Privacy policy
Introduction and summary
Your privacy is important to Yume Gastro (hereinafter “Yume Gastro” or “we”). In this policy, we would like to inform you how we process your personal data and your rights. Personal data represents information to which you may be associated as a natural person, for example your name and contact details.
To summarize, we will process your data for these reasons:
- To the extent necessary, to manage your order and deliver your poster or frame.
- To give you offers and inspiration, both through newsletters and through targeted marketing proposals on social networks, other online and offline media.
- To communicate with you and answer your questions.
- To manage ratings and reviews of our products.
- To remind you that you have abandoned a shopping cart and to provide you with our wall art product.
- To create and maintain a customer account (including items such as favorites).
- To comply with mandatory legislation (eg, consumer laws and accounting laws).
You have various rights under data protection legislation. For example, you always have the right to object to marketing. Likewise, you can read information on how to intervene in our processing of your personal data, that is, your rights with respect to them.
Do you want more information? You can read our detailed explanations later. Below you can read more information about how, why and for how long we will process your personal data.
Who is responsible for the processing of your personal data?
Yume Gastro (María Iratxe Miranda Jimeno) with Spanish tax identification number 11422987Z, is responsible for processing your personal data. In addition, you should remember that our payment providers process the personal data collected through our site at the time of purchase and that they are independently responsible for their processing. If you wish to contact us about how we process your personal data, write us an email at comunicacion@yumegastro.com.
Where or from whom do we collect your personal data?
We process personal data that you have chosen to share with us.
Who can get access to your personal data?
Your personal data will be processed primarily by us at Yume Gastro. We will never sell your personal data. In some cases, however, we will share your personal data to fulfill our obligations to you correctly and effectively.
- In order to ensure that you have made your payments, our payment providers may access your personal data.
- In order for us to deliver your products to the postal address or facilities of an intermediary, as well as to manage any return, we will share your personal data with a transport agency.
- In order to post your reviews on our website, we will share your personal data with the provider that provides the technical solution for posting such reviews.
- In the event that a friend refers you to us, we will share a hash number (text ID) of your email address with a vendor that helps us enable friend referrals. The objective is to know if we should pay the service provider for referring a new client or not.
- In order to market relevant products and make our website as relevant as possible, we will share your personal data with those entities that provide us with a service to help us market them, including Google and Facebook.
- We will share your personal data with IT providers who process personal data on our behalf as processors to assist us with IT services.
If you would like more detailed information about which entities we share your personal data with, please do not hesitate to contact us.
Do we transfer your personal data outside the EU/EEA territory?
As a general rule, at Yume Gastro we process your personal data within the territory of the EU/EEA. However, in some cases, we employ suppliers based in countries outside the EU/EEA. When transferring your personal data outside the EU/EEA territory, at Yume Gastro we will ensure that there is an adequate level of protection.
Yume Gasto may transfer your personal data to the US and to the provider that provides a service to send newsletters as well as to providers that provide services to market the relevant products and make our website the most relevant platform possible.
Any US provider is certified under the Privacy Shield program. Privacy Shield is an agreement between the EU and the US that aims to protect the fundamental rights of Europeans and ensure the legal security of business transfers of personal data to the US. North American companies they can enroll in the Privacy Shield certification program through the US Department of Commerce. This department will be in charge of verifying that the privacy policies of the providers comply with the strictest regulations in terms of data protection.
If you have any questions about how we share your personal data, or if you would like information on the corresponding security measures we have implemented, please contact us.
How can you influence our processing of your personal data?
In accordance with data protection legislation, you can exercise a set of rights that will influence the way in which we process your personal data. You can get more information below.
Right to withdraw your consent and object to processing
You will have the right to withdraw, in whole or in part, your consent to the processing of your personal data. This withdrawal will be binding from the moment it is exercised. You will have the right to object to our processing of your personal data. You also always have the right to object to our marketing, such as newsletters.
In some other cases, the right to object will not be possible (eg, since we must store your personal data). You will have the right to object to data processing where it is based on a balance of legitimate interests. To find out what the latter means, you can learn more below. If we can put forward legitimate and compelling reasons for your processing that outweigh your interests and fundamental rights, or if the processing is carried out for the purpose of establishing, asserting or defending legal claims, you will never have right to object to their processing.
Right of access
You will have the right to obtain confirmation as to whether or not we process personal data relating to you. You will be able to obtain access to the personal data and obtain a copy of the personal data that we have processed.
Right of rectification
You have the right to rectify any inaccuracies in the personal data relating to you and to request that we complete any incomplete personal data.
Right to erasure (“right to be forgotten”) and to limit processing
In certain circumstances, you will have the right to request the erasure of your personal data. This is the case, for example, for personal data that is no longer necessary for the purpose for which it was collected or otherwise processed, or when you withdraw your consent on which the processing is based, as well as when there is no another legal basis to continue processing them.
You will also have the right to request that Yume Gastro limit the processing of your personal data. This will be the case, for example, where you contest the accuracy of the personal data, or where the processing is unlawful and you object to its deletion and instead request its restricted use.
Right to lodge a complaint with a supervisory authority
You always have the right to lodge a complaint with a supervisory authority.
You may do so, in particular, in any of the Member States of the EU/EEA in which you have your habitual residence or place of work, or in which the applicable data protection laws have allegedly been infringed. In Spain, the supervisory authority is the Swedish Data Protection Authority. This right is granted without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to request the transfer of some of your personal data that we hold to another company (data portability).
This right will apply to personal data that you have provided to us in a structured, commonly used format that can be recognized by a machine and in an interoperable format if:
- the processing is based on your consent or a contract; and yes
- the processing is carried out through automated means.
By exercising your right to data portability, you will have the right to have your personal data transmitted directly from Yume Gastro to another controller, where this is technically possible.
How and why do we process your personal data?
We aim to be as transparent as possible about how and why we process your personal data. In the table you can obtain more detailed information about why we process your personal data (the purposes of the processing), what personal data we process, our legal basis for processing your personal data and for how long we will process such data for each purpose.
Data processing before making a purchase
We need to process your personal data in order to be able to communicate with you, to save any wall art you have created and to receive your feedback. If you do not provide us with your personal data for such purposes, we will not be able to provide you with the service or the answer to your question.
| For what purposes do we process your personal data? | What personal data do we process? | What is our legal basis for processing your personal data? | How long do we process your personal data for specific purposes? |
| To save your abandoned shopping cart and remind you that you have left a product in the cart, in case you have initiated a purchase by entering your email address. | Information about your shopping cart and about the email you provided to us when you started the purchase The processing of the data is necessary to fulfill the contract (provide the image wall service) between you and us. | Our legitimate interest in making it as easy as possible for you to purchase the product in which you have shown an interest by adding it to the cart. | From the moment you add the product to the shopping cart until the moment of purchase and for a period not exceeding five (5) days. |
| To save your picture wall and receive feedback from you about our picture wall. | Your email and the name you chose to save your image wall, as well as cookies. We also process any information you provide when making a comment. | The data processing is necessary to fulfill the contract (provide the image wall service) between you and us. | For one (1) year, from the date you create your image wall. |
| To answer questions you ask us. | Your name, contact information, the images you send us, as well as other information you provide us. | The processing of the data is also necessary to perform the contract we entered into with you. | For three (3) years or for as long as required by law. |
The data processing is necessary to effect the purchase and fulfill our agreement, etc.
In order for us to carry out your purchase (for example, to be able to deliver the product to you), we need to process your personal data. We also need to process your personal data to comply with legal or other requirements, such as data retention requirements under accounting law and consumer protection law. If you do not provide us with personal data for such purposes, we will not be able to complete your purchase on our platform.
Remember that our payment providers also process personal data in order to manage the payment of your order. Our payment providers are independently responsible for such processing. Also, our payment providers allow you to choose an easier way to make the purchase by automatically filling in your personal data or allowing you to remember your data on your device.
| For what purposes do we process your personal data? | What personal data do we process? | ¿Cuál es nuestro fundamento jurídico para procesar sus datos personales? | How long do we process your personal data for specific purposes? |
| To manage your purchase, i.e. to know with whom we entered into an agreement, to confirm your purchase, to deliver your purchase to you and to communicate with you regarding your delivery. | Your name, contact details (such as an email address), delivery address, order details and chosen payment method and IP address. | The processing of the data is also necessary to perform the contract we entered into with you. | 12 months from when the order was placed. |
| In case you want to exercise your right to cancel or modify your product, and so that we can comply with the legislation related to consumer protection. | Your name, phone number, email address, mailing address and information about the purchase (for example, the payment method). We also save the data that you have shared when exercising your right to withdraw or when modifying your product. | The processing is necessary to perform our contract with you and for us to comply with applicable consumer protection laws. | From the moment you make the purchase until twelve (12) months have elapsed, so that we can comply with the legislation related to consumer protection. If you decide to exercise any of your rights, we will process your personal data until we have made a decision regarding the withdrawal or modification of the product, and until we have completed the possible refund or sent you the new product. |
| To manage any claim and/or legal dispute that comes before us. | Your name, contact information, information that you have provided and that is relevant in the context of the claim and/or legal dispute. | The processing is necessary for us to comply with applicable consumer protection legislation and our legitimate interest in dealing with claims and/or defending ourselves against legal claims. | From the moment your complaint and/or legal dispute comes to our attention, and during the term of its existence. If your claim is rejected, we will always store a part of the information for twelve (12) months in case you want to review this legal dispute before the corresponding instance. |
| In order to comply with legal obligations, that is, with accounting legislation and with laws related to the prevention of money laundering | Information about your bill (such as purchase history, name and contact details). | The processing is necessary for us to comply with applicable laws. | From the moment you make the purchase and for seven (7) and eight (8) years as established in the accounting law of Spain, as well as between five and ten (5-10) years in accordance with the legislation in the matter prevention of money laundering. |
| In the event that a friend refers you to our website, we will process your personal data in order to be able to pay our provider that provides a friend referral solution. | A hash number (text ID) of your email address. | Our legitimate interest is to ensure that we only pay our supplier for those purchases of new customers that these suppliers have referred to us. | Your email will never be saved for this purpose. |
Processing to manage classification
| For what purposes do we process your personal data? | What personal data do we process? | What is our legal basis for processing your personal data? | How long do we process your personal data for specific purposes? |
| To send emails requesting reviews after your purchase | Our legitimate interest is to contact you with a request to rate or review your purchase and experience in order to improve future experiences for you and other customers. | Our legitimate interest is to contact you to ask you to rate or criticize the product you have purchased. | Until we have sent you our request. |
Processing to manage your customer account
In order to manage your customer account, we process your personal data to perform our contract with you. If you do not provide us with your personal data for such purposes, we will not be able to provide you with a customer account.
| For what purposes do we process your personal data? | What personal data do we process? | What is our legal basis for processing your personal data? | How long do we process your personal data for specific purposes? |
| To manage the customer account that you have created. This includes sending you updated information about your account and about our privacy policy. It also includes processing to take necessary security measures with respect to your account. | Your name, personal identification number, email, mobile phone number, cookie and IP address, username and postal address where you want us to deliver the products. | The processing is necessary to perform our contract and provide you with an account (if you have chosen to create one). Processing for the purpose of sending you our privacy policy is necessary to comply with data protection laws and regulations. | We store your personal data from the moment you make a purchase and for twelve (2) years from the last time you logged in, or until you ask us to delete your account. |
Processing to communicate relevant news, inspirations and offers to the customer
| For what purposes do we process your personal data? | What personal data do we process? | What is our legal basis for processing your personal data? | How long do we process your personal data for specific purposes? |
| To send you electronic newsletters and special offers at your request, and to send you marketing information after you have made a purchase. | Your email address and your order ID. | If you choose to subscribe to our newsletter, we will process your personal data based on your consent. When you make a purchase, we will process your personal data based on our legitimate interest in sending you relevant direct marketing material. We will only do this if you have made a purchase on our platform and have not objected to receiving marketing material. | If you have opted in to receive relevant newsletters and offers we will continue to send you such newsletters until you unsubscribe. In the event that we send you a newsletter based on our legitimate interest, these marketing information shipments will be sent for two (2) years, unless you object before the end of that period to continue receiving marketing material. |
| To conduct targeted marketing to you on social media and third party websites. | Your email address and your order ID. | Our legitimate interest is to use your personal data to carry out direct marketing activities and to propose relevant information to you. | Your personal data will be processed from the moment you make a purchase and for two (2) years, unless you object before the end of this period to us carrying out marketing activities with your data. |
| To post a review that you have chosen to write so that we can market both the product and our brand to potential customers. | Your name and the information you have left in the comment. | Our legitimate interest is to publish the comment that you have written. | Until you remove your review of the product. |
| In order to market our products on our website, we may post product images that you have shared on Instagram. | The image/video you have shared on social networks, your username and the text you have written. These data may include personal data about you. | Our legitimate interest is to publish the image/video that you have tagged #Yume Gastro. | Until you declare that you no longer want us to display the image/video on our website. |