Information on the processing of personal data

Data controller

The controller of the personal data collected and processed on our website is Circulari Deco S.L., tax ID B23978505. You can contact Circulari by email at hola@circulari.es or by post at C/ Sant Oreste, 1, 08859 Begues, Barcelona.

What personal information does Circulari collect and process?

Through the use of our services, Circulari may directly collect identification and contact data, personal characteristics data, data observed in the purchase of our products, our customers' consumption habits and preferences, and website usage and browsing data.

Circulari processes your data mainly to manage the business relationship between us in all its aspects, from carrying out the purchase, with everything it entails, such as invoicing, payment and keeping in touch. Also to contact you about updates or informational communications related to the products ordered, returns, shipments, etc.

Purposes of processing

• Handling questions, enquiries and complaints;
• Purchase/return of products;
• Compliance with legal obligations;
• Sending commercial, advertising and marketing information;
• Sending surveys and market studies;
• Business development;
• Creating a user account;
• Purchase of products;
• Sending marketing communications by text message (SMS), including offers, updates and reminders;
• Abandoned cart reminders: Circulari's website uses cookies to help keep track of the items you put in your cart, even if you abandon it. This information is used to determine when to send cart reminder messages by text message.

Legal basis

The legal basis for processing your personal data will depend on the purposes mentioned above and may be (i) your consent; (ii) the performance of a contractual relationship; (iii) compliance with our legal obligations; or (iv) in some cases, our legitimate interest.

Recipients and providers

Personal data may be shared with entities that provide services to us, such as banks and financial institutions, document destruction companies, advertising and marketing entities, and tax and accounting advisers. These service providers may have access to your personal data, but will process it on our behalf and always following our instructions. Personal data may also be disclosed to Public Administrations, State Security Forces and Bodies, and Judges and Courts, in compliance with our legal obligations.

However, the above excludes the opt-in data and the user's consent to receive text messages (SMS). That information, together with the phone numbers collected for this purpose, is strictly confidential and will not be shared, sold or transferred to unaffiliated third parties for their own marketing purposes.

International transfers

Some providers may process data outside the European Economic Area. Where such transfers take place, they must be covered by the mechanisms provided for in the regulations, such as adequacy decisions or standard contractual clauses, as applicable.

You can request information about the transfers and safeguards that apply by writing to hola@circulari.es.

Your rights

You may request access, rectification, erasure, objection, restriction of processing and portability where applicable. You may also withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.

To exercise your rights, write to hola@circulari.es or to our postal address. We will only request additional information to verify your identity when necessary.

If you consider that the processing infringes your rights, you may lodge a complaint with the Spanish Data Protection Agency.

Retention

We will keep the data for as long as necessary for the purposes for which it was collected. Order and invoicing data will be kept for the applicable legal periods and, where appropriate, to address possible liabilities.

Data used for commercial communications will be processed until you request to unsubscribe or until there is no longer a legal basis for doing so. We may keep the minimum information necessary to respect your objection and demonstrate compliance with our obligations.

Changes to the privacy policy

This privacy policy will always be available. However, if we make a substantial and relevant change to its content, we will notify you through our platforms or at your email address, thereby complying with the duty to inform provided for in the GDPR, so that, if you wish, you can exercise your rights as a data subject.

Cookie policy

What are cookies and how are they used?

Cookies are files installed on the user's computer, phone, tablet or any other device, in order to record the user's activity while browsing this website. Through the use of cookies, the server hosting the Web/App can recognise the browser used by the user, allowing, for example, a registered user to access areas and services without having to log in on every visit, and to remember their language, country and other preferences on future visits. Cookies are also used to measure audience and traffic parameters and to monitor progress and the number of entries.

The term "cookie" also covers other cookie-like technologies that similarly allow certain information to be stored or retrieved from a device, such as flash cookies, web beacons or bugs, pixels, HTML5 (local storage), and SDK technology for App formats, as well as the use of fingerprinting techniques to identify the data subject's device.

What do we use cookies for?

While you access and browse the website, Circulari may store or record IP addresses, user preferences or the type of device used, for the main purposes of (i) producing statistics on the number of visits or website traffic; (ii) offering a more personalised browsing experience; (iii) remembering login details, including across different devices; and (iv) showing advertising, on this page or elsewhere, based on browsing habits within our website.

These browsing habits and web tracking services (including the use of platforms such as Klaviyo) are also used to personalise the communications we send you, including emails and text messages (SMS), making them more relevant to you.

We do not store sensitive personally identifiable information such as your address or password in the cookies we use. Circulari never sells customer data to third parties.

Who uses the information stored in cookies?

The information stored in the cookies of the Web/App is used by Circulari Deco S.L. ("Circulari"), tax ID B23978505:

• Postal address: Sant Oreste, 1, 08859 Begues (Barcelona, Spain).
• Email: hola@circulari.es

Some of the cookies that may be installed are not Circulari's own but belong to third parties.

What types of cookies are used?

The store may use cookies and similar technologies to enable its operation, remember preferences, measure usage and deliver personalised advertising.

Strictly necessary technologies enable essential functions, such as managing the cart or maintaining a session. Non-essential technologies that require consent must not be activated until you have given it.

You can accept, reject or configure non-essential technologies through the store's privacy controls, and change your choice later. You can also manage cookies from your browser, although blocking necessary ones may affect operation.

Specific information about providers, purposes and cookie duration must be available in the settings panel or in the store's cookie information.

The types of cookies used on Circulari's Web/App are listed below, by purpose and by the entity that manages them (first-party and third-party).

Management	Description
First-party cookies	Those created or managed by Circulari, as the party responsible for the Web/App.
Third-party cookies	Those managed by service providers other than Circulari. They are identified in the settings panel, which you can access from the "configure cookies" button below.

Purpose	Description
Strictly necessary cookies	These cookies are necessary for the website to work and cannot be switched off in our systems. They are normally set in response to actions made by you to receive services, such as adjusting your privacy preferences, logging in to your account, or completing forms. You can set your browser to block or alert you about these cookies, but some parts of the website will not work. These cookies do not store any personally identifiable information.
Preference or personalisation cookies	Those that let you access the service while remembering predefined characteristics based on criteria such as language, the type of browser used to access the service, the regional settings from which the service is accessed, etc. Not accepting these cookies could result in slow performance or poorly adapted recommendations.
Analytics cookies	Those that, processed by us or by third parties, allow us to quantify the number of users and thus carry out the measurement and statistical analysis of how users use the service offered. To do this, your browsing on our website is analysed in order to improve the products or services we offer you.
Behavioural advertising cookies	Those that, processed by us or by third parties, allow us to analyse your internet browsing habits so that we can show you advertising related to your browsing profile.
Social media cookies	Those set by a series of social media services that we have added to the site, to allow you to share our content with your friends and networks.

Updates

We may update this policy to reflect changes in our services or in the regulations. Where appropriate, we will inform you of relevant changes and ask for your consent again.