This legal text provides details about how we collect and process your personal data through the use of our website mynaturalwedding.com, including any information you may provide when purchasing a product, subscribing to our newsletter, or submitting your data via the designated form.
By providing your data, you acknowledge that our services are not available to individuals legally prohibited from giving consent. When submitting forms, you guarantee that you are legally capable of granting consent.
Below, we inform you about the data protection policy of: Victoria Bandera Heredia.
1. Data Controller
Contact details of the controller:
Victoria Bandera Heredia
Tax ID (NIF): 76435477Z
Address: C/ Mendoza, 78 – 7C, Málaga
Phone: 695312589
Email: info(at)mynaturalwedding.com
2. What Data Do We Collect?
The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable natural person. This excludes anonymous or aggregated data.
Personal data collected directly from you will be treated confidentially and incorporated into the relevant processing activities owned by Victoria Bandera Heredia.
On our website, we may process the following types of personal data:
- Identity data: Name, surname, and tax ID (NIF).
- Contact data: Email, phone number, and billing address.
- Profile data: Password.
- Marketing and communications data: Preferences for receiving marketing communications and preferred contact method.
We do not collect special categories of personal data (e.g., racial/ethnic origin, political opinions, religious beliefs, trade union membership, health data, genetic or biometric data).
If you refuse to provide data required by law or for contractual purposes, we may be unable to fulfill the contract or provide the service. Please notify us in advance if this applies.
3. How Do We Collect Your Personal Data?
We collect personal data through:
- Website forms, contact email, phone, or postal mail when you:
- Request information about our products/services.
- Purchase a product.
- Subscribe to services/publications.
- Submit feedback.
To maintain website quality, we reserve the right to reject registrations or suspend/cancel existing ones if they violate legal requirements. We will attempt to explain our decision but cannot guarantee it in all cases.
- Automated technologies/interactions: We may automatically collect technical data (e.g., device information, browsing actions, usage patterns) via cookies or similar technologies. For details, see our Cookie Policy.
- Third parties:
- Google: Analytical/search data (processed outside the EU).
4. Purpose and Legal Basis for Processing Your Data
Common uses of your personal data include:
- Executing a contract between you and Victoria Bandera Heredia.
- Processing based on your consent.
- Compliance with legal/regulatory obligations.
- Legitimate interests (ours or a third party’s).
You may withdraw consent anytime by emailing info(at)mynaturalwedding.com or following the “Exercise of Rights” section below.
Processing Summary Table
| Form | Purpose | Data Types | Legal Basis |
|---|---|---|---|
| Contact | Manage inquiries received via web. | Name, email, phone. | Consent (Art. 6.1.a GDPR), pre-contractual measures (Art. 6.1.b GDPR), legitimate interests (Art. 6.1.f GDPR). |
Marketing Communications
You will only receive marketing communications if:
- You requested information or contracted a service.
- You provided data and checked the opt-in box on our form.
- You have not opted out.
We require explicit consent before sending communications. To unsubscribe, email info(at)mynaturalwedding.com. If you opt out, your data will still be stored to comply with legal obligations.
Purpose Limitation: We only use data for the purposes collected unless we reasonably determine a compatible new purpose, notifying you in advance.
5. Data Retention Period
Data is retained as long as necessary to fulfill its purpose and address potential legal liabilities. Retention periods align with applicable regulations.
- Newsletter/form subscribers: Until unsubscribed.
6. Minors
Victoria Bandera Heredia does not allow individuals under 14 years old to provide personal data via this website (e.g., forms, emails). By submitting data, you confirm you are over 14, absolving us of liability for non-compliance.
If a minor under 14 has provided personal data, contact us to exercise applicable rights. For services targeting minors under 14, we will implement measures to obtain parental/guardian consent.
7. Exercise of Data Protection Rights
To exercise your rights, send a request to Victoria Bandera Heredia’s postal address or email info(at)mynaturalwedding.com, including a copy of your ID (e.g., passport). Rights include:
- Access: Confirm whether we process your data.
- Rectification/erasure: Correct inaccurate data or request deletion (“right to be forgotten”).
- Restriction of processing: Limit processing to legal claims only.
- Objection: Request we stop processing your data (unless for legitimate reasons or legal claims).
- Data portability: Transfer your data to another controller.
You may use templates provided by the Spanish Data Protection Agency (AEPD) here.
Complaints to AEPD: If you believe we mishandle your data, you may file a complaint with the AEPD here.
Identity Verification: We may request additional information to confirm your identity before processing requests.
All requests will be resolved within one month (may extend for complex cases; we will notify you).
8. Data Disclosures: Service Providers
We may engage third parties who process data only to provide contracted services, with safeguards to protect your rights:
- IT/system administration providers.
- Professional advisors (e.g., lawyers, auditors, insurers).
All processors will comply with GDPR and only process data per our instructions. For a list of processors, email info(at)mynaturalwedding.com.
9. Data Security
We implement appropriate measures to prevent accidental loss, unauthorized access, alteration, or disclosure of your data. Access is restricted to employees, contractors, and third parties with a legitimate need-to-know, bound by confidentiality obligations.
We have procedures to address suspected data breaches and will notify you and the AEPD if required under Articles 33–34 of the GDPR.