Who we are
We are WEEROES a children superhero clothing company and our purpose is to create a world full of heroes!
WEEROES is committed to protecting user privacy and personal data. Your personal data will be used only when necessary to provide you the best user experience during your stay at the website.
Information about WEEROES:
WEEROES KIDS CLOTHING S.L.U., con el CIF B88188545 de España, domicilio social en Calle Santa Engracia 122 5 A, 28003 Madrid. Inscrita en el Registro Mercantil de Madrid, Tomo 38.256, Folio 90, Sección 8, Hoja M-680709, Inscripción.
Website address is: https://www.weeroes.com
E-mail address: email@example.com
Types of Data Collected
WEEROES website collects some general data when the users navigate its pages. This information is very generic and it’s registered by the server. The data collected by the server might be: date and hour the site was accessed; IP adress; used browser and its version; user’s OS; the user’s ISP (Internet Service Provider); the website from where the user arrives to our website. Some other information and data might be stored, if we deem it would be useful to characterize attacks to our IT infrastructure.
WEEROES collects and analyzes the user data in an anonymous as possible way (in order to comply with legal obligations), with the intent of giving its users the content in an improved and functional way, enabling the website as well as its content optimization, bettering the interaction and communication with the users/customers.
Further personal data could be collected only if users sign up to our newsletter or purchase any product. While visiting our website, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City
- Cookies and Usage Data
- Facebook public profile data
Tracking & Analytics
Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Purpose of data collection
We use the collected data for various purposes:
- To provide and maintain our website;
- To notify you about changes and news
- To allow you to participate in interactive features of our website when you choose to do so
- To provide customer care and support
- To provide analysis or valuable information so that we can improve
- To monitor the usage of the website
- To detect, prevent and address technical issues
Who we share your data with and what third parties we receive data from
We only share your personal data with third-parties which are essential for our business activity and our site to run. We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information.
Embedded content from other websites
Login using Facebook account
We collect your public profile data only from your consent that you grant before initiating Social Login, from the social network used to login at our website. This data includes your first name, last name, email address, link to your social media profile, unique identifier, link to social profile avatar. This data is used to create your user profile at our website. You can revoke this consent at any time by sending us an email or unlinking your social profile of your account.
Facebook Like and Facebook Share official buttons
WEEROES newsletter list is only used to send subscribers information and offers regarding the online store. All data collected is stored and managed using Mailchimp email marketing services.
Links To Other Sites
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Marketing & Promotional offers
We provide you with choices about some personal data uses, particularly around marketing and advertising. We may use your Identity, Contact, Technical Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products and offers may be relevant for you.
You will receive marketing communications from us only if you have requested information from us or purchased goods and you have not opted out of receiving that marketing.
How long we retain your data
Depending on how you provided us that information (e.g. form submisson, purchase, etc) we may keep the data you shared indefinitely, or for a period not longer than necessary.
Your personal data is always at your dispose, so it can be edited to keep it up to date and accurate, or it can be deleted if you wish. Although we may have to keep some data due to legal or administrative obligations (e.g. invoices), to enforce our legal rights or to cooperate with court orders and law enforcement.
What rights you have over your data
If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
How we protect your data
At Weeroes we take your data protection and privacy very seriously, and as such we go to great extent to keep it safe. We use SSL (Secure Socket Layer) encryption in all our pages.
We adopted the GDPR (General Data Protection Regulation) standards and we only do business with other companies that follow the GDPR, including the company where our server are hosted and managed.
We have put in place appropriate security measures with the aim of preventing your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
However, data transmitted through the Internet are never 100% secure, so we or anyone can not guarantee absolute protection against data breaches and data leakage.
What data breach procedures we have in place
In the very unlikely event of a data breach, we shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. When the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay.
Where, and in so far as, it is not possible to provide the information at the same time, the information may be provided in phases without undue further delay.
When the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall communicate the personal data breach to the data subject without undue delay.
The communication to the data subject referred to in the previous paragraph shall not be required if any of the following conditions are met:
- the controller has implemented appropriate technical and organizational protection measures, and those measures were applied to the personal data affected by the personal data breach, in particular those that render the personal data unintelligible to any person who is not authorized to access it, such as encryption;
- the controller has taken subsequent measures which ensure that the high risk to the rights and freedoms of data subjects referred to in paragraph 1 is no longer likely to materialise;
- it would involve disproportionate effort. In such a case, there shall instead be a public communication or similar measure whereby the data subjects are informed in an equally effective manner.
IIf you need further information or clarification you can email us at: firstname.lastname@example.org