Privacy Policy

Find here what is and is not done with your personal data on this website.
This policy explains how the personal information of all individuals who interact with MIMAEKIDS through this website will be handled and protected. Please read all sections of the Legal Notice, the cookie policy, and this privacy policy before using this website.
In accordance with the provisions of EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, MIMAEKIDS informs you that, by accepting this Privacy Policy, you provide your express, informed, free, and unequivocal consent for the Data you provide—to which the technical and organizational security measures provided for in current regulations apply—to be processed by MIMAEKIDS as the data controller.

WHO IS RESPONSIBLE FOR THIS WEBSITE?

1. Identity of the Controller: MAITE QUINTANA DE PAZ
2. Trade name: MIMAEKIDS
3. Tax ID (NIF/CIF): 16087599L
4. Email: MIMAEKIDS@GMAIL.COM
5. Activity: FASHION AND APPAREL
6. Contact details of the controller or representative, and the data protection officer if applicable: MIMAEKIDS@GMAIL.COM

WHAT PERSONAL DATA IS COLLECTED ON THIS WEBSITE?

For the purposes set out in this Privacy Policy, MIMAEKIDS collects and processes the Personal Data detailed below, which will depend on the different products or services you request on this Website:
Identifying data: name, surnames.
Contact data: postal address, email, mobile phone number.
Browsing data: IP address, device type and identification, browser type, domain through which you access the Website, browsing data, activity on the Website.

WHAT IS THE LEGAL BASIS FOR PROCESSING THIS DATA?

We process your personal data based on the following legal grounds:
• The performance of a contract with MIMAEKIDS for the contracting of services, publishing advertisements, and managing requested services.
• User consent in relation to contact, subscription to content, and the sending of commercial communications via email, cookies, or messaging systems.
• The legitimate interest of the data controller to protect users of the MIMAEKIDS website from abuse and fraud in the use of our services.

RETENTION PERIOD OF PERSONAL DATA

Customer Data: The retention period for personal data will vary depending on the service the Customer contracts. In any case, it will be the minimum necessary, and may be kept for up to:
– 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, payment of wages...); Arts. 66 et seq. General Tax Law (accounting books...).
– 5 years: Art. 1964 of the Civil Code (personal actions without a special time limit).
– 6 years: Art. 30 of the Commercial Code (accounting books, invoices...).
– 10 years: Art. 25 of the Law on the Prevention of Money Laundering and Terrorist Financing.
Subscriber data: From the time the user subscribes until they unsubscribe.
Potential customer data: data will be kept in any case during the term of the established commercial relationship and, once concluded, for two years, unless the user requests its deletion sooner.

WHAT ARE YOUR RIGHTS REGARDING THE USE OF YOUR DATA?

Any person has the right to obtain confirmation as to whether or not we at MIMAEKIDS are processing personal data concerning them.
Interested parties have the right to:
• Request access to the personal data concerning the interested party.
• Request its rectification or deletion.
• Request its cancellation.
• Request the limitation of its processing.
• Object to the processing.
• Request data portability.
If you have given your consent for any specific purpose, you have the right to withdraw the consent granted at any time, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.
In the event that you feel your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority via its website: https://www.aepd.es/es
To exercise these rights, you can write to MIMAEKIDS@GMAIL.COM, requesting a form from MIMAEKIDS, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
These forms must be electronically signed or accompanied by a photocopy of your National ID (DNI).
If you are represented by someone else, you must attach a copy of their ID, or it must be signed with their electronic signature.
The forms can be submitted in person, sent by mail, or by email to the controller's address that appears at the beginning of this text.

NOTIFICATION AND DECLARATION OF BREACHES

Security notification and declaration of breaches

At MIMAEKIDS, we implement security measures appropriate to the level of risk to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of the personal information; however, if MIMAEKIDS determines that your service data has been misappropriated (including by a MIMAEKIDS employee), has been exposed due to a security breach, or has been acquired improperly by a third party, MIMAEKIDS will inform you immediately of said security breach, appropriation, or improper acquisition.

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Many tools used on this website to manage data are contracted from third parties. To provide services strictly necessary for the development of our activity, MIMAEKIDS shares data with the following providers under their corresponding privacy conditions:
External service providers (e.g., payment processing, order processing, analytics, marketing campaign management, website management, and email distribution and other similar service providers) so that they can perform commercial functions on behalf of MIMAEKIDS.
The web development and maintenance company, or the hosting company, may occasionally have access to this website. They have signed a service provision contract that obliges them to maintain the same level of privacy that applies to the processing carried out on this website.
Any international data transfer derived from the use of tools or service providers will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies regarding privacy, secrecy, and data security.

SECRECY AND DATA SECURITY

MIMAEKIDS commits to the use and processing of the user's personal data, respecting its confidentiality, in accordance with the purpose thereof, as well as to fulfill its obligation to store it and adapt all measures to prevent alteration, loss, unauthorized processing, or access, in accordance with the provisions of current data protection regulations.
(This website includes an SSL certificate. It is a security protocol that ensures your data travels in an integral and secure manner; that is, the transmission of data between a server and the web user, and in feedback, is fully encrypted.)
MIMAEKIDS cannot guarantee the absolute impregnability of the Internet network, and therefore, the violation of data through fraudulent access by third parties.
Regarding the confidentiality of processing, MIMAEKIDS will ensure that any person authorized by MIMAEKIDS to process client data (including its staff, collaborators, and providers) will be under an appropriate obligation of confidentiality (whether a contractual or legal duty).
When a security incident occurs, upon becoming aware of it, MIMAEKIDS must notify the Customer without undue delay and must provide timely information related to the Security Incident as it becomes known, or when the customer reasonably requests it.

ACCURACY AND TRUTHFULNESS OF DATA

As a user, you are solely responsible for the truthfulness and accuracy of the data you submit to MIMAEKIDS, exempting MIMAEKIDS from any responsibility in this regard. Users guarantee and respond, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the contact or subscription form.

REVOCABILITY

The consent given, both for the processing and for the transfer of the data of the interested parties, is revocable at any time by notifying MIMAEKIDS under the terms established in this Policy for the exercise of ARCO rights. This revocation shall in no case have retroactive effect.

CHANGES TO THE PRIVACY POLICY

MIMAEKIDS reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as to industry practices. In such cases, it will announce the changes introduced on this page with reasonable notice before their implementation.