Privacy

1. General information

The following information explains what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

Data processing is carried out in accordance with the General Data Protection Regulation (GDPR) as well as applicable Spanish data protection legislation.

2. Data controller

The data controller is:

Crystal Beautiful – Florian Faure
Ctra San Antonio, km 4.6
07816 San Rafel – Balearic Islands – Spain
E-mail: crystalbeautifulshop@gmail.com

3. Data collection

Certain data is collected when you voluntarily provide it to us, in particular:

when placing an order;
via the contact form;
by e-mail or telephone.

Other technical data may be automatically collected during your visit to the website, in particular:

IP address;
browser type;
device used;
date and time of access;
cookies.

4. Use of data

The collected data is used exclusively to:

process orders;
ensure the operation and security of the website;
respond to contact requests;
improve our services;
comply with our legal and tax obligations.

Personal data is never sold, rented, or disclosed to third parties for external commercial purposes.

It may only be shared with technical service providers necessary for the operation of the website or order processing (payment, delivery, hosting, technical tools).

5. Legal basis for processing

Data processing is based, depending on the case, on:

your consent;
the performance of a contract or pre-contractual measures;
our legal obligations;
our legitimate interest in ensuring the security and proper functioning of the website.

6. Cookies

The website uses cookies that are necessary for its proper functioning, as well as, where applicable, analytics or audience measurement cookies.

Non-essential cookies are only used after your consent.

You may change your browser settings at any time to manage or delete cookies.

7.Third-party tools and services

The website may use third-party services such as:

Google Analytics;
Google Ads;
YouTube;
Google Maps;
Google reCAPTCHA.

These services may collect certain technical data necessary for their operation, in particular IP address and browsing data.

Where required by law, these services are only used after obtaining your consent.

More information: Google Privacy Policy.

8. Data security

The website uses SSL/TLS encryption to secure data transmission.

Despite all implemented security measures, no data transmission over the Internet can be guaranteed to be completely secure.

9. Retention period

Personal data is stored only for as long as necessary:

for order processing;
for customer relationship management;
for compliance with legal and tax obligations.

10. Your rights

In accordance with the GDPR, you have the following rights:

right of access;
right to rectification;
right to erasure;
right to object;
right to restriction of processing;
right to data portability;
right to withdraw your consent at any time.

To exercise your rights, you may contact us at: crystalbeautifulshop@gmail.com

11. Complaint

You may lodge a complaint with the Spanish data protection authority:

Agencia Española de Protección de Datos