PRIVACY POLICY & COOKIES

1 .DATA CONTROLLER

Data Controller: Olivia Mandle Navarro
Email: hello@oliviamandle.com

For the purposes of Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), the above entity is responsible for processing personal data collected through this website.

2. PURPOSE OF DATA PROCESSING

Personal data collected through this website is processed for the following purposes:

  • Managing product purchases and orders.

  • Processing payments.

  • Shipping products.

  • Providing customer support.

  • Sending newsletters and communications (where consent is given).

  • Complying with legal and tax obligations.

  • Ensuring website security and performance.

3. LEGAL BASIS

Processing is based on:

  • Contractual necessity (purchase of products).

  • User consent (newsletter, cookies).

  • Compliance with legal obligations.

  • Legitimate interest (security, fraud prevention).

4. PLATFORM AND PROCESSORS

This website is hosted on Squarespace, Inc., which provides the online e-commerce platform that allows us to sell our products and services.

Personal data may be stored through Squarespace’s data storage, databases, and general applications. Squarespace processes data as a data processor under GDPR.

Payment processing is handled by secure third-party payment providers integrated into Squarespace (e.g., Stripe, PayPal). We do not store full payment card details.

Shipping providers and IT service providers may also process data strictly for service performance.

Where international data transfers occur, they are carried out with appropriate safeguards in accordance with GDPR.

5. DATA COLLECTED

We may collect:

  • Name and surname.

  • Billing and shipping address.

  • Email address.

  • Telephone number.

  • Order details.

  • IP address and technical data.

  • Cookie identifiers.

We do not process special categories of personal data.

6. DATA RETENTION

Personal data will be retained:

  • For the duration of the contractual relationship.

  • As required by tax and accounting laws.

  • Until the user withdraws consent (newsletter).

  • For the legally established limitation periods.

7. DATA SHARING

We may share data with:

  • Payment service providers.

  • Shipping and logistics companies.

  • Hosting and IT service providers.

  • Public authorities where legally required.

Where data is transferred outside the European Economic Area, appropriate safeguards will be implemented in accordance with GDPR.

8. USER RIGHTS

Users have the right to:

  • Access their personal data.

  • Rectify inaccurate data.

  • Request erasure.

  • Restrict processing.

  • Object to processing.

  • Data portability.

  • Withdraw consent at any time.

Requests may be sent to: hello@oliviamandle.com

Users also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos – AEPD).

9. SECURITY

We implement appropriate technical and organizational security measures in coordination with Squarespace to protect personal data.

10. COOKIES

This website uses cookies. Users can find detailed information in the Cookies Policy section below.

11. MODIFICATIONS

We reserve the right to modify this Privacy Policy to comply with legal or operational changes. Updated versions will be published on this website.

COOKIES POLICY

1.WHAT ARE COOKIES

Cookies are small text files stored on your device when visiting a website. They allow the website to function properly and to collect information about user behavior.

2. TYPES OF COOKIES USED

This website uses the following categories:

a) Technical Cookies
Required for website functionality and cannot be disabled.

b) Analytics Cookies
Used to analyze user behavior and improve the website. These may include tools such as Google Analytics.

c) Marketing Cookies
Used to track users across websites to display relevant advertisements, where applicable.

3. THIRD-PARTY COOKIES

Some cookies are set by third-party services integrated into Squarespace, including:

  • Squarespace analytics tools.

  • Payment providers.

  • Embedded content (e.g., YouTube, Instagram).

  • Google Analytics.

These third parties may process data outside the European Economic Area with appropriate safeguards.

4. LEGAL BASIS

Technical cookies are based on legitimate interest.

Analytics and marketing cookies are installed only after obtaining user consent through the cookie banner.

5. CONSENT

When visiting the website for the first time, users are presented with a cookie banner allowing them to:

  • Accept all cookies.

  • Reject non-essential cookies.

  • Configure preferences.

Users may withdraw consent at any time via the cookie settings link available on the website.

6. RETENTION PERIOD

Cookies are retained for the time necessary to fulfill their purpose or until the user deletes them from their browser.

7. HOW TO MANAGE COOKIES

Users can configure or delete cookies through their browser settings.

8. MODIFICATIONS

We reserve the right to update this Cookies Policy in accordance with legal requirements.