Data Collected
The personal data collected on this site are as follows:
- account opening: during the creation of the user’s account, their first name; last name; email address; phone number; Name, email of the recipient when purchasing a gift card
- connection: when connecting to the website, the site registers, in particular, their name, first name, connection, use, location, and payment data;
- profile: the use of the services provided on the website allows to fill out a profile, which may include an address and a phone number;
- payment: as part of the payment of the products and services offered on the website, it records financial data relating to the user’s bank account or credit card;
- communication: when the website is used to communicate with other members, the data concerning the user’s communications are temporarily stored;
- cookies: cookies are used, as part of the use of the site. The user has the possibility to disable cookies from their browser settings.
Use of Personal Data
The personal data collected from users is intended for the provision of the website’s services, their improvement and maintaining a secure environment. More specifically, the uses are as follows:
- access and use of the website by the user;
- management of the operation and optimization of the website;
- organization of the conditions of use of Payment Services;
- verification, identification, and authentication of data transmitted by the user;
- offering the user the possibility to communicate with other users of the website;
- implementation of user support;
- personalization of services by displaying advertisements based on the user’s browsing history, according to their preferences;
- prevention and detection of frauds, malware (malicious software), and management of security incidents;
- management of possible disputes with users;
- sending of commercial and advertising information, according to the preferences of the user.
Sharing Personal Data with Third Parties
Personal data may be shared with third-party companies, in the following cases:
- when the user uses payment services, for the implementation of these services, the website is in relation with third-party banking and financial companies with which it has contracts;
- when the user publishes, in the free comment areas of the website, information accessible to the public;
- when the user authorizes a third-party website to access their data;
- when the website uses service providers to provide user assistance, advertising, and payment services. These providers have limited access to the user’s data, within the framework of the performance of these services, and have a contractual obligation to use them in compliance with the provisions of the regulation applicable to the protection of personal data;
- if the law requires it, the website can perform the transmission of data to respond to claims against the website and comply with administrative and judicial procedures;
- if the website is involved in a merger, acquisition, asset sale, or insolvency procedure, it may be required to sell or share all or part of its assets, including personal data. In this case, users would be informed before personal data is transferred to a third party.
Security and Confidentiality
The website implements organizational, technical, software, and physical digital security measures to protect personal data against alteration, destruction, and unauthorized access. However, it is to be noted that the internet is not a completely secure environment and the website cannot guarantee the security of the transmission or storage of information on the internet.
Implementation of User Rights
In application of the regulation applicable to personal data, users have the following rights, which they can exercise by making their request at the following address: validamero@gmail.com. the right of access: they can exercise their right of access, to know the personal data concerning them. In this case, before the implementation of this right, the website may request a proof of the user’s identity to verify its accuracy. the right to rectification: if the personal data held by the website are inaccurate, they can request the update of the information. the right to data deletion: users can request the deletion of their personal data, in accordance with applicable laws on data protection. the right to restrict processing: users can request the website to limit the processing of personal data in accordance with the assumptions provided by the GDPR. the right to object to data processing: users can oppose the processing of their data in accordance with the assumptions provided by the GDPR. the right to data portability: they can claim that the website gives them back the personal data provided to them to transmit them to a new website.
Evolution of this Clause
The website reserves the right to make any modifications to this clause related to the protection of personal data at any time. If a modification is made to this clause of protection of personal data, the website undertakes to publish the new version on its site. The website will also inform users of the modification by email, within a minimum period of 15 days before the date of effect. If the user does not agree with the terms of the new wording of the personal data protection clause, they have the option to delete their account.