At Casa Lureto, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit or make a purchase through our webshop.
This Privacy Policy applies to the Casa Lureto webshop and related services.
1. Who We Are
The webshop and brand Casa Lureto are operated by:
Registered company name: Zorgverlener Elba
KVK number: 93502540
Registered address: Pupillenstraat 44 A, 3023 VV Rotterdam, The Netherlands
Email: info@casa-lureto.com
For the purposes of applicable data protection legislation, including the EU General Data Protection Regulation (GDPR), Zorgverlener Elba is the data controller responsible for your personal data.
2. What Personal Data We Collect
Depending on how you use our webshop, we may collect and process the following categories of personal data:
-
Contact information: such as your name, email address, telephone number, and billing or delivery address.
-
Order information: such as products purchased, order number, order value, delivery details, and transaction-related information.
-
Account information: if you create an account, such as your login details and account preferences.
-
Communication information: information you provide when contacting us, including the contents of your messages and customer-service communications.
-
Technical information: such as IP address, browser type, device information, operating system, and information about how you interact with our website.
-
Website and cookie information: information collected through cookies and similar technologies, depending on your cookie settings and the technologies used on our webshop.
We do not intentionally collect sensitive personal data unless this is necessary for a specific purpose and permitted by applicable law.
3. How We Collect Your Personal Data
We may collect personal data when you:
-
Visit or browse our webshop.
-
Create an account.
-
Place an order.
-
Subscribe to marketing communications.
-
Contact us by email or through our website.
-
Participate in promotions, competitions, surveys, or other activities.
-
Interact with our website using a device or browser.
Some information may also be collected automatically through Shopify and other service providers that help us operate, secure, analyse, and improve our webshop.
4. Why We Use Your Personal Data
We use personal data only where there is a lawful reason to do so. Depending on the circumstances, we may use your information to:
-
Process and fulfil your orders.
-
Process payments and refunds.
-
Arrange delivery of your purchases.
-
Communicate with you about your order or account.
-
Respond to customer-service enquiries.
-
Provide and maintain our webshop.
-
Prevent fraud, abuse, and other security incidents.
-
Maintain appropriate business and financial records.
-
Comply with legal and regulatory obligations.
-
Improve our products, services, webshop, and customer experience.
-
Send marketing communications where permitted by law and, where required, with your consent.
-
Measure and understand the use and performance of our webshop.
-
Personalise or improve your experience where permitted by applicable law.
5. Legal Bases for Processing
Under the GDPR, we process your personal data on one or more of the following legal bases:
Performance of a contract
We process information where this is necessary to enter into or perform our contract with you, such as processing and delivering an order.
Legal obligation
We may process information where necessary to comply with legal obligations, such as accounting, tax, consumer-protection, or other applicable legal requirements.
Legitimate interests
We may process information where this is necessary for our legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms. This may include operating, securing, improving, and protecting our webshop and business.
Consent
Where required, we will ask for your consent before processing your personal data for a particular purpose, such as certain forms of marketing or non-essential cookies. You may withdraw consent at any time.
6. Payments
When you place an order, payment information may be processed by third-party payment providers.
Depending on the payment method you choose and the payment services available through our webshop, your payment may be handled directly by a payment service provider. We generally do not have access to your complete payment-card details.
Payment providers process your information according to their own privacy policies and applicable data-protection requirements.
7. Shopify
Our webshop is operated using Shopify, which provides the e-commerce infrastructure that allows us to offer our products and services online.
Shopify may process personal data on our behalf or in connection with the operation of its services, including information relating to your visits, orders, accounts, and transactions.
Shopify may process personal data in countries outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, appropriate safeguards are used where required by applicable data-protection law.
For more information about how Shopify handles personal data, please consult Shopify's privacy documentation.
8. Sharing Your Personal Data
We may share personal data with trusted third parties where necessary to operate our business and provide our services.
These may include:
-
Shopify and technology service providers.
-
Payment service providers.
-
Shipping and delivery companies.
-
Warehousing and fulfilment providers.
-
IT, hosting, security, and technical service providers.
-
Customer-service providers.
-
Accounting, legal, and professional advisers.
-
Marketing, analytics, and advertising providers, where applicable and permitted.
-
Government authorities, regulators, courts, or law-enforcement bodies where we are legally required to do so.
We do not sell your personal data to third parties.
Where third parties process personal data on our behalf, we take appropriate steps to ensure that they process the data in accordance with applicable data-protection requirements.
9. International Data Transfers
Because we operate an online webshop and may use international service providers, your personal data may be processed in countries outside the European Economic Area (EEA), including countries that may have different data-protection laws.
Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer is lawful under applicable data-protection legislation. Depending on the circumstances, this may include an adequacy decision, Standard Contractual Clauses, or another legally recognised transfer mechanism.
10. How Long We Keep Your Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.
For example:
-
Order and transaction information may need to be retained to meet accounting, tax, legal, and financial obligations.
-
Customer-service communications may be retained for as long as necessary to handle the matter and maintain appropriate records.
-
Marketing information may be retained until you unsubscribe or withdraw your consent, where consent is the legal basis.
-
Technical and cookie information may be retained according to the relevant technology and our cookie settings.
When personal data is no longer required, we will delete it or anonymise it where reasonably possible.
We do not retain personal data longer than necessary for the relevant purpose, taking into account applicable legal retention requirements.
11. Cookies and Similar Technologies
Our webshop uses cookies and similar technologies to provide essential website functionality, remember preferences, understand how visitors use our website, and, where applicable, support marketing and advertising activities.
Some cookies are necessary for the operation and security of the webshop and cannot be disabled through our cookie settings.
Where required by law, we will ask for your consent before placing or using non-essential cookies.
You can manage your cookie preferences through the cookie-consent tools available on our website and through your browser settings.
Please note that disabling certain cookies may affect the functionality or availability of parts of the webshop.
12. Marketing Communications
If you subscribe to our marketing communications, we may use your email address to send you information about products, offers, news, or other Casa Lureto communications.
Where consent is required, we will only send such communications after receiving your consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our marketing emails or by contacting us at:
info@casa-lureto.com
Withdrawing your consent does not affect the lawfulness of processing that took place before you withdrew your consent.
13. Your Privacy Rights
Depending on your circumstances and applicable law, you may have the following rights:
-
Right of access: you may ask whether we process your personal data and request a copy.
-
Right to rectification: you may ask us to correct inaccurate or incomplete personal data.
-
Right to erasure: you may ask us to delete your personal data where there is no valid reason for us to continue processing it.
-
Right to restriction: you may ask us to restrict the processing of your personal data in certain circumstances.
-
Right to object: you may object to certain processing, including processing based on legitimate interests.
-
Right to data portability: in certain circumstances, you may ask to receive personal data you have provided to us in a structured, commonly used, and machine-readable format.
-
Right to withdraw consent: where we rely on your consent, you may withdraw it at any time.
-
Right to lodge a complaint: you have the right to lodge a complaint with a data-protection supervisory authority.
These rights are subject to applicable legal conditions and exceptions.
14. How to Exercise Your Rights
To exercise any of your privacy rights, please contact us at:
Email: info@casa-lureto.com
Please provide enough information for us to identify your request and verify your identity where reasonably necessary.
We will handle your request in accordance with applicable data-protection law.
15. Complaints
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve the issue.
As a company established in the Netherlands, you may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent data-protection supervisory authority.
You have the right to lodge a complaint with a supervisory authority if you believe that your personal data has been processed unlawfully.
16. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.
However, no method of transmission or electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of your personal data.
17. Children's Privacy
Our webshop is not intended to knowingly collect personal data directly from children where this is prohibited by applicable law.
If you believe that a child has provided us with personal data without the appropriate consent or legal basis, please contact us at info@casa-lureto.com so that we can take appropriate action.
18. Third-Party Websites
Our webshop may contain links to third-party websites, services, or platforms.
If you follow a link to a third-party website, that website will have its own privacy practices and policies. We are not responsible for the privacy practices or content of third-party websites.
We recommend reviewing the privacy policy of any third-party website you visit.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, webshop, services, technology, or applicable laws.
When we make changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data.
20. Contact Us
If you have any questions about this Privacy Policy or how we process your personal data, please contact us:
Zorgverlener Elba
Trading as Casa Lureto
Pupillenstraat 44 A
3023 VV Rotterdam
The Netherlands
KVK: 93502540
Email: info@casa-lureto.com
