Introduction and summary

Your privacy is important to us META MOBILITY SL. In this policy, we would like to inform you about how we process your personal data and your rights. Personal data represents information that can be associated with you as a natural person, for example, your META MOBILITY SL. and contact information.

In short, we will process your data for these reasons:

• To provide you with offers and inspiration, both through newsletters and through targeted marketing proposals on social media, other online and offline media.
• To communicate with you and answer your questions.
• To manage ratings and reviews of our products.
• To remind you that you have abandoned a shopping cart and to provide you with our wall image product.
• To create and maintain a customer account (including items such as favorites).
• To comply with mandatory legislation (e.g., consumer protection legislation and accounting legislation).

You have several rights under data protection law. For example, you always have the right to object to marketing. You can also read information about how to control our processing of your personal data, i.e., your rights regarding it.

Would you like more information? You can read our detailed explanations below. Further information on how, why, and for how long we will process your personal data is also available.

Who is responsible for processing your personal data?

META MOBILITY SL with a Spanish tax identification number B-09664871, [Company Name], is responsible for processing your personal data. Please also note that our payment providers process personal data collected through our website at the time of purchase and are independently responsible for its processing. If you wish to contact us regarding how we process your personal data, please email us at [email address]. hola@vanvan.com

Where or from whom do we collect your personal data?

We process the personal data that you have chosen to share with us.

Who can access your personal data?

Your personal data will be processed primarily by us in META MOBILITY SL. We will never sell your personal data. In some cases, however, we will share your personal data to fulfill our obligations to you properly and effectively.

• In order to ensure that you have made your payments, our payment providers may access your personal data.
• In order to deliver your products to the postal address or to the premises of an intermediary, as well as to manage any returns, we will share your personal data with a transport agency.
• In order to publish your reviews on our website, we will share your personal data with the provider that facilitates the technical solution for publishing such reviews.
• If a friend refers you to us, we will share a hash (text ID) of your email address with a service provider that helps us enable friend referrals. This allows us to determine whether or not we should pay the service provider for referring a new customer.
• With the aim of marketing relevant products and making our website as relevant as possible, we will share your personal data with those entities that provide us with a service to help us with your marketing, including Google and Facebook.
• We will share your personal data with IT providers who process personal data in META MOBILITY SL in the capacity of processors to help us with IT services.

If you would like more detailed information about which entities we share your personal data with, please do not hesitate to contact us.

Do we transfer your personal data outside the EU/EEA territory?

As a general rule, in META MOBILITY SL We process your personal data within the EU/EEA. However, in some cases, we use suppliers located in countries outside the EU/EEA. When transferring your personal data outside the EU/EEA, in META MOBILITY SL We will ensure that there is an adequate level of protection.

META MOBILITY SL  We may transfer your personal data to the USA and to the provider that provides a service to send newsletters as well as to providers that provide services to market relevant products and make our website the most relevant platform possible.

Any US-based provider is certified under the Privacy Shield program. Privacy Shield is an agreement between the EU and the US designed to protect the fundamental rights of Europeans and ensure the legal security of business transfers of personal data to the US. US companies can enroll in the Privacy Shield certification program through the US Department of Commerce. The Department of Commerce will verify that providers' privacy policies comply with the strictest data protection standards.

If you have any questions about how we share your personal data, or if you would like information about the corresponding security measures we have implemented, please contact us.

How can you influence how we process your personal data?

In accordance with data protection legislation, you can exercise a set of rights that will influence how we process your personal data. You can find more information below.

Right to withdraw your consent and object to processing

You have the right to withdraw, in whole or in part, your consent to the processing of your personal data. This withdrawal will be binding from the moment you exercise it. You have the right to object to our processing of your personal data. Furthermore, you always have the right to object to our marketing communications, such as newsletters.

In some other cases, the right to object will not be possible (e.g., because we are required to store your personal data). You will have the right to object to the processing of your data when it is based on a balancing of legitimate interests. To understand what this means, you can find more information below. If we can demonstrate compelling legitimate grounds for processing your data that override your interests and fundamental rights, or if the processing is carried out for the establishment, exercise, or defense of legal claims, you will not have the right to object to its processing.

Right of access

You have the right to obtain confirmation as to whether or not we process personal data concerning you. You may access and obtain a copy of the personal data we have processed.

Right of rectification

You will have the right to rectify any inaccuracies in the personal data relating to you and to request that we complete any incomplete personal data.

Right to erasure ("right to be forgotten") and limiting the processing

In certain circumstances, you have the right to request the erasure of your personal data. This is the case, for example, when personal data is no longer necessary for the purpose for which it was collected or otherwise processed, when you withdraw your consent on which the processing is based, or when there is no other legal basis for continuing to process it.
You will also have the right to request that META MOBILITY SL limit the processing of your personal data. This will be the case, for example, when you contest the accuracy of the personal data, or when the processing is unlawful and you oppose its deletion and instead request its restricted use.

Right to lodge a complaint with a supervisory authority

You will always have the right to file a complaint with a supervisory authority.
You may do so, specifically, in any of the EU/EEA Member States in which you have your habitual residence or place of work, or in which the applicable data protection laws have allegedly been infringed. In Spain, the supervisory authority is the Swedish Data Protection Authority. This right is granted without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to request the transfer of some of your personal data that we hold to another company (data portability).
This right will apply to the personal data you have provided to us in a structured, commonly used, machine-recognizable and interoperable format if:

• the processing is based on your consent or a contract; and if
• The processing is carried out through automated means.

By exercising your right to data portability, you will have the right to have your personal data transmitted directly from META MOBILITY SL to another controller, when this is technically possible.

How and why do we process your personal data?

Our aim is to be as transparent as possible regarding how and why we process your personal data. The table provides more detailed information about why we process your personal data (the purposes of processing), what personal data we process, our legal basis for processing your personal data, and how long we will process this data for each purpose.

Processing of data before making a purchase

We need to process your personal data to communicate with you, to save any experiences or preferences you may have had, and to receive your feedback. If you do not provide your personal data for these purposes, we will not be able to provide you with the service or answer your question.

For what purposes do we process your personal data?	What personal data do we process?	What is our legal basis for processing your personal data?	How long do we process your personal data for specific purposes?
To save your abandoned shopping cart and remind you that you have left a product in the cart, in case you started a purchase by entering your email address.	Information about your shopping cart and the email address you provided when you started the purchase.	Our legitimate interest is to make it as easy as possible for you to purchase the product you have shown interest in by adding it to your cart.	From the moment you add the product to the shopping cart until the time of purchase and for a period not exceeding five (5) days.
To save your preferences and receive your feedback about our services.	Your email address and the preferences you chose, as well as cookies. We also process any information you provide when making a comment.	The processing of your data is necessary to fulfill the contract established between you and us.	For one (1) year, from the date you acquired our services.
To answer any questions you may have.	Your contact details, the questions you send us, as well as other information you provide to us.	The processing of your data is also necessary to execute the contract we have entered into with you.	For three (3) years or for the time required by law.

Data processing is necessary to complete the purchase and fulfill our agreement, etc.

In order for us to process your purchase (for example, to provide you with the service), we need to process your personal data. We also need to process your personal data to comply with legal or other requirements, such as data retention requirements under accounting legislation and consumer protection laws. If you do not provide us with the personal data for these purposes, we will not be able to complete your purchase on our platform.

Please note that our payment providers also process your personal data to manage your order payment. They are independently responsible for this processing. Our payment providers also offer a simpler way to complete your purchase by automatically filling in your personal details or by allowing them to remember your details on your device.

For what purposes do we process your personal data?	What personal data do we process?	What is our legal basis for processing your personal data?	How long do we process your personal data for specific purposes?
To manage your purchase, that is, to know who we have an agreement with, to confirm your purchase, to provide you with our service, and to communicate with you regarding your delivery.	Your contact details (such as an email address), delivery address, order details, chosen payment method, and IP address.	The processing of your data is also necessary to execute the contract we have entered into with you.	12 months since the order was placed.
In case you wish to exercise your right to withdraw or modify your service, and so that we can comply with legislation relating to consumer protection.	Your phone number, email address, postal address and details about the purchase (e.g., payment method). We also store the data you have shared when exercising your right to withdraw or when modifying your product.	The processing is necessary to perform our contract with you and for us to comply with applicable consumer protection legislation.	From the moment you make the purchase until twelve (12) months have passed, so that we can comply with consumer protection legislation. If you decide to exercise any of your rights, we will process your personal data until we have made a decision regarding the cancellation or modification of the product, and until we have completed any applicable refund or sent you the new product.
To handle any claim and/or legal dispute that may be brought against us.	Your contact details, information that you have provided and that is relevant in the context of the claim and/or legal dispute.	The processing is necessary so that we can comply with the relevant consumer protection legislation and with our legitimate interest in handling claims and/or defending ourselves against legal claims.	From the moment your complaint and/or legal dispute comes to our attention, and for the duration of its existence. If your claim is rejected, we will always store a portion of the information for twelve (12) months in case you wish to review this legal dispute before the appropriate authority.
In order to comply with legal obligations, that is, with accounting legislation and with laws relating to the prevention of money laundering.	Information about your invoice (such as purchase history and contact details).	The processing is necessary so that we can comply with the relevant legislation.	From the moment you make the purchase and for seven (7) and eight (8) years as established in the accounting law of Spain, as well as between five and ten (5-10) years in accordance with the legislation on the prevention of money laundering.
If a friend refers you to our website, we will process your personal data in order to pay our provider who offers a friend referral solution.	A hash number (text ID) of your email address.	Our legitimate interest is to ensure that we only pay our supplier for those purchases from new customers that those suppliers have referred to us.	Your email address will never be saved for this purpose.

Processing for managing classification 

For what purposes do we process your personal data?	What personal data do we process?	What is our legal basis for processing your personal data?	How long do we process your personal data for specific purposes?
To send emails requesting reviews after your purchase	Our legitimate interest is to contact you with a request to rate or review your purchase and experience in order to improve future experiences for you and other customers.	Our legitimate interest is to contact you to request that you rate or review the service you have purchased.	Until we have sent you our request.

Processing to manage your customer account

In order to manage your customer account, we process your personal data to fulfill our contract with you. If you do not provide us with your personal data for this purpose, we will not be able to provide you with a customer account.

For what purposes do we process your personal data?	What personal data do we process?	What is our legal basis for processing your personal data?	How long do we process your personal data for specific purposes?
To manage the customer account you have created. This includes sending you updates about your account and our privacy policy. It also includes processing your data to take necessary security measures regarding your account.	Your personal identification number, email address, mobile phone number, cookies and IP address, and postal address where you want us to deliver the services.	Processing your data is necessary to fulfill our contract and provide you with an account (if you choose to create one). Processing your data to send you our privacy policy is necessary to comply with data protection laws and regulations.	We store your personal data from the moment you make a purchase and for twelve (2) years from the last time you logged in, or until you request the deletion of the account.

Processing to communicate news, inspiration, and offers relevant to the customer

For what purposes do we process your personal data?	What personal data do we process?	What is our legal basis for processing your personal data?	How long do we process your personal data for specific purposes?
To send you electronic newsletters and special offers at your request, as well as to send you marketing information after you have made a purchase.	Your email address and your order ID.	If you choose to subscribe to our newsletter, we will process your personal data based on your consent. When you make a purchase, we will process your personal data based on our legitimate interest in sending you relevant direct marketing material. We will only do so if you have made a purchase on our platform and have not objected to receiving marketing material.	If you have opted to receive newsletters and relevant offers, we will continue to send you these newsletters until you cancel your subscription. If we send you a newsletter based on our legitimate interest, these marketing information mailings will be sent for two (2) years, unless you object before the end of that period to continue receiving marketing material.
To conduct targeted marketing to you on social media and third-party websites.	Your email address, cookies, and IP address.	Our legitimate interest is to use your personal data for direct marketing purposes and to provide you with relevant information. We will only do so if you have made a purchase on our platform and have not objected to receiving marketing materials.	Your personal data will be processed from the moment you make a purchase and for two (2) years, unless you object before the end of this period to us carrying out marketing activities with your data.
To publish a review that you have decided to write and to market both the product and our brand to potential customers.	The information you left in the comment.	Our legitimate interest is to publish the comment you have written.	Until you remove the review you made about the service.
In order to market our services on our website, we may publish the product images that you have shared on Instagram.	The image/video that she shared on social media, her META MOBILITY SL. User ID and the text you have written. This data may include personal information about you.	Our legitimate interest is to publish the image/video that you have tagged #META MOBILITY SL..	Until you declare that you no longer wish us to display the image/video on our website.