Privacy Policy

This Privacy Policy is a statement to explain in a clear, simple and understandable way how EVVO will handle the personal information that you provide or we obtain when using this website.

This Statement could be summarised as follows: at EVVO, you will always have control of your personal data and we will never take advantage of such data in an illegitimate or unfair way, trying at all times not to harm any rights or interests that affects you.

We have prepared this Privacy Policy in accordance with the principles and rules approved by Regulation (EU) 2016/679, of 27 April, known as the General Data Protection Regulation or "GDPR", as well as, for what is applicable, with the provisions of Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights or "LOPDGDDD".

1-. IDENTITY AND CONTACT OF THE DATA CONTROLLER

Company name: EVVO HOME EUROPE S.L.U., hereinafter "EVVO", or also the "Controller".

VAT ID: B37556842

ADDRESS: Plaza de España, 15 - BAJO - 37004 - SALAMANCA (SPAIN)

E-MAIL: contacto@evvohome.com

You can also contact EVVO using the contact form that we have enabled on the website.

2-. HOW WE COLLECT YOUR PERSONAL DATA

When you use the EVVO website, we may collect personal data in one of the following ways:

2.1. Data collection forms.

On our website we use forms to collect data and information for various purposes. These forms include:

Contact form

Form to place an order in our online store

Form to create an account (registration) and to log in

Form to let you know when we have a product in stock

Form that allows you to send us a question about a product

Form to send us a comment and/or a review about a product

EVVORULETTE of fortune form

2.2. Cookies

We may also collect and send to third parties certain information that we obtain from your browsing on the website, through the use of cookies and similar technologies (more information is available in our Cookie Policy -link-).

2.3. Server Logs

Finally, without the need for you to provide us with any personal information, when you access any page of this site, our web servers will automatically store access data in the so-called log files or server logs, which are automatically communicated by your browser, such as the URL requested, the last web page visited, the date and time of access, the browser used, the amount of data transferred, or, among others, the IP address (which is considered personal data).

3-. WHAT WE USE YOUR PERSONAL DATA FOR

We use your personal data for the following purposes:

1.- Contact our users and manage EVVO's response to them.

To manage the purchase and subsequent delivery of the products purchased from our online store.

3.- To provide our customers with payment deferment or instalment services.

4 .- Manage the publication of ratings and comments made by customers of our products or questions asked by users about our products.

5-. Management of prizes and discount coupons for participation in our sweepstakes.

6.- Manage the sending of EVVO offers and promotions by electronic means.

7-. Analysis of user behaviour on the website in order to improve the usability of the service or our advertising campaigns using cookies.

8.- Management of the correct operation and maintenance of the website, as well as for security purposes of electronic communications.

9-. Generation of the accounts of registered users and their administration.

10-. Risk assessment and fraud prevention of electronic payments.

4-. WHAT LEGAL BASIS ALLOWS US TO PROCESS YOUR DATA

The GDPR offers and allows different ways to legitimise this processing. The ones we use when processing your data on the EVVO website are as follows:

Legitimate interests (Article 6.1 letter f of the GDPR) 4.1.

This legal basis of "legitimate interests" means that we may use your personal data if we have a real and legitimate interest in doing so and our processing does not prejudice your rights and interests. It is even likely that our legitimate interests and yours are aligned in some cases.

One example of this is when you contact EVVO via e-mail or the contact form and expect a response from us. Likewise, when EVVO processes certain connectivity and website usage data for purposes of security of electronic communications and economic transactions (purchases and payments). Or also, in accordance with Article 21.2 of Law 34/2002, of July 11 (LSSICE), we may send you e-mail communications and offers from EVVO about products and services similar to those you have previously purchased from EVVO.

We also invoke our legitimate interests and those of third parties (customers, other users in general, etc.) to perform risk assessment and fraud prevention on payments made through our website.

As we will explain below, whenever EVVO carries out processing on the basis of its own or third parties' legitimate interests, you have the right to object to such processing.

4.2. Consent of the data subject (6.1 letter a of the GDPR)

We will request your express, prior, free, informed and unambiguous consent for the use of analytical and advertising cookies. You can consult our Cookies Policy [- put link to it-].

Likewise, we will have mechanisms on the website that allow you to express your consent for us to publish the questions or comments and evaluations that you send us about our products.

To manage the EVVORULETTE sweepstakes and prizes, we will need your consent, expressed by actively participating in the promotion.

4.3. Execution of a contract or pre-contractual relationship (6.1 letter b of the RGPD).

If you are going to purchase any product from our online store, we will use the corresponding form to collect personal data that is strictly necessary to execute a contract (specifically, the purchase and sale of our products), as well as to generate a customer account and provide you with the appropriate access credentials. Also, in the event that you wish to be notified when we have a particular product in stock.

4.4. Fulfilment of our legal obligations (article 6.1 letter c of the RGPD)

Some of the information you provide during the purchase process will be processed because we need to comply with certain legal obligations with regard to billing and tax.

Also, current regulations require us to use all the means at our disposal to provide you with secure electronic communications and transactions.

5-. WHAT CATEGORIES OF DATA WE PROCESS

At EVVO, we collect as little personal data as possible in order to be able to provide the web service or service to purchase our products.

None of the data processed by EVVO on this website is of a special or sensitive category.

At the time of collecting personal data through this website, we will inform you which of your personal details are mandatory in order to provide the corresponding services (as a general rule, those that are not required will be labelled "optional").

Important: The omission of mandatory data may make it impossible for us to fulfil the corresponding request: contact, send comments or questions, enjoy promotions, purchase our products, etc.

To ensure that the information contained in our processing system is always up to date and does not contain errors, we ask you to inform us as soon as possible of any changes and corrections to be made to your personal data.

The following are the categories of data processed when you use certain services or functionalities of our website:

5.1. Identity data: name, surname, ID number, social network identifiers.

5.2. Contact: postal address, e-mail address, telephone number.

5.3. Payment: credit card details, number of payment attempts, other.

5.4. Online connectivity data: IP address, browser and device information used by the user and other data collected through cookies and similar technologies.

5.5. Other data: product ratings, comments.

6-. WHO WE SHARE YOUR PERSONAL INFORMATION WITH

As a general rule, we will not transfer the data collected through the functionalities provided on this website to any other company or organisation.

Exceptions:

In the event that at the time of purchase of our products you choose a method that involves deferment or payment in instalments, we may transfer your data to Peppermoney (formerly Celeris), whose Privacy Policy is outside EVVO and can be found at this link [link to: https://peppermoney.es/privacidad/].

Only when we are required to do so by European Union or Spanish law, we may disclose your data to the appropriate public administrations, competent authorities, as well as, where appropriate, to judges and courts.

We will also resort directly to some suppliers in order to adequately provide you with the services that this website consists of.

In this regard, we inform you that when your personal data is to be processed on behalf of EVVO, we will choose suppliers (processors) who offer sufficient guarantees to implement appropriate technical and organisational measures and who guarantee your rights.

6-. INTERNATIONAL DATA TRANSFERS

In which cases could your personal data be transferred to a third country outside the European Economic Area?

In principle, EVVO does not envisage this possibility, except for the following exception:

6.1. Some cookies used by this website (as specified in the Cookie Policy - link -) may transfer certain data, such as your IP address or certain navigation parameters or configurations of your device or terminal, to certain companies that use servers located in the United States of America.

Note: The Data Controller is currently proactively analysing the impact of the judgment of the Court of Justice of the European Union dated July 16, 2020 in the Schrems II case, which annuls the Privacy Shield (adequacy decision of the European Commission declaring that the United States granted an adequate level of protection to the data of European citizens). On the other hand, the Controller is studying the most appropriate and guaranteeing formulas so that the transfer to third countries is carried out in full compliance with the GDPR and within the framework of what may be established by the European Commission and the European Data Protection Committee.

7-. FULLY AUTOMATED DECISION MAKING

In general, EVVO does not participate in fully automated decision-making.

However, we would like to inform you that for risk control and fraud prevention on payments made through our online store we use the Shopify application. Such software, Shopify, may automatically block a credit card number or IP address after a certain number of unsuccessful payment attempts, for strict transaction security reasons. We believe, however, that such automatic blocking, should it occur, would not have a significant legal effect on our customers, as it would only last for a short period of time.

8-. RETENTION PERIODS

We will retain your personal data for the time necessary to fulfil the purposes for which they were collected (expressed in paragraph 3 of this Policy).

Once these purposes have been fulfilled, we will keep your data during the statute of limitations of legal actions that may arise from your contractual relationship with EVVO.

We will also retain your data until you withdraw your consent (in the event that this is the legitimacy of the processing), or until you request the deletion of such data, or the limitation or opposition to the processing by EVVO.

Specific criteria for data retention:

8.1. Consultations, complaints, suggestions and contact: we will retain your data once answered, duly secured, until the prescription of possible responsibilities.

8.2. Regarding cookies, we refer to the corresponding section of our Cookies Policy - link-.

8.3. Data derived from the purchase contract: we will retain customer data for a maximum period of 6 years from the last purchase.

9-. DATA PROTECTION RIGHTS

9.1. Rights of the data subject or holder of personal data:

9.1.1. Right of access: you have the right to obtain from EVVO confirmation as to whether or not personal data concerning you are being processed. EVVO will, where appropriate, provide you with a copy of the personal data undergoing processing.

9.1.2. Right of rectification: you have the right to request without undue delay the rectification of inaccurate personal data concerning you. You may also request your right to have incomplete personal data completed.

9.1.3. Right of deletion: you have the right to request that EVVO delete your personal information. When the circumstances set out in Article 17.1 of the GDPR apply, the Data Controller is obliged to delete your data without delay. Remember, however, that we have to comply with a series of legal retention periods, so your data would be blocked (EVVO would not use it) until the end of the respective retention period.

9.1.4. Right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer it to a data controller other than EVVO without being prevented by us, provided that the processing is based on your consent and is carried out by automated means.

9.1.5. Right of restriction of processing: when you request this right, your data may only be processed, with the exception of mere storage, with your consent or for the formulation, exercise or defence of claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest. You will have the right to obtain the restriction of processing by us when one of the circumstances provided for in Article 18.1 of the GDPR is met.

9.1.6. Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you on the basis of the legitimate interests of EVVO or third parties.

We also remind you that where the legal basis for the processing of the data is your consent, you have the right to withdraw such consent always and in any case, and as easily as you gave it to EVVO.

You also have the right to file a complaint with the respective supervisory authority, usually the Spanish Data Protection Agency (AEPD), if you consider that we have not properly satisfied the exercise of your rights or that we have not processed your data in a legitimate manner. For more information, you can go to the web site of the Spanish Data Protection Agency via this link. [https://www.aepd.es ]

Finally, you also have the right not to be subject to a decision by EVVO based solely on automated processing of your personal data, including profiling, that produces legal effects on you or similarly significantly affects you.

9.2. How you can exercise your rights

You can exercise the above rights at any time by sending us an e-mail or by writing to our postal address. You can see our contact details in section 1 (Identity of the Controller and Contact).

You have more information about your rights, and even forms for its exercise, on the website of the Spanish Data Protection Agency [linked to: https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos ].

10-. SECURITY MEASURES

The privacy of users and the security of personal data are key principles and firm commitments as part of EVVO's approach to handling personal data.

Therefore, we will adopt the necessary technical and organisational measures to protect the confidentiality, integrity and availability of your data, both on this website and in the subsequent use we make of them.

We will also require appropriate technical and organisational security measures from our suppliers, especially those who provide us with hosting services or online payment platforms.

To provide you with more security, this website has installed an SSL (Secure Socket Layer) certificate that encrypts the communication of information between client and server.

11-. MODIFICATION OF THIS POLICY

In order to effectively implement the principle of proactive and ongoing compliance with data protection regulations, as well as in accordance with our duties of transparency, we may amend this Privacy Policy from time to time.

If we make material changes to this Privacy Policy, we will notify you of such changes by posting the amended policy on this website and, as appropriate, by other means (e.g., by e-mail, if you have authorised this means of communication).

12-. FURTHER INFORMATION

To clarify any questions, issues or concerns raised or unresolved by reading this Privacy Policy, you can contact us at the postal and e-mail addresses listed in Section 1.