Privacy Policy

This privacy policy (hereinafter, the "Privacy Policy") has been drafted by GODIAM, S.L. (hereinafter, "GODIAM" or the "Data Controller") in order to comply with the duty of transparency in the processing of personal data that it may carry out as data controller, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, "GDPR"), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, "LOPDGDD").

The information contained in this Privacy Policy allows you to consult the details of the different processing operations of your personal data that may be carried out as a result of accessing and using the website indicated below (hereinafter, the "Website"), as well as the different legal or commercial relationships you may maintain with GODIAM.

If you wish, we inform you that you can contact us to discuss any matter related to the processing of your personal data at the following email address: info@godiamaltajoyeria.com

Need to provide personal data

We inform you that mere access to the Website does not imply the obligation to provide any personal information, except as provided in the Cookies Policy.

However, the use of some services or functionalities of the Website does require that you provide certain personal data, indicated in the corresponding forms, and implies its processing for the purposes and legal bases indicated in this Privacy Policy, unless otherwise indicated.

Refusal to provide the required data in these cases may mean the impossibility of providing some services or functionalities, or processing the requests or contracts made, especially in those cases where they are identified as mandatory completion.

As the data subject, you will be responsible for ensuring that the data you provide us through the Website are true, accurate, complete, and up-to-date. For these purposes, you will be responsible for the veracity of all the data you communicate and must keep the information provided duly updated, so that it corresponds to your real situation.

Likewise, you will be responsible for any false or inaccurate information you provide and for any direct or indirect damages caused thereby to the Data Controller or third parties.

Who is the data controller?

Below you will find the details of the entity acting as the data controller:

Owner: GODIAM, S.L.
Registered office: Merced 75B 4Dr, 15009 La Coruña.
CIF (Tax ID): B15905284

What categories of data do we process?

Taking into account the different purposes, and depending on the products, services, or functionalities of the GODIAM Website, the following categories of personal data may be processed:

Identification and contact details: name and surname, email address, postal address and telephone number, etc.
Banking or economic data: card number and information necessary to proceed with payment, information about your purchases, orders, returns, etc.
Browse data: IP address, advertising ID, your behavior on the Website, etc.
Commercial information: if you are subscribed to our Newsletter.
Other: any personal data provided directly by the user through the forms enabled on the Website for this purpose.

For what purpose will we process your personal data?

GODIAM will process the data you provide us for the following purposes:

Allow navigation and access to the content of the Website if you access as an unregistered user.
Allow registration on our Website and management of your profile, as well as communicate with you when necessary.
Development, fulfillment, and execution of the contractual relationship, as well as the management of purchases, shipments, and payments of the products acquired by users on the Website.
Manage the subscription to our Newsletter, and periodically send commercial communications about own products and services, as well as updates and news specific to GODIAM.
Manage your exchanges and returns, as well as process and respond to your requests, queries, or petitions through the contact form enabled for this purpose on the Website.
For analytical and statistical purposes that allow reporting on access habits, preferences, and user behavior on the Website.
Develop a commercial profile with the information provided by you in order to send you personalized commercial communications based on your tastes and preferences. The user may object at any time to this processing by GODIAM.
Comply with legally established obligations, as well as verify compliance with contractual obligations, including fraud prevention.

What is the legal basis for processing your personal data?

GODIAM processes the User's data according to the following legitimizing bases:

Allow navigation and access to the content of the Website. If you access the Website as an unregistered user, we will process your personal information to allow navigation and access to the content of the Website based on our legitimate interest.
Allow registration on our Website and management of your profile, as well as communicate with you when necessary. The processing of your data for this purpose is necessary for the execution of the contractual relationship.
Development, fulfillment, and execution of the contractual relationship, as well as the management of purchases, shipments, and payments of the products acquired by users on the Website. The processing of your data for this purpose is necessary to proceed with the execution of the contractual relationship that binds us to you.
Manage the subscription to our Newsletter, and periodically send commercial communications about own products and services, as well as updates and news specific to GODIAM. If you access the Website as a registered user, your data may be processed for the purpose of sending you commercial communications about own products and services, based on the legitimate interest of GODIAM and in accordance with the exception provided for in article 21.2 of the Law on Information Society Services and recital 47 of the GDPR. The legitimate interest is based on carrying out direct marketing in order to offer the user products and services that may be of interest and thus achieve their loyalty.
When the user has not previously registered with GODIAM and there is no prior contractual or pre-contractual relationship, the data will be processed based on the consent given by the user. For its part, the processing derived from the subscription to the Newsletter through the form enabled for this purpose will be carried out based on consent.
If the user wishes to stop receiving commercial or promotional communications from GODIAM, they can request to unsubscribe from the service by sending an email to the following email address: info@godiamaltajoyeria.com or by clicking on the link that will appear at the bottom of the commercial communications sent.
Manage your exchanges and returns, as well as process and respond to your requests, queries, or petitions through the contact form enabled for this purpose on the Website. The data processing derived from this purpose is carried out in accordance with the user's consent, which may be withdrawn at any time. If the user withdraws consent, the query or question raised cannot be processed.
For analytical and statistical purposes that allow reporting on access habits, preferences, and user behavior on the Website. The processing derived from this purpose is based on the legitimate interest recognized to GODIAM by data protection regulations. This legitimate interest is based on being able to offer users GODIAM's services with the highest quality and best possible experience.
Develop a commercial profile with the information provided by you in order to send you personalized commercial communications based on your tastes and preferences. The user may object at any time to this processing by GODIAM. The processing derived from this purpose is legitimized by the legitimate interest based on the information provided by the user themselves and the information related to their activity on the Website. However, the user has the right to object to this processing at any time.
Comply with legally established obligations, as well as verify compliance with contractual obligations, including fraud prevention. The processing that may derive from this purpose will be based on compliance with a legal obligation.

The consents obtained for the mentioned purposes are independent, so the user may revoke only one of them without affecting the others.

How long do we process your data?

The user's personal data will be kept by GODIAM for the following periods:

Allow navigation and access to the content of the Website. The data will be processed as long as necessary to fulfill the indicated purpose or until the user objects to it. After that, they will be kept for the statute of limitations period for legal actions that may arise from this processing.
Allow registration on our Website and management of your profile, as well as communicate with you when necessary. The data will be kept for the duration of the contractual relationship and, once it has ended, for the statute of limitations period for legal actions that may arise from this processing.
Development, fulfillment, and execution of the contractual relationship, as well as the management of purchases, shipments, and payments of the products acquired by users on the Website. The data will be processed for the time necessary to manage the purchase and shipment of the products, including possible returns, complaints, or claims associated with the purchase of the particular product or service. After that, they will be kept for the statute of limitations period for legal actions that may arise from this processing.
Manage the subscription to our Newsletter, and periodically send commercial communications about own products and services, as well as updates and news specific to GODIAM. The data will be processed until the user objects to receiving these communications or revokes their consent.
Manage your exchanges and returns, as well as process and respond to your requests, queries, or petitions through the contact form enabled for this purpose on the Website. The data will be kept for the period necessary to manage the exchanges and returns or, where applicable, process the response to your queries or requests and, once this period has ended, they will be kept for the statute of limitations period for legal actions that may arise from this processing.
For analytical and statistical purposes that allow reporting on access habits, preferences, and user behavior on the Website. The information will be used in an aggregated form for analysis and statistical purposes during the period necessary to process and prepare the necessary reports, statistics, and/or analyses, and, once finalized, they will be kept for the statute of limitations period for legal actions that may arise from this processing.
Develop a commercial profile with the information provided by you in order to send you personalized commercial communications based on your tastes and preferences. The user may object at any time to this processing by GODIAM. The data will be processed for this purpose until the user objects to the processing, and in no case may they be kept for a period longer than one (1) year.
Comply with legally established obligations, as well as verify compliance with contractual obligations, including fraud prevention. The data provided to comply with the obligations arising from the services offered by GODIAM will be kept for the legally established periods.

To which recipients will your data be communicated?

To fulfill the purposes indicated in this Privacy Policy, the personal data of the interested parties may be communicated to the following entities or in the following cases:

Public administrations: in those cases provided for by law and based on compliance with a legal obligation.
Courts and Tribunals: in those cases provided for by law and based on compliance with a legal obligation.
Security Forces and Bodies: for those cases provided for by law and based on compliance with a legal obligation.
Banks and financial institutions to proceed with the collection of products purchased on the Website.
Providers and collaborators of logistics, transport, and delivery services.
Technology service providers.

GODIAM will have the collaboration of these third-party service providers who may have access to your personal data, which they will process in the name and on behalf of GODIAM based on the data provided by the User, due to the provision of services. In this regard, we inform you that GODIAM selects its providers appropriately, in order to rigorously comply with all its obligations regarding data protection, including the correct subscription of the corresponding data processing agreement in accordance with art. 28 of the GDPR.

Where is personal data processed?

Taking into account the services provided by GODIAM, or by third-party providers, some of the personal data provided by the user may be processed by third-party providers located outside the European Economic Area, and may not provide a level of data protection comparable to that of the European Union.

In such cases, we inform you that GODIAM adopts all necessary legal, technical, and organizational measures to ensure that the personal data you provide is protected, transferring your data in this sense with sufficient and appropriate guarantees, and always maintaining the security thereof by subscribing to the corresponding Standard Contractual Clauses, in accordance with the General Data Protection Regulation.

Therefore, in cases where GODIAM has service providers located outside the European Union, these international transfers are regularized by signing the aforementioned Standard Contractual Clauses, always attending to GODIAM's commitment to the protection, integrity, and security of users' personal data, in accordance with the established legal requirements.

What security measures are adopted to protect personal data?

In accordance with the commitment assumed by GODIAM regarding the protection of your personal data and your privacy, the necessary security measures have been adopted to prevent their loss, manipulation, dissemination, or alteration.

What rights does the data subject have?

As a data subject, you can exercise your data protection rights at any time by writing to GODIAM at C/ Merced 75B 4Dr, 15009 La Coruña-Spain. Specifically, your data protection rights are as follows:

Right of Access: You have the right for GODIAM to inform you whether or not it is processing your personal data and, if so, you can access said data and receive information about the purposes for which they are processed, the categories of data affected by the processing, the recipients to whom your personal data were communicated, and the planned retention period for the data, among other information.
Right to Rectification: You have the right to obtain without undue delay from GODIAM the rectification of inaccurate personal data concerning you, as well as to have incomplete or inaccurate personal data completed or modified.
Right to Erasure: You have the right to obtain without undue delay from GODIAM the erasure of personal data concerning you when said data are no longer necessary for the purposes for which they were collected or when the data have not been processed in accordance with the regulations.
Restriction of processing, revocation of consent, and total or partial objection to processing: You have the right to obtain from GODIAM the restriction of the processing of your personal data when any of the conditions provided for in the data protection regulations are met.
Right to withdraw consent: You have the right to withdraw the consent you have given, for any or all purposes based on said consent. In this case, GODIAM will cease processing, unless legitimate grounds can be demonstrated.
Right to object: You have the right to object to the processing, at any time, on grounds relating to your particular situation, if the processing is based on the legitimate interest of GODIAM. In this case, GODIAM will cease processing, unless compelling legitimate grounds are demonstrated that override the interests, rights, and freedoms of the data subject.
Right to data portability: You have the right to receive the personal data that you have provided to GODIAM in a structured, commonly used, and machine-readable format, and to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases legally provided for this purpose.
Automated individual decision-making: Likewise, in addition to the aforementioned rights, if automated decisions are made, including profiling, you will have the right to obtain human intervention from GODIAM and to express your point of view and contest the decision.
Other: Likewise, when personal data are transferred to a third country or to an international organization, you will have the right to be informed about how you can access or obtain a copy of the appropriate safeguards relating to the transfer.

Furthermore, you may file a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 – Madrid, when the data subject considers that GODIAM has violated the rights recognized by the applicable data protection regulations.

Update of this Privacy Policy

GODIAM reserves the right to make the necessary changes to this Privacy Policy, ensuring that the data protection guidelines are adequate and are kept up-to-date at all times in accordance with current legislation.