Privacy policy

Privacy Policy

PRIVACY – DETAILED INFORMATION

The Privacy Policy is part of the General Conditions that govern this website.

VERSION - January 2021

In accordance with personal data protection regulations, and in conformity with the provisions of Articles 13 and 14 of the EU Regulation 2016/679, General Data Protection Regulation (GDPR), the User is informed of the following through this Privacy Policy.

Who is responsible for the processing of your data?

MIMOKI DESIGN, S.L., with registered office at Calle Conde de Aranda, 8, 28001 Madrid, Spain, and CIF number B86596517, is responsible for processing the data provided by users ("Users") through its website www.dragongirl.es ("Website").

You can contact us by postal mail at the above address, via email at hello@dragongirl.es, or by phone at 911825131.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend reviewing it, and if you are registered and access your account or profile, you will be informed of any modifications.

If you belong to any of the following groups, please consult the relevant information:

WEBSITE OR EMAIL CONTACTS

What data do we collect through the Website?

We may process your IP address, operating system, browser used, and even the duration of your visit, anonymously.

If you provide data through the contact form, you will identify yourself to be able to contact you if necessary. Therefore, we will process your data for the following purposes:

- Responding to your inquiries, requests, or petitions.
- Managing the requested service, responding to your request, or processing your petition.
- Providing information via electronic means about your request.
- Providing commercial or event-related information via electronic means, with your express authorization.
- Conducting analysis and improvements on the Website, our products, and services to improve our commercial strategy.

When we collect your personal data through a form, you will need to check the acceptance checkbox of the Privacy Policy and click the send button. This necessarily implies that you have been informed and have given your express consent to the processing of your data based on this Policy.

All our forms have a * symbol for mandatory data. If you do not provide these fields or do not check the acceptance checkbox of the Privacy Policy, the information will not be allowed to be sent.

KLARNA

"In order to offer you Klarna's payment methods, at the time of payment, we might transmit your personal data included in the contact form and order details to Klarna during the purchase process, so that Klarna can evaluate whether you meet the requirements to access their payment methods and adapt these payment methods to your profile. Your personal data is processed in accordance with Klarna's privacy policy."

NEWSLETTER CONTACTS

What data do we collect through the newsletter subscription?

Through the website, you can subscribe to our Newsletter if you wish, providing us with an email address to which it will be sent.

We will only store your email in our database and proceed to send you periodic emails until you request to unsubscribe, or we stop sending emails, for the following purposes:

- Managing the requested service.
- Providing information via electronic means about your request.
- Providing commercial or event-related information via electronic means, with your express authorization.
- Conducting analysis and improvements in mailing to improve our commercial strategy.

To subscribe, you will need to insert your email, check an acceptance checkbox, or click send, indicating that you have been informed and have expressly consented to receive our newsletter according to this policy.

If you do not check the acceptance checkbox of the privacy policy, the information will not be allowed to be sent. If you no longer wish to receive our Newsletter, you can unsubscribe using the link available in each communication you receive.

CLIENTS

What data do we use?

As a Dragon girl customer, we will process the data you provide through the purchase process and/or the registration form, as well as any data you enter in your user area, necessary to offer you the contracted service, with the following purposes:

- Processing orders (preparation, billing, and shipping).
- Preparing the budget and following up on it through communications between both parties.
- Providing information via electronic means about your request.
- Providing commercial or event-related information via electronic means, with your express authorization.
- Managing administrative, communication, and logistical services carried out by the Responsible.
- Billing and declaration of appropriate taxes.
- Carrying out corresponding transactions.
- Control and recovery management. The legal basis for processing is the acceptance of a contractual relationship or, failing that, your consent by contacting us to request information about the service we offer.

SOCIAL MEDIA CONTACTS

What data do we use from social networks?

We will use the data available in your user profile and the data you provide when contacting us through our social media profiles for the following purposes:

- Responding to your inquiries, requests, or petitions.
- Managing the requested service, responding to your request, or processing your petition.
- Publishing your image on our profiles, at your request.
- Interacting with you and creating a community of followers.

Your data will be processed in the context of a contractual relationship with the relevant social network and in accordance with its Privacy Policies, based on your acceptance of them; therefore, we recommend consulting them.

Your image is a personal data; if you send us your photo for publication on our profiles, the mere act of sending it with the request for your image to be published implies that you give us your free, voluntary, and express consent for its processing.

JOB APPLICANTS

What data do we use from your CV?

We will process the data you provide through your job application, such as identification and contact details, and training and professional data, for the following purposes:

- Organizing selection processes for employee recruitment.
- Inviting you to job interviews and evaluating your application.

Furthermore, we inform you that one year after receiving your CV, we will proceed to its secure destruction.

The legal basis for this processing is your unequivocal consent by sending us your CV.

Do we include personal data of third parties?

No, as a general rule, we only process the data provided by the holders. If you provide data of third parties, you must, prior to doing so, inform and obtain their consent to such individuals, otherwise, you release us from any responsibility for the breach of this requirement.

And data of minors?

We do not process data of minors under 14 years old. Therefore, refrain from providing them if you do not meet this age or, if applicable, from providing data of third parties who do not meet this age. MIMOKI DESIGN, S.L. disclaims any responsibility for the breach of this provision.

Will we make communications via electronic means?

We will make communications via electronic means necessary to manage your request if it is one of the means of contact you have provided us. If we make electronic communications of a commercial nature, they will have been previously and expressly authorized by you, and you can oppose them at any time.

What security measures do we apply?

Rest assured: We have adopted an optimal level of protection of the Personal Data we handle, and we have installed all the means and technical measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorized access, and theft of Personal Data.

To whom will your data be communicated?

Your data will not be transferred to third parties, except:

- Legal obligation: specifically, they will be communicated to the State Agency of Tax Administration and banks and financial entities for the collection of the provided service or acquired product, as well as to the necessary data processors for the execution of the agreement.
- Online payment gateways: in case of purchase or payment, if you choose any application, website, platform, bank card, or other online service, your data will be transferred to that platform or treated in its environment, always with maximum security.
- Data processors: such as web development or maintenance companies, or hosting. These are contractually bound to maintain the same level of privacy as we do, thus ensuring the security of your information. In the case of international data transfer by using American applications, they will be regulated through the corresponding standard contractual clauses to ensure compliance with European data protection policies in terms of privacy.

What Rights do you have?

- To know if we are processing your data or not.
- To access the personal data we are processing.
- To request the rectification of your data if they are inaccurate.
- To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent given.
- To request the limitation of the processing of your data, in some cases, in which case they will only be kept in accordance with current regulations.
- To port your data, which will be provided to you in a structured, commonly used, or machine-readable format. If you prefer, we can send them to the new responsible party you designate. It is only valid in certain cases.
- To file a complaint with the Spanish Data Protection Agency or competent control authority if you believe that we have not attended to you correctly.
- To revoke consent for any treatment for which you have consented at any time. If you change any data, we thank you for informing us to keep them updated, by sending an email to mimoki@dragongirl.es indicating in the subject “Data Protection,” or by postal mail to the address provided at the beginning of this policy.

Do you want a form to exercise your Rights?

We have forms for the exercise of your rights, request them by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or accompanied by a photocopy of the ID.
If someone represents you, you must attach a copy of their ID, or they

must sign it with their electronic signature.
Forms can be presented in person, sent by letter, or by email to the address of the Responsible at the beginning of this text.

How long do we take to respond to the Exercise of Rights?

Depending on the right exercised, but establishing a maximum of one month from your request, and two months if the issue is very complex. In the latter case, you will be notified.

Do we process cookies?

Yes, if you need more information, you can access our Cookies Policy by clicking here or through the link available on our website.

How long will we keep your personal data?

Personal data will be maintained as long as you remain linked with us.
Once you disengage, the personal data processed for each purpose will be maintained for the legally established periods, including the period in which a judge or court may require them, considering the statute of limitations for legal actions.
The processed data will be maintained as long as the mentioned legal periods do not expire if there is a legal obligation to maintain them, or if there is no legal period, until the interested party requests their deletion or revokes the given consent.
We will keep all the information and communications related to your purchase or the provision of our service while the guarantees of the products or services last, to address possible claims.