Privacy Policy

This legal document is drafted and legally binding in Spanish, in accordance with Spanish law. The text below is provided in its original language.

Last updated: May 2025

1. Data Controller

• Company name: Llovesa Project SL
• Tax ID (NIF): B26769216
• Address: Calle Pare Coll, No. 6, Ground Floor, Door 4A, 17005 Girona, Spain
• Email: info@fara961.com
• Website: fara961.com

2. Purposes of Data Processing

At Llovesa Project SL we process the information provided by users for the following purposes:

• Order management: processing purchases made through our online store, including product shipping, invoicing, and after-sales support.
• Customer service: handling enquiries, requests, or complaints sent through our communication channels.
• Commercial communications: sending information about our products, offers, and news, only when the user has given express consent.
• Service improvement: analysing website usage to improve the browsing experience and optimise our services.

3. Legal Basis for Processing

The legal basis for processing your personal data is:

• Performance of a contract: processing is necessary to fulfil the purchase agreement (Art. 6(1)(b) GDPR).
• Consent: for commercial communications and newsletters, we request your prior express consent (Art. 6(1)(a) GDPR).
• Legitimate interest: for service improvement and fraud prevention (Art. 6(1)(f) GDPR).
• Legal obligation: to comply with tax and accounting obligations (Art. 6(1)(c) GDPR).

4. Personal Data We Collect

The personal data we may collect includes:

• Full name
• Email address
• Phone number
• Shipping and billing address
• Browsing data (technical cookies, session identifier)

Payment details (credit/debit card) are processed directly by Stripe and are never stored on our servers.

5. Data Recipients

Your personal data may be shared with the following recipients:

• Stripe, Inc.: payment processor. Stripe acts as a data processor to securely manage payment transactions. Stripe Privacy Policy.
• Odoo S.A.: ERP system used for order management, inventory, and invoicing.
• Vercel, Inc.: web hosting provider where our website is hosted.
• Shipping carriers: for delivery of orders placed.

No international data transfers outside the European Economic Area will be made except to the providers listed above, who have adequate safeguards in place (Standard Contractual Clauses or Adequacy Decisions of the European Commission).

6. Data Retention Periods

Personal data will be retained for the following periods:

• Customer data: for the duration of the contractual relationship and, once ended, for the legal limitation periods (5 years for civil obligations, 4 years for tax obligations).
• Commercial communications data: until the user withdraws consent or unsubscribes.
• Browsing data: as specified in our Cookie Policy.

7. Your Rights (ARCO+)

Under the General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on Personal Data Protection and Digital Rights (LOPD-GDD), you have the right to:

• Access: know whether we are processing your personal data and, if so, obtain a copy.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure (right to be forgotten): request deletion of your data when it is no longer necessary for the purpose for which it was collected.
• Objection: object to the processing of your data in certain circumstances.
• Portability: receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
• Restriction of processing: request restriction of the processing of your data in certain cases.

How to Exercise Your Rights

You may exercise any of these rights by sending an email to info@fara961.com with the subject line "Exercise of GDPR rights" and attaching a copy of your ID or equivalent identifying document.

We will respond to your request within a maximum of 30 days.

8. Data Deletion Request

If you wish us to delete all personal data we hold about you, please send your request to info@fara961.com with the subject line "Data deletion request". We will process your request and delete your data within a maximum of 30 days, unless a legal obligation prevents us from doing so (e.g., tax or accounting obligations).

We will confirm the deletion of your data by email.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data does not comply with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

• Website: www.aepd.es
• Address: C/ Jorge Juan, 6, 28001 Madrid, Spain

10. Data Security

At Llovesa Project SL we have implemented the necessary technical and organisational measures to ensure the security of your personal data and to prevent its alteration, loss, unauthorised processing, or access, taking into account the state of technology, the nature of the data, and the risks they are exposed to.

11. Changes to This Privacy Policy

We reserve the right to modify this privacy policy to adapt it to new legislation or case law. In the event of a substantial change, we will notify you through our website.