Informazioni legali · Street Lab
Privacy policy
Questo testo è mostrato provvisoriamente in inglese. La versione italiana è in revisione.
1. Controller
Caelum Private Equity, S.L.U., Tax ID B22718514, Paseo de los Castellanos 25, 3.º 1.ª, 28025 Madrid (España). Privacy contact: [EMAIL DE ATENCIÓN AL CLIENTE].
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Processing your order, delivery, returns and warranty | Name, email, phone, address, order | Performance of contract (art. 6.1.b GDPR) | Length of the contract, then legal periods: 6 years (Commercial Code) and 4 years (tax) |
| Answering your questions | What you send us | Your request and our legitimate interest | Until resolved plus 1 year |
| Invoicing and tax obligations | Billing data | Legal obligation (art. 6.1.c GDPR) | Legal periods |
| Preventing payment fraud | Order and transaction data | Legitimate interest | Legal periods |
We do not use your data to send you marketing without your explicit consent, and we do not make automated decisions with legal effects on you.
3. Who else processes your data
- Simpler (SIMPLER GROUP LTD, 128 City Road, London, United Kingdom, and its Greek subsidiary Simpler Single Member P.C.): our payment and checkout provider. At checkout Simpler receives your name, email, phone, address, order and payment details, which are encrypted through an authorised payment provider. It acts as processor to handle your Street Lab order and, if you have or create a Simpler account, as independent controller of that account under its privacy policy. Simpler privacy contact: personaldata@simpler.so.
- Amazon Web Services EMEA SARL: hosts the website, stock and orders on servers in the European Union (Stockholm region), as processor.
- Carrier [CARRIER NAME]: receives name, address and phone to deliver your order.
- Google Fonts: the website loads its fonts from Google servers, which receive your IP address when you visit.
- Public authorities and courts, where required by law.
Where a provider processes data outside the European Economic Area, it does so with GDPR safeguards such as the European Commission's standard contractual clauses.
4. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by emailing [EMAIL DE ATENCIÓN AL CLIENTE]. If you are not satisfied with our answer, you may complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
5. Security
We apply appropriate technical and organisational measures: encrypted connections, restricted access to data and providers with security guarantees.