Privacy Policy

 

This Privacy Policy has been developed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data (hereinafter “GDPR”), as well as Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (hereinafter “LOPDGDD”), and other applicable regulations.

It also considers, where relevant, compliance with UK Data Protection Act 2018, UK GDPR, California Consumer Privacy Act (CCPA), and other local laws in the countries where we operate or offer products.

The purpose of this Privacy Policy is to inform natural persons who provide their personal data — and/or those of the person they represent — regarding:

  • The collection and origin of such data

  • Specific aspects of data processing

  • The purposes and legal basis for processing

  • Contact details for exercising rights

  • Data retention periods

  • Security measures

  • Information about profiling and automated processing

WHO IS RESPONSIBLE FOR DATA PROCESSING?

In terms of data protection, OVEN ATELIER must be considered the Data Controller for the personal data processing carried out by this entity.

Data Controller: OVEN ATELIER
Tax ID: 48690922Z
Address: C/ Marques del Turia 8, 46930, Quart de Poblet, Valencia, Spain
Email: info@ovenatelier.com

WHAT PERSONAL DATA DO WE PROCESS?

All personal data processed by OVEN ATELIER will be collected and handled lawfully, fairly, and transparently. Only the data strictly necessary for each specific purpose will be requested, ensuring it is adequate, relevant, and not excessive.

Types of data collected:

  • Identification data

  • Commercial information

  • Transactions involving goods and services

  • Economic and financial data

WHERE DOES IT COME FROM?

As a general rule, data is collected directly from the data subject. In exceptional cases, it may be obtained from third parties or services, in which case the data subject will be informed within a reasonable period or during the first communication.

PURPOSES OF PROCESSING PERSONAL DATA

Personal data is processed for the following purposes:

  • Newsletter: Sending updates, events, news, products, and services related to OVEN ATELIER or our sector.

  • Contact: Responding to information requests and general inquiries.

  • Purchase contract management: Handling order processing, payment, billing, shipping, returns, product availability notifications, and voucher/gift card redemptions.

  • Customer management: Sales, billing, accounting, collections, customer service, and relationship management.

  • Profiling: Creating commercial profiles based on consumption habits and preferences to offer tailored communications. Profiling is carried out in compliance with GDPR Articles 6 and 21, and will never lead to automated decisions that have legal or similarly significant effects on the user.

LEGAL BASIS

Processing is carried out under the following legal bases:

  • Consent – for communications, newsletters, marketing, and any non-essential purposes. Consent can be withdrawn at any time.

  • Execution of a contract – for the provision of goods or services.

  • Legal obligations – to comply with applicable laws such as tax and consumer protection regulations.

  • Legitimate interest – to send communications related to products or services similar to those already purchased, provided there is no objection from the customer (per Article 21.2 of the LSSI).

INTERNATIONAL DATA TRANSFERS

In cases where personal data is transferred outside the EU/EEA, OVEN ATELIER will ensure adequate safeguards, such as Standard Contractual Clauses approved by the European Commission, or other legally recognized mechanisms.

DATA RETENTION

Data will be retained only as long as necessary for the purposes for which it was collected, while the contractual relationship is active, or as required by law. Once expired, data will be blocked for the applicable statutory limitation period and then securely deleted.

DATA SHARING

As a general rule, data will not be shared with third parties, except:

  • When legally required

  • With service providers essential for fulfilling the purposes stated (e.g., payment processors, logistics providers, IT support)

COOKIES & TRACKING

Our website uses cookies and similar technologies to enhance your browsing experience, analyse site performance, and deliver personalised content. For details, please see our Cookies Policy.

RIGHTS OF DATA SUBJECT

Under the GDPR and other applicable laws, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing, including profiling and direct marketing

  • Data portability

  • Not be subject to solely automated decisions with legal or significant effects

  • Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or other relevant authority

To exercise your rights:

We may request proof of identity before processing requests.

PROFILING DETAILS

OVEN ATELIER may analyse customer data to create a commercial profile for marketing purposes, always respecting legal safeguards. Profiles are used to tailor communications, suggest products, and provide relevant offers — never to make automated decisions that affect your rights.

SECURITY OF DATA

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.