1.- Who is responsible for processing your data?
The controller responsible for processing your personal data is DECO ONLINE S.L., trading under the OfficeChair365 brand, with Spanish tax identification number B-65686651 and registered office at Carretera de Barcelona, 30-40, 1.º 1.ª, Ronda Sur, 08210 Barberà del Vallès, Barcelona, Spain.
For any question relating to the processing of your personal data, you may contact OfficeChair365 at [email protected].
2.- What personal data do we process and how do we obtain it?
OfficeChair365 may process the following categories of personal data, depending on the services used by the User:
-
Identification and contact details, such as first name, surname, postal address, email address and telephone number.
-
Account, access and preference data associated with registration as a customer.
-
Data relating to orders, purchased products, invoicing, payment, delivery, returns, warranties and incidents.
-
Data included in enquiries, requests or communications with customer service.
-
Data relating to marketing preferences where the User has authorised the sending of commercial communications.
-
Technical and browsing data obtained through cookies or similar technologies, in accordance with the Cookie Policy.
The data is obtained directly from the User when they create an account, place an order, request information, contact customer service, participate in a promotion or agree to receive commercial communications. Certain technical data may be collected automatically while browsing.
3.- Why do we process your data and what is the lawful basis?
Personal data may be processed for the following purposes:
3.1 Account and order management
Managing the User’s registration, processing orders, managing payments, arranging delivery, handling returns, warranties and incidents, and providing customer service. The lawful basis is performance of the contract or taking steps at the User’s request before entering into a contract.
3.2 Compliance with legal obligations
Issuing and retaining invoices, maintaining accounting records, complying with tax obligations and responding to requests from public authorities and competent bodies. The lawful basis is compliance with the legal obligations applicable to DECO ONLINE S.L.
3.3 Handling enquiries and requests
Responding to enquiries, requests for information or communications sent by the User. Depending on the circumstances, the lawful basis is taking steps before entering into a contract, performance of the contract or the legitimate interest of OfficeChair365 in properly responding to requests received.
3.4 Security and fraud prevention
Protecting the Website, User accounts and transactions, preventing misuse or fraud and managing potential complaints. The lawful basis is the legitimate interest of DECO ONLINE S.L. in ensuring the security of its systems, services and transactions, as well as compliance with applicable legal obligations.
3.5 Marketing communications and newsletter
Sending marketing information, news, promotions and communications relating to the products and services of OfficeChair365 where the User has authorised this. The lawful basis is consent, which may be withdrawn at any time.
3.6 Cookies and browsing analysis
Using technical cookies that are necessary for the operation of the Website and, where authorised by the User, analytics, advertising or personalisation cookies. Detailed information is provided in the Cookie Policy.
Information marked as mandatory in forms is required to process the relevant request or provide the requested service. If it is not provided, OfficeChair365 may be unable to manage the registration, order or requested service.
4.- Who may receive your data?
Personal data will not be disclosed to third parties unless this is necessary to provide the requested service, required by law or supported by another valid lawful basis.
In particular, the following recipients may access or receive the data where necessary:
-
Transport and logistics companies responsible for delivering or collecting products.
-
Banks, payment service providers and finance companies selected by the User.
-
Technology, hosting, maintenance, communications, security, business management and customer service providers supplying services to DECO ONLINE S.L.
-
Advisers, auditors, insurers and other professional service providers where necessary to manage the relationship or potential liabilities.
-
Public authorities, courts and competent bodies where required by law.
Some technology providers may be located outside the European Economic Area or process data from other countries. Where international transfers take place, DECO ONLINE S.L. will apply the safeguards required by applicable law, such as European Commission adequacy decisions, standard contractual clauses or other legally valid mechanisms.
5.- Data retention
Personal data will be kept only for as long as necessary to fulfil the purpose for which it was collected and afterwards for the applicable legal periods in order to address potential liabilities.
In particular:
-
Data relating to orders, invoicing, payments, deliveries, returns and warranties will be retained during the contractual relationship and for the periods required by commercial, tax and consumer protection law.
-
Customer account data will be retained while the account remains active and, after closure, for the periods required to address potential liabilities.
-
Data relating to enquiries and incidents will be retained until they have been resolved and afterwards for the applicable legal periods.
-
Data used for marketing communications will be retained until the User withdraws consent or unsubscribes.
-
Data obtained through cookies will be retained for the periods stated in the Cookie Policy.
Where appropriate, data will be restricted and remain available only for compliance with legal obligations, claims or liabilities.
6.- The User’s rights in relation to their data
The User may exercise the following rights:
-
Access their personal data.
-
Request correction of inaccurate or incomplete data.
-
Request erasure of their data where applicable.
-
Request restriction of processing.
-
Object to the processing of their data.
-
Request data portability where applicable.
-
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
-
Not be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect them, where provided by law.
These rights may be exercised by sending a request to [email protected], stating the right you wish to exercise and the information required to locate your data, or by post to:
DECO ONLINE S.L.
N.I.F. B-65686651
Carretera de Barcelona, 30-40, 1.º 1.ª, Ronda Sur, 08210 Barberà del Vallès, Barcelona, Spain
As a general rule, it is not necessary to provide a copy of an identity document. Where there are reasonable doubts about the identity of the applicant, additional information strictly necessary to verify identity may be requested.
The User also has the right to lodge a complaint with the Data Protection Commission (DPC) if they believe that the processing of their personal data does not comply with applicable law or that the exercise of their rights has not been properly handled.
7.- Accuracy of data and children
The User guarantees that the personal data provided is true, accurate and up to date and agrees to report any changes. Where the User provides another person’s data, they must be authorised to do so and must inform that person about the processing of their data.
The Website is not specifically directed at children. Children must not provide personal data or make purchases without the authorisation of their parents or legal guardians.
8.- Data security
DECO ONLINE S.L. applies appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, use or disclosure, taking into account the nature of the data, existing risks and the state of the art.
However, no internet security measure can guarantee absolute protection. The User must keep their access credentials confidential and notify OfficeChair365 of any unauthorised use of their account or any security incident of which they become aware.
9.- Links to third-party websites
The Website may contain links to third-party pages or services. DECO ONLINE S.L. does not control their privacy policies or the way those third parties process personal data. Users are advised to review the privacy information on each external page before providing their data.
10.- Changes to the Privacy Policy
DECO ONLINE S.L. may amend this Privacy Policy where necessary to reflect legal, technical or operational changes or changes in the processing activities carried out. The version in force will be the version published on the Website.
Where changes are relevant to Users’ rights or interests, Users will be informed through appropriate means.
11.- Questions and contact
For any question about this Privacy Policy or the processing of your personal data, you may contact OfficeChair365 at [email protected].
























