Privacy Policy

MirWorld S.L. is fully committed to complying with Spanish and European regulations on the protection of personal data and to ensuring full compliance with the obligations established, as well as the implementation of the security measures detailed in the General Data Protection Regulation (GDPR) (EU) 2016/679, of 27 April, and in Law 3/2018, of 5 December, on Data Protection and Digital Rights (LOPD and GDD, hereinafter LOPD).

Pursuant to said regulations, you are informed that the use of our website may require the collection of certain personal data through contact forms, or by sending emails, which will be processed by MirWorld, Data Controller, whose data are as follows:

Company name: MirWorld S.L.
Commercial name: MirWorld
Tax Identification Number: B76568054
Registered Office: Avenida Profesor Peraza de Ayala (las Palmeras), 3 – LOC, Santa cruz de Tenerife, 38001 , Tenerife, Canarias, España
E-mail: info@mirworld.eu

Collection and processing of personal data
 

Personal data is any information relating to a person: name, e-mail address, postal address, telephone number, tax identification number, etc. Additionally, when the user visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by the User’s Internet service provider.

MirWorld S.L., as Data Controller, must adequately inform the users of this website about the collection of personal data that can be carried out, either by sending an email or by filling out the forms included on the website.

Only the data necessary to perform the contracted service, or to respond appropriately to the request for information made by the user will be collected. The data collected are of an identifying nature and correspond to a reasonable minimum necessary to carry out the requested activity. Specifically, no specially protected data are collected at any time. In any case MirWorld S.L. will use the data obtained for purposes other than those agreed with the user.

Contact form/e-mail address
 

Purpose: To respond to the User’s request for information made through our contact form(s).
Legitimation: The legal basis that legitimizes this form of treatment is the consent of the User, which may be withdrawn at any time.
Transfer of data: WordPress will process the data through its servers; it will do so in its capacity as Data Processor.

Newsletter
 

Purpose: Sending commercial correspondence of interest to the user. As established by the LSSICE, MirWorld S.L. undertakes not to send commercial correspondence without identifying it as such. For these purposes, information sent to customers for the maintenance of the existing contractual relationship will not be considered as commercial correspondence.
Legitimation: The legal basis that legitimizes this form of treatment is the consent of the User, which may be withdrawn at any time.
Data transfer: WordPress will process the data through its servers; it will do so in its capacity as Data Processor.

Customer registration/enrollment forms
 

Purposes:
-To manage your user registration on our website.
-Manage the purchases made.
-Provide information on the processing and status of purchases.
-Maintain a history of purchases made on our website.
-To manage comments and contents.

To send correspondence by email and/or communicate by telephone in order to inform the User of possible incidents, errors, problems and/or the status of orders.

Legitimation: The legal basis that legitimizes this form of processing is the execution of a contract.
Transfer of data: MirWorld S.L. will not transfer or communicate your data to third parties, unless required by law or when the provision of a service involves the need for a contractual relationship with a processor. Thus, the User accepts that some of the personal data collected are provided to such processors (payment platforms, managers, intermediaries, etc.) when necessary for the effective development of a contracted service or product purchased. Likewise, the User accepts that any of the services may be totally or partially subcontracted to other persons or companies, who will be considered as Data Processors, with whom the corresponding confidentiality agreement has been signed, or who adhere to their privacy policies, as established in their respective web pages.

The user may object to this transfer of his/her data to the Data Processors by sending a written request through any of the aforementioned means.

In addition, in some cases where necessary, customer data may be transferred to certain agencies in compliance with a legal obligation: Spanish Agency of Tax Administration, banks, Labor Inspectorate, etc..

Minimum age restriction
 

Only persons over 14 years of age may provide their personal data on this website. As required by the Organic Law on Data Protection and Guarantee of Data Rights, in the case of children under 14 years of age, the consent of their parents or guardians will be a mandatory condition for us to process their personal data.

On the other hand, only those over 18 years old will be able to contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

User Registration – Passwords
 

When the user registers through the corresponding form, the information we collect is as follows
– First and last name
– E-mail address and/or telephone number
– Mailing address
– IP address

Username/password
 

In addition, the user must agree to the terms and conditions. Passwords can be chosen by the user. They don’t expire. To recover his password, the user must use the specific form provided for this purpose and enter his e-mail address.

Once registered, the user will have access to a private panel where he/she will be able to see certain contents, a record of purchases made, etc. He/she will also be able to manage account options, such as his/her password or data.

The user may receive the following notifications:
– When registering on the platform (account validation email).
– When making purchases. Among them, the confirmation of the purchase, incidents, shipping, etc..

The user will receive the newsletter of our store if he/she has subscribed to it. The user will be able to unsubscribe from our newsletter through his user panel or the corresponding links included at the end of the newsletter.
-Ask customers for feedback by e-mail
-Send discount codes
-Recover your password (specified in the previous section).
-MirWorld S.L. will block a user account if the user commits suspicious or fraudulent actions.
-User accounts are not deleted for lack of use. To delete an account, the user must make a request to this effect through your user panel or by contacting us.

Security Measures

MirWorld S.L. informs users that we have adopted the necessary technical, organizational and security measures at our disposal to prevent the loss, misuse, alteration, unauthorized access or theft of data, and thus ensure the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current legislation on data protection. Personal data collected through the forms are processed exclusively by MirWorld S.L. staff or by designated data processors.

MirWorld S.L. website also has an SSL encryption system, which allows users to send their data securely through the contact forms on the website.

Truthfulness of the data

The user declares that all the information he/she provides is true and correct, and undertakes to keep it up to date. The user will be responsible for the veracity of his data and will be solely responsible for any disputes or litigation that may arise from its falsification. It is essential that, so that we can keep personal data updated, the user informs MirWorld S.L. whenever there has been any change in them.

How the user can exercise their rights

The LOPD and the GDPR give interested parties the possibility to exercise various rights related to the processing of their data. To do so, the user must contact us, providing a copy of the documentation proving their identity (ID card or passport), by email sent to welcome@mirworld.eu, or by written communication sent to the address indicated in our Legal Notice. Such request must also include the following information: name and surname of the user, request, address and supporting data.

The user must exercise these rights himself/herself. However, they may also be exercised by a person authorized as legal representative of the user, when the documentation proving such representation is provided.
 

The user may exercise the following rights:
 

The right of access to personal data, which is the right to obtain information on whether their data is being processed, the purpose of the processing being carried out, as well as the information available on the origin of such data and the communications made or planned for such data.
-The right of rectification, when the personal data is incorrect or inaccurate. Likewise, the user may request the deletion of data considered inadequate or excessive.
– The right to request the limitation of the processing of their data, in which case such data will only be retained by MirWorld for the exercise or defense of claims.
-The right of opposition: the user has the right to request that his or her data not be processed or that the processing cease in cases where his or her consent is not necessary for the processing. The user may object to commercial prospecting files or decisions relating to the data subject that are based solely on the automated processing of his or her data, unless further processing is necessary for legitimate reasons or for the exercise or defense of possible claims.
-Right to data portability: if the user wishes to have his/her data processed by another company, MirWorld will provide him/her with a portable copy of his/her data in an exportable format.

If the user gives consent for a specific purpose, he/she has the right to withdraw it at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

We undertake to enforce all these rights within the maximum legal period of 1 month.

If the user considers that there is a problem with the way in which MirWorld S.L. processes his data, he may contact our data protection officer or the relevant data protection authority. The Spanish Data Protection Agency (AEPD) is the supervisory authority in Spain.

Data Retention

The information requested from users’ personal data collected by the contact form or by e-mail will only be used strictly for the time necessary to fulfill the request for information, or until consent is withdrawn. The data of users who subscribe to our newsletter will be kept indefinitely until the consent given is withdrawn.

Customers’ personal data will be processed until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, and may be kept for:
– Four years: Law on Social Infringements and Penalties, related to obligations regarding affiliation, contribution, payment of wages; Arts. 66 et seq. General Tax Law (accounting).
– Five years: Art. 1964 of the Civil Code (personal actions without special term).
– Six years: Art. 30 of the Commercial Code, relating to accounting records and invoices.
– Ten years: Art. 25 of the Law on Prevention of Money Laundering and Financing of Terrorism.

No time limit: disaggregated and anonymized data.

The data of users who have subscribed to our newsletter will be kept indefinitely until the consent given is withdrawn.

Social networks

MirWorld S.L. has profiles on some of the major social networks in the world (Facebook, Instagram, LinkedIn), identifying itself in all cases as responsible for the processing of data of its followers, fans, subscribers, commentators and other user profiles (hereinafter followers) published by MirWorld S.L..

The purpose of the processing of data by MirWorld S.L., when not prohibited by law, will be to inform their followers of their activities and offers, by any means that the social network allows, as well as provide personalized service to the user. The legal basis for such treatment will be the consent of the person concerned, which may be revoked at any time.

In no case will MirWorld S.L. obtain data from social networks, unless the user grants consent to do so (for example, for the implementation of a contest).

International transfer of data
 

MirWorld S.L. uses the web hosting services of WordPress, a company located in the United States. This is an international transfer that does not comply with the security requirements of the European Commission.

The user expressly and unequivocally consents to the processing of his/her data and the international transfer of such data to partner companies and/or service providers.

Confidentiality
 

The information provided by the user shall, in any case, be considered confidential and may not be used for purposes other than those described herein. MirWorld undertakes not to disclose information about the user’s claims, the reasons for the information requested or the duration of its relationship with the user.

Term of validity
 

This privacy and data protection policy has been drafted by EXPERTOSLOPD®, data protection company, on September 9, 2020. It may vary depending on regulatory and jurisprudential changes. It is the responsibility of the owner of the data to read the updated document to know their rights and obligations in this regard at all times.