Privacy Policy
1. WHO ARE WE?
Responsible: NOVALUX EUROPE SLU
NIF: B22443865 (VAT: ESB22443865)
Address: Av Sinforiano madroñero 37, esc 2, pla 0, pta 1, Badajoz, 06011, Spain.
E-mail: info@novaluxeurope.com
Website: novaluxeurope.com
2. WHAT PERSONAL DATA WE COLLECT AND WHY WE COLLECT IT
A. Registration and Purchase (B2B): For customer registration and processing of cosmetics and fragrance orders, we collect: name, surname, email, telephone, company name, tax/shipping address, company name and NIF/VAT.
Purpose: Commercial management, invoicing and intra-community shipping.
B. Contact Form: We collect your name and email address.
Purpose: To answer your questions or queries. If you check the commercial acceptance box, we will use this data to send you promotions and news about our perfume and cosmetic products.
C. Comments: When visitors leave comments on the website, we collect the data shown in the comments form, as well as the visitor's IP address and browser user agent string to help spam detection.
D. Media: If you upload images to the website (for example, in your user profile), you should avoid uploading images with location data (GPS EXIF) included, as other visitors could download and extract that data.
E. Cookies and Analytics: We use cookies to improve user experience and analyze traffic anonymously. Cookies Policy
Sales through marketplaces (Amazon, Qogit)to)
In addition to its own store, Novalux Europe SLU sells through marketplaces such as Amazon and Qogita. This section describes how customer data from these channels is processed.
Source of the data. They are not collected directly from the buyer: they are provided by the marketplace once the order is confirmed, so that we can prepare and deliver it.
Data processed. Name and surname or company name, shipping and billing address, tax identification number when required, contact information necessary for delivery, and the contents and amount of the order. Payment information is neither received nor processed: payment is handled entirely by the marketplace.
Purpose. We only use your data to prepare, invoice, ship, and deliver orders, and to handle returns, issues, and warranty claims. This data is not used for marketing, profiling, or cross-referencing with data from other channels for commercial purposes.
Legal basis. Execution of the purchase and sale agreement and compliance with legal obligations, particularly tax and invoicing obligations.
Recipients. The transport company required for delivery; the Tax Agency; and the marketplace itself when legally or contractually obligated to do so. They are not transferred to any other third party nor sold.
Conservation. Data is retained for the duration of the relationship arising from the order and, subsequently, only the data included in the invoice is kept for five years, as required by Spanish tax and commercial regulations. After this period, it is deleted. The rest is removed when it is no longer necessary for the order.
Location. They are stored and processed on servers located in the European Union. No international transfers of this data outside the European Economic Area are made.
Responsibility. The marketplace is responsible for processing data on its own platform. Novalux Europe SLU is responsible for the processing it carries out to fulfill the order.
Rights. For access, rectification, erasure, restriction of processing, objection, and data portability, please write to info@novaluxeurope.com. You can also file a complaint with the Spanish Data Protection Agency.
3. LEGAL BASIS FOR PROCESSING
Contract execution: For company registration and product sales.
Legal obligation: For issuing invoices and tax compliance.
Consent: For sending marketing (newsletter) and answering inquiries via form.
Legitimate interest: For site security and fraud prevention.
4. WITH WHOM WE SHARE YOUR DATA
We do not sell your data to third parties. However, we share it with essential providers:
Web Hosting: Hostinger (hosting provider).
Payment Gateways: Woo Payments (managed by Stripe) and banking entities for transfers.
Logistics Operators: We share only the strictly necessary data (name, address and telephone number) with the transport agencies in charge of delivery: Seur o GLS (for shipments within Spain), DHL (for standard shipments to the rest of the European Union) and Transwhite (for large volume palletized European shipments).
Technical Support: Automattic (WooCommerce developer) in technical maintenance tasks.
5. WHERE IS YOUR DATA SENT TO? (INTERNATIONAL TRANSFERS)
By using services such as Hostinger o Woo Payments (Stripe), It is possible that some data may be processed on servers outside the European Economic Area (such as the USA). These transfers are carried out under security safeguards, such as the Standard Contractual Clauses approved by the European Commission, ensuring a level of protection equivalent to that of Europe.
6. HOW LONG DO WE KEEP YOUR DATA?
Billing information: 5 years by legal requirement in Spain.
Contact form data: They will be kept as long as necessary to resolve your query or, if you agreed to marketing, until you request to unsubscribe.
Registered user data: While the account remains active or until you request its deletion.
7. WHAT RIGHTS DO YOU HAVE OVER YOUR DATA?
You can request access to, rectification of, erasure of, restriction of processing of, or objection to the processing of your data, as well as data portability. If you have an account or have left comments, you can request an exported file of your data or request that we delete it (except for data we are legally required to retain). To exercise these rights, please write to: info@novaluxeurope.com.
8. ADDITIONAL INFORMATION
How we protect your data: We have an SSL security certificate that guarantees that data transmission between the server and the user is encrypted. In addition, we implement technical security measures against unauthorized access.
Procedures against data breaches: In the event of detecting a security breach that compromises user privacy, we undertake to inform the Spanish Data Protection Agency (AEPD) and the affected users within a maximum period of 72 hours.