Pursuant to the terms of Act 15/1999 of 13th December, governing the Protection of Personal Data, of Regulation (UE) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), Eventia  Ltd, proprietor of Exquisito brand, hereby informs you that this Privacy Policy outlines our continued commitment to protecting the privacy of individuals who visit www.exquisitobox.com website, register and use our service as a subscriber and end users accessing information built on our platform:

Object

The provider, responsible for the website, issues the following document so as to observe the obligations established in Act 34/2002, on Information Society Services and Electronic Commerce (LSSI-CE), as well as to inform users of the terms and conditions of use of the website.

Persons accessing this website accept the role of user and undertake to observe and comply with the terms hereby established, as well as with any other applicable statutory provisions.

The provider reserves the right to modify any information in the website, without being bound to give prior notice or to notify the users about these obligations. In this regard, the publication of information on the website shall be considered sufficient.

Information collectedPursuant to Art. 5 of the aforementioned Act 15/1999, we inform you that the data recorded in the forms will be stored by Eventia Ltd, who guarantees the security measures established by the law.

Visitors to the site are informed that access and consultation of the site involves the automatic registration of the following data:

• internet domain and IP protocol
• type of browser and operating system of the computer used;
• date, time and permanence on the site;
• pages visited;
• any search engine from which you entered the site.

The following information is collected in the registration, cart checkout and contact forms:

• Billing Info: First Name, Last Name, Full Address, Email address, Phone number, Credit card information, as well as certain related information like your Company name and address (if applicable), when you register for an account to make purchases from our websites.
• Shipping Info: First Name, Last Name, Full Address, Email address, Phone number.

A third-party is used to manage credit card processing. This 3rd party (PayPal) is not permitted to store, retain, or use your billing information for any purpose except for credit card processing on our behalf.

How We Use Information That We Collect

General Uses:

We may use the information we collect about you (including personal information, to the extent applicable) for a variety of purposes, including to:

• (a) provide, operate, maintain, improve, and promote the Services;
• (b) enable you to access and use the Services;
• (c) process and complete transactions, and send you related information, including purchase confirmations and invoices;
• (d) send transactional messages, including responses to your comments, questions, and requests; provide customer service and support; and send you technical notices, updates, security alerts, and support and administrative messages;
• (e) send promotional communications, such as providing you with information about products and services, features, surveys, newsletters, offers, promotions, contests, and events; and provide other news or information about us and our partners. You can opt-out of receiving marketing communications from us by contacting us at info@exquisitobox.com or following the unsubscribe instructions included in our marketing communications;
• (f) process and deliver contest or sweepstakes entries and rewards;
• (g) monitor and analyze trends, usage, and activities in connection with the Websites and Services and for marketing or advertising purposes;
• (h) investigate and prevent fraudulent transactions, unauthorized access to the Services, and other illegal activities;
• (i) personalize the Websites and Services, including by providing features or advertisements that match your interests and preferences; and
• (j)   for other purposes for which we obtain your consent.

Legal Basis for Processing (EEA only):

• If you are an individual from the European Economic Area (EEA), our legal basis for collecting and using the personal information will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where:
• (a) we have your consent to do so,
• (b) where we need the personal information to perform a contract with you (e.g. to deliver the Our Services you have requested), or
• (c) where the processing is in our or a third party’s legitimate interests (and not overridden by your data protection interests or fundamental rights and freedoms). In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.
• Where we rely on your consent to process the personal information, you have the right to withdraw or decline your consent at any time. Please note that this does not affect the lawfulness of the processing based on consent before its withdrawal.
• If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). Similarly, if we collect and use your personal information in reliance on our (or a third party’s) legitimate interests which are not already described in this Notice, we will make clear to you at the relevant time what those legitimate interests are.
• If you have any questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided further at the bottom of the document.

Sharing Of Information Collected

• Third-Party Service Providers:

We share information, including personal information, with our third-party service providers that we use to provide hosting for and maintenance of our Websites, application development, backup, storage, payment processing, analytics and other services for us. These third-party service providers may have access to or process your personal information for the purpose of providing these services for us. We do not permit our third-party service providers to use the personal information that we share with them for their marketing purposes or for any other purpose than in connection with the services they provide to us.We refer to any information described above as “Account and Profile Information” for the purposes of this Policy. By voluntarily providing us with Account and Profile Information, you represent that you are the owner of such personal data or otherwise have the requisite consent to provide it to us.

Compliance with Laws and Law Enforcement Requests; Protection of Our Rights.

In certain situations, we may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. We may disclose personal information to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims. We may also share such information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Service Agreement, or as otherwise required by law.

Community Forums

The Websites may offer publicly accessible blogs, community forums, comments sections, discussion forums, or other interactive features (“Interactive Areas”). You should be aware that any information that you post in an Interactive Area might be read, collected, and used by others who access it. To request removal of your personal information from an Interactive Area, contact us at info@exquisitobox.com. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why.

Communications Preferences

We offer those who provide personal contact information a means to choose how we use the information provided. You may manage your receipt of marketing and non- transactional communications by clicking on the “unsubscribe” link located on the bottom of our marketing emails or you may send a request to info@exquisitobox.com

How Long We Retain Your Personal Information

We will retain your personal information for as long as is needed to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

For personal information that we process on behalf of our Subscribers, we will retain such personal information in accordance with our internal Data Retention Policy.

Your Privacy Rights

Eventia Ltd  is strongly committed to fulfil regulations regarding personal data protection and guarantees full compliance with legal obligations, as well as with the implementation of the security measures put forward on the Protection of Personal Data (LOPD) and in the Regulation for the Development of LOPD.

Upon request we will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. To request this information please contact us at info@exquisitobox.com Subscribers/Members to our Services may update or change their Account and Profile Information by editing their profile or by contacting info@exquisitobox.com for more detailed instructions. To make a request to have personal information maintained by us returned to you or removed, please email info@exquisitobox.com. Requests to access, change, or remove your information will be handled within thirty (30) days.

An individual who seeks access to, or who seeks to correct or, amend inaccuracies in, or delete personal information stored or processed by us on behalf of a Subscriber should direct his/her query to the Subscriber (the data controller). Upon receipt of a request from one of our Subscribers for us to remove the data, we will respond to their request within thirty (30) days. We will retain personal information that we store and process on behalf of our Subscribers for as long as needed to provide the Services to our Subscribers. We will retain and use this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

The security of your personal information is important to us. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. If you have any questions about the security of your personal information, you can contact us at info@exquisitobox.com

If you are a Subscribe or otherwise provide us with personal information in connection with your use of our Websites or Services, we will delete this information upon your request, provided that, notwithstanding such request, this information may be retained for as long as you maintain an account for our Services, or as needed to provide you with our Services, comply with our legal obligations, resolve disputes and enforce our agreements.

Children’s Personal Information

We do not knowingly collect any personal information from children under the age of Adult Consent, however that age is defined in your locality or region of the world according to local legislation or International Law. Should a regional, local law exist on adult consent, then it is accepted that the age of consent in your locale is 16 (sixteen) years of age. If you are under the age of adult consent, please do not submit any personal information through our Websites or Services. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide personal information through the Websites or Services without their permission. If you have reason to believe that a child under the age of adult consent has provided personal information to us through the Websites or Services, please contact us at info@exquisitobox.com and we will use commercially reasonable efforts to delete that information.

International Transfer of Information Collected

We primarily store personal information about Website Visitors and Subscribers within the European Economic Area (the “EEA”), the United States and in other countries and territories. To facilitate our global operations, we may transfer and access such personal information from around the world, including from other countries in which Our has operations for the purposes described in this Policy.

Whenever Eventia Ltd. shares personal information originating in the European Economic Area (EEA) with companies  entity outside the EEA, it will do so on the basis of its approved binding corporate rules known as Our Service Agreement, which establish adequate protection of such personal information and are legally binding on Eventia Ltd.

If you are visiting our Websites from the EEA or other regions with laws governing data collection and use, please note that you are agreeing to the transfer of your personal information to the United States and other jurisdictions in which we operate. By providing your personal information, you consent to any transfer and processing in accordance with this Policy.

If you are visiting our Websites from the EEA or other regions with laws governing data collection and use, please note that by providing this personal information, you acknowledge that your personal information may be transferred to the United States and other jurisdictions in which we operate.

Responsibility

The website provider will not be held responsible for any information on the website which may have been posted or manipulated by third parties unrelated to the former.

The client’s website may be redirected to contents of third websites. Considering that the provider cannot always control the contents posted by third parties on their own websites, the former will not assume any responsibility regarding those contents. In any case, the provider guarantees that any contents contravening national or international legislation, moral standards or public order, shall be immediately deleted. In addition, redirection to those websites will be cancelled and the contents will be reported to the competent authorities.

The provider will not accept responsibility for the information and the contents stored, included but not limited to, in chats, forums, blog generators, comments, social media or any other media with allows third parties to publish contents independently in the provider’s webpage. However, and pursuant to articles 11 and 16 of the LSSI-CE, the provider will be made itself available to all the users, authorities and security agencies, and will take an active role in removing or blocking all the contents which may affect or contravene national and international regulations, third party rights, moral standards or public order. We ask users to report the presence of such contents to the administrator of the website immediately.

This website has been reviewed and tested for correct operation. In principle, the site is guaranteed to run 365 days a year, 24 hours a day. However, the provider cannot rule out the possibility of programming errors, or force majeure incidents, such as natural disasters, strikes or similar circumstances which could make access to the website impossible.

Business Transactions

We may assign or transfer this Policy, as well as your account and related information and data, including any personal information, to any person or entity that acquires all or substantially all of our business, stock or assets, or with whom we merge or with whom we may delegate operations on our behalf or to whom we delegate the use of Exquisito brand.

Changes to This Policy

If there are any material changes to this Policy, you will be notified by our posting of a prominent notice on the Websites prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of the Websites or the Services constitutes your agreement to be bound by such changes to this Policy. Your only remedy, if you do not accept the terms of this Policy, is to discontinue use of the Websites and the Services.

Intellectual or industrial property

The website, including but not limited to, its programming, editing, compilation and the rest of the elements required for its operation, as well as the designs, logos, text and/or graphics belong to the provider or have been authorised for publication and use by their rightful owners. All the contents of the website are duly protected by intellectual and industrial property regulations, as well as registered in the relevant public registers.

Regardless of their original purpose, partial or total reproduction, use, exploitation, distribution, and commercialisation of these contents require, in any case, previous written consent of the provider. Any unauthorised use will be considered a severe breach of the rights of industrial or intellectual property of the author.

The designs, logotypes, text and/or graphics published on the website and not belonging to the provider are property of their respective owners, who will be held responsible for any controversy arising from their use. In any case, the provider has previously and explicitly been authorised by the owners to use them.

The provider acknowledges the relevant intellectual and industrial rights of the owners. The sole mention or showing of these contents on the website does not entail any right or responsibility of the provider over them, neither its supporting, sponsoring or recommending such contents.

You can exercise your rights to make comments regarding any possible breach of the rights of intellectual or industrial property, as well as of any other contents of the website at the following email address info@exquisitobox.com.

Contact Us

If you have questions regarding this Policy or about the Exquisito brand and Eventia Ltd privacy practices, please contact us by email at info@exquisitobox.com.