Privacy Policy

This privacy policy sets out how Nataliya Zhyhimont will process and protect your personal information that you may receive while using our services. This text will be presented in a transparent and understandable manner, how and through which channels we receive, process and use this information.

In addition, we provide you with several channels of communication which you can use if you have any questions regarding our processing of your personal data, thus having full control over the entire process.

Use of this site implies unconditional acceptance of the terms and conditions set out in this privacy policy, so we strongly recommend that you read this policy carefully before accepting these terms and conditions.

Nataliya Zhyhimont reserves the right to modify this privacy policy to adapt it to new legal conditions, if any, and new industry practices.

Since the user guarantees that the information he has provided is accurate, reliable and truthful and undertakes to update it in time, Nataliya Zhyhimont declines any responsibility for possible inaccuracies in the information provided by the user.

This website uses two languages, Spanish and Russian, and Nataliya Zhyhimont assumes no responsibility for the consequences of the user’s misunderstanding of the information due to insufficient language skills or incorrect translation of the text given here.

Warning for minors

In accordance with the current changes of regulations, we inform you that if the age of the user is less than 14 years, the mandatory condition is the consent of parents or guardians to the processing of personal data of a minor.

In no case may the data on the professional, economic or personal situation of any family member be obtained from a minor without their consent.

If you are less than 14 years old and have entered this site without prior notice to your parents, you must not register as a user.

Normative framework

Nataliya Zhyhimont has brought its website sandra-dolls.com in line with the requirements of the new Organic Law 3/2018 on the Protection of Personal Data and the Enforcement of Digital Rights (LOPDGDD).
Moreover, the website complies with the Regulation (UE) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals (RGPD) and with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.

The person responsible for the processing of your personal data

Individual entrepreneur with N.I.F.:X8405724-Y. You can contact the responsible person by phone 649394955 or by e-mail sandradolls.es@gmail.com.

The principles we apply to your personal information

When processing your personal data, we apply the following principles, which are consistent with the requirements of the new European regulations on the processing of personal data:

The principle of justice, loyalty and transparency. We always ask for your consent to the processing of your personal data if it is used for specific purposes, which we inform you about in advance.

The principle of data minimization. We only request the necessary data in strict accordance with the purposes for which it is required. We try to use a minimum amount of data.

The principle of data retention time limitation. The period of data storage is limited by the time necessary for their processing, in accordance with the purpose of their use. We inform you about the storage period of data. In the case of users, we periodically check our lists and delete registers that have been inactive for some time.

The principle of integrity and confidentiality. Your data is processed in such a way as to guarantee the necessary level of security as well as confidentiality. We take all necessary precautions to prevent unauthorized access to or use of our users’ data by third parties.

DATA COLLECTION: OBJECTIVES/LEGAL FRAMEWORK/TIME LIMITS

FORM OF COMMUNICATION / ENFORCEMENT OF RIGHTS
Objectives	Our agent will contact you to: process requests, answer your questions, consider complaints and comments about the services provided through our website.
Legal basis	The legal framework is of legitimate interest to answer your questions and address your complaints. In the event that an agent contacts you to resolve incidents related to your request, the legal basis will be the execution of the sales contract. In case of consultation regarding your rights, the legitimacy of the data processing is ensured by compliance with legal obligations on our part.
Storage Terms	The period of data storage in this case is unlimited: data will be stored until you exercise your right to withdraw it by using the available channels of communication.
Mandatory data	Name, phone number, email
Category	Identifying data
Assignment of rights	In some cases, there may be an assignment to a hosting company (see the assignment department).

COMMENT FORM
Objectives	Leave a comment about our products and services and publish it on our website.
Legal basis	The legal basis for processing your data in this case is your prior consent to the publication of your comment by accepting the terms of this privacy policy.
Storage Terms	The period of data storage in this case is unlimited: data will be stored until you exercise your right to withdraw it by using the available channels of communication.
Mandatory data	Name, phone number, email
Category	Identifying data
Assignment of rights	In some cases, there may be an assignment to a hosting company (see the assignment department).

RESERVATION FORM
Objectives	Managing reservation requests for various products offered on the site.
Legal basis	The legal basis in this case is your consent to implement the reservation, as well as the conclusion and implementation of the contract.
Storage Terms	Data retention period is 6 years in accordance with legal, tax and trade obligations. The data associated with your payment cards has an unlimited shelf life: it is stored until you request us to delete it, exercising our right to limit the use of your personal data.
Mandatory data	Name, phone number, email
Category	Identifying data
Assignment of rights	In some cases, there may be an assignment to a hosting company (see the assignment department). In some cases, rights may be assigned to banks and financial institutions (see the assignment department).

SUBSCRIPTION FORM (NEWSLETTER)
Objectives	Manage your subscription to our newsletter, which may contain offers, news and other information that we think may be useful to our customers. Keep in mind that processing this data may require an analysis of your user profile in terms of your preferences. Updates will be sent to you via electronic channels or regular mail.
Legal basis	The legal basis in this case is your consent to use them when implementing a subscription to our newsletter by ticking the appropriate box – your consent to the terms of this privacy policy.
Storage Terms	The retention period of your data in this case is unlimited: it is stored until you request us to delete it, exercising our right to limit the use of your personal data.
Mandatory data	E-mail.
Category	Identification data
Assignment of rights	In some cases, there may be an assignment to a hosting company (see the assignment department). In some cases, there may be an assignment to a hosting company (see the assignment department).

YOUR RIGHTS AND THEIR EXERCISE

Access right	To be informed about your personal data that we use.
Right to make amendments	You may edit, correct, update and supplement any of your personal data that you find inaccurate.
Right of cancellation	You can at any time request to remove your personal data from our system.
Right to Objection	You have the right to express your disagreement with the processing of your personal data, except in cases where the legal basis for this is based on a legitimate interest and the exercise or proceedings of possible claims.
The right to restrict data processing	You may request a restriction on the processing of your personal data. In this case, they will be saved only for the purpose of implementing or litigating claims.
Right to transfer data	In case it is technically possible, you may request the transfer of your personal data to another person responsible for its processing.

You can exercise your rights by sending an e-mail to sandradolls.es@gmail.com, indicating as a subject “Rights under the Data Protection Act” and confirming your identity through any official document.

Data privacy and security

We at sandra-dolls.com promise to always process your personal data strictly in accordance with the purposes for which we collect it and not to use it for other purposes, unless you give your consent.

Nataliya Zhyhimont has taken all the necessary organizational and technical measures to prevent the unauthorized use of your personal data both by the company itself and by third parties.

With regard to the confidentiality of your personal data, Nataliya Zhyhimont promises to take the necessary measures to guarantee that access to your personal data, both from the companies themselves and from partners and service providers, will be carried out in accordance with the necessary security requirements and the norms prescribed by the current legislation on data protection.

This site has an SSL certificate. It is a security protocol that provides complete and reliable processing of your data, in other words, the transfer of data between the service and the user, as well as feedback, fully encrypted and encoded.

Despite all the measures taken, Nataliya Zhyhimont cannot guarantee absolute security on the Internet and cannot completely rule out the possibility that confidentiality may be compromised in case of fraudulent actions by third parties. If there is a security breach, Nataliya Zhyhimont follows an incident notification protocol designed specifically for such cases

ASSIGNMENT OF RIGHTS TO THIRD PARTIES

In some cases, in order to fulfill the above described purposes, we have to provide our partners with access to your personal data.
All of them comply with legal requirements to guarantee an adequate level of security when processing your personal data, providing guarantees through the acceptance of contracts and certification:

Contractual provisions (contracts of those responsible for data processing)
Compliance with PrivacyShield certification requirements (for service providers in territories outside the European Economic Area whose legislation has lower requirements for data protection).

Technological services	Soluciones Corporativas Ip, S.L y	Hosting and maintenance of the site Hardware maintenance and system administration
Financial institutions		Management of payments, receipt and return of payment

You can contact us at any time to get more detailed information about our service providers through available channels.