When customers sign up on Colectalia.com, they accept the following statement by ticking a box:
The data we ask our customers when they sign up is the following:
First and Second names
Home and/or Cell phone (optional)
Nothing else. No credit card numbers, no bank account numbers, as the only payment systems we accept are bank transfer to our account (not charge on the customer's account), PayPal and credit card payment processed by a third part.
And this is what we do with your data:
1.- We process it only to keep our commercial relationship with you.
2.- We keep it in an authomatic file in our server, hosted in the United States of America under the protection of the Privacy Shield agreement, and for this reason the international transfer of your data is legal.
2.1 [Update of July 23, 2020]: We inform you that the judgement of the Court of Justice of the European Union in Case C311/18 has invalidated the Privacy Shield agreement, but we rely on the derogations of article 49 GDPR to continue transferring your data to the USA, where our website is hosted. By signing up in Colectalia.com, you explicitly consent this data transfer to the USA (first and second name, address, email, home/cell pnone). The transfers of data to the USA, according to EU laws, do not provide adequate protection and no adequate safeguards aimed at providing protection for the data are being implemented by the US Government. By signing up in Colectalia.com you acknowledge you are informed about this fact and you consent your data transfer to our server in the USA.
3.- We use it to send you your orders. This is, we give them to the Spanish post to send you the packages or to our registered sellers. No one else gets your data from us.
4.- We send you our Newsletter, and you can unsubscribe using the link in the footer of any Newsletter email.
5.- We send you other emails necessary to keep our commercial relationship: sign up confirmation, forgotten password emails, order confirmation, payment acceptation, processing of the order, shipping of the order, bids you place, bids placed in the same lots than you by other bidders, higher bids in the lots you bid for, end of auction (if you have won a lot or not) and ended auction reminders. You only receive such emails if you take the described actions in our site.
We also have personal data of individuals who are not Colectalia.com customers, but they have subscribet to our Newsletter. The only data we have about this people are first and second names (optional) and email (necessary to recieve our Newsletter). To subscribe to the Newsletter the users have accepted specific conditions giving us their express, free and informed consent to keep and treat the requested data. To unsubscribe it is easier as for registered Colectaia.com customers: use the link in the footer of any Newsletter email and you will stop receiving it.
What do we not do with your data:
We do not sell it, we do not give it, we do not let access it to anyone who does not need it to offer you our services, we do not print it, we do not keep it without an appropiated security level, neither anything except what we have explained in the previous point.
What can you do with the data we keep about you:
Whatever you want. It is yours and we only keep it because you have lent it to us. This is why you can use the following rights:
A) Access: allows the owner of the data to obtain information about whether Colectalia.com is processing personal data that concern him or not and, in such case, the right to obtain information about his personal data submitted to treatment.
B) Rectification: it allows to correct errors and modify the data that prove to be inaccurate or incomplete.
C) Deletion: allows the data to be deleted and ceased to be treated by Colectalia, unless there is a legal obligation to keep them and / or other legitimate reasons for its treatment by Colectalia do not prevail. For example, when personal data are no longer necessary in relation to the purposes for which they were collected, the customer may request that we suppress these data without undue delay.
D) Limitation: under the legally established conditions, it allows the processing of data to be paralyzed, in such a way that Colectalia avoids its treatment in the future, which will only be retained for the exercise or defense of claims.
E) Opposition: in certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. Colectalia will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
F) Portability: allows the interested party to receive their personal data and be able to transmit it directly to another responsible in a structured, commonly used and mechanical reading format. To exercise this right, it will be necessary for the client to provide a valid email.
To exercise any of these rights you must send an email or a letter to Colectalia
Ver. 1 - Jul 17, 2016