PRIVACY POLICY(References: GDPR arts. 6, 7, 12-22, 32; LOPDGDD arts. 6, 7, 17-22; Law 34/2002, art. 21)
1. Data ControllerIn accordance with Article 4.7 of the GDPR and Article 5 of the LOPDGDD, the data controller is:
LOOV GLOBAL INC., located at
700 N FAIRFAX ST STE 614, ALEXANDRIA, VA 22314.2. Personal Data ProcessedUnder Articles 6 and 13 GDPR:
•
Data provided by the user: name, phone number, email address, shipping and billing addresses, visual acuity information, eyeglass prescriptions, credit or debit card data.
•
Data collected through the website: geolocation and cookies (art. 22 Law 34/2002).
•
Exceptions: LOOV GLOBAL INC. does not knowingly collect or process data of minors under 18 years old (art. 8 GDPR, art. 7 LOPDGDD).
3. Data RecipientsAccording to Article 13.1.e GDPR and Article 20 LOPDGDD, data may be transferred to:
•
Service providers: hosting, e-commerce platforms, software, ophthalmology clinics, partner optical stores, delivery companies, payment providers (art. 28 GDPR — data processors).
•
Judicial, law enforcement or administrative authorities when legally required (art. 6.1.c GDPR).
•
Third-parties for corporate reasons (art. 21 LOPDGDD).
•
Third countries: Transfers follow Articles 44+ GDPR with SCCs, adequate safeguards or explicit consent (arts. 45-49 GDPR).
4. Purpose and Legal BasisAs set in Articles 6 and 7 GDPR and art. 6 LOPDGDD:
•
Service provision & notifications (art. 6.1.b GDPR — performance of contract; art. 6 LOPDGDD).
•
Website analytics & improvement (art. 6.1.f GDPR — legitimate interest).
•
Commercial & marketing communications (art. 6.1.a GDPR — consent; art. 21 Law 34/2002).
•
System & data security (art. 6.1.f GDPR; arts. 32 and 34 GDPR).
•
Legal compliance (art. 6.1.c GDPR, art. 22 LOPDGDD).
5. Data Storage PeriodAccording to Article 13.2.a GDPR and Article 32 LOPDGDD:
• Data will be retained for the duration of the contractual relationship and subsequently for the legal limitation period (up to
3 years after account deletion or last interaction unless otherwise required by law).
6. Data Subject RightsRecognized in Articles 15–22 GDPR and Articles 13–18 LOPDGDD:
•
Access (art. 15 GDPR, art. 13 LOPDGDD) – know what is processed and obtain a copy.
•
Rectification (art. 16 GDPR) – correct inaccurate or incomplete data.
•
Erasure (art. 17 GDPR, art. 15 LOPDGDD).
•
Restriction (art. 18 GDPR, art. 16 LOPDGDD).
•
Portability (art. 20 GDPR, art. 17 LOPDGDD).
•
Objection (art. 21 GDPR, art. 18 LOPDGDD) – including direct marketing.
•
No automated decisions (art. 22 GDPR, art. 14 LOPDGDD).
•
Right to lodge a complaint (art. 77 GDPR):
with LOOV GLOBAL INC. or the Spanish Data Protection Agency (AEPD, C/ Jorge Juan, 6, 28001 Madrid,
https://www.aepd.es/)
•
Exercise of rights: via account settings (if available) or email request (art. 12 GDPR).
7. Controller Obligations• Implement appropriate technical & organizational measures (art. 32 GDPR; art. 28 LOPDGDD).
• Data protection by design, contractual safeguards & DPIAs (art. 25 GDPR).
• Notify relevant changes and security breaches (arts. 13 & 34 GDPR; art. 33 LOPDGDD).
• Assist data subjects in exercising their rights (art. 12 GDPR; art. 13 LOPDGDD).
COOKIE POLICY(References: GDPR arts. 6, 13, 30; Law 34/2002 arts. 22–23)
Cookies are files stored on the user’s device when browsing certain websites, as stated in Article 22 of Law 34/2002 and Articles 6 and 13 GDPR.
1. Use of Cookies on Our WebsiteThe use of cookies on
www.loov.club complies with the purposes described, informing and requesting consent as required by art. 22.2 Law 34/2002 via a cookie banner.
2. Types of Cookies•
Necessary Cookies: essential for website functionality (art. 22.2 Law 34/2002), do not store meaningful personal data.
•
Functional Cookies: facilitate interaction and may relate to personal data (art. 6 GDPR — consent or legitimate interest).
•
Analytics Cookies: collect aggregated usage data for improvement (art. 6.1.f GDPR).
3. Cookie Duration & Removal• Cookies are stored for the period defined in internal policy — ranging from a session to several months (art. 13 GDPR).
• Users may delete cookies at any time via their browser settings (art. 22.2 Law 34/2002), except those strictly necessary for navigation.