Privacy policy

This is a courtesy translation. The Spanish version is the only legally binding text; in the event of any discrepancy, the Spanish original prevails.

Identification of the controller

Crea Sustratos S.L., as owner of the Crea Sustratos brand, informs the users of its website creasustratos.com that in the use of its website the following personal data are collected and processed:

1. Personal data we process

We process the personal data you provide to us, as well as other data generated in the context of your activity on our website, such as the transactions you carry out, provided that such collection is permitted by law.

Please note that the information marked as mandatory is essential in order to finalise the order, charge you and send you the product according to the delivery method selected, so that, if you do not provide it, it will not be possible for us to process your order.

(a) Information you provide to us

We may process the following categories of personal data provided by you when completing the form required for the online purchase:

• Identification data: such as name, surname, sex, tax ID/national ID, telephone, email, postal address.
• Banking data: details of the card used to pay for the order placed, of the account to which charges or direct debits are applied, etc.
• Browsing data: such as information gathered through cookies.

(b) Other information about you

Finally, we may also gather data from your use of the Portal, such as the transactions carried out, browsing on the website, as well as when you contact us through the Customer Service.

2. How and on what basis do we process your personal data?

Your personal data will be processed for the purposes and on the legitimising bases indicated below:

• To be able to manage your request for information and to respond to your queries, complaints, suggestions or questions regarding the nature and services provided by the company through its different communication channels.
• To respond to your queries, complaints, suggestions or questions, raised through the different means offered for this purpose, in those cases where you have not previously placed an order and have given your consent.
• For fraud-prevention purposes, in the event that such intent is detected in the customer.
• Likewise, the processing of your personal data pursues the legitimate interest that Crea Sustratos has in achieving the centralisation of customer processing operations (customer service, response to queries, suggestions and questions, etc.) in order to offer you a better and more personalised service.
• To process and communicate the data in the framework of actions and preparatory and review acts, prior to commercial operations of any nature —by way of example and not limitation, merger, spin-off, global transfer of assets and liabilities, contribution or transfer of business or branch of business activity, or any corporate restructuring operation of a similar nature, contemplated by commercial regulations— as well as within the framework of the aforementioned commercial operations.
• Finally, Crea Sustratos uses cookies on its website. If you would like more information about the use of cookies on this website, please consult our Cookie policy.

3. Your rights

You have the right for Crea Sustratos to confirm whether or not your personal data are being processed and, where applicable, to request access to the personal data and to certain information about the processing (purposes, categories of data processed and recipients, among other aspects) (right of access).

Likewise, you have the right to request the rectification of inaccurate data (right of rectification), as well as their erasure when, among other reasons, they are no longer necessary for the purposes for which they were collected (right of erasure). In certain circumstances, you may request that the processing of your personal data be limited (right to restriction of processing).

Finally, you have the possibility of exercising your right to data portability (right to data portability). Similarly, in those cases where the processing of your data is based on your consent, you will have the right to withdraw consent at any time, without this affecting the lawfulness of the processing prior to withdrawal.

You have the right to object to the processing of your data, at any time, for reasons relating to your particular situation, when it is based on the legitimate interest of Crea Sustratos or of a third party and, in particular, when it is intended for direct marketing.

You should not forget that you have the right to lodge a complaint with the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights.

4. Recipients of your personal data

Our company may share your personal data with third parties in the following circumstances:

• In the event of non-payment or of suspicious operations being detected on the part of the Customer, the company that owns Crea Sustratos may transfer your personal data to the Authorities and the company’s external legal services.
• To the following categories of service providers that Crea Sustratos requires in order to manage Customers’ orders: providers of authentication and access management services, marketing, web analytics, payment processing, digitisation and deletion of information, and home delivery.

5. Retention of your personal data

We will retain your personal data for the 24 months following the delivery of your order. Once that period has ended, your personal data will be duly cancelled, that is, blocked during the limitation period for liabilities arising from the processing and finally deleted.

6. Servers and International Data Transfers

The company that owns the Crea Sustratos brand will store and process the customer’s personal data on computer servers located in Spain, enjoying the protection of the standard clauses adopted by the European Commission and by the Spanish Data Protection Agency.

7. Data protection officer

If you wish, you can contact our data protection officer at the following address: Data Protection Officer of Crea Sustratos, C/ Villa Ángeles, 7 - BJ - 18170, Alfacar (Granada) Spain, or at the address arodriguez@creasustratos.com.