CHARANGA SL is a company committed to respect, confidentiality and protection of the data that its clients provide or collect; We would like you to carefully read our Privacy Policy, which we include in the following sections.For any questions or clarifications you may need about the content of this Privacy Policy, you can contact us through our telephone, email or postal address.

OUR PRIVACY COMMITMENT

1. We respect your privacy and your choices.
2. We make sure privacy and security are built into everything we do.
3. We do not send you marketing communications unless you request it. You can change your mind at any time.
4. We never offer or sell your data.
5. We are committed to keeping your data safe and secure. This includes only working with trusted partners.
6. We are committed to being open and transparent about how we use your data.
7. We do not use your data in ways that we have not informed you about.
8. We respect your rights and always try to accommodate your requests to the extent possible, in accordance with our own legal and operational responsibilities.

For more information about our privacy practices, we set out below what types of personal data we may collect or hold about you, how we may use it, who we may share it with, how we protect it, and how you can exercise your rights regarding it. of said data.

When you share your Personal Data with us or when we collect personal data about you, we use it in accordance with this Privacy Policy (“Policy”).

If you have any questions or concerns about your personal data, please contact us at charanga@charanga.es

WHO ARE WE?

CHARANGA SL with address at Calle Alesandro Volta, nº2, 29590 Málaga, Spain is responsible for the personal data that you share with us. When we say "CHARANGA", "we" or "our", we refer to CHARANGA SL. CHARANGA SL is the data controller for the purposes of applicable data protection laws.

PERSONAL DATA

Personal Data refers to any information or data that can identify you directly (for example, your name or surname) or indirectly (for example, your national identity document or D.NYo). Personal Data includes information such as email/home addresses/mobile phone, usernames, personal preferences and purchasing habits, user-generated content, and social assistance information, among others. It may also include unique numerical identifiers such as your computer's IP address or your mobile device's MAC address, as well as information we obtain through cookies.

This Policy covers all personal data collected and used by CHARANGA SL.

COLLECTION OF PERSONAL DATA AND PURPOSES OF PROCESSING

Remember that before you start using any of our services or functionalities, you must read this Policy, as well as the Terms of Use of the specific section that refers to that service or functionality. In this section you can see if there are any particular conditions for its use, or if specific processing of your Personal Data is required. Failure to provide certain information indicated as mandatory may mean that it will not be possible to manage your registration as a user or the use of certain functionalities or services available through https://charanga.es/

The user (you) hereby warrants that the Personal Data provided is true and accurate and undertakes to notify any changes or modifications thereof.
Any loss or damage caused to the Website, the Data Controllers or any third party through the communication of erroneous, inaccurate or incomplete information in the registration forms will be the sole responsibility of the user.

What data do we collect from you?

CHARANGA SL believes that you, the consumer, are the heart of what we do. We love hearing from you, learning about you, and creating and delivering products you enjoy. There are many ways in which you can share your personal data with us, and which we may collect.

We may collect or receive your data through our websites, forms, applications, devices, products or brand pages on social networks, among others. In some cases, you provide us with your Personal Data directly (for example, when you create an account, when you contact us, when you purchase from our websites or stores), in other cases we collect it (for example, using cookies to understand how you use our websites) or, on other occasions, we receive your data from other third parties, including other entities of the CHARANGA Group or collaborating entities and companies.

You will find more details in the table below, with the following headings: 

1. For what purposes can we use your Personal Data? This column explains what we may do with your Personal Data and the purposes for collecting it.
2. What is the legal basis for using your Personal Data? This column explains why we may use your Personal Data.
3. What personal data may we have about you? This column explains what types of Personal Data of yours we can process depending on the scenario.
4. In what scenario can your Personal Data be collected? This column explains what activity or scenario you are involved in when we use or collect your Personal Data. For example, if you make a purchase, sign up for a newsletter, or browse a website.
5. Who can have access to your Personal Data? This column explains which third parties outside of CHARANGA access your personal data as CHARANGA service providers and what data transfers are carried out. The legal basis for the processing of your Personal Data may be:

• Your consent;
• Our legitimate interest, which may be:
  • Statistics production: to help us better understand your needs and expectations and therefore improve our services, websites, products and brands.
  • Allow our website to function through technical and functional cookies: keep our website safe and secure and ensure that they function correctly and continually improve.
  • Comply with our obligations in the contracts we sign.

Profiling

• Offer you our consumer service;
• The execution of a contract: performing the services you request from us;
• Compliance with legal obligations that entail the processing of personal data;
• When we collect your Personal Data, we indicate required fields using asterisks. Some of the information we request from you is necessary to:
  • Perform our contract with you (for example, to deliver products you have purchased on our websites/apps);
  • Provide you with the service you requested (for example, to provide you with a newsletter); o
  • comply with legal requirements (e.g. billing).

The eventual lack of communication to CHARANGA SL of the data corresponding to mandatory fields will prevent the achievement and/or scope of the main purpose associated with the collection of data. On the other hand, the non-communication of said data to CHARANGA SL may determine, for example, the impossibility of placing any purchase order for the products for sale on the website, as well as the provision of other services available on the website.

CHARANGA SL presumes that the data have been entered by the owner or by a person authorized by the owner, as well as that they are correct and exact.Users are responsible for updating their own data by accessing the “My account” section. Therefore, the User is responsible for the veracity of their personal data: Charanga S.l will not be responsible for the possible inaccuracy of the personal data of the Users.

PROFILE

When we send or display personalized communications or content, we may use some techniques qualified as "profiling" (that is, any form of automated processing of personal data that consists of using that data to evaluate certain personal aspects of a natural person, in particular to analyze or predict aspects related to the personal preferences, interests, economic situation, behavior, location, health, reliability or movements of that natural person). This means that we may collect personal data about you to carry out this profiling, as set out in the table above. We centralize this information and analyze it to evaluate and predict your personal preferences and/or interests.

Based on our analysis, we send or display communications and/or content adapted to your interests/needs. You have the right to object to your personal data being processed based on profiling in certain circumstances.
See the "Your rights and options" section below.

WHO CAN ACCESS YOUR PERSONAL DATA?

We may share your personal data with any company that holds rights to the CHARANGA brand, whether or not it exists on the date you accept this Privacy Policy.
As mentioned in the previous table in the column “Who can have access to your Personal Data?” As stated above, your data may be transferred to any company that holds rights to the CHARANGA brand, whether or not it exists on the date on which you accept this Privacy Policy, and this on the legal basis of the legitimate interest of the Group/ s, to fulfill administrative purposes of the Group/s, on the legal basis of a legal obligation to maintain your details on a suppression list, if you have asked us not to send you further marketing communications.

Your personal data may also be processed on our behalf by our trusted third party providers.

We enter into contracts with trusted third parties to perform a variety of business operations on our behalf. We only provide them with the information they need to perform the service, and we require that they not use your personal data for any other purpose. We always do our best to ensure that all third parties we work with maintain the security of your personal data. Please refer to the table above, in the column “Who can have access to your Personal Data?” to know the categories of third-party service providers that require access to your personal data.
We do not offer or sell your personal data.

INTERNATIONAL TRANSFERS

The Personal Data we collect from you will be stored within the European Economic Area (EEA); Notwithstanding the foregoing, we inform you that they may be transferred to, accessible from or stored in a destination outside the EEA. They may also be processed by staff members operating outside the EEA who work for us or one of our service providers.

If CHARANGA SL transfers your personal data outside the EEA, we guarantee that such transfer will only be carried out in a secure and legal manner. As some countries may not have laws governing the use and transfer of personal data, we take steps to ensure that third parties comply with their commitments set out in this Privacy Policy. These steps may include reviewing third-party privacy and security standards and/or entering into appropriate contracts (based on the template data protection standard contractual clauses adopted by the EU Commission).

Service providers located outside the EEA such as Facebook, Inc or Google, LLC may access your personal data. These service providers are covered by the “PrivacyShield” or privacy shield and, therefore, are obliged to protect your personal data in accordance with a series of protection standards and safeguards well defined by the European Union.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We only retain your Personal Data for as long as we need it for the purpose for which we process your Personal Data, to meet your needs or to comply with our legal obligations.

To determine the data retention period of your Personal Data, we use the following criteria:

• Personal Data obtained when purchasing products and services: for the duration of our contractual relationship;
• Personal Data obtained when participating in a promotional offer: during the validity of the promotional offer;
• Personal Data obtained when contacting us for a query: Personal Data for the time necessary to respond to your query;
• Personal Data obtained when creating an account: until you ask us to delete it;
• Personal Data obtained when you consent to the sending of commercial communications: until you unsubscribe, request that we delete it;

Cookies that are placed on your computer: we store them for as long as necessary to achieve their purposes (for example, during a session for shopping cart cookies or session ID cookies).

We may retain some personal data to comply with our legal or regulatory obligations, to administer our rights (for example, to assert our claims in court) or for statistical or historical purposes.
When we no longer need to use your personal data, it will be deleted from our systems and records or anonymized so that we can no longer identify it.

IS MY PERSONAL DATA STORED SECURELY?

We are committed to protecting your Personal Data and taking all reasonable precautions to do so. We contractually require trusted third parties who handle your Personal Data to do the same.

We always do our best to protect your Personal Data and once we have received your personal information, we use strict procedures and security features to try to prevent unauthorized access. Because the transmission of information over the Internet is not completely secure, we cannot guarantee the security of your data transmitted to our site. Therefore, any transmission is at your own risk.

Security measures

CHARANGA SL. ensures the absolute confidentiality and privacy of the personal data collected and, therefore, essential security measures have been adopted to prevent alteration, loss, unauthorized treatment or access and thus guarantee its integrity and security.

CHARANGA SL will not be responsible in any case for incidents that may arise regarding personal data when they arise from an attack or unauthorized access to the systems in such a way that it is impossible to detect by the security measures implemented, or when it is due to a lack of diligence on the part of the User regarding the safekeeping and custody of their access codes or their own personal data.

CHARANGA SL has been registered in the Registry of Distance Selling Companies with the registration number: 2011/1089/01/29/2/V.

Passwords

Charanga S.l will facilitate the use of personal passwords for the User who registers. These passwords will be used to access the exclusive services for registered users.
The User must keep their password under their exclusive responsibility in the strictest and absolute confidentiality, therefore assuming any damages or consequences of any kind arising from the breach or disclosure of the secret.

LINKS TO THIRD PARTY SITES AND SOCIAL LOGIN

Our websites and applications may contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and we are not responsible for these policies. Please review these policies before submitting personal data to these websites.

We can also offer you the opportunity to use your social media login to register on the websites owned by CHARANGA SL. If you do so, please note that you are sharing your social profile information with us. The personal data shared depends on the settings of your social media platform.

Visit the social media platform in question and review its privacy policy to understand how your personal data is shared and used in this context.

SOCIAL MEDIA AND USER GENERATED CONTENT

Some of our websites and applications allow users to submit their own content. Please remember that any content submitted to one of our social media platforms may be viewed by the public, so you should take care when providing certain personal data (for example, financial information or address details). We are not responsible for any actions taken by others if you post personal data on one of our social media platforms and we recommend that you do not share such information.

PERSONAL DATA OF MINORS

We recommend parents/guardians to assist their children when surfing the Internet.
We remind you that if you are under 14 years of age, we need your parents or guardians to give us their consent for your registration on our website, so you must provide a valid email address so that we can contact them.

YOUR RIGHTS AND OPTIONS

CHARANGA SL respects your right to privacy: it is important that you have control over your personal data. In this sense, the following rights correspond to you:

YOUR RIGHTS	WHAT DO THEY MEAN? HOW CAN I EXERCISE THEM?
Right to information.	You have the right to obtain clear, transparent and easy-to-understand information about how we use your personal data and about your rights. We provide you with this information in this Privacy Policy.
Right of access (Article 15 GDPR)	You have the right to access the personal data we hold about you (with certain limits). Manifestly unfounded, excessive or repetitive requests may not be attended to. To exercise this right, contact us by any of the means indicated below.
Right of rectification (Article 16 GDPR)	You have the right to have your personal data rectified when it is inaccurate or no longer valid or to have it completed when it is incomplete. To exercise this right, contact us by any of the means indicated below. If you have an account, it may be easier to correct these yourself by modifying your profile.
Right of deletion/right to be forgotten (Article 17 GDPR)	In certain cases, you have the right to have your personal data deleted or deleted. It should be noted that this is not an absolute right, since we may have legal or legitimate reasons to keep them. If you want us to delete your personal data, please contact us by any of the means indicated below.
Right to object to direct marketing, including profiling (Article 21.2 GDPR)	You can unsubscribe from our direct marketing communications at any time. The easiest way to unsubscribe is by clicking on the “Unsubscribe” link in any email or communication we send you. If not, contact us by any of the means indicated below. To object to profiling, please contact us by the means indicated below.
Right to withdraw consent at any time when data processing is based on consent	You can withdraw your consent to the processing of your personal data when the processing is based on your consent. The withdrawal of consent will not affect the legality of the processing based on the consent prior to its withdrawal. To find out about cases in which the processing is based on consent, we refer you to the table included in the section “What data do we collect from you?”, in particular the column “What is the legal basis for processing your Personal Data?” ”. If you wish to withdraw your consent, please contact us by any of the means indicated below.
Right to object to processing based on the satisfaction of legitimate interests (Article 21 GDPR)	You can object at any time to our processing of your data when the processing is based on the satisfaction of legitimate interests. To inform you of cases in which the processing is based on legitimate interests, we refer you to the table included in the section “What data do we collect from you?”, in particular the column “What is the legal basis for processing your Personal Data?” ”. If you wish to exercise this right, please contact us by any of the means indicated below.
Right to file a claim with a supervisory authority	You have the right to complain to the Spanish Data Protection Agency about the privacy and data protection practices of CHARANGA S.l Do not hesitate to contact us by any of the means indicated below before filing a complaint with the competent data protection authority.
Right to data portability (Article 20 GDPR)	You have the right to move, copy or transfer data from our database to a different one. It is only possible to exercise this right with respect to data that you have provided, when the processing is based on the execution of a contract or on your consent and the processing is carried out by automated means. To find out about cases in which the treatment is based on contract or consent, we refer you to the table included in the section “What data do we collect from you?”, in particular the column “What is the legal basis for processing your Data?” Personal?” For more information, contact us by any of the means indicated below.
Right to limit processing (Article 18 GDPR)	You have the right to request the limitation of the processing of your data. If you exercise this right, the processing of your data will be subject to limitations, so we may store it but we will not be able to continue using or processing it. This right can only be exercised in certain circumstances defined by the General Data Protection Regulation, as follows: that the interested party challenges the accuracy of the personal data, during the period that allows the person responsible to verify the accuracy of the same; that the processing is unlawful and the interested party opposes the deletion of the personal data and requests instead the limitation of its use; that the controller no longer needs the personal data for the purposes of the processing, but the interested party needs it for the formulation, exercise or defense of claims; that the interested party has objected to the processing pursuant to Article 21, paragraph 1, while it is verified whether the legitimate reasons of the controller prevail over those of the interested party. If you wish to exercise this right, please contact us by any of the means indicated below.
Right to deactivate Cookies	You have the right to deactivate Cookies. Internet browsers are usually set by default to accept Cookies, but they can be easily disabled by changing the browser settings. Many cookies are used to improve the usability or functionality of websites/apps; Therefore, its deactivation may prevent you from using certain parts of our websites/applications as indicated in the Cookies Policy

To process your request, we may ask you to prove your identity by sending a copy of your DNI, NIE or any other document that we deem appropriate.

CONTACT

If you have any questions or concerns about the way we process and use your personal data or wish to exercise any of the rights described above, please contact charanga@charanga.es or write to us at the following address:

Alesandro Volta Street, nº 2,
29590 Campanillas.
Malaga.

You can also contact our Data Protection Officer at charanga@charanga.es

MODIFICATION OF THIS PRIVACY POLICY

CHARANGA SL reserves the right to modify this Privacy Policy; However, we would keep you informed of any changes.