Privacy policy

 

This Privacy and Cookies Policy applies exclusively to our website, www.albalazari.com and has been created for Alba LAZARÍ. Its purpose is to regulate the privacy of users of our website.

We may update this policy periodically, so we invite you to visit this page occasionally to stay informed of any changes.

By using our website, you agree to the terms of this Policy.

PERSONAL DATA PROTECTION POLICY

In accordance with the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), Alba LAZARÍ provides the following data protection policy, detailing how we collect, use, and safeguard your personal data.

Please note that this policy may be updated over time due to changes in Spanish or European legislation, jurisprudence, or guidelines from the Spanish Data Protection Agency (AEPD) or other competent authorities. Alba LAZARÍ reserves the right to modify it to comply with current legal requirements.

Last updated: September 2025

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

Alba LAZARÍ is the registered trade name of María Alba Rodal Fernández, with NIF 78736774T, who is responsible for managing your personal data on this website.

For any questions regarding this policy or our privacy practices, you can contact us:

  • Email: info@albalazari.com
  • Postal address: Alba LAZARÍ, Calle Fuente Ferreira, 10 - 36940 Cangas, Pontevedra, Spain

PURPOSE OF DATA PROCESSING

Alba LAZARÍ only collects personal data strictly necessary to manage our relationship with you. The information requested is adequate, relevant, and limited to what is necessary for the purposes outlined below:

Management of Your Web Account

Administer your user account, profile, purchase history, billing, returns, and notifications. Analyze browsing behavior (products viewed, sections visited, location) to offer relevant content and products.

Online Purchase Management

Manage your shopping cart, process and deliver orders, and inform you of order status. Handle billing and financial transactions related to your purchases.

Newsletter Management

If subscribed, send you personalized updates and content based on your interests and profile. You can unsubscribe at any time using the links provided in each communication.

LEGAL BASIS FOR DATA PROCESSING

We rely on the following legal bases under GDPR:

1. Consent

  • To manage your web account and send newsletters.

You may withdraw consent at any time without affecting past purchases.

2. Contract Execution

  • Process orders, manage shopping carts, deliver products, issue invoices, and communicate about order status.
  • Providing required data is necessary to complete purchases.

3. Legal Obligation

  • Process data to comply with tax and accounting requirements.

4. Legitimate Interest

  • Analyse website navigation to improve services and personalize content.
  • Send satisfaction surveys to improve products and services.

DATA RETENTION

Personal data is kept until you request deletion. In some cases, data may be retained to comply with legal obligations, in which case it will be securely blocked and used only for legal purposes.

DATA SHARING

Personal data is treated confidentially and only shared in specific justified cases:

  • Legal Obligation
  • Tax authorities or courts as required.
  • Order Management
  • Financial institutions and payment providers to process payments.
  • CRM and Communications
  • With Brevo for managing communications and customer relations. Contact Brevo’s Data Protection Officer: dpo@brevo.com. More info: brevo.com/es/
  • Website Performance Analysis: Google Analytics uses cookies to analyze website usage. Data, including IP addresses, may be stored on servers in the USA. More info: analytics.google.com
  • Advertising on Social Media: Platforms such as Instagram Ads and Facebook Ads to deliver relevant ads.

No international transfers outside the EU are made without proper safeguards.

YOUR RIGHTS UNDER GDPR

  • Access: Confirm whether we are processing your data and access it.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure (Right to be Forgotten): Request deletion when data is no longer necessary.
  • Restriction of Processing: Limit data usage to legal claims.
  • Data Portability: Receive data in a structured, machine-readable format.
  • Objection: Object to automated decisions or profiling.
  • Withdraw Consent: Revoke consent at any time without affecting past processing.

HOW TO EXERCISE YOUR RIGHTS

Write to: Alba LAZARÍ, Calle Fuente Ferreira, 10 - 36940 Cangas, Pontevedra, Spain

Email: info@albalazari.com

Include: full name, NIF, contact email, right to exercise, and relevant details. We will respond within 1 month.

Right to File a Complaint

You may file a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es/

DATA SECURITY

Alba LAZARÍ implements technical and organizational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorized access, or processing.

Our goal is to ensure the highest level of data security to always safeguard your information.