Privacy policy

. Additional information on data protection.
1.1. This privacy policy is drafted in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights. SHIVAPLATA S.L provides information to the User of the website www.benditaeva.com and derivatives (hereinafter websites) on data protection in an easily understandable question-answer format:
- Who is the Data Controller of your data?
Identity: SHIVAPLATA S.L
Telephone: 966831316
E-mail: hello@benditaeva.com
- For what purpose do we process your personal data?
SHIVAPLATA S.L. processes the information you provide us with the following purposes:
1) To process, deliver, invoice and collect payment for orders placed on our website www.benditaeva.com. Once the order has been confirmed, the customer will receive an e-mail with the order confirmation.
2) To process your application to become a registered user of www.benditaeva.com and to maintain your user account. Once the application has been confirmed and accepted, the user will receive a confirmation e-mail at the address indicated at the time of completing the registration form.
3) Respond to requests or requests that are made by the user through any of the forms of contact (web form, chat Tidio...) that are made available to the user on the website www.benditaeva.com.

4) Sending e-mails as a reminder of the products saved in the wish list.
5) Sending emails as a reminder of the products that the customer has included in their shopping cart.
6) Processing of returns, exchanges, cancellations and any other management derived from the order placed.
7) Attention to complaints, claims and exercise of customer rights.
8) To send you advertising about offers and promotions for contracting and marketing our services and products, as well as communications related to news of interest and customer loyalty campaigns.
9) Comply with all the provisions regarding the obligations imposed by Law 10/201, of 28 April, on the prevention of money laundering and the financing of terrorism, and the duties related to data protection by Organic Law 3/2018, of 6 December, on Data Protection and Guarantees of Digital Rights.
No automated decisions will be made, such as profiling to offer services or products, except as provided in the Cookies Policy. If this does take place, we will inform you of the rationale and the significance and expected consequences of such processing for you.
- How long will we keep your data?
If you have placed an order, we will keep the personal data you provide for the period of time established by fiscal and tax legislation for the prescription of responsibilities.
If you are a registered user we will retain your data until you request the deletion of your account.
We will continue to send you reminders, by e-mail, of the available products that have been left in your shopping cart and on your wish list until you complete the purchase, remove the products from your shopping cart or remove the products from your wish list.
If you have made a query or request for information through the means of contact provided on the website, we will keep your data for the time strictly necessary for the resolution of the query and in any case for a maximum period of one year from the collection of the data.
If you have given us your consent to send you commercial advertising by electronic means, we will continue to use your data for this purpose until you exercise your right to object to such processing.
Your data will be kept for a maximum of 10 years for compliance with all obligations relating to the prevention of money laundering and the financing of terrorism, as indicated in article 25 of Law 10/2010, of 28 April, on the prevention of money laundering and the financing of terrorism.
- What is the legitimacy for the processing of your data?
When you make an enquiry through the contact forms provided on our website, as well as when you create a user account, we are entitled to process your data by the consent you give us by accepting our privacy policy.
When you place an order or when we deal with a query, complaint or suggestion, when we send you purchase reminders and when we process returns, exchanges and cancellations, we are entitled to process your data due to the contractual relationship we have with you. We ask you for the information that is strictly necessary to process your order.
When we send you a message confirming your order, we are entitled to process your data in accordance with article 28 of Law 34/2002 on Information Society Services and Electronic Commerce.

To send you commercial advertising and communications related to news of interest and customer loyalty campaigns, we are entitled to do so with the express consent you have given us.
In line with our commercial interests and your interest in our products, the existence of a legitimate interest entitles us to send you reminders about products placed in your shopping cart and whose purchase process has not been completed; and about products that you have left stored in our "wish list".
The fulfilment of a legal obligation due to the imposition of anti-money laundering regulations entitles us to process your data to the extent provided for by law.
- To which recipients will your data be disclosed?
We will transfer your data to the Tax Authorities, Banks and other Public Administrations when there is a legal obligation to do so or when it is necessary to process your order.
When you pay for an order by bank card, BANKIA, through the REDSYS SERVICIOS DE PROCESAMIENTO, S.L. payment platform, processes the payment made, so these two companies will be aware of your bank card details.
When necessary, the SEPBLAC will be informed of any activity or operation that is suspected or certain to be related to money laundering or the financing of terrorism.
When you pay for an order through PAYPAL, you have previously provided your identification and bank details to PAYPAL (PAYPAL HOLDINGS, INC) in order to register and use this application.
There are also companies to which SHIVAPLATA S.L. does not transfer data, but which provide us with different services, these services involving the hosting of personal data by these companies or the occasional access by them to the same. These companies that act as data processors and with whom we have signed a contract to guarantee the security of personal data are:
*Tax and accounting consultancy: They provide us with the tax and accounting advice that our company needs.
*Computer services: Different companies provide us with the hosting service for our corporate e-mails, the hosting and maintenance services for our corporate website, the online chat service, and the management services for the website's payment gateway.
*Order transport company: They are responsible for the transport and delivery of orders placed.
International data transfers will be made to GOOGLE LLC. when using the GMAIL e-mail application. GOOGLE LLC. is a globally operating company with its main data centre in the USA. In order to be able to make international data transfers to Google LLC with the appropriate guarantees, we have signed the European Commission's standard contractual clause with Google based on Commission Decision 2010/87/EU of 5 February 2010.

International data transfers will be made to TIDIO when using its online chat service. SHIVAPLATA, S.L. enables the PAYPAL payment service for your purchases. The use of this platform requires that you have previously created an account and accepted all the conditions and policies of PAYPAL, so we inform you that PAYPAL HOLDINGS, INC. performs international data transfers when using its application, PAYPAL, as a payment method. SHIVAPLATA, S.L. does not carry out or control, directly or indirectly, the international transfers made by PAYPAL for the use of its payment service. You can find more information at the following link: https://www.paypal.com/es/webapps/mpp/ua/privacy-full
- What are your rights when you provide us with your data?
- The interested party has the right to obtain confirmation as to whether or not SHIVAPLATA S.L. is processing personal data concerning him/her.
- The interested party has the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- The interested party may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims.
- Likewise, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data, as well as to withdraw their consent to the processing thereof. SHIVAPLATA S.L. will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
- The data subject shall have the right to receive the personal data concerning him/her that he/she has provided in a structured, commonly used and machine-readable format, and to transmit it to another data controller without being prevented from doing so by the data controller to whom he/she has provided it.

The data subject has the right not to be subject to an automated decision based solely on the processing of his or her data, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. Profiling refers to any form of processing of your personal data that evaluates personal aspects, in particular analysing or predicting aspects related to your job performance, financial situation, health, personal preferences or interests, reliability or behaviour.
To exercise these rights, you may send a letter with your request to the following address: AVDA. MARTÍNEZ ALEJOS, (ALICANTE), or the following e-mail address: hello@benditaeva.com and we will contact you to tell you the steps to follow to exercise your data protection rights. We also inform you that you can file a complaint with the Spanish Data Protection Agency, especially if you are not satisfied with the exercise of your rights.
Contact details of the Spanish Data Protection Agency:
Address: C/ JORGE JUAN, 6, 28001 (MADRID)
Contact telephone numbers: 901 100 099 - 912 663 517
Website: www.aepd.es
1.2. Mere access to the website, as well as all or part of its contents and services, implies unreserved acceptance of this privacy policy, also applicable prior to the possible contracting of the services that SHIVAPLATA S.L. makes available to customers. This privacy policy must be accepted and complied with prior to accessing and possibly contracting on the website.
1.3. You agree that browsing the website is an act of free expression of will for the collection and processing of data in SHIVAPLATA S.L. SHIVAPLATA S.L. may freely make changes to the privacy policy of the website, such changes will be indicated in this privacy statement and in any other place we deem appropriate so that you are aware of the information collected, how we treat it and under what circumstances, if any, we communicate it.
2. Collection of data in the possible contracting of services from SHIVAPLATA S.L.
2.1. At the time of acceptance of the conditions of contracting the services of SHIVAPLATA S.L., it will require the collection of some basic and essential data for the provision of services. The aforementioned data are real name and surname, address, postcode, town, ID card number, a valid email address, as well as other information that is relevant to contractual purposes about your person and representation. At all times, the user will be informed of the necessary nature of the collection of such data for the correct management of the provision of services.
2.2. Likewise, for the provision of services, SHIVAPLATA S.L. may ask the user for a series of additional data through assistance in person or by telephone, for which the user will be informed, at the time, of the collection and processing of the same.
2.3. Whenever SHIVAPLATA S.L. requests the number of a bank account of the client who wishes to contract our services, it will do so in encrypted form and in compliance with the strictest duty of confidentiality.
20

2.4. For a better provision of services, you authorise SHIVAPLATA S.L. to have the right to verify, investigate and/or check the data provided. You agree that SHIVAPLATA S.L. may disclose your personal data in compliance with the requirements of a judicial proceeding or order or legal process. You further agree that if SHIVAPLATA S.L. sells part or all of its business or merges with another business, it may disclose your information to its new business partners.
3. Limitation of liability
SHIVAPLATA S.L. is only responsible for the information it requests and collects from users wishing to contract, and is not responsible at any time for any other personal information that may be transferred, transmitted or provided by users of the website themselves by any other mechanism.
4. Data quality guarantee
You guarantee that the data provided are true, accurate, complete and up to date, being responsible for any damage or loss, direct or indirect, that may be caused as a result of the breach of this obligation both to SHIVAPLATA S.L. and to third parties.
5. Consent for compliance with the LSSI-CE
5.1 In compliance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, SHIVAPLATA S.L will request and the user may give their consent so that, if they so wish, SHIVAPLATA S.L may use their data in order to send them information and advertising about the website and the different offers, special promotions and third party service providers.
5.2 SHIVAPLATA S.L, with the aim of guaranteeing the security and confidentiality of your personal data, has adopted the relevant security measures and has installed the technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided to SHIVAPLATA S.L.