Privacy Policy

BASIC INFORMATION ABOUT DATA PROTECTION

 

Responsible SAN SARU, S.L.
Purpose We use your data, among other purposes, to manage the contracting of products and services, answer your queries, as well as, if necessary, to send you personalized communications.
Legitimation The legitimacy for the processing of your data lies mainly in the provision of your consent and the proper development of the contractual relationship with SAN SARU, S.L.
Recipients No data will be transferred to third parties, unless legally required.
Rights You have the right to access, rectify, delete, oppose, limit and request the portability of your personal data.
Additional information Additional detailed information about how we handle your personal data and the rights you have can be found in the full text of the Privacy Policy below, as well as the Cookies Policy.

 

ADDITIONAL INFORMATION ABOUT DATA PROTECTION

SAN SARU, S.L. (hereinafter, "the Company") undertakes, as the Controller of the processing of your personal data, to adopt at all times the necessary technical and organizational measures in order to ensure that the processing of your data is in accordance with the provisions of Regulation (EU) 2016/679 (hereinafter, "GDPR") and Organic Law 3/2018. 

The Company treats your personal data in a lawful and fair manner, ensuring that they receive adequate protection and are not subject to misuse. Likewise, the Company's will is to be transparent in the field of the management of the personal data of its customers and users, making available to the former all the necessary information about the collection and processing of their data. 

The purpose of the Privacy Policy is to inform you about who will process your personal data, why we collect this data, how long we will keep the collected data, to whom we will transfer it and what are your rights in this area. 

By providing us with your personal information and using our Website, we understand that you have read and understood the information on personal data protection set out in this Privacy Policy and in the Cookie Policy.

 

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The Responsible for the processing of your personal data is:

 Company name: SAN SARU, S.L.

N.I.F: B-66821919

Phone: 938536044

Mailing Address: Alcalde Josep Abril 23, 1º 1ª, 08302, Mataró (Barcelona)

E-mail address:  info@sansarushop.com

 

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

Based on the products, services or functionalities requested by customers and users, the Company will need to deal with some data or others, which, in general, will be the following:

  • Identification and contact data: name, surname, contact telephone number, date of birth, postal address, e-mail address and ID card number, among others;
  • Data associated with the execution of a sales or service contract with the Company: identification and contact data, payment data, information about purchases, orders and returns, among others;
  • Automatically collected data: when interacting with our Website, certain navigation data is automatically collected. This information is collected through cookies, whose regulation is detailed in the Company's Cookie Policy;

The information we may automatically collect relates to your use of our Website and the devices you use to access and interact with our Website. Some of the data we collect are: the IP address of the device you are using, the browser software you are using, your operating system, the date and time you access the Website, the Internet address of the website through which you accessed our Website, geolocation data, information about the pages visited by the user within the Website and the time spent browsing each page;

  • Data about your likes and personal preferences.

The personal data collected is processed for the following purposes:

  • Manage the procurement of products and services offered by the Company: to be able to provide you with the product or service you request, to be able to operate our business internally (in terms of accounting, auditing and other internal functions) and to manage payment for products and services;
  • Quality analysis: to conduct customer and user satisfaction surveys regarding the quality of products and services offered by the Company;
  • Customer and user service: channeling and attending to their requests, queries and complaints for their management and resolution;
  • Advertising and marketing actions: mainly includes personalizing the services we offer and making recommendations based on interaction with the Company through its website (e.g., based on purchase and browsing history). In case you give us your consent, your personal data will be used to periodically send you information about new products that may be of interest to you and to offer you promotions;
  • Improve the user's experience on the Website: perform analytical and statistical studies on how users browse the Company's Website.


WHAT IS THE LEGITIMACY FOR THE PROCESSING OF YOUR DATA?

The legal basis that allows us to process your personal data depends on the purpose for which we process it, as detailed below:

  • Manage the contracting of products and services offered by the Company. The processing of your data is necessary for the correct conclusion and proper development of the contractual relationship with the Company. The legitimacy of the processing of your data also lies in your own consent (when deciding to contract our products or services) and in the legitimate interest of the Company to carry out the relevant checks in order to identify and prevent possible fraud, as well as for security reasons;
  • Quality analysis. The legitimacy of the processing of your data lies in the legitimate interest of the Company to analyze the degree of satisfaction of customers and users, in order to be able to offer them products and services of the best quality;  
  • Attention to users and customers. The legitimacy of the processing of your data lies in the legitimate interest of the Company to respond to your requests and complaints in order to adequately address and resolve your requests. In the case of claims or incidents related to the product or service purchased, the processing of your data is necessary for the Company to fulfill its contractual obligations. In case of queries related to the exercise of your legally recognized rights regarding data protection, the Company requires the processing of your data in order to comply with the legal obligations that bind it in this area;
  • Advertising and marketing actions. The legal basis for processing your data for advertising and marketing purposes is the consent you give us to send commercial communications (which may be personalized) and the legitimate interest of the Company to send you communications similar to those services or products contracted in the past or for which you have shown interest.

Remember that, if you have given us your consent to process your data for any purpose, you have the right to withdraw it at any time.

  • Improve the user experience on the Website. The legitimacy of the processing of your data lies in the legitimate interest of the Company to know the degree of user satisfaction and take appropriate corrective measures to improve the quality of our services.

Mobile Terms of Service

SANn Saru Last updated: Nov. 7, 2024

The San Saru mobile message service (the "Service") is operated by San Saru (“San Saru”, “we”, or “us”). Your use of the Service constitutes your agreement to these terms and conditions (“Mobile Terms”). We may modify or cancel the Service or any of its features without notice. To the extent permitted by applicable law, we may also modify these Mobile Terms at any time and your continued use of the Service following the effective date of any such changes shall constitute your acceptance of such changes.

By consenting to San Saru’s SMS/text messaging service, you agree to receive recurring SMS/text messages from and on behalf of San Saru through your wireless provider to the mobile number you provided, even if your mobile number is registered on any state or federal Do Not Call list. Text messages may be sent using an automatic telephone dialing system or other technology. Service-related messages may include updates, alerts, and information (e.g., order updates, account alerts, etc.). Promotional messages may include promotions, specials, and other marketing offers (e.g., cart reminders).

You understand that you do not have to sign up for this program in order to make any purchases, and your consent is not a condition of any purchase with San Saru. Your participation in this program is completely voluntary.

We do not charge for the Service, but you are responsible for all charges and fees associated with text messaging imposed by your wireless provider. Message frequency varies. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details. You are solely responsible for all charges related to SMS/text messages, including charges from your wireless provider.

You may opt-out of the Service at any time. Text the single keyword command STOP to SanSaru or click the unsubscribe link (where available) in any text message to cancel. You'll receive a one-time opt-out confirmation text message. No further messages will be sent to your mobile device, unless initiated by you. If you have subscribed to other San Saru mobile message programs and wish to cancel, except where applicable law requires otherwise, you will need to opt out separately from those programs by following the instructions provided in their respective mobile terms.

For Service support or assistance, text HELP to SanSaru or email info@sansarushop.com.

We may change any short code or telephone number we use to operate the Service at any time and will notify you of these changes. You acknowledge that any messages, including any STOP or HELP requests, you send to a short code or telephone number we have changed may not be received and we will not be responsible for honoring requests made in such messages.

The wireless carriers supported by the Service are not liable for delayed or undelivered messages. You agree to provide us with a valid mobile number. If you get a new mobile number, you will need to sign up for the program with your new number.

To the extent permitted by applicable law, you agree that we will not be liable for failed, delayed, or misdirected delivery of any information sent through the Service, any errors in such information, and/or any action you may or may not take in reliance on the information or Service.

We respect your right to privacy. To see how we collect and use your personal information, please see our Privacy Notice.

HOW LONG WILL WE KEEP YOUR DATA?

Your personal data will be duly stored for the time necessary to use them for the purpose for which they were collected. 

Personal data will be stored, using appropriate security measures to ensure their accuracy and integrity, for as long as their processing is necessary for the purpose for which they were collected or as long as you do not exercise your right to erasure or restriction of processing.

In such cases, we will keep your personal information blocked, without any processing, for the periods provided by law to meet any liabilities and to be able to prove compliance with our legal and contractual obligations. Subsequently, the Company will definitively delete your personal data.

 

WHO CAN WE SHARE YOUR DATA WITH?

In some cases, in order to fulfill the purposes set forth in this Privacy Policy, the Company needs to share your personal data with other Group companies and with the following third parties:

  • financial institutions;
  • technology and analytical service providers;
  • suppliers and partners of logistics, transportation and delivery services, and/or establishments collaborating with them;
  • providers of services related to customer service;
  • providers and collaborators of services related to marketing and advertising;
  • authorities and public bodies in order to: comply with a court order, subpoena or investigation, or for any other reason required by law; deal with possible liabilities arising from the processing of personal data; prevent illegal uses of our Website or violations of our Website policies; deal with third-party claims; contribute to the prevention and investigation of alleged fraud, among others.

These third-party collaborators only have access to the personal information necessary to perform the corresponding services and are required not to use it for any purpose other than the one requested. The Company also requires the same level of protection and confidentiality from these third parties that we apply in the management of your personal information. They are also subject to the obligations set forth in their respective data processing agreements with the Company. 

Certain third-party partners are located in countries or territories outside the European Union. In these cases, the Company transfers your data to them in accordance with the guarantees legally required for this type of situation:

  • we verify whether the third party is located in a country or territory that has been declared by the European Commission to have an adequate level of protection;
  • failing this, we verify whether any of the following safeguards are met:
    • conclusion of a contract containing standard data protection clauses approved by the European Commission;
    • implementation of binding corporate rules approved by the competent supervisory authority;
    • the adherence of the third party to a Code of Conduct or certification mechanism;
  • In the absence of the above, in order to carry out the transfer of your data, we ask for your express consent, or we request the express authorization of the competent supervisory authority.


WHAT ARE YOUR RIGHTS?

You are entitled to exercise the following rights in relation to the processing of your personal data:

  • Access (art. 15 RGPD): allows you to obtain certain information on the purposes for which your data are being processed, the recipients to whom they are communicated or the categories of data being processed, among others.
  • Rectification (art. 16 RGPD): allows you to contact the Data Controller to modify any inaccurate personal data and to complete any incomplete data.
  • Deletion (art. 17 RGPD): allows you to request the deletion, without undue delay, of your personal data being processed by the Controller, in the following cases:
    • the Data Controller no longer needs the data for the purposes for which they were originally collected;
    • the processing of the data is based on your consent, and you decide to withdraw it, provided that there are no other processing operations based on a legitimate basis other than consent;
    • you object to the processing of your data and the interests of the Controller do not prevail, provided that there are no other processing operations that do not admit of objection;
    • the personal data has been processed unlawfully;
    • the personal data must be deleted due to legal obligation;
    • the data has been obtained within the framework of the offer of information society services.
  • Limitation of processing (art. 18 RGPD): allows you to obtain from the Data Controller the limitation of the processing of your data when one of the following conditions is met:
    • when you contest the accuracy of your personal data, for a period of time that allows the Controller to verify the accuracy of the data;
    • the processing is unlawful, and you object to the deletion of your personal data and request instead the limitation of their use;
    • the Responsible no longer needs your personal data for the purposes of the processing, but you need them for the formulation, exercise or defense of claims;
    • you have objected to the processing, while it is being verified whether the legitimate reasons of the Controller prevail over yours.
  • Data portability (art. 20 RGPD): allows you to receive your personal data or have them sent to a third party, in a structured, commonly used and machine-readable format, provided that the following conditions are met cumulatively:
    • when the Data Controller's legitimation for the processing of your data is the provision of your consent or the execution of a contractual relationship; 
    • the data processing is carried out by automated means.
  • Opposition (art. 21 RGPD): allows you to oppose the processing of your data by the Responsible. However, you can only exercise this right against processing operations that are based on a legitimate public interest or a legitimate interest of the Responsible. 
  • Opposition to automated processing (art. 22 RGPD): allows you not to be subject to decisions based solely on automated processing of your data, including profiling, which produce legal effects on you or significantly affect you similarly.

 

HOW CAN I EXERCISE MY RIGHTS?

In order to exercise your data protection rights, the Company makes the following means available to you:

  • By written and signed request addressed to the Company Alcalde Josep Abril 23, 1º 1ª, 08302, Mataró (Barcelona), indicating the reason for your request and the right you wish to exercise, and attaching a photocopy of the ID card or equivalent document proving the identity of the applicant;
  • Sending the completed and signed form, enclosing a photocopy of the ID card or equivalent document proving the identity of the applicant, to the following email address: info@sansarushop.com


The forms for exercising the various rights are provided below:

Likewise, you have the right to address any claim derived from the processing of your personal data to the corresponding data protection supervisory authority: the Spanish Data Protection Agency. (Claim Submision Form).

TERMS AND CONDITIONS