FREE SHIPPING OVER €120 IN THE PENINSULA. RECEIVE IT IN 24/48h

Privacy policy

This Privacy Policy governs the processing of personal data by QUIERO UNAS BOBOS, SLU within the framework of its commercial activity and the operation of the website www.quierounasbobos.com. It forms part of the General Terms and Conditions that govern this website.

The personal data you provide will be processed by QUIERO UNAS BOBOS, SLU (hereinafter, “QUIERO UNAS BOBOS”), with CIF B16694705, as the data controller, with registered office at Calle Peñalara, 4, Block C, 2º F; 28224 Pozuelo de Alarcón (Madrid), registered in the Mercantile Registry of Madrid.

For any questions or queries regarding the processing of your personal data or to exercise your rights, you can contact us by phone at 621 32 94 08 or by email at info@quierounasbobos.com.

In accordance with Article 37 of Regulation (EU) 2016/679 (GDPR), QUIERO UNAS BOBOS has determined that the appointment of a Data Protection Officer is not mandatory. However, for any data protection-related questions, you may use the contact channel indicated in the previous paragraph.

This Policy may be modified to adapt to regulatory changes or the evolution of the service itself. Any substantial modification will be communicated to the user, prior to its entry into force, through the website or, if the user is registered, by electronic notification.

Below, depending on the group you belong to, you can consult detailed information about the processing of your personal data:

Website or email contacts

What data do we collect through the Web?

We may process browsing data (IP address, browser type, operating system, visit duration, and pages visited) in aggregate form and, where possible, anonymously. If you provide us with data through the contact form, email, or WhatsApp Business, we will process the identification and contact information necessary to respond to your inquiry (name, surname, email address, telephone number, and the message content).

For what purposes are we going to process your personal data?

  • Answer your questions, requests or requests.
  • Manage the requested service and process your request.
  • To send you information electronically regarding your request.
  • Perform analysis and improvements of the website, products and services.
  • If you give us your express and independent consent: to send you commercial communications by electronic means about our products, promotions and events.

What is the legal basis for the processing?

The data subject's consent, given by completing the form and ticking the box accepting this Privacy Policy (Art. 6.1.a GDPR). For sending commercial communications, an additional, express, freely given, specific and informed consent box will be required (Art. 21 LSSI-CE).

If you do not check the box to accept the Privacy Policy, it will not be possible to process the form.

How long will we keep your data?

The data from the contact form will be kept for the time necessary to process your request and, once resolved, for a maximum of twelve (12) months. Data associated with consent to receive marketing communications will be kept until consent is withdrawn. In any case, once the relationship has ended, the data will be blocked for the statutory limitation periods (4 years for tax purposes, 5 years for civil matters, and 6 years for commercial matters) to address any potential liabilities.

CCTV

What data do we collect through video surveillance systems?

We collect images captured by the video surveillance cameras installed in our facilities.

For what purposes are we going to process your personal data?

  • Guarantee the safety of people, property and facilities.
  • Control access and prevent illegal acts.

What is the legal basis for the processing?

The public interest and/or legitimate interest of the controller in ensuring the security of its facilities (art. 6.1.ey/o 6.1.f GDPR), in accordance with the applicable regulations on video surveillance.

How long will we keep your data?

The images will be kept for a maximum period of 30 days, unless they need to be kept for a longer time to prove the commission of illegal acts or at the disposal of competent authorities.

Contact via WhatsApp

What data do we collect through WhatsApp?

When you contact us via WhatsApp, we may process your phone number, username (if displayed), as well as any information you provide in the message content.

The data will be processed through the WhatsApp application, owned by WhatsApp Ireland Limited, which may involve international data transfers in accordance with its own privacy policy.

For what purposes are we going to process your personal data?

  • To handle and manage inquiries, requests or incidents made through WhatsApp.
  • To provide information about our products or services requested by the user.
  • Maintaining communications related to the provision of our services or products.

What is the legal basis for the processing?

The legal basis is the execution of pre-contractual measures at the request of the interested party (Art. 6.1.b GDPR) and, where appropriate, the consent of the interested party when initiating the communication (Art. 6.1.a GDPR).

How long will we keep your data?

Your data will be kept for the time necessary to process your request and, subsequently, for the legally prescribed periods. If a contractual relationship arises, the data will be kept for the duration of that relationship.

Newsletter contacts

What data do we collect through the newsletter?

To subscribe to our newsletter, we only need your email address. We will store your email in our database through the email marketing provider Klaviyo and will send you regular communications until you unsubscribe or we decide to stop sending them.

Each communication will include a link to unsubscribe easily and free of charge. You can also object to the processing of your data by writing to info@quierounasbobos.com.

For what purposes are we going to process your personal data?

  • Manage your newsletter subscription.
  • To send you commercial communications by electronic means about our products, news, promotions, events and discounts.
  • Perform statistical and behavioral analysis (opens, clicks) to improve our business strategy.

What is the legal basis for the processing?

The express consent of the interested party (art. 6.1.a GDPR and art. 21 LSSI-CE), given by ticking the specific box for subscribing to the Newsletter, independent of the box for accepting the Privacy Policy.

How long will we keep your data?

Until consent is revoked via the unsubscribe link or express request. Once revoked, the data will be blocked for the statutory limitation periods for the purpose of demonstrating compliance with legal obligations.

Clients

What data do we collect?

To process your purchase, we will use your identification data (name and surname, ID card when applicable), contact data (postal address, telephone, email), transaction data (products, amount, shipping and billing address, payment method) and, where applicable, purchase history data.

For what purposes are we going to process your personal data?

  • Manage the purchase and sale and the customer account, including order preparation, shipping and delivery.
  • Manage the administrative, communication and logistics services associated with the operation.
  • Billing and compliance with applicable tax, accounting and commercial obligations.
  • Process changes, returns, claims and the exercise of the right of withdrawal.
  • Fraud prevention in transactions.
  • If you give us your additional consent: sending commercial communications about our products.

What is the legal basis for the processing?

The performance of the sales contract to which the data subject is a party and the application, at the data subject's request, of pre-contractual measures (Art. 6.1.b GDPR). Compliance with legal obligations applicable to the controller, in particular tax, accounting and consumer protection obligations (Art. 6.1.c GDPR). The legitimate interest of the controller in the prevention of fraud (Art. 6.1.f GDPR). The data subject's consent to the sending of commercial communications (Art. 6.1.a GDPR and Art. 21 LSSI-CE).

How long will we keep your data?

During the term of the contractual relationship and, once terminated, during the applicable legal limitation periods: up to four (4) years for tax obligations (General Tax Law), five (5) years for personal civil actions (art. 1.964 of the Civil Code) and six (6) years for the preservation of accounting and commercial documentation (art. 30 of the Commercial Code).

Quality surveys

For what purposes are we going to process your personal data?

  • To assess the quality of the service provided and obtain information that allows us to improve it.

What is the legal basis for the processing?

The express consent of the respondent (art. 6.1.a GDPR), given when voluntarily completing the survey.

How long will we keep your data?

For a maximum of twenty-four (24) months from the date of the survey or until the revocation of consent, whichever occurs first.

Suppliers

For what purposes are we going to process your personal data?

  • Manage the contractual relationship maintained with the supplier.
  • Manage the associated administrative, communications, and logistics services.
  • Billing and declaration of the corresponding taxes.
  • Carry out the necessary transactions.
  • Control, recovery and claims management.

What is the legal basis for the processing?

The execution of the contract or commercial relationship between the parties (art. 6.1.b GDPR) and compliance with legal obligations applicable to the controller (art. 6.1.c GDPR).

How long will we keep your data?

During the term of the relationship between the parties and, once terminated, for the applicable legal limitation periods (4 tax years, 5 civil years, 6 commercial years).

Social media contacts

For what purposes are we going to process your personal data?

  • To address your inquiries, comments, or requests.
  • Promote our products and services and create a community of followers.

What is the legal basis for the processing?

The consent of the interested party, given by following our profiles, interacting with our publications or contacting us through social networks (art. 6.1.a GDPR), and the acceptance of the conditions of the social network itself.

How long will we keep your data?

We can only access or delete your data in a limited way, as we only have one profile on each social network. We will process your data as long as you follow us, like our posts, or engage in other similar interactions. Any corrections to your data or restrictions on information must be made through your profile settings on the social network itself.

Jobseekers

For what purposes are we going to process your personal data?

  • Organize the selection processes for hiring staff.
  • Cite him for job interviews and evaluate his candidacy.

What is the legal basis for the processing?

The application of pre-contractual measures at the request of the interested party (art. 6.1.b GDPR), either when registering for one of our job offers or when voluntarily submitting a spontaneous application.

How long will we keep your data?

After one (1) year has passed since the receipt of the resume, we will proceed to its secure destruction, unless the interested party renews their candidacy.

Do we include personal data of third parties?

As a general rule, we only process data provided to us by the data subjects themselves. If you provide us with data from third parties, you must inform them and obtain their consent beforehand. Otherwise, QUIERO UNAS BOBOS will be exempt from any liability arising from non-compliance with this requirement.

Processing of minors' data

In accordance with Article 7 of Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we do not process data of children under 14 years of age. If the user is under 14 years of age, they must refrain from providing their data. The processing of data of minors under this age will require the consent of their parents or legal guardians. QUIERO UNAS BOBOS disclaims any liability arising from non-compliance with this provision.

Will we make communications by electronic means?

  • Only to process your request, if you have provided us with this means of contact.
  • For the sending of commercial communications, your prior, express, and independent authorization will be required, in accordance with Article 21 of Law 34/2002 on Information Society Services (LSSI-CE). You may object to receiving these communications at any time by clicking the unsubscribe link included in each email or by writing to info@quierounasbobos.com.

To which recipients will your data be communicated?

For the proper provision of our services, your data may be communicated to the following categories of recipients, all of whom are data processors and subject to the obligations of Article 28 GDPR:

  • Transport and logistics companies, for the delivery of orders.
  • Payment gateways (Redsys/Servired and PayPal) for processing payments.
  • Email marketing provider (Klaviyo), for managing the Newsletter and commercial communications.
  • Web analytics and advertising provider (Google and Meta), for audience measurement and, where applicable, personalized advertising, always with the user's prior consent via the cookie banner.
  • Web hosting and maintenance provider.
  • Tax, accounting and legal advisors, when necessary for compliance with legal obligations.
  • Public Administrations, Courts and Tribunals, when there is a legal obligation.

International data transfers

Some of the providers we work with (specifically Google LLC, Meta Platforms Inc., Klaviyo Inc., and Mixpanel Inc.) may process data in the United States. In these cases, international transfers are covered by the mechanisms provided for in Chapter V of the GDPR:

  • The European Commission's Adequacy Decision (EU) 2023/1795 (EU-US Data Privacy Framework), regarding those providers certified in accordance with this framework.
  • The Standard Contractual Clauses approved by the European Commission through Decision (EU) 2021/914, supplemented, where appropriate, by additional measures in accordance with the recommendations of the European Data Protection Board (Schrems II).

You can request detailed information about the guarantees applicable to each transfer by writing to info@quierounasbobos.com.

Rights that assist you

As a data subject, you have the following rights in relation to your personal data:

  • Right to access your personal data.
  • Right to request the rectification of your data if it is inaccurate or incomplete.
  • Right to request the deletion of your data when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
  • Right to request the limitation of processing in the cases provided for by the rule, in which case we will only keep them for the exercise or defense of claims.
  • Right to data portability, in a structured, commonly used and machine-readable format, when the requirements of art. 20 GDPR are met.
  • Right to object to processing, in particular when it is based on legitimate interest or has the purpose of sending commercial communications.
  • Right not to be subject to automated individual decisions, including profiling, which produce legal effects or significantly affect him or her.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid; www.aepd.es), especially if you believe that you have not obtained satisfaction in the exercise of your rights.

To exercise any of the above rights, you can contact QUIERO UNAS BOBOS, SLU through the following means:

  • Email: info@quierounasbobos.com
  • Postal address: Calle Peñalara, 4, Block C, 2º F; 28224 Pozuelo de Alarcón (Madrid).

You must properly identify yourself, as well as indicate the right you are exercising and your address for notification purposes. We will respond within a maximum of one (1) month from receipt of your request, which may be extended by two (2) additional months when the request is particularly complex or a high number of requests are received, in accordance with Article 12.3 GDPR.

Before filing a complaint with the Spanish Data Protection Agency, you can contact QUIERO UNAS BOBOS to try to resolve any issues related to the processing of your personal data.

Security measures

QUIERO UNAS BOBOS has adopted the necessary technical and organizational measures to guarantee the security of personal data, preventing its alteration, loss, unauthorized processing or access, in accordance with the provisions of Article 32 GDPR and taking into account the state of the art, the nature of the data and the risks to which they are exposed.

If you change any of your information, please let us know so we can keep it up to date.