Data Privacy Policy

Sonrisa (https://sonrisa.com.es) Website Data Privacy Policy - Sonrisa is committed to ensure that all personal data processed by us is done so in accordance with the data protection laws and its principles, along with any associated regulations and/or codes of conduct laid down by the Supervisory Authority and local law. We ensure the safe, secure, ethical and transparent processing of all personal data.

Any personal data that you submit will be retained by Sonrisa for as long as you use the services & systems provided on the web site. Financial data you submit will not be stored or recorded.

Unless we are obliged or permitted by law to do so, & subject to clause, third party web sites & services your data will not be disclosed to third parties.

All personal data is stored securely in accordance with the principles of the Data Protection Act 1998.

Any or all of the above data may be required by us from time to time in order to provide you with the best possible service & experience whilst using our website, specifically data may be used by us for the following;

• Internal record keeping.
• To help to improve our products & services.
• To transmit via e-mail details of our products & services which may be of interest to you.
• Contact for market research purposes, which can include e-mail, telephone, postal mail.

You may access certain areas of the web site without providing any data at all, however, to use all services & systems available on the web site you may be required to submit account information or other data.

You may restrict your internet browsers use of cookies.

Cookies: Sonrisa may set & access cookies on your computer to enable us to; estimate our audience size & pattern, store information about your preferences, speed up your searches, recognize you when you return to our site.

A cookie is a small file which resides on your hard drive, & often contains an anonymous unique identifier & is accessible only by the web site that placed it there, not any other sites.

You may delete cookies, however you may lose any information that enables you to access the web site more quickly.

You can choose to enable or disable cookies on your web browser, by default your browser will accept cookies, however this can be altered. For more information about cookies and how to stop cookies being installed visit the following website: https://www.allaboutcookies.org.  Disabling cookies may prevent you from using the full range of services available on the web site.

Retaining  your information - If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

Direct Marketing Material - From time to time we may contact you with information regarding ancillary products via email or SMS. You will have the choice to opt-in or opt-out and we will provide opt-out options on all direct marketing material when you no longer wish to receive our marketing material.

Links to third party websites - Links on this Website and other websites that we operate may lead to third party websites. The content, accuracy and function of such websites is outside of our control and we cannot accept any responsibility for same and nor do we endorse the contents of such third-party websites. In particular, any dealings that you have with such third-party website operators shall be on the terms and conditions (if any) of that website operator, as this privacy notification is limited to our websites. If you have a concern regarding the way your personal information will be used on other sites or on the type of cookies used and how they are being used then you are advised to read the relevant privacy statement and cookie policy or in the absence of such a statement and policy on the site, contact the company concerned. Any data stored by third party websites are stored completely separately by third party.

ECommerce Shop

The ecommerce-shop https://www.sonrisa.com.es/online-store/ on the website https://sonrisa.com.es company ID Y5938228G based in Spain processes personal data provided by Customer to fulfill and additionally confirm Terms and Conditions, to process electronic orders and shipments and for the necessary communication during a period required by law.

General provisions

1. Personal data controller, in compliance with GDPR (hereinafter referred to as "Regulation") is Sonrisa, company ID Y9538228G, based in Spain (hereinafter referred to as "Controller");

2. The contact details of the Controller are: e-mail: sonrisa-es@outlook.com, tel.: +34676392881;

3. Personal data is any information that relates to an identified or identifiable natural person.

The source of personal data

1. Controller processes personal data obtained with consent from Customer and collected through the contract to purchase and fulfillment of the electronic order created in the e-shop https://www.sonrisa.com.es/online-store/;

2. Controller processes only the identifying and contact details of Customer which are necessary for the fulfillment of the contract to purchase;

3. Controller processes personal data for the shipping and accounting purposes and for the necessary communication between the contracting parties for the duration required by law. Personal data will not be made public and will not be transferred to other countries.

Purpose of data processing

Controller processes personal data of the Customer for following purposes:

1. Registration on the website https://sonrisa.com.es in compliance with Chapter 4, Section 2 of GDPR;

2. For fulfillment of the electronic order created by Customer (name, address, e-mail, telephone number);

3. To observe law and regulations arising from the the contractual relationship between Customer and Controller;

4. Personal data are necessary for the fulfillment of contract to purchase. Contract cannot be concluded without the personal data.

Duration of personal data storage

1. Controller stores personal data for the period necessary for fulfillment of rights and obligations arising from the contractual relationship between Controller and Customer and for the duration of 3 years following the conclusion of contractual relationship;

2. Controller must delete all personal data after the expiration of the period required for the storage of personal data.

Recipients and processors of personal data

Third parties processing personal data of the Customer are subcontractors of the Controller. Services of these subcontractors are indispensable for the successful fulfillment of the contract to purchase and processing of the electronic order between Controller and Customer.

Subcontractors of the Controller are:

• Webnode AG (e-shop system);
• Shipping company;
• Google Analytics (website analytics);

Rights of Customer

In compliance with the Regulation, Customer is entitled to:

1. The right of access to personal data;

2. The right to rectification of personal data;

3. The right to erasure of personal data;

4. The right to object to processing of personal data;

5. The right to data portability;

6. The right to withdraw consent to the processing of personal data in writing or by e-mail sent to: sonrisa-es@outlook.com;

7. The right to lodge a complaint with the supervisory authority in case of suspected breach of the Regulation.

Security of personal data

1. Controller declares to take all technical and organizational precautions necessary for the protection of personal data;

2. Controller has taken technical precautions to secure data storage spaces, in particular securing access to computer with a password, using antivirus software and performing regular maintenance of computers.

Final provisions

1. By placing an electronic order on the website https://sonrisa.com.es Customer confirms to be informed about all the conditions of personal data protection and accepts them to the full extent;

2. Customer accepts these rules by ticking the checkbox in the order purchase form;

3. Controller can update these Rules at any time. New, updated version has to be published on his website.

These Rules come into effect on 12 May 2023

Changes to this policy: Sonrisa reserves the right to change this data privacy policy as we deem necessary, or as may be required by law. Any changes will be posted on the website & you are deemed to have accepted the terms of the policy on your first use of the website following the change/s.