Privacy policy

At Offhoo, we care about our customers and understand the importance of your privacy. This Privacy Policy describes how Offhoo ("the Website", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from Offhoo (the "Website"), or otherwise communicate with us (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refer to you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we collect in accordance with this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you consent to the collection, use, and disclosure of your information as set forth in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Changes and clarifications will take effect immediately upon their posting on the Website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

If our store is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.


CONTENTS

1. Controller Information

  • Company Name: ELOSUNG EUROPE S.A.
  • Registered Address: CL RAMON VINAS, 62, NAVE SANT ADRIA DE BESOS 08930
  • Email: service@offhoo.com
  • Phone: +34688003502
  • Website: https://es.offhoo.com/


2. How We Collect and Use Your Personal Information

In order to provide the Services, we collect and have collected personal information about you from a variety of sources, as described below. The information we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may also use the information we collect about you to communicate with you, provide the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.


2.1. What Personal Information We Collect

The type of personal information we obtain depends on how you interact with our Website and use our Services. When we use the term "personal information", we mean information that identifies, relates to, describes, or is capable of being associated with you. The following sections describe the categories and specific types of personal information we collect.


2.2. Information We Collect Directly from You

Information you submit directly to us through the Services may include:

  • Basic contact details, including your name, address, phone number, and email address.
  • Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.
  • Account information, including your username, password, and security questions.
  • Shopping information, including products you have viewed or added to your cart.
  • Customer support information, including information you choose to include in communications with us when you send a message through the Services.
  • Any other information you choose to provide voluntarily, including product reviews, participation in promotions, and user-generated content such as images or videos you upload.

Certain features of the Services may require you to provide us directly with certain information about yourself. You may choose not to provide this information, but doing so may prevent you from using or accessing these features.


2.3. Information We Collect Through Cookies

We also automatically collect certain information about your interaction with our Website ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Website and account, including device information, browser information, network connection information, IP address, and other information regarding your interaction with the Services. For more information, please see our Cookie Policy.


2.4. Information We Obtain from Third Parties

Finally, we may obtain information about you from third parties, including vendors and service providers who may collect information on our behalf, as well as from:

  • Companies that support our Website and Services, such as Shopify.
  • Our payment processors, who collect payment information (such as bank account, credit or debit card details, and billing address) to process your payment, fulfil your order, and provide you with the products or services you have requested, in accordance with our contract.
  • When you visit our Website, open or click on emails we send you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies (such as pixels, web beacons, software development kits, third-party libraries, and Cookies).

Any information we obtain from third parties will be processed in accordance with this Privacy Policy. We are not responsible or liable for the accuracy of the information provided by third parties, nor for the policies or practices of any third party. For more information, please see the "Third-Party Websites and Links" section below.


3. How We Use Your Personal Information

Your data is used for the following purposes, on the corresponding legal bases:

a) Performance of a contract with Offhoo:
These are processes necessary to process your order and provide you with the services you have requested:

  • Procurement, including delivery, shipping and returns, warranties, advice, enquiries and incidents, claims, accidents, and litigation.
  • Payment management for products and services.
  • Invoicing and ticket management, issuing invoices and documents relating to the purchase.
  • Notifying you of the availability of products you have reserved.
  • Fraud prevention during the purchase process, where we identify inconsistencies in contracts in your name.
  • Customer service: assisting you with any questions or issues you may encounter when using the Website or the services contained therein.
  • Exercising your data protection rights, including reviewing and updating all personal data.

b) Services based on your explicit consent:
In certain cases, we require your consent to process your data, meaning you agree that your data will be processed for specific purposes, such as:

  • Sending periodic communications containing company information, events, discounts, and promotions (e.g., newsletters), which are directed exclusively to users/customers.

c) Compliance with legal obligations:
These are processing activities required by law, such as:

  • Cooperation with courts and tribunals.
  • Cooperation with the Spanish Data Protection Agency.
  • Compliance with tax obligations and cooperation with the State Tax Administration Agency.
  • Compliance with obligations relating to the prevention of money laundering and terrorist financing.
  • Provision of product warranties.
  • Compliance with applicable product safety regulations.
  • Cooperation with the State Security Forces and Agencies.

d) Legitimate interest:
In any event, we inform you that we have conducted a thorough assessment of the legitimate interests justifying the processing of your data, and have confirmed that no prejudice or detriment to you arises, while ensuring that the information used in this assessment is not exposed to any security risks.

You may object at any time to processing based on legitimate interest through the channels set out in the "User/Customer Rights" section.

If you do not object, we will carry out the following processing:

  • Anonymisation: We will transform your data into statistical information by removing identifying data and replacing it with generic data, rendering you unidentifiable, in order to learn from experience, improve our business, customer care and service, and conduct research into our activities and the market.
We understand that the only way to improve our services is to study and compare every detail of our activity, and for this we need to study information on website usage and activity. This study does not affect you or limit your interests, other than the benefits arising from the positive evolution it brings.
We believe that if we do not learn from experience, correct errors, or adapt to the quality standards our customers demand, our image as a competitive company committed to customer satisfaction would be directly damaged.

  • Quality and satisfaction surveys: We have a legitimate interest in contacting you from time to time to conduct quality and satisfaction surveys, to ask how you view and evaluate our activities, and what improvements are possible.
This objective is to learn from experience and improve our activities, reflecting the desire to serve our customers better each day, learning from experience and exceeding their expectations.

  • Fraud prevention in purchases: We process the necessary data to analyse orders placed by users/customers and prevent fraud when we receive alerts regarding transactions that may be considered suspicious, based on the legitimate interest in combating fraud.


4. Shopify

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that enables us to sell our products and services to you. Your data is stored through Shopify's data storage, databases, and Shopify's general applications. They store your data on secure servers protected by firewalls.

Payments:

If you choose a direct payment gateway to complete your purchase, Shopify will store your credit card data. It is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your purchase transaction data is stored only for as long as is necessary to complete the transaction. Once completed, your purchase transaction information is deleted. Offhoo does not store your credit card information.

All direct payment gateways adhere to the standards set by PCI-DSS, managed by the PCI Security Standards Council, which is jointly overseen by brands such as Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure processing of credit card information by our store and its service providers.

For more information, you may also read Shopify's Terms of Service or Privacy Policy.


5. Cookies

Like many websites, we use Cookies on our Website. For specific information about the Cookies used by our Shopify-powered store, please see Shopify's Cookie Policy. We use Cookies to operate and improve our Website and Services (including remembering your actions and preferences), to perform analytics and better understand user interaction with the Services (in line with our legitimate interest in managing, improving, and optimising the Services). We may also permit third parties and service providers to use Cookies on our Website to better tailor the services, products, and advertising on our Website and other websites.

Most browsers accept Cookies by default, but you can control your browser settings to remove or reject Cookies. Please note that removing or blocking Cookies may have a negative impact on your user experience and may cause parts of the Services, including certain features and functionality, to malfunction or become unavailable. Furthermore, blocking Cookies may not fully prevent us from sharing information with third parties such as advertising partners.


6. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy. Such circumstances may include:

  • With vendors or other third parties who provide services on our behalf (e.g., IT management, payment processing, data analytics, customer support, fulfilment and shipping).
  • With business and marketing partners, including Shopify, Google, Meta, and YouTube, to provide you with services and advertising. Our business and marketing partners will use your information in accordance with their own privacy notices.
  • When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to ship you products, through your use of social media widgets or login integrations.
  • With our affiliates or other members of our corporate group, for our legitimate interest in operating a successful business.
  • In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

We do not use or disclose sensitive personal information to infer characteristics about you.


7. User-Generated Content

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user-generated content to any public area of the Services, this content will be public and accessible by anyone.

We have no control over who will access the information you choose to make available to others, and we cannot guarantee that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information you make publicly available, nor for the accuracy, use, or misuse of any information you disclose or obtain from third parties.


8. Third-Party Websites and Links

The Website may provide links to websites or other online platforms operated by third parties. If you click on a link to a website that is not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such websites, including the accuracy, completeness, or reliability of the information contained on them. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of those third-party platforms, and is not subject to use restrictions by us or the third parties. The inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed in the Services.


9. How Long We Retain Your Information

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it was collected. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of your personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, as well as applicable legal requirements. We will also retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies. If you stop using our Services or delete your account, we will delete your information or store it in aggregated and anonymised format.


10. International Data Transfers

In certain circumstances, and in order to provide an efficient service, our technical service providers are located outside the European Economic Area. In particular, our store is hosted on Shopify Inc., which may transfer your personal data to the United States, a country in respect of which the European Commission has adopted an adequacy decision.


11. Children's Data

The Services are not intended for children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the effective date of this Privacy Policy, we have no actual knowledge that we collect personal information from children under 13 years of age online.

By using the Website, you represent that you are at least the age of majority in your state or province of residence, or that you have attained the age of majority in your state or province of residence and have given your consent to allow any of your minor dependents to use the Website.


12. Your Rights

You have certain rights regarding your personal data. Depending on your request, we may need to verify your identity before responding.

You may:

  • Request confirmation as to whether we are processing your personal data and, if so, access to that data (Right of Access).
  • Request rectification of inaccurate or incomplete personal data (Right to Rectification).
  • Request erasure of your personal data (Right to Erasure).
  • Request that we transfer your personal data to you or, where technically feasible, to another organisation (Right to Data Portability).
  • Request that we restrict the processing of your personal data (Right to Restriction of Processing).
  • Withdraw your consent where we have relied on your consent to process your personal data (Right to Withdraw Consent).
  • Object to the processing of your personal data where we are relying on a legitimate interest (Right to Object).
  • Lodge a complaint. If you are not satisfied with the way we process your personal data, you can contact us, and we will do our best to address your concerns. You also have the right to lodge a complaint with the local data protection authority, www.aepd.es.

To protect your data and confirm your identity, we may request additional information from you to verify the authenticity of your request or to help us locate the data we hold about you, such as account details or technical identifiers relating to your device or browser.

We aim to respond to your request within one month. If the request is complex or we have received multiple requests, the deadline may be extended in accordance with applicable data protection laws. If this occurs, we will notify you.

You may exercise these rights by contacting us using the following information:

  • By post addressed to our Data Protection Officer, at: CL RAMON VINAS, 62, NAVE SANT ADRIA DE BESOS 08930.
  • By email to: service@offhoo.com.
  • By customer service telephone: +34688003502.
  • Through any Offhoo customer service channel, if available.


13. Contact Information

If you have any questions about our Privacy Policy or this Privacy Policy, or wish to exercise any of the rights available to you, please contact us by email at: service@offhoo.com.