Privacy Policy

PRIVACY POLICY

COOLLIGAN Identity

COOLLIGAN, SL

C/ Heros 28 - 6th Floor Left

48009 - Bilbao (Bizkaia) - Spain

Email: contacto@coolligan.com.

CIF B-95754545

 

Information collected

You can access our website anonymously. If you choose to register on our website, two categories of data will be processed on your behalf:

Identification Data. When you register on our site, make a purchase, subscribe to our newsletter, or respond to a survey, basic contact information will be collected, such as your first and last name, email address, address, phone number, purchase order number, invoice recipient's email address, and encrypted credit card or bank account information.

System-generated data. Our service automatically stores metadata based on other types of data, such as subscription data, including the start date and last invoice date. Invoices issued for purchased products are stored for your access.

COOLLIGAN will keep you informed, via email, about relevant changes related to our services, such as the implementation of additional features, only if you expressly subscribe to our newsletter.

Purposes of the information

COOLLIGAN states that the information we collect from you is for the following purposes:

• To personalize your experience (this information will help COOLLIGAN better serve your individual needs).
• To improve our website.
• To identify you as a contracting party.
• To establish a channel of communication with you.
• Allow us to issue valid VAT invoices and process transactions (COOLLIGAN reminds you that your information will not, without your consent, be sold, transferred, given, and/or exchanged to any other entity for any reason other than to provide the requested service).
• To allow the management of subscriptions to our communication channels with you.
• Provide you with information about your choices and preferences as a user.
• To send periodic emails (in this sense, the email address provided by you will be used to process orders and purchases and also to send you information and updates related to your order, as well as to receive occasional updates, products, news, etc. from COOLLIGAN, in the sole case that you have expressly and previously accepted them. In any case, if you wish to unsubscribe from future emails, you can cancel the sending of them through the channels pre-established for this purpose and indicated from time to time in this Privacy Policy).

Legal Basis

1. General Data Protection Regulation (GDPR)

This Privacy Policy is adapted to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. The legal basis for the processing of your personal data is your express consent, the fact that the processing is necessary for the performance of a contract to which you are a party, or to carry out certain actions and/or measures at your request prior to entering into the contract. If data processing is based on your express consent, you may withdraw it at any time by contacting COOLLIGAN through the channels provided in this Privacy Policy.

1. Obligation to provide the requested data

In order to optimally execute the contract relating to the purchase and acquisition of our products, you must provide us with the required personal data.

COOLLIGAN states that if you do not provide all the requested information, we will not be able to offer you our services/products.

1. Minors

COOLLIGAN strictly complies with the requirements stipulated in the aforementioned European regulations regarding the protection of data from minors, so we do not intentionally collect any information from minors under 14 years of age. This website, the purchase of our products, and the use of our services are intended solely for persons over 14 years of age.

How we protect your information

COOLLIGAN implements physical, technical, and organizational measures to maintain the security of your personal data and to minimize the possibility of accidental or unlawful destruction, accidental loss, unauthorized use, alteration, unauthorized modification, disclosure, and/or access, as well as any other unlawful form of processing.

1. Availability

COOLLIGAN uses the necessary tools to ensure high availability of our web services, but cannot guarantee their full availability. Physical security is maintained by COOLLIGAN subcontractors, who comply with industry standards for physical security and availability.

1. Integrity

To ensure the integrity of your personal information, all data transfers are appropriately encrypted to align with confidentiality and data integrity practices. To this end, all credit card information you provide is transmitted using Secure Socket Layer (SSL) technology and subsequently encrypted in our payment gateway provider's database, ensuring that this data is only accessible to those authorized to access such systems.

1. Confidentiality

All COOLLIGAN staff are bound by strict confidentiality regarding the processing of your personal data. Likewise, any subcontractors and subprocessors of your data must sign a strict confidentiality agreement in order to operate with COOLLIGAN.

Authorized personnel can only access your personal data through an encrypted connection. To access your personal data, the IP address of the authorized personnel accessing it must be previously authorized.

Any device used by COOLLIGAN to access your personal data is protected and has COOLLIGAN's corporate antivirus solution installed. Similarly, if personal data is temporarily stored on a separate electronic device, the device's storage drive must also be encrypted.

In this sense, all local devices that temporarily store personal data are under continuous supervision and located in a locked cabinet.

COOLLIGAN states that your personal data is never stored on mobile devices, such as USB drives, CDs, or DVDs.

1. Transparency

COOLLIGAN will keep you informed at all times about changes to our procedures for protecting the privacy and security of your personal data, including practices, protocols, and policies. You may request information at any time about where and how your personal data is stored, protected, and used. COOLLIGAN will provide, upon request, summaries of any independent audits conducted on our services, provided this is possible and does not represent an unreasonable and unaffordable cost for COOLLIGAN.

1. Isolation

COOLLIGAN states that all access to personal data is blocked by default, and that we operate a "zero privilege" policy. Under this policy, access to personal data is restricted exclusively to individually authorized personnel.

1. Ability to intervene

COOLLIGAN facilitates your rights of access, rectification, erasure, blocking, objection, and portability, and offers you the opportunity to object when COOLLIGAN plans to implement changes to its business practices and web policies. Overall responsibility for data security rests with the COOLLIGAN Security Officer, who trains and updates all staff on the security measures described in the COOLLIGAN Security Policy and this Privacy Policy.

1. Notice of personal data breach/security breach

A personal data breach is a violation of the security of COOLLIGAN's information systems that results in or may result in the accidental or unauthorized destruction, alteration, loss, unauthorized disclosure of, or access to, personal data transmitted, stored, or processed in connection with the provision of our services.

In the event that your personal data is compromised in any way, COOLLIGAN will notify you promptly, if required by current regulations. Furthermore, COOLLIGAN will notify the competent authorities of the security breach within a maximum of 72 hours. If we are required to notify you of a breach of your personal data resulting from a security breach, we will inform you of the scope of the breach, the data affected, the impact on the service, as well as the mitigation plan and protection measures established to limit the potential negative effects on your personal data.

Recipients. Disclosure of information to third parties

COOLLIGAN declares that it does not sell, transfer, or exchange your personal data with unauthorized third parties. This does not include third parties or subcontractors identified and duly authorized by you who assist us in managing this website and providing our services. These trusted third parties may have access to personal data for informational needs and are contractually obligated to maintain the confidentiality of the information provided.

COOLLIGAN states that we may disclose some of your personal information (personal data) when we believe it is appropriate to comply with the law, enforce our website policies, or protect the security of our systems. In addition, personal data may be provided to other third parties for marketing, advertising, or other purposes, subject to your express authorization.

In order to offer you Alma's payment methods, it is possible that in the
payment, we may pass your personal data in the form of contact and order data to Alma, in order for Alma to assess whether you are suitable for their payment methods.
payment methods and adapt those payment methods to you. Your personal data
transferred are processed in accordance with Alma's own privacy notice."

1. Subcontractors/Trusted Third Parties

Subcontractors are supervised and audited and act as data processors for your personal data.

COOLLIGAN will, to the extent possible, oversee the maintenance of the aforementioned standards and audits by subcontractors and subprocessors to ensure compliance with the stipulated data protection requirements.

1. Legally required disclosure

COOLLIGAN undertakes not to disclose your personal data, except when required by current regulations or a court order, which requires us to provide some or all of your personal data in our possession to the State Security Forces. COOLLIGAN will only disclose specific data required by a binding judicial or police order.

If we are compelled to disclose any of your personal data due to a legal or judicial request, we will notify you immediately and provide you with a copy of the request, unless there is a legal prohibition on notifying you.

Links to third-party websites

COOLLIGAN may include or offer third-party products or services on this website. These third-party websites have privacy policies that are independent of this privacy policy, and therefore COOLLIGAN assumes no responsibility for the content and activities of linked websites. Nevertheless, and to ensure the integrity of this website, we welcome any comments or feedback regarding the regulatory compliance of third-party websites linked to our website.

Where we store information

COOLLIGAN states that it does not transfer, back up, or recover any personal data stored outside the territory of the European Union.

1. Location of personal data

All your personal data is stored in databases and file repositories hosted on the COOLLIGAN server, with registered office at Calle Muguet 6 4C 28044 Madrid

COOLLIGAN, through its trusted provider, makes backup copies of the databases it manages to allow information to be restored at any time.

1. Installing software on the client's cloud system

To use the COOLLIGAN website, you don't need to install any software. You can access our website through a standard web browser.

Access assistance, data portability, migration and transfer

You may obtain confirmation from COOLLIGAN at any time as to whether or not your personal data is being processed by us.

At any time, you may request a complete copy of your data, which you may transmit to another data controller. Your data will be delivered to you in a common format within one month, which can be extended to two months in the case of complex requests.

Request for rectification, restriction or deletion of personal data

1. Rectification

You may, at any time, obtain from COOLLIGAN, without undue delay, the rectification of inaccurate personal data concerning you.

1. Restriction of processing of personal data

You may request at any time that COOLLIGAN restrict the processing of your personal data when any of the following applies:

When you challenge the accuracy of your personal data for a period that allows COOLLIGAN to verify its accuracy.

When the processing of your personal data is unlawful under applicable law and you choose to restrict its use rather than delete it.

When you require your personal data for the establishment, exercise, or defense of legal claims, even though COOLLIGAN will no longer process them and, without your request, proceeded to delete them.

1. Elimination

If you wish, you may request the deletion of your personal data, and COOLLIGAN must delete it without undue delay if any of the following occurs:

When the personal data are no longer necessary in relation to the purposes for which they were collected or processed.

If you withdraw your consent to the processing of such data, and there is no other legal basis for processing such data.

When you object to processing because it is for the purpose of direct marketing of products.

When personal data have been processed unlawfully.

When data must be erased to comply with a legal obligation at the community and/or national level.

1. Where to exercise these rights

You may exercise these rights before COOLLIGAN SL by sending your request to the following email address: contacto@coolligan.com

Data retention and storage

1. Data retention policy

Data relating to purchase and rental transactions that generate invoices will be retained until the end of the contractual relationship and, subsequently, for the legally required periods. Configuration data and system-generated data will be deleted immediately upon cancellation of the user account.

1. Data retention to comply with legal requirements

COOLLIGAN is bound by data protection legislation to comply with the retention periods for personal data established by law, except for the reasons for deletion established in accordance with the clause.

1. Restoration or deletion of data

COOLLIGAN will not retain any data, except for account data, after termination of the contract. You may request a copy of this data before termination of the contract. You should not cancel your account until you have been provided with a copy of your personal data.

Accountability

COOLLIGAN logs system updates, page configuration changes, and access to provide an audit trail if unauthorized or accidental changes are made.

Cooperation

COOLLIGAN expresses its willingness to cooperate with you in complying with applicable data protection provisions, in particular by effectively ensuring the exercise of the rights of access, rectification, erasure, blocking, and objection, as well as the management of security incidents.

Conditions

We strongly recommend that you also visit the General Terms and Conditions, Legal Notice, How to Buy, and Cookie Policy sections, which regulate, among many other aspects, the use, disclaimers, and limitations of liability governing this website.

Consent and changes to our privacy policy

By accessing this website, you accept this privacy policy. This privacy policy may be modified, so it is your obligation to review it periodically. When changes are made to the privacy policy, COOLLIGAN will update the modification date.

Claim

Whenever you deem it appropriate, you may always file a complaint regarding the collection and processing of your personal data by COOLLIGAN with the Spanish Data Protection Agency (AEPD):

Spanish Data Protection Agency

C/ Jorge Juan, 6

28001-Madrid

901 100 099

91 266 35 17

http://www.agpd.es

COOKIE POLICY

A cookie is a file that is downloaded to a user's device (computer, mobile phone, tablet, etc.) when they access certain web pages. Cookies allow these web pages, among other things, to monitor, store, and retrieve information about the user's browsing habits (for example, preferences, profile, passwords, etc.) as well as to obtain technical information related to the web page's navigability. Cookies also contribute to the functionality, usability, and accessibility of web pages.

Types of cookies

Depending on the function and purpose of the cookies, there are several types:

• Analytics. These cookies collect information to allow websites to evaluate user usage and general website activity, as well as to compile statistical data. Analytics cookies measure and collect website data (page views, visits, traffic parameters, clicks made, etc.) to understand and optimize the website.
• Advertising and behavioral cookies. These cookies collect information about a user's browsing habits and behavior in order to identify preferences, habits, and preferences within a specific website. These cookies allow advertising content to be tailored based on an analysis of the user's browsing habits and by deducing user characteristics such as location, age group, gender, etc.
• Technical. These are cookies that are strictly necessary for the functionality and navigability of a website. They allow the user to navigate through the website or application and use its various options or services.
• Social. These are required for external social networks (Facebook, Google, Instagram, Twitter, TikTok, etc.). Their purpose is to control interaction with social widgets within a website.
• Personalization cookies. These cookies allow websites to retain certain preferences (e.g., language, country, regional settings, etc.) predefined by the user during their first and subsequent visits to the website.
• Third-party cookies. Third-party cookies are owned by third parties and are used by websites to manage and improve the content and services offered.

What cookies does our website use?

Our website uses its own and third-party cookies.

A cookie is a small file of letters and numbers that is placed on your computer.

These cookies allow us to distinguish you from other website users and help us provide you with a good experience when you browse our website, as well as improve it.

Our site includes functionality provided by third parties.

Third-party cookies

Third-party cookies may be installed on some websites to manage and improve the services offered.

To manage cookie activity on your device, you can block or delete them. Otherwise, browsing the website implies acceptance of their use as described above.

To manage cookies, you must follow these instructions:

• Internet Explorer : Tools -> Internet Options -> Privacy -> Settings. For more information, please consult Microsoft support or your browser's Help.
• Firefox : Tools -> Options -> Privacy -> History -> Custom Settings. For more information, please consult Mozilla Support or the browser's Help.
• Chrome : Settings -> Show advanced settings -> Privacy -> Content settings. For more information, you can consult Google support or your browser's Help.
• Safari : Preferences -> Security. For more information, please consult Apple Support or the browser's Help.

Disabling these cookies may result in the inability to use the features offered by these services. You can delete and block all cookies from this site, but parts of the site will not function properly.

Purposes of the cookies on our site

• Techniques and Personalization. We use cookies that maintain user status across page requests.
• Third-party analytics or statistics. We use third-party services such as Google.
• Social networks. To display content from our accounts and share on social networks.

More information about Cookies

For more information about cookies, the User can visit the website All About Cookies.org, accessible through this link http://www.allaboutcookies.org/es