Privacy policy

PRIVACY POLICY

1. WHO IS RESPONSIBLE FOR YOUR DATA?

CLASSIFIED FLS STUDIO, S.L., trading as Classified, is responsible for the personal data processed in connection with classified-files.com.

Spanish tax identification number: B22925655.
Address: Calle de Iriarte 7, piso 3, 28028 Madrid, Spain.
Email: management@classified-files.com.

This policy explains how we process personal data when you visit our store, purchase products, contact us or subscribe to our communications.

1. PERSONAL DATA WE PROCESS

Depending on your interaction with us, we may process:

• Identification and contact details, including your name, email, telephone number and delivery and billing addresses.
• Order and transaction information, including products, payments, discounts, deliveries, returns and refunds.
• Account information, where you use customer account features.
• Information you provide in enquiries, support requests or complaints.
• Marketing preferences and records of consent, subscriptions and withdrawals.
• Technical and browsing information, such as IP address, device identifiers and interactions with the store, depending on the technologies used and your privacy choices.

Payment details are processed through the payment providers available at checkout. The information available to us depends on the payment method and is limited to what is needed to manage the transaction.

Required information is identified when it is requested. If you do not provide information necessary for a purchase or request, we may be unable to complete it.

1. PURPOSES AND LEGAL BASES

Orders and after-sales services

We process data to manage purchases, payments, deliveries, returns, statutory guarantees and related communications. This is necessary to perform our contract with you or take steps at your request before entering into a contract.

Customer support

We process enquiries related to purchases on the basis of our contractual relationship. For other enquiries, we rely on our legitimate interest in responding to communications addressed to our business, limited to what is necessary for that purpose.

Legal obligations

We process information to comply with tax, accounting, consumer protection, product safety and data protection obligations, and to respond to lawful requests from competent authorities.

Marketing communications

We send newsletters, product announcements and offers when you have consented. Where legally permitted, we may also contact existing customers about our own similar products, provided the applicable requirements are met and an opportunity to object has been offered.

You can unsubscribe using the link in our marketing emails or by contacting management@classified-files.com.

Unsubscribing does not prevent us from sending necessary order, delivery, return or product safety communications.

Analytics and advertising

Where the required consent has been obtained, we may use cookies, pixels and similar technologies to analyse store usage, measure campaigns and personalise advertising.

These activities may involve information about pages visited, products viewed and interactions with the store. The applicable technology, purpose, provider and duration must be disclosed through the relevant cookie information and consent interface.

Security and fraud prevention

We may process transaction and technical information to protect the store and prevent misuse or fraud. The legal basis is our legitimate interest in maintaining a secure service, balanced against your rights, or compliance with a legal obligation where applicable.

1. SERVICE PROVIDERS AND RECIPIENTS

Data may be shared, where necessary, with:

• Shopify, which provides our ecommerce platform and associated services.
• Payment providers, to process payments, refunds and transaction checks.
• Carriers and logistics providers, to deliver orders and manage returns.
• Klaviyo, to manage subscriptions and marketing communications.
• Analytics and advertising providers, including Google and Meta, where their services are used and the necessary legal basis exists.
• Business management and accounting providers, including Holded, and professional advisers.
• Public authorities and courts where disclosure is legally required.

Providers may act on our instructions as processors or as independent controllers for certain activities. Their own privacy information also applies to those independent activities.

Shopify may process data as an independent controller for certain services. Further information is available at:
https://www.shopify.com/legal/privacy

1. INTERNATIONAL TRANSFERS

Some providers may process personal data outside the European Economic Area.

Where this involves a restricted international transfer, an appropriate legal mechanism is required, such as an adequacy decision or the European Commission’s standard contractual clauses, together with supplementary measures where necessary.

You can contact us for information about the safeguards applicable to your data and how to obtain a copy.

1. RETENTION

We retain data only for as long as necessary for its purpose and applicable legal obligations:

• Order and after-sales data: while managing the purchase and for the applicable guarantee and legal liability periods.
• Tax and accounting documentation: for the legally required periods. Commercial records subject to the Spanish statutory retention obligation are generally retained for six years, without prejudice to other applicable periods.
• Enquiries: until resolved and, where necessary, for the period required to address related liabilities.
• Marketing data: until you withdraw consent or object. Limited information may be retained to respect your unsubscribe request and demonstrate compliance.
• Cookies and similar technologies: for the periods disclosed in the relevant cookie information.

Where required by Spanish law, data will be blocked and retained solely for handling legal liabilities before being deleted.

1. YOUR RIGHTS

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing.

You can object to direct marketing at any time.

Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

You also have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, subject to the statutory exceptions.

Contact management@classified-files.com to exercise your rights. If there are reasonable doubts about your identity, we may request proportionate additional information.

We normally respond within one month. If a lawful extension is necessary, we will inform you within that initial month.

You may complain to the Spanish Data Protection Agency at www.aepd.es or another competent supervisory authority.

1. SECURITY

We apply technical and organisational measures appropriate to the risks to protect personal data against unauthorised access, loss, alteration or disclosure.

1. CHANGES

We may update this policy to reflect changes to our services or legal obligations. Where a change requires additional information or fresh consent, we will provide that information or request consent before the relevant processing takes place.