Bull Skull Guitars

Privacy policy

PRIVACY POLICY

1. INFORMATION FOR THE USER

Who is the controller of the processing of your personal data?

Bull Skull Guitars – Vicente Javier Morella Martínez, owner of Bull Skull Guitars, is the CONTROLLER of the processing of the USER’s personal data and informs you that such data will be processed in accordance with Regulation (EU) 2016/679, of 27 April, on the protection of natural persons with regard to the processing of personal data (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).

For what purpose do we process your personal data?

The personal data provided through the website may be processed for the following purposes:

  • To respond to enquiries, requests for information and requests made through the forms, e-mail or any other available means of contact.

  • To prepare quotations and manage requests relating to the manufacture of custom guitars, the repair or restoration of instruments and the other services offered by Bull Skull Guitars.

  • To manage the purchase of products, payment, invoicing, order preparation and dispatch, returns, warranties and after-sales service.

  • To create and administer the customer account, when the user decides to register in the shop.

  • To manage the communications necessary to report on the status of an order, repair, restoration, purchase or incident.

  • To comply with the tax, accounting, administrative and legal obligations applicable to the transactions carried out.

  • To prevent fraudulent uses, ensure the security of the website and keep records of the transactions carried out.

  • To send commercial information about products, services, news or offers from Bull Skull Guitars when the user has expressly authorised it or when there is a prior contractual relationship and the requirements established in the applicable regulations are met.

  • To analyse the use of the website by means of cookies or analytical technologies, provided that the user has previously given their consent through the cookie management system.

On what grounds may we process your personal data?

The processing is legitimised by the following legal bases:

  • The application of pre-contractual measures requested by the user and the performance of a contract, in order to prepare quotations and manage orders, repairs, restorations, purchases, payments, shipments, returns and warranties.

  • Compliance with legal obligations applicable to the CONTROLLER, especially in tax, accounting, commercial and consumer-protection matters.

  • The user’s consent, when requested in order to send commercial communications or to use analytical cookies and other non-essential technologies.

  • The legitimate interest of the CONTROLLER in responding to general enquiries, protecting the website, preventing fraudulent operations and defending its rights against possible claims. Where the processing is based on legitimate interest, the user may object on grounds relating to their particular situation.

Where there is a prior contractual relationship, communications may be sent regarding the company’s own products or services similar to those contracted, provided that the requirements established in Article 21.2 of the LSSI-CE are met and a simple, free-of-charge means of objecting is provided.

What personal data do we process?

Depending on the services used, the following categories of data may be processed:

  • Identification and contact details, such as name, surname, e-mail, telephone and postal address.

  • Information provided in enquiries, quotations, custom orders, repairs or restorations, including information relating to the instrument.

  • Data relating to orders, products purchased, invoicing, delivery, returns and warranties.

  • Data necessary to create and manage a customer account.

  • Technical information relating to access to and use of the website, such as IP address, browser, device, security logs and cookie preferences.

Bull Skull Guitars does not request data relating to health or other special categories of personal data. The user should avoid including this type of information in free-text fields unless strictly necessary.

Bank card data is processed directly by the corresponding payment gateway. Bull Skull Guitars does not receive or store the full card number.

For how long will we keep your personal data?

The data will be kept for the time necessary to fulfil the purpose for which it was collected:

  • Enquiries and requests that do not give rise to a commercial relationship will be kept for an approximate maximum period of one year, unless it is necessary to keep them in order to address possible liabilities.

  • Quotations, orders, repairs, purchases and contractual documentation will be kept for as long as the relationship with the customer is maintained and, thereafter, for the applicable legal limitation periods.

  • Invoices and other accounting or tax documentation will be kept for the periods required by the corresponding regulations.

  • Customer account data will be kept for as long as the account remains active. When its deletion is requested, the data will be blocked for the periods necessary to address possible liabilities.

  • Data used for commercial communications will be kept until the user withdraws their consent or objects to its processing.

  • The duration of cookies and similar technologies is detailed in the Cookies Policy.

Once these periods have ended, the data will be securely deleted or anonymised.

To whom do we provide your personal data?

Personal data will not be sold or disclosed to third parties for commercial purposes unrelated to Bull Skull Guitars.

Data may be accessed by the providers that are necessary for the operation of the website and the provision of the services, such as providers of hosting, IT maintenance, e-mail, e-commerce, payment gateway, invoicing, transport and customer service. These providers will process the data following the CONTROLLER’s instructions and in accordance with the corresponding data processor agreement where required.

The data necessary to process payment may be disclosed to Stripe, to the financial institutions and to the payment service providers involved in the transaction. The data necessary to deliver an order may be provided to the selected transport company.

Data may also be disclosed to public administrations, courts, tribunals, security forces and bodies or other authorities where there is a legal obligation.

International transfers

The use of certain technology providers, such as Google or Stripe, may involve the processing of information outside the European Economic Area.

When international transfers take place, they will be carried out by means of an adequacy decision of the European Commission, standard contractual clauses or other safeguards recognised by the GDPR. The user may request additional information about these safeguards by contacting the CONTROLLER.

Are automated decisions made?

There is no provision for the adoption of automated decisions or profiling that produces legal effects or significantly affects the user.

What are your rights?

The rights available to the USER are:

  • The right to withdraw consent at any time.
  • The right of access, rectification, portability and erasure of their data, and of restriction of or objection to its processing.
  • The right to lodge a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with the current regulations.

Contact details to exercise your rights:

Bull Skull Guitars – E-mail: guitarepair.valencia@gmail.com.

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

The fields marked as mandatory in the forms must be completed in order to address the request, prepare a quotation, process a repair or manage a purchase. The absence of this data may prevent the CONTROLLER from providing the requested service.

The information requested in the optional fields may be provided voluntarily. Bull Skull Guitars will endeavour to request only the data that is adequate, relevant and necessary for each purpose.

The USER guarantees that the data provided is true, accurate and up to date, and undertakes to communicate any change.

When the user provides another person’s data, for example that of the recipient of an order, they guarantee that they are authorised to do so and that they have informed that person about the disclosure of their data.

Acceptance of the Privacy Policy does not, by itself, authorise the sending of advertising. Where it is necessary to obtain consent for commercial communications, it will be requested by means of a separate, optional and non-pre-ticked box. The purchase or contracting may be completed even if the user does not authorise such communications.

3. SECURITY MEASURES

The CONTROLLER will process personal data lawfully, fairly and transparently, and will apply the principles of purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality established in Article 5 of the GDPR.

Bull Skull Guitars has adopted the technical and organisational measures reasonably necessary to protect personal data against its loss, alteration, unauthorised access, disclosure or destruction, taking into account the nature of the information processed, the state of the art and the existing risks.

Access to the data will be limited to the persons and providers who need to use it to fulfil the purposes described. Likewise, the measures implemented will be reviewed periodically and updated when necessary.

For any query relating to this Privacy Policy or to the processing of your personal data, you may contact the CONTROLLER by e-mail at guitarepair.valencia@gmail.com.