Privacy Policy

1. Responsible for the processing

In compliance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018, on the Protection of Personal Data and the Guarantee of Digital Rights, users are informed of the following data:

Responsible: María Leonor Alcivar Ibarra
Trade name: Leonora Bags
DNI/NIF: 71981569X
Address: Calle Povedilla, 10, attic on the left, 28009 Madrid
Email: leonoralcivar@gmail.com
Phone number: 620 344 982
Website: leonorabags.com

María Leonor Alcivar Ibarra is responsible for the processing of the personal data provided by users through Leonora Bags.

2. Personal data processed

Depending on the relationship the user maintains with Leonora Bags, the following may be processed:

  • Name and surname.
  • Email address.
  • Phone number.
  • Billing department.
  • Delivery address.
  • Information related to orders.
  • Information necessary for billing.
  • Information provided through forms.
  • Information related to changes, returns, and incidents.
  • Technical data related to the use of the website, where applicable.

Data related directly to the payment methods may be processed by the banking entities or payment platforms used by the store.

3. Purposes

Order management

Managing purchases made through Leonora Bags, including:

  • Order preparation.
  • Payment management.
  • Billing.
  • Delivery.
  • Changes.
  • Returns.
  • Guarantees.
  • Incidents.

Customer service

To respond to inquiries, requests, or communications received via email, phone, forms, or other enabled channels.

Customer account

When the store allows you to create an account, the data can be used to manage that account and facilitate future purchases.

Legal obligations

Managing the fiscal, accounting, administrative and legal obligations arising from the activity of Leonora Bags.

Email marketing

Once the user has given their consent, Leonora Bags may send:

  • Discount coupons.
  • New developments.
  • New products.
  • Collections.
  • Promotions.
  • Offers.
  • Commercial communications.

For the management of these communications, it may be used Brevo.

The user may withdraw their consent at any time.

4. Legal basis

Depending on the treatment:

Execution of a contract: order management, payments, deliveries, returns, and other actions necessary to complete a purchase.

Compliance with a legal obligation: tax, accounting or administrative obligations.

Consent: newsletter, promotions and other communications that require authorization.

Legitimate interest: when it proves applicable to ensure the security of the store, prevent fraudulent uses, or manage certain incidents, always respecting the user's rights.

5. Data retention

The data will be kept for as long as necessary to fulfill the purpose for which they were collected.

Data related to purchases and invoicing will be kept for the periods required by applicable regulations.

The data used for commercial communications will be kept as long as the user does not request their removal or withdraw their consent.

When appropriate, the data may be kept properly blocked for the necessary periods to meet possible legal responsibilities.

6. Recipients

Leonora Bags will not sell personal data to third parties.

However, certain providers may have access to the data necessary to provide their services:

  • Transport companies.
  • Banking entities.
  • Payment platforms.
  • Web hosting services.
  • Technology providers.
  • WooCommerce and services related to ecommerce.
  • Brevo for managing email marketing.
  • Advisory services.
  • Public administrations when there is a legal obligation.

7. International transfers

Some technology providers may provide their services from countries located outside the European Economic Area.

When an international data transfer occurs, the guarantees and mechanisms provided for by the applicable data protection regulations will be used.

8. Rights

The user may, when appropriate, exercise the following rights:

  • Access.
  • Correction.
  • Elimination.
  • Opposition.
  • Limitation of processing.
  • Portability.
  • Withdrawal of consent.

To exercise them, you can contact us through:

leonoralcivar@gmail.com

When necessary, sufficient information may be requested to verify the identity of the person exercising the right.

The interested party may also file a claim with the Spanish Data Protection Agency (AEPD).

9. Mandatory data

When certain fields appear marked as mandatory, it will be necessary to provide them in order to provide the corresponding service.

If they are not provided, it may not be possible to process a purchase, make a delivery, or respond adequately to a request.

10. Security

Leonora Bags will adopt the technical and organizational measures reasonably necessary to prevent the loss, alteration, access or disclosure of personal data without authorization.

11. Third-party data

If a user provides information about another person, for example to send an order to a different recipient, they must have sufficient authorization to disclose that information.

12. Minors

Minors must not provide data or make purchases when legally required to obtain permission from their parents, guardians or legal representatives.

13. Modifications

This Privacy Policy may be modified when necessary as a result of legal, technical or service-related changes at Leonora Bags.