Privacy policy

 

This policy defines how Alba LAZARÍ collects, uses, and protects personal data on the website www.albalazari.com, ensuring complete transparency and strict compliance with the General Data Protection Regulation (GDPR - EU 2016/679) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

 

 1. Data Controller

  • Owner: María Alba Rodal Fernández (Alba LAZARÍ)
  • Tax Identification Number (NIF): 78736774T
  • Address: Calle Fuente Ferreira, 10 - 36940 Cangas, Pontevedra, España
  • Contact: info@albalazari.com

 

2. Purpose and Legal Basis for Processing Alba LAZARÍ collects only the personal data strictly necessary to provide an excellent service. The processing of this information is based on the following legal grounds:

  • Performance of a contract: Information required to manage purchases, process payments, coordinate shipments, handle returns, and issue invoices.
  • Explicit consent: Data provided voluntarily for the creation of a customer account or subscription to our newsletter.
  • Legitimate interest: Analysis of browsing behaviour to improve website usability, personalise the user experience, and send satisfaction surveys.
  • Legal obligation: Retention of billing data in order to comply with tax and accounting regulations required by public authorities.

 

3. Data Retention Personal data will be retained for the period strictly necessary to fulfil the purposes described, or until the data subject requests its erasure. Thereafter, the information will remain duly blocked for the legally established limitation periods to address any potential liabilities arising from the processing.

 

4. Disclosure to Third Parties Alba LAZARÍ guarantees the absolute confidentiality of your information. Personal data is neither sold nor transferred to third parties, except where strictly necessary for operational service delivery:

  • Payment gateways and financial institutions for secure transaction processing.
  • Logistics and transport companies for order delivery.
  • Technology and analytics service providers (e.g. Shopify, email marketing platforms, web analytics), which operate under strict confidentiality agreements without undertaking international data transfers that are not covered by European legislation.
  • Competent authorities where a legal obligation exists.

 

 

5. User Rights Any individual has the right to obtain confirmation as to whether Alba LAZARÍ is processing their personal data. At any time, individuals may exercise their rights of access, rectification, erasure, restriction of processing, data portability, or objection, as well as withdraw any previously granted consent.

To exercise these rights, a written request must be submitted, accompanied by a copy of a national identity document (DNI) or equivalent identification, to info@albalazari.com or to the postal address indicated above. Alba LAZARÍ will address and resolve these requests within a maximum period of one (1) month. Furthermore, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

 

6. Information Security The most advanced technical and organisational measures are implemented to protect personal data against unauthorised access, alteration, loss, or unlawful disclosure, thereby ensuring a secure browsing and shopping environment.