Privacy Policy
1. Who is the Data Controller responsible for processing your data?
- Identity of the Controller: Sklum Home and Deco S.L. (hereinafter, "Sklum")
- Tax Identification Number (NIF): B98845936
- Registered office: Partida Tancaes, s/n, 46720 Villalonga (Valencia), Spain
- Data Protection Officer (DPO): rgpd@sklum.com
2. What personal data do we process and how do we obtain it?
We collect your personal data mainly when you interact with our web platform, purchase our products, or subscribe to our communication channels.
The categories of data we process include:
- Identification and contact data: First name, last name, postal address, email address, and mobile phone number.
- Transaction and purchase data: Details of purchased products, payment method, and order history.
- Browsing and preference data: IP address, device data, browsing habits, and interaction history through cookies, as well as the traceability of interaction with our email communications (record of opens, clicks, links consulted, IP address, and email client) using pixels and similar tracking technologies.
- Audiovisual data (Events): Image and/or voice captured during your attendance or participation in events organized by Sklum.
3. For what purpose and legal basis do we process your data?
| Treatment / Activity | Purpose | Legal Basis |
|---|---|---|
| Management of purchases and user account | To process your orders, manage product shipping, issue invoices, handle post-sale requests, administer your user account, and send satisfaction surveys to evaluate your shopping experience. | Execution of the purchase agreement (Art. 6.1.b GDPR) and legitimate interest in evaluating the quality of our products and services (Art. 6.1.f GDPR). |
| Assistance in the purchase process | To contact you in case you leave an incomplete purchase to remind you of the selected products or assist you in completing the order. | Legitimate interest in facilitating your initiated purchase (Art. 6.1.f GDPR). |
| Sending commercial communications, personalized newsletters, and purchase process assistance (Abandoned Cart) | To manage your subscription to send you offers, updates, promotions, discounts, product suggestions, and reminders of incomplete purchases (abandoned cart) by email. Furthermore, we will analyze your interaction with our email communications (opens, clicks, IP, and device) and your browsing behavior on the site to adapt content, recommendations, and offers to your interests. | Explicit consent of the user granted by ticking the corresponding box in our forms, pop-ups, or registration/purchase processes (Art. 6.1.a GDPR, Art. 21.1 LSSI-CE, and Art. 22.2 LSSI-CE). |
| Commercial communications channel via WhatsApp | Sending promotions, updates, discount codes, and personalized informative content via WhatsApp. | Explicit consent granted by ticking the corresponding box in our forms or pop-ups (Art. 6.1.a GDPR and Art. 21.1 LSSI-CE). |
| Customer service and contact form | To respond to inquiries, complaints, or information requests made through our official channels. | Management of pre-purchase information requests or legitimate interest in attending user inquiries (Art. 6.1.f GDPR). |
| Brand events and audiovisual material | Broadcasting images/videos of the event on corporate channels (social networks, website, intranet) for brand promotion, sending download links for audiovisual material, as well as sending satisfaction surveys regarding the event. | Consent of the attendee upon registering for or participating in the event (Art. 6.1.a GDPR). |
4. To which recipients do we communicate your data?
In order to provide our services, we share your data with trusted providers who act as Data Processors under strict security conditions:
- Packaging and transport/logistics entities for order delivery.
- Payment gateways and financial institutions.
- Technology service providers, automation and email marketing platforms (such as Bloomreach or HubSpot), analytics tools, and communication management tools (such as WhatsApp).
- Public authorities and official bodies when there is a legal obligation to communicate data.
We do not sell or transfer your personal data to third parties for their own commercial purposes without your express consent.
5. International data transfers
For the provision of certain services (such as sending notifications via WhatsApp or using cloud technology tools), we use providers located outside the European Economic Area (EEA), mainly in the United States (Meta Platforms, Inc. / WhatsApp LLC).
These international transfers are carried out with all applicable legal guarantees, covered under the framework of the EU-U.S. Data Privacy Framework (DPF) —Adequacy Decision of the European Commission— and/or through the execution of Standard Contractual Clauses (SCC) approved by the European Commission.
6. Retention period and data blocking
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or while a contractual or commercial relationship with us is maintained.
Once the relationship ends, unsubscription is requested, or your consent is revoked:
- Your data will be immediately disabled for any active processing or sending of communications.
- It will be kept duly blocked at the exclusive disposal of Judges and Courts, the Public Prosecutor, the Spanish Data Protection Agency, and other competent Public Administrations (such as Tax or Consumer protection authorities) to handle potential liabilities arising from processing, until the prescription of legal actions that could arise from the relationship maintained (ranging, according to the nature of the data and applicable legal obligation, between 3 and 6 years). After these legal limitation periods expire, the data will be permanently deleted.
7. What are your rights and how can you exercise them?
You have the right to:
- Access: Know if we are processing your data and access it.
- Rectification: Request the correction of inaccurate or incomplete data.
- Erasure ("Right to be forgotten"): Request the deletion of your data when it is no longer necessary.
- Object: Object at any time to the processing of your data for commercial purposes.
- Restriction of processing: Request the suspension of processing in legally provided scenarios.
- Data portability: Receive your data in a structured, commonly used, and machine-readable format.
- Withdraw consent: Withdraw previously granted authorizations at any time.
To exercise any of these rights or contact our Data Protection Officer (DPO), you can send a written request to rgpd@sklum.com specifying in the subject line "Exercise of GDPR Rights".
If you consider that we have not properly addressed your rights, you can file a complaint with the Spanish Data Protection Agency at www.aepd.es.
8. Information regarding data processing on the WhatsApp Channel
8.1. Data Controller and DPO Contact
- Identity: Sklum Home and Deco S.L.
- NIF: B98845936
- DPO Contact and Exercise of Rights: rgpd@sklum.com
8.2. Purpose of processing
At Sklum, we process the provided information to manage your subscription to the WhatsApp channel and keep you informed by sending commercial communications, promotions, discount codes, updates, marketing campaigns, and personalized informative content regarding our products and services.
Providing your mobile phone number is essential for the provision of this service. No automated decisions will be made, nor will profiles with legal effects be drawn up based on the data provided.
8.3. Retention and Blocking
Data will be actively retained as long as you do not withdraw your consent or request unsubscription. After unsubscription, the data will be kept blocked for a period of 3 years pursuant to Article 78 of the LOPDGDD to address potential legal liabilities before its definitive destruction.
8.4. Lawfulness of processing
The legal basis is the explicit consent provided by affirmatively ticking the verification box in our web forms, pop-ups, checkout, or client portal (Article 6.1.a GDPR and Article 21.1 LSSI-CE).
8.5. Guarantee of confidentiality and recipients
Communications via WhatsApp are conducted individually through management tools and broadcast lists that preserve user confidentiality at all times, preventing other recipients from accessing your phone number. Users will not be included in public groups, nor will data be shared with third parties except under legal obligation or to processors under contract.
8.6. International Transfers
The use of WhatsApp implies international transfers to the USA (Meta Platforms, Inc. / WhatsApp LLC). These transfers are guaranteed through certification under the EU-U.S. Data Privacy Framework (DPF) and/or the signature of Standard Contractual Clauses (SCC) of the European Commission.
8.7. Revocation of consent and unsubscription from the service
You can revoke your consent and unsubscribe from WhatsApp communications at any time directly, free of charge, and immediately by sending the word “STOP” directly in the Sklum WhatsApp chat, or by writing an email to rgpd@sklum.com.