Privacy Policy
PERSONAL DATA PROTECTION POLICY
At DICAROLO we are committed to protecting your personal information just as we protect our own. We only collect the data strictly necessary to provide you with a quality service. We also want you to clearly understand how we handle your information.
This privacy policy explains how DICAROLO collects and uses your data through our website https://dicarolo.com/ (hereinafter, the “Website”), in accordance with current regulations, including Regulation (EU) 2016/679 on Data Protection (“GDPR”) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”).
1. WHAT COUNTS AS PERSONAL DATA
Under applicable law, personal data is any information that identifies or can identify a natural person, such as name, surname, email address or IP address.
Data that has been anonymised so that it can no longer be linked to an individual is not considered personal data.
At DICAROLO we implement security measures in our facilities and systems to protect your information against unauthorised access, misuse or accidental loss, in compliance with applicable regulations.
2. DATA CONTROLLER
The controller for your personal data is DICAROLO IDEAS A MEDIDA, S.L. (“DICAROLO”), Tax ID B19982321, with registered office at Calle Alhaken II nº10 4/3, 14008 Córdoba (Spain). We determine the purposes and means of processing your data.
We also have a Data Protection Officer (“DPO”), available to answer questions about data processing and your rights. You can contact the DPO at info@dicarolo.com.
3. PURPOSES AND LEGAL BASES FOR PROCESSING
Below we explain the purposes for which we process your personal data and the corresponding legal bases:
3.1. Purchase and returns management: We process your data to manage purchases and payments made on our website, including related returns and claims.
• Legal basis: Performance of the contract.
• Data processed: Identification, contact and transaction data.
3.2. Registering with DICAROLO:
We manage your registration in the DICAROLO Club, including sending commercial communications about products and discounts.
• Legal basis: Consent and performance of the contract.
• Data processed: Identification and contact data.
3.3 Managing electronic marketing communications
• Purpose: To manage the sending of marketing communications about DICAROLO products, conduct our own promotional and advertising activities by any means, including email, and send you a discount coupon if this is your first purchase of DICAROLO products. If you no longer wish to receive marketing, simply unsubscribe using the link at the bottom of our newsletter.
• Legal basis: Consent.
• Data types: Identification and contact data.
3.4 Job application management
• Purpose: To receive and manage job applications submitted by candidates through DICAROLO’s Job Portal.
• Legal basis: Performance of pre-contractual measures.
• Data types: Identification, contact, personal circumstances, academic and professional data.
3.6 Internal reporting channel management
• Purpose: To manage communications sent to the Controller, DICAROLO 2024 S.L., via the channel enabled on the Website and to investigate them.
• Legal basis: Compliance with a legal obligation (Law 2/2023 of 20 February on the protection of whistleblowers and anti-corruption measures).
• Data types: Identification, contact, professional and personal circumstances data, as well as any other type depending on the information provided by the informant through the internal channel.
4. DATA RETENTION PERIODS
Retention depends on the purposes for which DICAROLO processes your data, as set out below:
- Data for managing purchases and returns of DICAROLO products: processed for the time needed to manage the purchase (including returns and claims) and, in any case, kept for five (5) years.
- Data for registering as a customer and DICAROLO Club user: processed while you remain a registered user, until you cancel or request deletion of your data.
- Data for sending marketing communications: until you unsubscribe via your account settings or the link in each email, or you exercise your right to erasure.
- Data for job application management: retained for a maximum of one (1) year.
- Data for managing franchise enquiries: retained for a maximum of two (2) years unless the applicant joins the DICAROLO franchise network; in that case, data will be kept for the legal term required to maintain the commercial relationship.
- Data for the whistleblowing channel: kept only as long as necessary to decide whether to open an investigation. In any case, if three months pass from receipt without investigative actions, the communication will be deleted unless preservation is needed to document the system’s operation.
5. RECIPIENTS OF YOUR DATA
5.1 Recipients
Your personal data will not be shared with third parties except those whose involvement is necessary to properly provide the service or fulfil the purposes described above (carriers, financial entities, etc.), as well as to comply with a legal obligation. In the latter case, data may be disclosed to courts, the Public Prosecutor, competent administrative authorities in administrative, criminal or sanctioning proceedings, and Law Enforcement bodies.
Data may also be disclosed to public authorities (administrative or judicial) whenever a legal provision so requires.
5.2 Processors
Without prejudice to the above, Website user data may be processed by suitable service providers engaged by DICAROLO as processors, such as technology providers or marketing/advertising services.
These providers will process data only for the purposes set by the controller and in accordance with its instructions, as provided in Art. 28 GDPR.
6. INTERNATIONAL TRANSFERS
The controller will process Website users’ data within the territory of the European Union.
7. USER RIGHTS AND HOW TO EXERCISE THEM
You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by emailing hola@DICAROLO.com or writing to DICAROLO Ideas a Medida SL, Customer Service Department, Calle Alhaken II n°10 4/3, 14008 Córdoba (Spain), indicating the right(s) you wish to exercise.
If you believe your rights have not been respected, you can contact the DPO at info@dicarolo.com and, where appropriate, lodge a complaint with the Spanish Data Protection Agency.
8. UPDATES
DICAROLO reserves the right to modify the contents of this Website at any time. If we make a significant change to our privacy policy—either to improve your experience using our service or to comply with current regulations—we will publish it on this page for your review.