Castelbel processes data from its users and clients with the sole purpose of satisfying the purchase requests through the website, of products and services, in order to be able to proceed with the registration of purchases, the sending of the products and eventual returns and/or exchanges of these products, as well as to respond to contact requests via the website and for the sending of newsletters to promote its goods and services.
Castelbel collects the following personal data for the following purposes:
a) sending newsletters to promote your goods and services: email data;
b) buying and selling products: name, email address, address, phone number, and tax number;
c) contact requests: name, email.
Where you intend to further process the personal data for a purpose other than that for which the data were collected, before you start such processing. Castelbel will provide data subjects with information about this purpose and any other relevant information.
We may process your personal data on the following grounds:
When you give us your express consent, such as when you subscribe to the newsletter on the website and agree to be informed about Castelbel products
Contract enforcement and pre-contractual diligence
When the processing of personal data is necessary for the conclusion, execution and management of the contract you have entered into with Castelbel to purchase products on the website, or for the management of contacts, information and requests, for the management of invoicing, collection and payment,
Fulfillment of legal obligation
When the processing of personal data is necessary to comply with a legal obligation to which Castelbel is subject, such as complying with its tax obligations.
Castelbel will not, without written consent, release your information to third parties.
Your personal information will never be shared with third parties without your prior permission.
If it is necessary for Castelbel to give your personal information to other companies in order to provide a product or service, we will ensure that we only share the minimum information necessary to fulfill your request.
The data controller is Castelbel.
Without prejudice to legal or regulatory provisions to the contrary, the data will be kept only for the minimum period necessary for the purposes that motivated their collection or their subsequent processing.
The data collected will not be transferred to entities outside the territory of the European Union.
In accordance with European data protection laws, Castelbel has adopted appropriate procedures to prevent unauthorized access and misuse of Personal Data.
Castelbel uses appropriate business systems and procedures to protect and safeguard the Personal Data that is provided. Security procedures and technical and physical restrictions on access and use of Personal Data are used on Castelbel servers. Only authorized personnel are allowed to access Personal Data in the course of their work.
In general, the website can be navigated without any information sharing on your part.
a) The use of the website www.castelbel.com does not imply the registration of any personal information, unless the user decides so by registering in the personal area. If personal information is requested for a registration, the reason for this request will be indicated.
b) User data that is recorded on Castelbel servers is always protected by a login and password.
In addition, the site www.castelbel.com uses an SSL protocol, which means that the exchange of information, within the Castelbel site, is done in total security.
c) In the case of services that include the automatic sending of emails, these will only be activated after prior authorization by the user, who will always keep available an option to unsubscribe.
d) To better ensure your security, Castelbel, through the website www.castelbel.com, does not store your credit or debit card data on its servers.
f) Notwithstanding all efforts, Castelbel cannot guarantee the security of all information that the user transmits, namely by intrusion of third parties (hackers).
Users are entitled, under the terms of the applicable law and as holders of Personal Data, to the following rights:
Right of Access – Right to obtain confirmation of which of your personal data is being processed and information about it, such as the purposes for which it is being processed, the retention periods, among others.
Right of Rectification – Right to request the rectification of your personal data that are inaccurate or to request that incomplete personal data be completed, such as address, TIN, email, telephone contacts, or others.
Right to erasure of data – Right to obtain the erasure of your personal data, provided there are no valid grounds for its retention.
Right to Portability – Right to receive the data you have provided us with in a digital format for current use and automatic reading or to request the direct transmission of your data to another entity that becomes the new responsible for your personal data.
Right to Withdraw Consent or Right to Object – Right to object or withdraw your consent at any time to a data processing, such as in the case of data processing for marketing purposes, as long as there are no legitimate interests overriding your interests, rights and freedoms, such as for example to defend a right in legal proceedings.
Right of Limitation – Right to request the limitation of the processing of your personal data, in the form of: (i) suspension of treatment or (ii) limitation of the scope of processing to certain categories of data or purposes of processing.
You also have the right to lodge a complaint with the National Commission for Data Protection.
Castelbel will respond within a reasonable time, which is estimated to be no more than thirty days.