Privacy policy
Data Protection Officer
The owner is the responsible party of the personal data collected through browsing and use of this website, in accordance with the requirements set out in REGULATION (EU) 2016/679 on the protection of natural persons, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
By using this website, we understand that you have read and understood the information provided regarding the processing of your personal data.
Data Protection Policy
The responsible party applies the principle of proactive accountability in the processing of personal data, maintaining constant updates and promoting continuous improvement of the data protection system in accordance with applicable legal requirements, guaranteeing in all cases:
- Respect for the fundamental freedoms and rights of natural persons.
- That data is processed lawfully, fairly and transparently.
- That the data processed is accurate, adequate, relevant and limited in relation to the purposes for which it is collected.
- That the purposes for which it is collected are explicit and legitimate and that it is not processed in a manner incompatible with those purposes.
The purpose of this document is to inform users about what we do with their personal data, how it is collected, what it is used for, the rights they have, as well as all the legal information required under current legislation.
Data collected, purpose and lawfulness
The personal data processed is that provided by users through the forms available on this website and is the minimum required in order to:
- Send you information about our products/services.
- Respond to enquiries.
- Process orders, as well as prepare the corresponding invoices, provide information on order status, handle complaints and any other management arising from the provision of the service carried out through this website.
These purposes are based on lawful grounds for processing under current legislation: performance of a contract or provision of a service to users, compliance with legal obligations, legitimate interest and users’ consent.
Web forms
The personal data collected through the contact form is used to respond to any enquiry submitted by the user through it.
The personal data collected through the order form is used to process the data necessary for the proper management of orders.
The processing of data is legitimised by the consent you provide when you expressly accept the processing conditions set out in this privacy policy.
Data recipients
The personal data obtained through the web forms is recorded and stored on electronic media controlled and supervised by the responsible party.
Your personal data will not be shared with third parties, except where such disclosure is required by law or where, for the proper provision of the service or performance of the contract, it is necessary to disclose your data to third parties in order to process payment (payment gateways) and manage product deliveries (carriers), such disclosure being justified by service needs. For payment via other payment gateways, we recommend that the user read their privacy policy to understand how they handle personal information, for example:
- Redsys Servicios de Procesamiento, S.L. (“Redsys”), with registered office in Madrid, Calle Francisco Sancha, number 12, and tax ID (C.I.F.) B-85955367, which fully complies with current personal data protection legislation and with the confidentiality commitments inherent to its activity. Redsys has adopted the necessary technical measures to maintain the required level of security.
You can view its privacy policy at:
https://www.redsys.es/legal/20180223_politica_de_privacidad_web_publica_redsys.pdf
- PayPal (Europe) S.à.r.l. et Cie, S.C.A. (R.C.S. Luxembourg B 118 349), whose privacy policy sets out appropriate security measures for the proper processing of users’ personal data.
You can view its privacy policy at:
https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=es_ES#1
In cases where disclosure of data to third parties is not covered by the lawful bases set out in the previous section, data will only be disclosed to other recipients if the user has given their express consent.
Strict criteria are maintained for the selection of processors, along with a contractual commitment with each of them to comply with and enforce the obligations established in relation to data protection.
Where there are international data transfers, KATY ANN OAKES will ensure that the transfer of your personal data is carried out in accordance with applicable privacy laws and, in particular, that the necessary contractual, technical and organisational measures are applied, such as the standard contractual clauses approved by the European Commission.
You can obtain more information about the processing of personal data by our organisation by requesting it by email at: hello@foxeandmoone.com or by accessing it via the following link:
Technical and organisational data protection measures
The media used has the necessary technical and organisational measures to guarantee the confidentiality and preservation of the personal data obtained through the website.
Personal data collected via the website is processed using the HTML protocol with a valid SSL certificate.
Staff involved in data processing operations (access, editing, deletion, etc.) are qualified to do so, trained and committed to this data protection policy.
Data retention
Personal data obtained through the contact form will be retained for as long as necessary to deal with the request/enquiry made.
Personal data obtained through the order form will be retained while a contractual and/or commercial relationship exists with you, or until you exercise your right to erasure, cancellation and/or restriction of processing of your data.
Once the contractual relationship has ended, we will keep the information duly blocked, without using it, for as long as it may be necessary for the exercise or defence of claims, or if any judicial, legal or contractual liability may arise from its processing that must be addressed and for which its recovery is necessary.
If you have expressly agreed to receive commercial information, we will retain your contact details until you inform us that you wish to cancel such commercial communications.
Information on the existence of automated decisions (including profiling)
We do not normally make automated decisions, but if we do we will make it clear that such a decision is being taken. However, KATY ANN OAKES, with CIF/NIF Y5013022W, includes several sections dedicated to personalising services in order to display personalised advertising when you access the website and also for sending personalised communications.
KATY ANN OAKES, with CIF/NIF Y5013022W, acknowledges the possibility of profiling in order to improve its product offering or personalise the sending of commercial offers or provide a more personalised service to customers.
Objection to data being processed for advertising purposes
If you gave your consent for your data to be used for advertising purposes and you no longer wish to receive advertising, you may withdraw your consent at any time by sending an email to the responsible party at hello@foxeandmoone.com
Changes to the Privacy Policy
We may amend the information contained in this Privacy and Cookies Policy whenever we consider it appropriate. If we do, we will notify you through various means via the Platform (for example, via a banner, a pop-up or a push notification), or we will even notify you by email when the change in question is significant for your privacy, so that you can review the changes, assess them and, where appropriate, object or unsubscribe from any service or functionality. In any case, we suggest that you review this Privacy and Cookies Policy from time to time in case there are minor changes or we introduce any interactive improvements.