Privacy policy

Privacy Policy

At C'est Nous World, S.L. (hereinafter referred to as "C'est nous"), we are committed to providing you with full transparency regarding the handling of your personal data that you share with us when interacting with our website https://cestnous.co/es (hereinafter, the "Website"). Hereinafter, you will be referred to as the "User."

By contacting us via email at hello@cestnous.co, subscribing to our newsletter through the designated section on the Website, registering as a User, or making a purchase as a guest, you expressly accept the terms of this Privacy Policy. As a User, you warrant that all personal information provided is truthful, accurate, complete, and up-to-date, and you shall be solely responsible for any damages, whether direct or indirect, that may arise from the breach of such obligation.

Pursuant to Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation, hereinafter "GDPR"), we hereby provide you with information regarding the processing of your personal data. We kindly ask you to read the following information carefully.

1. Purposes of Data Processing

By voluntarily providing your personal data during any of the aforementioned activities, whether as a guest or as a registered account holder, you expressly consent to the processing of your personal data by C’est nous, whose registered address is Paseo Lugaritz 23, Bajo, 20018 Donostia – San Sebastián (Spain), for the following purposes:

To manage your inquiries or communications sent via email to hello@cestnous.co.
To send you our newsletter.
To manage your relationship with us as a customer, including the creation of a User account and the shipment of your orders.

2. Legal Basis for Data Processing

The legal bases for processing your personal data are as follows:

Your express consent, provided when contacting us via email or subscribing to our newsletter.
The performance of a contract, in cases where you register as a User or make a purchase.
Compliance with legal obligations, where applicable.
Legitimate interest, for instance, when sending marketing communications to existing customers, in accordance with applicable regulations.

3. Data Recipients

Your personal data will not be disclosed to third parties unless:

It is legally required; or
You have provided your explicit consent.

In order to deliver our services effectively, we may engage third-party service providers (e.g., courier companies, hosting partners) who may process your data on our behalf. In such cases, we enter into the corresponding data processing agreements with these providers, ensuring their compliance with applicable data protection regulations, particularly regarding the implementation of appropriate security measures.

4. International Data Transfers

C’est nous does not transfer your personal data outside the European Economic Area ("EEA").
However, should any of our service providers be located outside the EEA, we ensure that they provide adequate safeguards as required under the GDPR, such as the use of Standard Contractual Clauses or adherence to binding corporate rules.

5. Data Retention Period

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, and as required for the establishment, exercise, or defense of legal claims.

Specifically:

Data will be retained while you maintain a relationship with us through the Website.
Data may be stored for up to six (6) years following your last expression of interest.
You may request the deletion of your account at any time, after which your data will be securely blocked and only retained where legally required.

6. Data Security

We are committed to implementing the necessary technical and organizational measures to safeguard your personal data from unauthorized access, alteration, loss, or disclosure, in accordance with the GDPR and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.

While we strive to ensure the security of your data, please be aware that no system is entirely infallible when it comes to internet security.

Your own role is also critical in maintaining the security of your personal data. You are responsible for safeguarding your login credentials and must not share your password with third parties.

7. Your Rights as a Data Subject

You may exercise the following rights in relation to your personal data, free of charge:

Right of Access: Obtain confirmation as to whether we are processing your personal data and access such data.
Right to Rectification: Request the correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): Request the deletion of your data under certain circumstances.
Right to Restrict Processing: Request the restriction of data processing under certain conditions.
Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another data controller.
Right to Object: Object to the processing of your data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Requests may be submitted in writing, accompanied by a copy of an official identification document, to hello@cestnous.co or by postal mail to Paseo Lugaritz 23, Bajo, 20018 Donostia – San Sebastián, Spain.

Additionally, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es/.

8. Amendments to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect legal, regulatory, or operational changes, or to reflect industry best practices. Any modifications will be communicated to Users via the Website.

We recommend reviewing this Privacy Policy periodically to stay informed about how we are protecting your information.