Data Controller

Madre Tierra Setas Exóticas S.L.
CIF: B76810993
Camino Tazana 25, 38434 Icod de los Vinos, Santa Cruz de Tenerife, Spain
Email: Anna@setasmadretierra.com
Phone: +34 637 14 26 56
Website: setasmadretierra.com

Introduction

Madre Tierra Setas Exóticas S.L. operates this store and website, including all data, content, features, tools, products and services, to provide you, the customer, with a curated shopping experience (the "Services"). Madre Tierra Setas Exóticas S.L. uses Shopify technology to deliver the Services. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction through the Services, or when you communicate with us by any other means. In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is collected, used and disclosed, as set out in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information", we mean any data that identifies you or that can reasonably be linked to you or another person. Personal information does not include data collected anonymously or data that has been de-identified so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information:

• Contact details including your name, address, billing address, shipping address, phone number and email address.
• Financial information including credit card numbers, debit card numbers and financial account information, payment card information, financial account data, transaction details, payment method, payment confirmation and other payment-related information.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including items you view, add to your cart, save to your wishlist, purchase, return, exchange or cancel, as well as your past transactions.
• Communications with us including information you provide in your communications with us, for example when submitting a customer service complaint.
• Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information including information about how and when you use or browse the Services.

Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, visit or use the Services, communicate with us or provide your personal information by any other means.
• Automatically through the Services, including information from your device when you use our products or services or visit our websites, as well as through the use of cookies and similar technologies.
• From our service providers, including when we engage them to enable certain technology or when they collect or process your personal information on our behalf.
• From our partners or other third parties.

Legal Basis for Processing

In accordance with the General Data Protection Regulation (GDPR), we process your personal information on the following legal bases:

• Performance of a contract: where processing is necessary to manage your order, process payment, arrange shipping or handle returns and exchanges.
• Consent: where you have given us your explicit consent, for example to receive commercial communications. You may withdraw your consent at any time.
• Legitimate interests: where processing is necessary for our legitimate interests, such as fraud prevention, security of the Services or improvement of our offering, provided that such interests do not override your fundamental rights and freedoms.
• Legal obligation: where processing is necessary to comply with an applicable legal obligation.

How We Use Your Personal Information

• Providing, personalising and improving the Services. We use your personal information to provide you with the Services, including performing the contract with you, processing your payments, managing your orders, remembering your preferences, sending you account-related notifications, processing purchases, returns and exchanges, creating and managing your account, arranging shipping and offering you a personalised shopping experience.
• Marketing and advertising. We use your personal information for marketing and promotional purposes, such as sending you commercial communications by email or text message, and showing you online ads about products or services. Legal basis: consent.
• Security and fraud prevention. We use your personal information to authenticate your account, detect and investigate potentially fraudulent or illegal activity, and ensure the security of our services. Legal basis: legitimate interests.
• Communications with you. We use your personal information to provide customer support and respond to your requests. Legal basis: performance of a contract and legitimate interests.
• Legal purposes. We use your personal information to comply with applicable law or respond to valid legal proceedings. Legal basis: legal obligation.

Cookies and Similar Technologies

Our store uses cookies and similar technologies to improve your browsing experience, analyse traffic and, where applicable, show you personalised advertising. When you first access the Services, we will show you a cookie banner where you can accept, reject or customise the use of non-essential cookies. You can modify your cookie preferences at any time through your browser settings or the cookie preference panel available on our website.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes:

• With Shopify, suppliers and other third parties that provide services on our behalf (for example, IT management, payment processing, data analytics, customer support, cloud storage, order management and shipping).
• With commercial and marketing partners to provide marketing services and show you personalised advertising.
• When you direct, request or otherwise consent to the disclosure of certain information to third parties.
• With our affiliates or generally within our corporate group.
• In connection with a business transaction, such as a merger or insolvency process, to comply with applicable legal obligations, to enforce the Terms of Service or to protect the rights of the Services and our users.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services. Information you submit to the Services will be transmitted and shared with Shopify and with third parties who may be located in countries other than your own. For more information about how Shopify uses your personal information and about the rights you may have, please see the Shopify Consumer Privacy Policy and exercise your rights at https://privacy.shopify.com/en.

Third-Party Websites and Links

The Services may include links to websites or other online platforms operated by third parties. We recommend that you review their privacy and security policies. We do not guarantee and are not responsible for the privacy or security of such sites.

Children's Data

The Services are not intended for use by children under the age of 16, and we do not knowingly collect personal information from minors. If you are the parent, mother or legal guardian of a minor who has provided us with their personal information, you may contact us at Anna@setasmadretierra.com to request its deletion.

Security and Retention of Your Information

We apply reasonable technical and organisational measures to protect your personal information. However, no security measure is infallible. The length of time we retain your personal information depends on factors such as the need to maintain your account, provide you with the Services, comply with legal obligations or resolve disputes. In general, we retain customer data for a maximum of 5 years from the last transaction, unless applicable law requires a different period.

Your Rights and Choices

In accordance with the GDPR, you have the following rights regarding your personal information:

• Right of access. You may request access to the personal information we hold about you.
• Right to erasure. You may request the deletion of your personal information.
• Right to rectification. You may request that we correct inaccurate personal information.
• Right to data portability. You may request a copy of your personal information in a structured format.
• Right to object. You may object to the processing of your personal information for certain purposes, including direct marketing.
• Right to restriction of processing. You may request that we restrict the processing of your personal information in certain circumstances.
• Right to withdraw consent. Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Managing communication preferences. You may unsubscribe from commercial communications at any time using the unsubscribe link included in our emails.

We will respond to your request within a maximum period of 1 month from receipt, extendable to 3 months in cases of particular complexity, in accordance with Article 12 of the GDPR.

Complaints

If you have any complaint about how we handle your personal information, you may contact us at Anna@setasmadretierra.com. If you consider that we have not adequately addressed your request, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain, through its electronic headquarters: www.aepd.es.

International Transfers

We may transfer, store and process your personal information outside the European Economic Area (EEA). In such cases, we will use transfer mechanisms recognised by the European Commission, such as Standard Contractual Clauses (SCCs), to ensure an adequate level of protection for your personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time for operational, legal or regulatory reasons. We will post the updated version on this website and update the "Last updated" date accordingly.

Contact

If you have any questions about this Privacy Policy or wish to exercise any of your rights, please contact us:

Madre Tierra Setas Exóticas S.L.
Camino Tazana 25, 38434 Icod de los Vinos, Santa Cruz de Tenerife, Spain
📧 Anna@setasmadretierra.com
📞 +34 637 14 26 56
🌐 setasmadretierra.com

For the purposes of applicable data protection law, we are the data controller of your personal information.