Privacy

1. CONTACT INFORMATION ABOUT THE DATA CONTROLLER

1.1 Le Freak is the data controller, and we make sure that your data is processed following the applicable legislation.
1.2 Le Freak has joint data control responsibility with Meta for personal data that is collected using Meta’s analysis tool when you visit our Facebook page.
1.3 If you have questions or comments about this personal data policy, or if you want to exercise one or more of your rights as described in section 5, you can contact customer service:

AMBLE STUDIO, SL
Avenida Manolete, S/N, Centro Comercial Plaza.
Planta 1 - oficina 23-24. 29 660 Marbella - Málaga- Spain
CIF: B72693518
Email: hello@lefreakhome.com



2. WHAT PERSONAL DATA DO WE COLLECT FOR WHICH PURPOSE AND WHAT IS THE LEGAL BASIS FOR PROCESSING?

2.1 Use of cookies on our website
When you visit our website, we collect data on your use of the website, for example, on what type of browser you use, your search terms, your IP address, including your network location, and information about the device you use to visit the website. We also collect information about which products and services you click on. The data is collected using cookies when you give your consent through our cookie banner. You can read more about this in our cookie policy.

2.1.1 The purpose is
2.1.1.1 to prepare statistics and analyze how our customers use and move around on our website so that we can optimize the user experience and the website’s functionality,
2.1.1.2 to recommend products to you that we think you might be interested in on our website, and
2.1.1.3 to carry out marketing of our products to you, including through Facebook, Instagram, YouTube and Google, as well as
2.1.1.4 to improve security on our website.
Our processing is limited to personal data that is necessary for fulfilling the purposes above.

2.1.2 The legal basis for our processing of your data is:
2.1.2.1 You have given your consent to the processing of your data for one or more specific purposes; cf. Article 6 (1) (a) of the General Data Protection Regulation.

If you have corrections to your contact details, you can always change this data, either by unsubscribing from the newsletter and then subscribing again, or by contacting us at XXX.

2.4 Social media
When you visit our Facebook page, please note that we use Meta’s analysis tool “Facebook Page Insights” for collecting and processing your data.

2.4.1  The purpose is
2.4.1.1 to obtain statistics on visitors and,
2.4.1.2 to gain insight into user behavior on our Facebook page, including the number of likes, who post likes, number of page views, interactions on the page, removal of likes, the scope of page posts, etc.

2.2 Purchasing
When you purchase a product or communicate with us on the website, we collect the data that you give us yourself, for example, name, address, email address, telephone number, payment method, data about the time of purchase, which products you purchase and, if applicable, return, as well as delivery and information about the IP address from which the order was placed.

2.2.1 The purpose is
2.2.1.1 to be able to set you up as a customer, deliver the products you have ordered, fulfil our agreement with you, and
2.2.1.2 To be able to administer your rights to return products and make complaints,
2.2.1.3 to prevent fraud, and
2.2.1.4 To be able to comply with statutory requirements, including those that apply to bookkeeping and accounting.
Our processing is limited to personal data that is necessary for fulfilling the purposes above.

2.2.2 The legal basis for our processing of your data is:
2.2.2.1 The processing of personal data is necessary to fulfil an agreement to which you are a party and take measures at your request before entering into a contract; cf. Article 6 (1) (b) of the General Data Protection Regulation.

2.2.2.2 The processing of personal data is necessary to prevent fraud; cf. Article 6 (1) (f) of the General Data Protection Regulation.
2.2.2.3 The processing of personal data is necessary for bookkeeping and accounting; cf. Article 6 (1) (c) of the General Data Protection Regulation.

2.3 Newsletter
When you subscribe to our newsletter, we collect data about your name, email address and IP address. We also collect data on when you subscribed to the newsletter, when you unsubscribed from the newsletter, as well as data on where and when you open the newsletter, and whether links have been clicked on.

2.3.1 The purpose is
2.3.1.1 To be able to deliver newsletters to you,
2.3.1.2 to prepare statistics for optimizing the newsletter and for marketing our services, as well as
2.3.1.3 To be able to document your consent to receive the newsletter.
Our processing is limited to the personal data that is necessary for fulfilling the purposes above.

2.3.2 The legal basis for our processing of your data is:
2.3.2.1 Concerning dissemination of marketing material, you have given your consent to the processing of your data for one or more specific purposes; cf. Article 6 (1) (a) of the General Data Protection Regulation.
2.3.3 Your email address will be retained for as long as you subscribe to our newsletter. You can unsubscribe from the newsletters at any time by clicking the “unsubscribe from newsletter” link, which can be found in all newsletters you receive from
Our processing is limited to the personal data that is necessary for fulfilling the purposes above.

2.4.2.  The legal basis for our processing of your data is
2.4.2.1 you have given your consent to the processing of your data for one or more specific purposes; cf. Article 6 (1) (a) of the General Data Protection Regulation and,
2.4.2.2 the processing of personal data is necessary for us, or a third party, to be able to pursue a legitimate interest, and your interests, or fundamental rights, and rights of freedom are assessed as not taking precedence; cf. Article 6 (1) (f) of the General Data Protection Regulations. The legitimate interest(s) that are pursued are to obtain statistics on visitors and gain insight into user behavior on our Facebook page.

When you visit our Facebook page, you will gain access to information on how data is processed. You can read more about what type of information Facebook obtains here. Depending on your Facebook account settings, we can process personal or other data through your Instagram profile, including interests. The same purpose and legal basis described in section 2.4 apply to Instagram.



3. MANDATORY NOTIFICATION OF CERTAIN PERSONAL DATA

In cases where we process personal data about you as the result of a requirement under a contract or a requirement that must be fulfilled to enter into a contract with you, you are obligated to give us the new personal data we must use to comply with our obligations under the agreement. If you do not give us the data that we require to comply with our obligations under the agreement, the consequence may be that we cannot carry out your purchase. If you want more information on these considerations, you may contact us as indicated in section 1.



4. RECIPIENTS OF PERSONAL DATA

4.1 Data regarding your name, address, email, and telephone number, as well as the order number and specific delivery requests are passed on to the entities that carry out the delivery of the purchased products to you.

4.2 Personal data may be passed on to public authorities if we are obligated to do so by law or to the police in case of suspicion of a breach of law or as part of an investigation into breaches of law. Data about a purchase, including who has carried out the purchase and where the product is delivered, may be passed on to a payment card issuer if the cardholder has stated that the card has been misused in connection with the specific purchase.

4.3 We use service providers and data processors that carry out work on our behalf. These services may be, for example, server hosting and system maintenance, analysis, payment solutions, address and solvency checks, email service, etc. These business partners may gain access to personal data to the extent that is necessary to deliver their services. Partners will be contractually obligated to process all data with strict confidentiality, and they are therefore not permitted to use data for purposes extending beyond their contractual obligations to us. We check that our partners comply with their obligations about data processing. If we pass on your data to a service provider or data processor outside the EU, we make sure that they comply with the requirements imposed by legislation for such transfers.

4.4 Two data processors outside of the EU are Google LLC and Facebook Inc., founded in the United States.



5. YOUR RIGHTS

5.1 To create transparency regarding the processing of your data, we, as data controllers, must inform you about your rights. If you want to exercise your rights, you may contact us. You can find our contact details in section 1.

5.2 The right of access
5.2.1 You have the right to be informed about what data we have recorded about you, what the purpose of recording is, the categories of the personal data and any recipients of data, as well as information about where the data is from. You also have the right to receive a copy of this information.

5.3 The right to rectification
5.3.1 You have the right to have inaccurate personal data about yourself corrected.

5.4 The right to erasure
5.4.1 In some cases you have the right to have all or some of your data deleted by us, for example, if you withdraw your consent, and we do not have another legal basis for continuing the processing. To the extent that continuing to process your data is necessary, for example, so that we can fulfil our legal obligations, or so that a legal claim can be determined, exercised or defended, we are not obligated to delete your data.

5.5 The right to restrict processing of storage information
5.5.1 In some cases, you have the right to have the processing of your data limited to storage only. In this case, we may only process the data with your consent or to determine, exercise or defend a legal claim.

5.6 The right to data portability
5.6.1 In some cases, you have the right to receive personal data, which you have given yourself, provided in a structured, commonly used and machine-readable format, and have the right to transfer this data to another data controller.

5.7 The right to object
5.7.1 At any given time, you have the right to object to our processing of your data for direct marketing, including the profiling that might be carried out to better target our marketing activities. At any given time, for reasons regarding your situation, you also have the right to object to the processing of your data that we carry out based on our legitimate interests, as mentioned in section 3.

5.8 The right to withdraw consent
5.8.1 At any given time, you have the right to withdraw consent that you have given to us for a given processing of personal data. You can do so by contacting us using the contact information indicated above in section 1. If you choose to withdraw your consent, this will not affect the level of activity of our processing of your data based on the consent you gave previously and up to the time of withdrawal. Therefore, if you withdraw your consent, it does not take effect until this time.

5.9 The right to complain
5.9.1 At any given time, you have the right to complain to the Spanish Data Protection Agency if you are dissatisfied with how we process your data. You can find a complaint form and contact information at https://www.aepd.es/es.



6. ERASURE OF PERSONAL DATA

6.1 Data collected on your usage of our website, cf. section 2.1, is deleted when the cookie expires after two years. You can read more about this in our cookie policy.

6.2 Data collected in connection with your subscription to our newsletter, cf. section 2.3, is deleted when your consent to the newsletter is withdrawn unless we have another basis for processing the data. However, we can keep documentation of your consent for two years after the last time we sent electronic marketing to you. After unsubscribing from our newsletters, the statistical data on your use of the newsletter will be anonymized without the possibility of later de-anonymization.

6.3 Data about you is kept for a longer period if we have a legitimate need for longer storage, for example, if it is necessary for a legal claim can be determined, exercised or defended, or if storage is necessary to fulfil statutory requirements. Accounting records are stored for five years until the end of a financial year.

6.4 Comments or reactions (likes, etc.) that the data subject himself or herself has made on our social media pages are not deleted until the data subject removes his or her comments and/or reactions.