1. Data Controller

The Data Controller corresponds to the owner of the website, whose full identification details appear in the legal notice.

2. Used data, purposes and storage period

2.1 Used data: The Data Controller will process the data provided by the user through the corresponding forms, such as the registration or purchase form. This includes identification and contact data (name, surname, postal address, e-mail address, telephone number) as well as relevant information derived from the purchase processes (such as payment tools, invoicing addresses or information relating to returns).

During browsing, data such as the IP address assigned by your provider or certain social profiles associated with the user may be provided.

2.2 Purposes: The purposes will be the following

  1. Contact: The e-mail address or telephone number provided for contact will be used for an effective response to the questions raised.
  2. Bulletins or newsletters: The email address, which must be verified by the user, will be used to send bulletins or newsletters, according to their interests.
  3. Online shop: the data will be used to process and manage the user’s registration into the shop and later processing of the order. The user will be able to decide whether to save the payment method information in order to use it as the default method in future purchases from our online shop.
  4. Order assessment mail: The data will be processed to motivate and encourage the customer to share and assess their experience with the products purchased. By agreeing to receive order review reminders during the purchase process at palaciodeoriente.net, the customer agrees to receive e-mails requesting feedback on the products purchased. These communications may include, among other things, customer satisfaction surveys, requests for comments on the purchase experience, requests for specific product ratings.
  5. Product review: The data provided will be processed exclusively to verify the validity of the opinion given. In addition, the e-mail address will be optional and will not be published.

2.3 Data storage period

The data storage period will be as follows

  1. Contact: The data provided will be destroyed once the questions posed by the user have been answered.
  2. Bulletins or newsletters: The data will be processed from the moment the user gives his/her consent until it is withdrawn, which may be given as many times as he/she wishes. In each communication, the user will be able to begin the process free of charge and in an accessible way.
  3. Online shop: The data will be processed, in compliance with Spanish accounting and tax regulations, for a period of up to four years.
  4. Order evaluation e-mail: The data will be processed from the moment it is received until the user completes the evaluation process of the products purchased or requests the cancellation of their data.
  5. Product sheet review: The data will be processed from the time the user gives his consent until his consent is withdrawn, which may be given as many times as he wishes.

3. Exercising rights

Any person has the right to obtain confirmation as to whether or not personal data concerning him/her is being processed. Data subjects have the right of access to their personal data, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. Data subjects have the right of access to their personal data, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, data subjects may request the limitation of the processing of their data or object to the processing of their data, in which case we will only keep them for the exercise or defence of claims.

To do so, users may contact us (i) by e-mail at rgpd@palaciodeoriente.net; or (ii) by letter addressed to Carretera de Vigo-Baiona 127. 36213 de Vigo, Pontevedra. Spain

In the event that you wish to exercise your right to portability, this data will be provided to the new Data Controller.

4. Legitimization of data usage

The legal basis of the data provided in the processing of contact, bulletins or newsletters is the consent given by the user. Consent is always revocable and may be withdrawn at any time. In the case of processing in the online shop, order evaluation mail and product sheet review, the legal basis is the execution of a contract to which the user is a party.

5. Recipients and transfers

The data will not be transferred to third parties, except where there is a legal obligation to do so. The Data Controller may rely on suppliers who offer adequate guarantees and with whom a Data Processor agreement has been signed in order to carry out the processing provided for in this Privacy Policy. No international transfers are foreseen.

6. Cookies, definition and functionality

What are cookies? A cookie is a small file downloaded to a computer or mobile phone device when the user accesses our website. Cookies allow us to, among other things, store and retrieve information about the user’s –or their device’s– browsing habits and, depending on the information contained and the way they use the computer, can be utilized to recognize the user.

What kind of cookies does our website use?

First-party cookies: these are the ones we send to the user’s computer or mobile phone device from our website.

Third-party cookies: these are sent to the user’s computer or mobile phone device from a domain or website that is not managed by us, but by another entity that uses the data obtained through the cookies (for example, Chat).

Session cookies: these cookies are designed to collect and store data while you browse our website.

Persistent cookies: this type of cookie continues to store data in the device and can be accredited and used during a specific period, which can range from a few minutes to several years.

Analysis cookies: these cookies, used either by us or by a third party, allow us to quantify the number of users and to carry out statistical analysis and measurements to learn about user behavior in our website. For this, we study browsing data in our web page to improve the offer of products and services we provide.

7. Cookie management

Users can restrict, block or delete Palacio de Oriente’s cookies, or the ones from any other website, through the browser. Each web browser operates differently, but the ‘Help’ section can be used to learn how to do it.

8. Active cookies

Strictly necessary cookies:

  • wordpress_logged_in_*, first-party, session cookie, to keep the user logged in,
  • wordpress_sec_*, 15 days, first-party cookie that provides protection against hackers and stores account details
  • wordpress_test_cookie, first-party, session cookie that checks if cookies can be placed
  • wp-settings-1, persistent, first-party cookie that stores user preferences
  • wp-settings-time-1, one year, first-party cookie that stores user preferences
  • wp-wpml_current_admin_language_*, one year, first-party cookie for language preferences
  • wp-wpml_current_language, one year, first-party cookie for language preferences
  • moove_gdpr_popup, one year, first-party, for cookie use preferences
  • tk_ai, first-party, session cookies for WooCommerce statistics

Marketing and analysis cookies:

  • _ga_*, _ga : Marketing and analysis cookies
  • _gat_UA-*, third-party, session cookies for Google Analytics statistics
  • _gid, one day, third-party cookie for Google Analytics statistics
  • _fbp, six months, third-party cookies for Facebook marketing and statistics
  • _gcl_au, persistent, third-party cookie for Google Adsense

9. Safeguarding data protection

The user can configure their browser to accept, or not, the cookies that are placed; or set the web browser to warn them when a server wants to store or delete a cookie from their computer. Users can find the instructions in their web browser’s safety settings. Examples: when using Microsoft Internet Explorer, select the Tools button > Internet Options > Privacy > Settings. When using Firefox, go to Tools > Settings > Privacy > Cookies. If the user has Google Chrome, they will be able to find it the Settings menu > Privacy. For Safari, in the Preferences option > Security. Users can always seek the ‘Help’ section, which can be found within most browsers’ tool bar, to change their computer’s settings. However, some of the features of our online services may not function properly, or may become more difficult to access if the user rejects all the cookies.

Many web browsers allow a private mode to be activated, where cookies are always deleted after the user’s visit. Depending on the web browser, this private mode may have different names. We have compiled a list below with the most common web browsers, and the names of their private mode: Internet explorer 8 and above: InPrivate; Firefox 3.5 and above: Private Browsing; Google Chrome 10 and above: Incognito; Safari 2 and above: Private Browsing; Opera 10.5 and above: Private Browsing. Users should read their browser’s ‘Help’ section carefully to learn more about how to activate the ‘private mode’.

The user will still be able to visit our Web, ever if their browser is in ‘private mode’. However, that means the user’s experience might not be optimal, and some features might not function properly. PALACIO DE ORIENTE would be grateful for users who agree to activate the cookies, which helps us obtain data that is more precise, and thus allowing us to improve the content and the design of our Web page, as well as to adapt it to user preferences.