Privacy Policy
1. Who is the Data Controller responsible for processing your data?
- Controller Identity: Sklum Home and Deco S.L. (hereinafter, "Sklum")
- NIF (Tax ID): B98845936
- Registered Office: Partida Tancaes, s/n, 46720 Villalonga (Valencia), Spain
- Data Protection Officer (DPO): [email protected]
2. What personal data do we process and how do we obtain it?
We collect your personal data primarily when you interact with our web platform, purchase our products, or subscribe to our communication channels.
The categories of data we process include:
- Identification and contact data: First name, surname, postal address, email address, and mobile phone number.
- Transaction and purchase data: Details of acquired products, payment method, and order history.
- Browsing data and preferences: IP address, browsing habits, and interaction history via cookies and similar technologies.
- Audiovisual data (Events): Image and/or voice captured during your attendance at or participation in events organized by Sklum.
3. For what purpose and legal basis do we process your data?
| Processing / Activity | Purpose | Legal Basis |
|---|---|---|
| Purchase management and user account | To process your orders, manage product shipping, issue invoices, handle post-sale requests, administer your user account, and send you customer satisfaction surveys to evaluate the shopping experience. | Performance of the sales contract (Art. 6.1.b of the GDPR) and legitimate interest in assessing the quality of our products and services (Art. 6.1.f of the GDPR). |
| Purchase process assistance | To contact you in the event that you abandon a purchase halfway, reminding you of the selected items or assisting you to complete the order. | Legitimate interest in facilitating your initiated purchase (Art. 6.1.f of the GDPR). |
| Sending commercial communications and newsletters (Email) | To manage your subscription in order to send you offers, news, promotions, and discounts by email, tailoring these contents and recommendations to your interests based on your interaction with our communications and your browsing behavior. | Explicit user consent granted by ticking the corresponding box on our forms or pop-ups (Art. 6.1.a of the GDPR). |
| Commercial communications channel via WhatsApp | Sending promotions, news, discount codes, and personalized informational content through WhatsApp. | Explicit consent granted by ticking the corresponding box on our forms or pop-ups (Art. 6.1.a of the GDPR and Art. 21.1 of the LSSI-CE). |
| Customer service and contact form | To respond to inquiries, complaints, or information requests submitted through our official channels. | Management of pre-purchase information requests or legitimate interest in responding to user inquiries (Art. 6.1.f of the GDPR). |
| Brand events and audiovisual material | Dissemination of images/videos of the event on corporate channels (social networks, website, intranet) for brand promotion, sending download links for audiovisual material, as well as sending event satisfaction surveys. | Attendee consent upon registering for or participating in the event (Art. 6.1.a of the GDPR). |
4. Which recipients do we share your data with?
In order to provide you with our services, we share your data with trusted providers who act as Data Processors under strict security conditions:
- Packaging and transport/logistics entities for order delivery.
- Payment gateways and financial entities.
- Technology service providers, email marketing delivery platforms, and communication management tools (such as WhatsApp).
- Public authorities and official bodies when there is a legal obligation to communicate data.
We do not sell or transfer your personal data to third parties for their own commercial purposes without your explicit consent.
5. International data transfers
For the provision of certain services (such as sending notifications via WhatsApp or using cloud-based technological tools), we use providers located outside the European Economic Area (EEA), primarily in the United States (Meta Platforms, Inc. / WhatsApp LLC).
These international transfers are carried out with all current legal guarantees, backed by the framework of the EU-U.S. Data Privacy Framework (DPF) —Adequacy Decision of the European Commission— and/or through the execution of Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data retention and blocking period
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or while a contractual or commercial relationship with us is maintained.
Once the relationship has ended, your unsubscription has been requested, or your consent has been revoked:
- Your data will be immediately disabled for any active processing or communication delivery.
- It will be kept duly blocked at the exclusive disposal of Judges and Courts, the Public Prosecutor's Office, the Spanish Data Protection Agency, and other competent Public Administrations (such as Tax or Consumer Protection authorities) to address potential liabilities arising from the processing and until the expiry of statutory limitation periods for legal actions (ranging between 3 and 6 years depending on the nature of the data and applicable legal obligations). Once these statutory limitation periods have elapsed, the data will be permanently deleted.
7. What are your rights and how can you exercise them?
You have the right to:
- Access: Know whether we are processing your data and access it.
- Rectification: Request the correction of inaccurate or incomplete data.
- Erasure ("Right to be forgotten"): Request the deletion of your data when it is no longer necessary.
- Object: Object at any time to our processing of your data for commercial purposes.
- Restriction of processing: Request the suspension of processing in legally established circumstances.
- Portability: Receive your data in a structured, commonly used, and machine-readable format.
- Withdraw consent: Withdraw previously granted authorizations at any time.
To exercise any of these rights or to contact our Data Protection Officer (DPO), you can send a written request to [email protected] specifying "Exercise of GDPR Rights" in the subject line.
If you consider that we have not properly addressed your rights, you can lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.
8. Information regarding data processing on the WhatsApp Channel
8.1. Controller and DPO Contact
- Identity: Sklum Home and Deco S.L.
- NIF (Tax ID): B98845936
- DPO Contact: [email protected]
8.2. Purpose of processing
At Sklum, we process the provided information for the purpose of managing your subscription to the WhatsApp channel and keeping you informed by sending commercial communications, promotions, discount codes, news, marketing campaigns, and personalized informational content regarding our products and services.
Providing your mobile phone number is essential for the provision of this service. No automated decisions will be made, nor will profiles with legal effects be drawn up based on the data provided.
8.3. Retention and Blocking
The data will be actively retained as long as you do not withdraw your consent or request unsubscription. Following unsubscription, the data will be kept blocked for a period of 3 years in accordance with Article 78 of the LOPDGDD to address potential legal liabilities prior to its definitive destruction.
8.4. Legal Basis
The legal basis is the explicit consent provided by affirmatively checking the checkbox on our web forms, pop-ups, checkout, or customer portal (Article 6.1.a of the GDPR and Article 21.1 of the LSSI-CE).
8.5. Guarantee of confidentiality and recipients
Communications via WhatsApp are conducted individually using management tools and broadcast lists that preserve user confidentiality at all times, preventing other recipients from having access to your phone number. The inclusion of users in public groups or the transfer of data to third parties is not planned, except where legally required or to contractually bound data processors.
8.6. International Transfers
The use of WhatsApp entails international transfers to the USA (Meta Platforms, Inc. / WhatsApp LLC). These transfers are guaranteed through certification under the EU-U.S. Data Privacy Framework (DPF) and/or the execution of European Commission Standard Contractual Clauses (SCCs).
8.7. Revocation of consent and service unsubscription
You may revoke your consent and unsubscribe from WhatsApp communications at any time directly, free of charge, and immediately by sending the word "STOP" directly within Sklum's WhatsApp chat, or by writing an email to [email protected].