|1. WHO WE ARE. We are Fyllde B.V, and we process your personal data as controllers. This means that we are responsible for how we process and protect your data.2. WHAT WE USE YOUR DATA FOR. We will use your data (collected online or in person), among other purposes, to manage your registration as a user, to manage your purchases of products or services, to respond to your queries, and, if you wish, to send you our customised communications.
3. WHY WE USE YOUR DATA. We have legal standing to process your data for various reasons. The main reason is that we need to process your data to perform the contract that you accept with us when you register and when you make a purchase or enjoy any of our services or functionalities. We also use your data for other reasons, for example, to respond to your queries or to send you newsletters that you have asked to receive from us.
4. WHO WE SHARE YOUR DATA WITH. We share your data with service providers who provide us with assistance or support, these being companies in the Inditex Group or third party providers, both inside and outside the European Union.
BEFORE YOU START …
- We are transparent about what we do with your personal data, to help you to understand the implications of the way in which we use your data, and the rights you are entitled to in relation to your data:
- you will also find further information on how we use your data as you interact with us.
- When we speak about our Platform, we refer, in general, to any of the channels or means, digital or in person, you may have used to interact with us. The main ones is our website: https://fyllde.com.
1. WHO IS THE CONTROLLER OF YOUR DATA?
Your data controller is: FYLLDE B.V.:
- Postal address: Maasstraat 30-3, 1078HK Amsterdam, Netherlands
- Data Protection Officer: email@example.com
In other words, this means that we have regulated and are responsible for processing and protecting your personal data.
- WHY WE PROCESS YOUR PERSONAL DATA
Depending on the purpose for which we process your data from time to time, as explained above, we need to process one or other data, which will in general be, depending on each case, as follows:
- your identity data (for example, your name, surname, language and country from which you interact with us, contact data, etc.);
- economic and transactions information (for example, your payment or card data, information on your purchases, orders, returns, etc.);
- connection, geolocation and/or browsing data (if you interact with us from your mobile phone, for example);
- commercial information (for example, if you have subscribed to our newsletter)
- information about your tastes and preferences.
Remember that, when we ask you to fill in your personal data to give you access to any functionality or service of the Platform, we will mark certain fields as compulsory, since this is information that we need to be able to provide the service or give you access to the functionality in question. Please take into account that, if you decide not to make such data available to us, you may be unable to complete your user registration or may not be able to enjoy those services or functionalities.
Depending on how you interact with our Platform, i.e., depending on the services, products or functionalities that you wish to enjoy, we will process your personal data for the following purposes:
|2. For the development, performance and execution of the purchase or services contract that you executed with Us on the Platform||This purpose includes processing your data, mainly:
|3. To meet requests or applications that you make||We only process the personal data that are strictly necessary to manage or resolve your request or application. 5 through the Customer Support channels|
|4. For marketing purposes.||This purpose includes the processing of your data, mainly, for:
|5. Analysis of usability and quality to improve our services||If you access our Platform, we inform you that we will treat your browsing data for analytic and statistic purposes, i.e., to understand the manner in which users interact with our Platform and thus be capable of introducing improvements in the Platform. In addition, we occasionally perform quality surveys and actions to know the degree of satisfaction of our customers and users and detect those areas in which we may improve.|
- HOW WE ARE LEGALLY PERMITTED TO PROCESS YOUR DATA?
The legal terms on which we are permitted to process your personal data also depends on the purpose for which we process them, as explained in the following table:
|1. To manage your Platform user registration||We process your data because this is necessary on the terms regulating the use of the Platform. In other words, for you to be able to register as a user on the Platform, we need to process your personal data, since we would otherwise be unable to manage your registration.If you opt to use the access or login through a social network, we are legally permitted to process your data given the consent that you give when authorising the assignment of your data from the social network.|
|2. Development, performance and making of the purchase or services contract||We process your data because their processing is necessary for us to make the purchase or services contract with you.Certain processing of data related to the purchase process is activated only because you request or authorise it, as is the case of the storage of payment (card) data for future purchases or the processing of data necessary to scan the till receipts through the Wallet section of the App or to provide you with the Coming Soon / Back Soon functionalities. In these cases, our processing of your data is supported by your own consent.
We consider that we have a legitimate interest to carry out the necessary verifications to detect and prevent potential fraud when you make a purchase. We understand that the processing of these data is positive for all the participating parties when a purchase is paid and in particular for you, since this allows us to establish measures to protect you from fraud attempts by third parties.
|3. Customer Support||We consider that we have legitimate interest in answering the requests or queries raised by you through the existing different contact channels. We understand that the processing of these data is also beneficial to you to the extent that it enables us to assist you adequately and answer to the queries raised.When you get in touch with us, in particular, for the management of incidents related to your order or the product/service acquired through the Platform, the processing of your data is necessary to perform the purchase contract.
When your request is related to the exercise of your rights on which we inform you below, or to claims on our products or services, we are legally permitted to process your data for compliance with our legal obligations.
|4. Marketing||We are legally permitted to process your data for marketing purposes due to the consent that you give us, for example when you accept receiving customized information through multiple channels, when authorizing the sending of push notifications in your mobile device or when accepting the legal terms and conditions to participate in a promotional action or to publish your pictures on the Platform or on our social networks‘ channels.In order to show you customised information. we consider that we have a legitimate interest to conduct a profiling with the information that we have about you (such as your browsing, preferences or purchase history) and the personal data that you have provided us, such as the age range or language, since we understand that the data processing of these data is also beneficial to you because it allows you to improve your user experience and access the information in accordance with your preferences.|
|5. Analysis of usability and quality||We consider that we have a legitimate interest in analysing the Platform usability and the user’s satisfaction degree, since we understand that that the processing of these data is also beneficial for your because the purpose is to improve the user experience and provide a higher quality service.|
4. HOW LONG WILL WE KEEP YOUR DATA?
The time for which we will keep your data will depend on the purposes for which we process them, as explained below:
|Purpose||Time for which the data are kept|
|1. To manage your Platform user registration||We will process your data for the time during which you remain a registered user (meaning, until you decide to unsubscribe).|
|2. Development, performance and execution of the purchase or services contract||We will process your data for the time necessary to manage the purchase of the products or services that you buy, including potential returns, complaints or claims related to the purchase of the product or service in question.Sometimes, we will only process the data until the time when you decide, as is the case of payment (card) data that you requested us to store for future purchases.|
|3. Customer Support||We will process your data for the time necessary to meet your request or application.|
|4. Marketing||We will process your data until you unsubscribe or cancel your subscription to the newsletter.If you participate in promotional actions, we will keep the data during a six (6) months period from the end of the action.|
|5. Analysis of usability and quality||We will process your data occasionally for the time during which we proceed to carry out a specific quality action or survey or until we anonymise your browsing data.|
Notwithstanding the fact that we will process your data for the time strictly necessary to achieve the purpose in question, we will subsequently keep them duly stored and protected for the time during which liability may arise for their processing, in compliance with legislation in force from time to time. Once each of the potential actions is time-barred we will proceed to delete the personal data.
5. DO WE SHARE YOUR DATA WITH THIRD PARTIES?
- financial institutions: Stripe, ING
- anti-fraud detection and prevention entities: Strip, ING
- technological service providers: Siteground, Sucuri
- logistic, transport and delivery partners and service providers: Futurlog
- providers of customer support related services: Zendesk
- advertising and marketing related partners and service providers – Mailchimp, Google Analytics
For service efficiency purposes, some of these providers are located in territories outside the European Economic Area that do not offer a level of data protection comparable to that of the European Union, in other words, the United States of America. In such cases, we inform you that we will transfer your data with adequate safeguards and always keeping your data safe:
- Some providers are certified Privacy Shield, which certification you may consult through the following link: https://www.privacyshield.gov/welcome
- With other providers, we have agreed Standard Contractual Clauses approved by the EU Commission, the content of which you may consult through the following link: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contractstransfer-personal-data-third-countries_en
6. WHAT YOUR RIGHTS ARE WHEN MAKING YOUR DATA AVAILABLE TO US?
We undertake to keep your personal data confidential and to ensure that you may exercise your rights. Bearing that in mind, we Controllers have agreed that you may exercise your rights free of charge by writing us an e-mail to a single e-mail address (firstname.lastname@example.org), simply informing us of the reason for your request and the right that you wish to exercise. If we consider this necessary to be able to identify you, we may request you to provide a copy of a document evidencing your identity.
In particular, notwithstanding the purpose or legal basis we use to process your data, you have the following rights:
- To request access to your personal data that we hold. We remind you that where you are a Platform registered user you may also consult this information in the relevant section of your online account.
- To request that we erase your personal data to the extent that they are no longer necessary for the purpose for which we need to keep processing them, as we have explained above, or when we are no longer legally permitted to process them.
- To request that we cancel or limit the processing of your personal data, which entails that in certain cases you can request us to temporarily suspend the processing of the data or that we keep them longer that necessary.
If you have given us your consent to process your data for any purpose, you also have the right to withdraw such consent at any time. Some of the circumstances in which you may withdraw your consent are detailed in section 2 where we explain for which purposes we process your data.
When we are legally permitted to process your data due to your consent or to for the purposes of a contract, as explained in section 3, you will also have the right to request the portability of your personal data. This means that you will have the right to receive the personal data that you made available to us in a structured, commonly used and machine-legible format, to be able to transmit them to another entity directly without impediments on our part.
In addition, where the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.
Finally, we inform you that you have the right to file a claim before the responsible data protection regulatory authority, in particular, before:
- The Dutch Data Protection Agency (https://autoriteitpersoonsgegevens.nl/en)
- The authority of the country in which the country retail company is located: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
- WHAT HAPPENS WHEN YOU PROVIDE US WITH DATA OF THIRD PARTIES?
We offer functionalities or services that require us to process the personal data of a third party that you must provide, such as in the case of activation and sending of the Gift Voucher or the management of the application for the Gift Voucher (if any). If you provide us with personal data of third parties, you confirm that you informed them of the purposes and of the manner in which we need to process their personal data.
- INFORMATION ON COOKIES