Cloud with encryption in transit.
We do not collect data through the YouTube API.

The customer information we collect for shipping purchased products is as follows:
- Name
- Address
- Telephone number
- Email address
- Cookie preferences
- and any other information voluntarily provided

Additionally, we may use non-personal information such as:
- The type of browser you use
- The operating system you use

The information is stored in our Google Cloud databases and is stored with encryption in transit.
In Google Cloud, we perform several backups daily.

How do we use your information?

We use the information you provide to send advertising and promotional communications from the Tradeinn group. We may combine the information we collect from you and use it for purposes consistent with this Privacy Policy, subject to your additional consent in the case of advertising. TRADEINN RETAIL SERVICES may create basic user profiles based on their purchase history or interactions with our communications (for example, email openings or clicks), in order to personalise the commercial communications sent and provide information about products or services that may be of interest. Once you have given your consent for such combination of information, you will be given the opportunity at any time to unsubscribe from receiving advertising about Tradeinn or any of its stores.

Purpose, duration and legal basis of the processing

The data provided by the user will be processed for the following purposes:

- To handle the request or enquiry made by the user through the contact form available on the website. We collect and process the user´s personal data in order to process and manage their request, enquiry or any other request submitted through said form. Personal data will be retained for the time necessary to handle and manage the request and, subsequently, for a maximum period of 12 months in order to address any potential liabilities arising from the processing. The legal basis for the processing of the data will be the consent granted by the user by selecting the acceptance checkbox for our Privacy Policy before submitting the request. The user has the right to withdraw their consent at any time without affecting the lawfulness of the processing based on consent prior to its withdrawal.

- To manage experiences or opinions regarding products and/or services through user testimonials that will be published on the website and thus help other users. The only personal data from the testimonial that will be published will be the user´s name and city. The data provided will be retained for as long as the testimonial remains published or until the user requests its removal or withdraws the consent granted. The legal basis for the processing of the data will be the consent granted by the user when registering through the form provided for this purpose on the website and by selecting the acceptance checkbox for our Privacy Policy before submitting their request.

- To process and manage the purchase made by the user through the purchase form available on the website. We collect and process the user´s personal data in order to process the order and the subsequent payment for the products and services offered on the website. Personal data will be retained for the duration of the contractual relationship between the parties and, subsequently, for the periods required to comply with applicable legal, tax and accounting obligations (generally up to 6 years in accordance with the applicable commercial and tax regulations). The legal basis for the processing of the data is the performance of a sales contract to which the data subject is a party. If the user does not provide their personal data, we will not be able to process their purchase and therefore will be unable to provide the requested service.

- To save an abandoned shopping cart and remind the user that they have left a product in their shopping cart, where they have initiated a purchase by entering their email address. Personal data will be retained from the moment the user adds the product to the shopping cart for a maximum period of five (5) days, unless the user completes the purchase beforehand. The legal basis for the processing of the data is the Controller´s legitimate interest in facilitating the purchase of a product in which the user has demonstrated an interest by adding it to the shopping cart.

- To send bulletins and newsletters relating to TRADEINN RETAIL SERVICES products. TRADEINN RETAIL SERVICES may send electronic commercial communications relating to products, services, promotions or news from the Tradeinn group. These communications may be sent on the following legal bases:

User consent, where the user has voluntarily subscribed to receive newsletters or commercial communications through the forms available on the website.
Controller´s legitimate interest, where there is a prior contractual relationship with the user and the communications relate to products or services similar to those previously contracted, in accordance with Article 21.2 of the Spanish Information Society Services and Electronic Commerce Act (LSSI).

Within the framework of these communications, we may process data such as the email address, name, purchase history or interactions with our communications (for example, email openings or clicks), in order to improve the relevance of the content sent and tailor communications to the user´s interests. The user may unsubscribe from commercial communications at any time by using the link provided for this purpose in each communication or by requesting it through the contact channels indicated in this Privacy Policy. Personal data used for sending commercial communications will be retained until the user withdraws their consent or requests to unsubscribe from such communications, without prejudice to any applicable legal data retention obligations.

- To manage the curriculum vitae submitted by the data subject through the form provided for this purpose and include it in the company´s candidate database. These data will be processed for a maximum period of one year, after which they will be deleted unless the data subject authorises their retention for an additional period for future recruitment processes. The recruitment process will be carried out by a temporary employment agency (ETT), which has access to the CVs of candidates registered for the various vacancies. We have the corresponding Data Processing Agreement and data access agreement in place with the agency. Employment may take place either through the temporary employment agency or directly with Tradeinn. The legal basis for the processing is the implementation of pre-contractual measures at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR, by voluntarily submitting their application to participate in recruitment processes. Where the data subject authorises the retention of their CV for future recruitment processes, the legal basis for the processing shall be the data subject´s consent. The user has the right to withdraw their consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.

- To register the user as a ´registered user´ through the registration form available on the website, allowing the user to access their private service area and manage their orders and activities on the platform. Personal data will be retained for as long as the user keeps their account active and, subsequently, for the periods necessary to comply with legal obligations or address any potential liabilities arising from the processing. The legal basis for the processing of the data is the performance of the contractual relationship or the implementation of pre-contractual measures at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR. Where the user has given their consent to receive commercial communications, such communications will be sent in accordance with the applicable regulations, and the user may withdraw such consent at any time.

- To improve the user experience while browsing the website through the use of cookies or other similar technologies. Personal data will be retained until the user withdraws their consent or for the duration of the cookies used, as indicated in our Cookie Policy. The legal basis for the processing is the user´s consent, granted by accepting cookies through the banner or cookie settings panel available on the website. The user may withdraw their consent at any time by changing the settings in the cookie panel or by deleting cookies through their browser.

- To manage our social media accounts and handle interactions made by users through our official profiles, as well as to send information about our activities, products or promotions when the user interacts with such profiles. Personal data will be retained for as long as the user maintains their relationship or interaction with our social media profiles or until they request its deletion, without prejudice to the privacy policies of each individual social media platform. The legal basis for the processing is the user´s consent or voluntary interaction with our social media profiles. The user may stop interacting with our profiles or withdraw their consent at any time without affecting the lawfulness of the processing based on consent prior to its withdrawal.

- To manage the ´Customer Service´ chat service offered on our website for any questions relating to our services/products. This service may be partially automated through artificial intelligence systems that provide immediate responses to users´ enquiries. In order to improve the quality of our customer service, we may record the history of conversations held through the chat for analysis and to improve the operation of the system and the service provided. Personal data will be retained for the time necessary to manage the enquiry and, subsequently, for a maximum period of 12 months for quality control and service improvement purposes, unless it is necessary to retain them for a longer period to address potential legal liabilities. The legal basis for the processing shall be the implementation of pre-contractual or contractual measures at the user´s request, as well as the Controller´s legitimate interest in improving the quality of the customer service provided. Where the enquiry requires human intervention, it may be handled by customer service personnel.

- To manage the sending of satisfaction surveys based on the purchase of the requested product or service in order to improve our customers´ experience on an ongoing basis. Personal data will be retained for the time necessary to analyse the survey results and implement service improvements and, subsequently, for the periods necessary to address any potential liabilities arising from the processing. The legal basis for the processing shall be the Controller´s legitimate interest in improving the quality of the products and services offered, where there is a prior contractual relationship with the user arising from the purchase of products or services. Where no such contractual relationship exists, the processing shall be based on the user´s consent. In any event, the user may object to the processing of their data for this purpose at any time.

- To manage communication with users through the WhatsApp application, which TRADEINN RETAIL SERVICES makes available to users for enquiries relating to its products or services. The use of WhatsApp as a communication channel involves the processing of personal data such as the telephone number, the name associated with the account and the content of conversations. The use of this service may involve international transfers of personal data, as the service provider (WhatsApp Ireland Limited / Meta Platforms) may process data outside the European Economic Area. Such transfers are carried out in accordance with the safeguards provided for under the GDPR, such as adequacy decisions or the Standard Contractual Clauses approved by the European Commission, where applicable. Personal data will be retained for the time necessary to manage the communication and respond to the enquiry made and may subsequently be retained for the periods necessary to address any potential liabilities arising from the processing. The legal basis for the processing shall be the user´s request for information or contact made through this channel, as well as the consent granted when initiating communication through this application. The user may stop using this communication channel or request the deletion of their data at any time, without affecting the lawfulness of the processing carried out prior to such request.

Disclosure or communication of personal data and international data transfers

Your data will not be disclosed or transferred to third parties, except where there is a legal obligation to do so or to service providers engaged by the Controller who act as data processors.

As a general rule, TRADEINN RETAIL SERVICES uses providers located within the European Economic Area. However, certain technology providers used to deliver specific services may involve international transfers of personal data outside the European Economic Area, including:
- Google Cloud Platform, used for hosting and data storage services.
- Klaviyo Inc., used for managing commercial communications and newsletters.
- WhatsApp Business (Meta Platforms Ireland Ltd.), used as a communication channel with users.

In such cases, TRADEINN RETAIL SERVICES guarantees that these transfers are carried out with appropriate safeguards in accordance with the General Data Protection Regulation, through one of the following mechanisms: adequacy decisions adopted by the European Commission (such as the EU-US Data Privacy Framework), Standard Contractual Clauses approved by the European Commission, or any other mechanism recognised under the applicable data protection legislation.

Data Updates

In order to keep personal data up to date, it is important that the user informs us whenever there has been any change to their data. Otherwise, we cannot be held responsible for its accuracy.

The user guarantees that the personal data provided is truthful, that all information supplied reflects their actual situation, is up to date and accurate, and undertakes to notify us of any changes.

Third-Party Data

If the user provides TRADEINN RETAIL SERVICES with personal data relating to third parties for any purpose, the user guarantees that such data has been obtained lawfully, that the data subjects have been informed in advance and have given their consent for the disclosure of their data, and that the information provided is accurate and truthful, in accordance with Article 14 of the GDPR.

Mandatory Nature of the Information Requested

All our forms identify mandatory fields with an asterisk (*). If the user does not complete these fields or does not tick the checkbox accepting the Privacy Policy, the information cannot be submitted.

Use of Passwords

To access the Private Area, the user must ´Log In´ by entering the email address and password created during the registration process, in accordance with the complexity requirements established on the website from time to time.

Users are responsible for the proper safekeeping and confidentiality of any usernames and/or passwords selected during registration and undertake not to disclose them to third parties or allow access by unauthorised persons.

Furthermore, the user must immediately notify the Controller of any event that may result in the improper use of their usernames and/or passwords, such as theft, loss or unauthorised access, so that they can be cancelled immediately.

Data Subjects´ Rights

You have the right to access your data and obtain confirmation as to whether it is being processed, as well as to obtain a copy of the personal data being processed. You have the right to update your data, request the rectification of inaccurate data or request its erasure where the data is no longer necessary for the purposes for which it was collected. You may request the restriction of the processing of your data and object to its processing by withdrawing your consent, as well as exercise your right to data portability. You also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal. Likewise, you have the right not to be subject to decisions based solely on the automated processing of your personal data. You may exercise your rights by contacting us at C/ Pirineus, 9 - 17460 Celrà (Girona). Email: lopd@tradeinn.com. If you believe that your rights have not been adequately respected, you have the right to lodge a complaint with the supervisory authority at www.aepd.es.

Processing of Minors´ Personal Data

Any person who provides data through the forms on this website and accepts its processing declares that they are over 14 years of age. Access to and use of the website by persons under this age is prohibited. If, at any time, the Controller becomes aware that a person under the age of 14 has provided personal data, such data will be deleted. Likewise, parents or legal guardians may contact TRADEINN RETAIL SERVICES at any time to block the access account of minors under their care who have registered by misrepresenting their identity.

Social Media

The purpose of platforms such as Facebook, Twitter, Instagram and other social media is to provide visibility and promote the activities carried out by our organisation. These platforms store personal data on the servers of the respective service providers and are governed by their own privacy policies. Users are advised to review and read the terms of use and privacy policy of the relevant social media platform when registering, taking into account the different configuration options available regarding the privacy level of their profile.

Furthermore, the Controller reserves the right to remove from its social media profiles any information posted by third parties that breaches the law, encourages unlawful conduct or contains messages that infringe the dignity of individuals or institutions. The Controller also reserves the right to block or report the profile responsible for such messages.

Cookie Processing

A cookie is a small file that is downloaded and stored on the user´s computer when they access a website. Cookies allow the website, among other things, to store and retrieve information about the user´s browsing habits or those of their device and, depending on the information they contain and the way the device is used, they may be used to recognise the user.

The user may prevent the generation of cookies by selecting the appropriate option in their browser settings. Further information can be found in our Cookie Policy.

Information You Provide Indirectly

This policy informs the user that Tradeinn makes exclusive internal use of the YouTube API as an online resource to which our website may link or otherwise refer (Third-Party Services), in this case for the purpose of sharing videos on the website containing exclusively product information. Therefore, you agree to be bound by the YouTube Terms and Conditions: Terms and conditions Youtube , Google privacy policy: Privacy policy and services of Youtube API: Terms and YouTube API conditions . For more information on how Google processes personal information, please visit: https://business.safety.google/privacy/

Tradeinn accepts no responsibility for the content or practices of third-party services. We therefore recommend that you carefully review the privacy policies of any third-party service you may access.