1. USER INFORMATION
shoptestois committed to managing users’ personal data and informs you that such data will be processed in accordance with the applicable personal data protection regulations, in particular Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the protection of natural persons and the guarantee of digital rights (LOPDGDD). Accordingly, we provide the following information regarding the processing:
Purpose of processing:
To handle requests for information or any other contact made by the user through the contact forms available on the site.
To manage user registration to facilitate the purchase of the products offered.
To subscribe to our newsletters in order to receive updates and special offers on products available on our site.
To moderate, record, and display customer reviews and opinions.
To provide information about and register users for seminars and coaching/training courses.
Lawful basis: Our lawful basis for processing your personal data is based on several grounds:
The legal basis for processing your data arises from our relationship with you, which is founded on the performance of a contract and/or commercial relationships, as well as your explicit consent that you may have provided for additional processing—for example, via the site’s contact form. Any other processing that requires collection of your personal data also requires the specific consent of the data subject.
Please note that the personal data requested during registration on this site are necessary to establish and manage our relationship with you. Therefore, we will be unable to maintain that relationship in their absence. In any case, this primary purpose does not require consent for the processing of data that are not necessary for the activity itself.
Data retention criteria: Data will be retained as long as there is a mutual interest in achieving the purposes of the processing. Once such need no longer exists, the data will be deleted using appropriate security measures to ensure pseudonymization or complete destruction.
Data sharing: In certain situations, to provide the requested service, it may be necessary to access information provided by third parties. These include logistics, transport, and delivery services, as well as organizations that provide us with other services such as IT (e.g., data storage and processing).
The above third parties will only have access to the personal data necessary to provide their services. They are required to ensure the confidentiality of your personal data and may not use such data for any purpose other than under our instructions.
Data subjects’ information will not be transferred to third parties, except in cases provided by law.
User rights:
The user has the right to withdraw consent at any time. The user also has the right to object and the right to data portability. Under the established rules, the data subject has the right to access all personal data provided, provided that processing is carried out on the basis of consent or is necessary for the performance of a contract and involves automated processing methods.
Right of access: The data subject has the right, upon request and free of charge, to receive information about their personal data being processed, as well as their origin and the methods of processing. If the request is submitted electronically and the data subject does not indicate otherwise, the information will be provided in a commonly used electronic format. The right to receive a copy must not adversely affect the rights and freedoms of others.
Right to rectification and erasure: The controller must ensure the exercise of the data subject’s right to rectification or erasure within ten days. Personal data that are processed in a way that does not comply with legal requirements must be rectified or, where appropriate, erased. The data subject has the right to obtain, without undue delay, the rectification of inaccurate or incomplete personal data concerning them. The data subject also has the right to request completion of data, including by means of a supplementary statement.
Right to restriction of processing: The data subject has the right to request that the controller restrict the processing of their data. Where processing of personal data has been restricted, such data shall, with the exception of storage, only be processed with the data subject’s consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest. A data subject who has obtained restriction must be informed by the controller before the restriction is lifted.
Right to object: The data subject has the right to object, at any time and on grounds relating to their particular situation, to the processing of their personal data based on those grounds (public interest and legitimate interest), including profiling based on the same. shoptestowill cease processing the personal data upon objection unless it demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
Contact information to exercise your rights:
Postal address: Piccadilly Arcade, New St, Birmingham B2 4EU, United Kingdom
Email address: [email protected].
Transmission of messages or information
Our policy on transmitting information by telematic means (such as email, instant messages, etc.) is limited to sending messages that we consider of interest to our users and stakeholders in the context of the company’s functions and activities, or messages for which they have given consent to receive. If you prefer not to receive these communications, please exercise your right to object under the provisions of Chapter III, Article 22 of Law 34/2002 on Information Society Services and Electronic Commerce.
Forms:
Contact:
Purpose of processing: To respond to various requests related to our services.
Legal basis: Consent provided via the appropriate acceptance checkbox.
Data retention criteria: Data will be kept as long as there is a mutual interest in their processing; if that need ceases, they will be destroyed using appropriate security measures that ensure pseudonymization.
Recipients: Data will not be transferred to third parties.
Registration:
Purpose of processing: Data are collected to enable purchases, manage commercial relationships, process your requests and/or orders and related charges. Data are also processed for advertising and commercial purposes.
Data retention criteria: Data will be retained as long as your relationship with us continues—regarding both goods purchased and services provided—or until legal obligations are fulfilled.
Lawful basis: Processing is based on your consent, given via the acceptance checkbox. For purchases, the legal basis is the contract.
Recipient: Your essential data will be shared with the shipping company to deliver your order. This company has agreed to access the data solely for the above purposes. Your data will not be transferred to additional third parties for processing unless required by law.
News updates:
Purpose of processing: Subscription to the newsletter about products featured on our portal.
Data retention criteria: Data will be kept as long as there is a mutual interest in continuing the processing. When that need ceases, the information will be deleted using appropriate security measures to ensure anonymization or complete erasure.
Legal basis: By indicating consent in the appropriate field, you agree to the processing of your data in accordance with the purposes set out in this form, as described in the privacy policy.
Data sharing: Data will not be transferred to third parties, except in cases provided by law.
Work with us:
Purpose of processing: To involve the data subject in the selection process in order to identify the most suitable candidate for the position offered.
Data retention criteria: Data will be retained as long as there is a mutual interest in maintaining the purpose of the processing. When such need ends, the data will be deleted using the necessary security measures to ensure anonymization or complete deletion.
Lawful basis: By checking the consent box, you confirm your agreement to the processing of your data in accordance with the purposes of this form, as indicated in the privacy policy.
Data sharing: No data will be transferred to third parties, except in cases provided by law.
User rights:
Right to withdraw consent at any time. Right to object and right to portability of personal data. Right to access, rectification, and erasure of your data, as well as the right to restrict or object to their processing.
Right to lodge a complaint with the supervisory authority if you believe your rights have not been properly respected.
You can exercise these rights by sending an email or letter, attaching a photocopy of your ID card or passport:
Data Controller: shoptesto
Postal address: Piccadilly Arcade, New St, Birmingham B2 4EU, United Kingdom
Email address: [email protected].
2. OBLIGATION OR LACK OF OBLIGATION TO PROVIDE USER DATA
By filling in the appropriate fields in the contact form or registration form, the user gives clear, free, and unequivocal consent that the data provided are necessary to fulfill their request, while completion of the remaining fields is at the user’s discretion.
The user confirms that the information provided is truthful, accurate, complete, and up to date, assuming responsibility for any direct or indirect loss or damage arising from a breach of this obligation.
If the user provides data of third parties, they are required to inform the data subject of all aspects listed in this privacy policy and to obtain their consent to the disclosure of their data in order to ensure appropriate processing. This must be done before providing third-party data.
If all necessary data are not provided, we cannot guarantee that the information and services will fully meet your needs.