Privacy Policy
Who is responsible for the processing of your data?
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), it is informed that the personal data provided through this website will be processed by:
Person in charge: LUMBRE Gallery / Marjorie Colas
Tax ID number: X9769160W
Address: 25 Infantas Street, 28004, Madrid.
Email: info@lumbregallery.com
Website: www.lumbregallery.com
From now on, THE GALLERY.
What personal data is processed through this website?
THE GALLERY may process the following categories of data:
a) Identifying information
first and last name
email address
phone number
company (for B2B)
b) Financial and transactional data
billing information
purchase history
payment-related information (without access to full card details)
LA GALERÍA does not store bank or credit card information.
Payments are handled entirely through Stripe as a certified third-party supplier.
c) Browsing data
IP address
browser type
device
browsing behavior (cookies, if accepted)
d) Communications
applications submitted via forms
email communications
History of Requested Quotes
For what purposes is personal data processed?
Personal data is processed for the following purposes:
Manage requests for information or contact
Manage purchase requests and customized quotes
Manage payments, billing, and contract compliance
Contact the user by email regarding their request
Comply with legal and tax obligations
Improve website performance (analytics, if consent is given)
Send informative or commercial communications, only if the user authorizes it
What is the legal basis for data processing?
Data processing is based on:
Performance of a Contract or Precontractual Measures
Express consent of the data subject
Compliance with Legal Obligations
Legitimate interest, in specific and limited cases (security, fraud prevention)
To whom can personal data be communicated?
Personal data may be disclosed only to:
a) Service providers
Hostinger web hosting
Stripe (online payments)
HubSpot (forms, CRM, or communications, if used)
Logistics providers (shipping data only)
All suppliers act as data processors, with contracts pursuant to Art. 28 GDPR.
b) Public administrations
When required by law (tax, accounting, or judicial).
Are international data transfers carried out?
Some providers (Stripe, Google, HubSpot) may transfer data internationally outside the European Economic Area.
These transfers are made with appropriate safeguards, such as:
Standard Contractual Clauses (SCCs)
Additional Technical Measures in Accordance with the GDPR
For how long is the data retained?
The data will be retained:
as long as a contractual relationship exists
for the required legal periods (tax, accounting)
until the user withdraws their consent
the strictly necessary time for the purpose for which they were collected
What rights can users exercise?
The user may exercise the following rights:
access
rectification
suppression
opposition
limitation of treatment
portability
withdrawal of consent at any time
You can exercise these rights by sending an email to: info@lumbregallery.com
You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD).
What security measures are in place to protect data?
THE GALLERY applies appropriate technical and organizational measures to guarantee the security of personal data, including:
a) Technical measures
secure connection via SSL certificate
secure and up-to-date servers
data encryption in transit
access control systems
regular backups
protection against malware and automated attacks
b) Organizational measures
acceso limitado a los datos solo a personal autorizado
formación básica en protección de datos
políticas internas de confidencialidad
revisión periódica de proveedores
protocolos ante brechas de seguridad
c) Pagos seguros
los pagos se realizan exclusivamente a través de Stripe, proveedor certificado PCI-DSS
LA GALERÍA no accede ni almacena datos de tarjetas
¿Se envían comunicaciones comerciales?
El usuario solo recibirá comunicaciones comerciales si ha tenido una relación comercial previa o su consentimiento expreso.
En cualquier momento podrá darse de baja mediante:
enlace incluido en las comunicaciones
solicitud directa por email
Comunicaciones informativas y newsletter
Los datos personales facilitados a través del formulario de suscripción serán tratados por LUMBRE Gallery con la finalidad de enviar información sobre exposiciones, ferias, eventos, novedades artísticas y actividades relacionadas con la galería.
La base jurídica del tratamiento es el consentimiento del interesado (art. 6.1.a del Reglamento General de Protección de Datos).
El consentimiento podrá retirarse en cualquier momento sin que ello afecte a la licitud del tratamiento previo a su retirada.
La suscripción a la newsletter no es condición para realizar compras ni para contratar servicios.
Los datos se conservarán mientras el interesado no revoque su consentimiento.
Para garantizar la validez del consentimiento, podrá utilizarse un sistema de doble verificación (double opt-in), mediante el cual el usuario deberá confirmar su suscripción a través de un enlace enviado a su correo electrónico.
No se elaborarán perfiles automatizados con efectos jurídicos sobre el interesado.
¿Qué ocurre si el usuario facilita datos de terceros?
Si el usuario facilita datos de terceros (por ejemplo, para envíos o regalos), declara contar con su consentimiento y se compromete a informarles del contenido de esta política.
¿Se tratan datos de menores?
Este sitio web no está dirigido a menores de 14 años.
Si se detecta tratamiento indebido de datos de menores, se procederá a su eliminación inmediata.
¿Puede modificarse esta Política de Privacidad?
LA GALERÍA se reserva el derecho a modificar la presente Política de Privacidad para adaptarla a cambios legales o técnicos.
Se recomienda al usuario revisarla periódicamente.
¿Qué legislación es aplicable?
La presente política se rige por la legislación española y europea en materia de protección de datos.
