Privacy Policy

Who is responsible for processing your personal data?

MIGUEL CAMPOS PEREZ is the CONTROLLER of the USER's personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD).

What do we process your personal data for and why do we do it?

Depending on the form from which we have obtained your personal data, we will treat it confidentially to achieve the following purposes:

In the Contact form

• To respond to queries or any type of request made by the user through any of the contact forms made available on the controller's website.
  (for the legitimate interest of the controller, Art. 6.1.f GDPR)
• Perform statistical analysis and market research.
  (for the legitimate interest of the controller, Art. 6.1.f GDPR)

In the Newsletter form

• Send newsletters, news, offers, and online promotions.
  (by consent of the data subject, Art. 6.1.a GDPR)

In the User Registration form

• Manage the user's account to provide them with personalized access to the website and the interactive services it offers.
  (by consent of the data subject, Art. 6.1.a GDPR)

In the E-commerce form

• Manage your purchase or online order, process payment, and proceed with shipping or activation, based on the general terms and conditions of sale.
  (for the performance of a contract or pre-contract, Art. 6.1.b GDPR)
• Manage, maintain, improve, or develop the services provided.
  (for the performance of a contract or pre-contract, Art. 6.1.b GDPR)
• Conduct satisfaction and quality surveys.
  (for the legitimate interest of the controller, Art. 6.1.f GDPR)

How long will we store your personal data?

They will be kept for no longer than necessary to maintain the purpose of the processing or if there are legal requirements that dictate their custody and when it is no longer necessary for this purpose, they will be deleted with appropriate security measures to guarantee the anonymization of the data or the total destruction of the same.

To whom do we provide your personal data?

No communication of personal data to third parties is foreseen, except if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.

MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

By checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, USERS expressly, freely, and unequivocally accept that their data is necessary for the provider to respond to their request, and that the inclusion of data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER is truthful and is responsible for communicating any modification thereof.

The CONTROLLER informs you that the requested data marked with an asterisk (*) is mandatory as it is necessary for the provision of the requested service. The inclusion of data in the non-mandatory fields is voluntary.

If all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.

User Rights

The USER has the right to:

• Access your personal data.
• Request the rectification of inaccurate data.
• Request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• Request the restriction of the processing of your data.
• Object to the processing of your data.
• Request the portability of your data.

The USER may exercise their rights by written communication addressed to the CONTROLLER via email at allkpopglobal.store@gmail.com , indicating the right they wish to exercise and attaching a copy of an identification document.

Likewise, the USER has the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of personal data does not comply with current regulations.

SECURITY MEASURES

That in accordance with the provisions of the current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of the personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed in a lawful, fair and transparent manner in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS and has communicated the appropriate information to them so that they can exercise them.