At Stravagatto SA de CV, we are committed to protecting your privacy and ensuring the responsible handling of your personal data. This Privacy Notice outlines how we collect, use, store, and protect your personal information when you interact with our products and services, regardless of their nature.
1. Data Controller
The data controller responsible for your personal data is Stravagatto SA de CV, with its registered address at Edificio Spectrum, Av. Sayil, Mz. 5 Lt. 2, Cancún, Quintana Roo, México. For any inquiries regarding this Privacy Notice, you can contact us at privacy@stravagatto.com.
2. Personal Data We Collect
Depending on the nature of the interaction, we may collect the following categories of personal data:
- Contact information (name, email address, phone number).
- Browsing information and device details (cookies, IP address, browser type, preferences).
- Transaction and service-related data.
- Any other data you provide directly through forms, surveys, or interactions with our customer service.
3. Purposes of Processing Personal Data
The personal data we collect will be processed for the following purposes:
- Primary Purposes: To provide the requested products and services, manage commercial relationships, process payments, fulfill contractual obligations, and respond to inquiries.
- Secondary Purposes: To send promotional information, conduct customer satisfaction surveys, perform statistical analyses for product and service improvement, and personalize the user experience.
If you do not wish for your data to be used for secondary purposes, you may exercise your right to object by sending a request to privacy@stravagatto.com.
4. Use of Cookies and Similar Technologies
We use cookies and other tracking technologies to enhance your experience on our platform, analyze site usage, and personalize the content we show you. You can manage your cookie preferences at any time through your browser settings or by accessing our [Cookie Policy].
5. Sharing of Personal Data with Third Parties
We may share your personal data with third parties when necessary to fulfill the purposes mentioned above, such as:
- Service providers for technological solutions and payment processing.
- Business and strategic partners that help us improve our products and services.
- Competent authorities when required by law or in response to legal processes.
In all cases, we ensure that third parties with whom we share your data are bound by the same confidentiality and security obligations.
6. International Data Transfers
If your data is transferred to other countries for processing, we ensure that these transfers are conducted in compliance with applicable data protection laws and with the necessary security safeguards in place.
7. Security of Your Personal Data
We implement physical, technical, and administrative security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, please note that no system is entirely foolproof.
8. Rights of Data Subjects
You have the right to access, rectify, cancel, or object (ARCO rights) to the processing of your personal data. To exercise these rights, send a request to privacy@stravagatto.com, providing your full name, the right you wish to exercise, and any other information that will help us process your request efficiently.
For residents of the European Union or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to restrict processing. For residents of California, the California Consumer Privacy Act (CCPA) provides rights such as opting out of the sale of personal data.
9. Changes to the Privacy Notice
This Privacy Notice may be updated to reflect changes in our practices or to comply with applicable regulations. Any modifications will be published on our website, so we encourage you to review this section periodically.
10. Acceptance of the Privacy Notice
By interacting with us, using our services, and providing your personal data, you accept the terms of this Privacy Notice. If you do not agree with the terms, we request that you do not provide your personal data or use our services.
Compliance Considerations:
- For Mexico: This translation adheres to the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), including provisions for ARCO rights and data transfers.
- For the United States (CCPA): The notice includes specific rights for California residents under the California Consumer Privacy Act, such as the right to opt out of data sales.
- For Canada (PIPEDA): The Personal Information Protection and Electronic Documents Act (PIPEDA) is addressed through transparency in data usage and security measures.
- For the European Union and the United Kingdom (GDPR): This version includes additional rights granted under the General Data Protection Regulation (GDPR), such as the right to data portability and restricting processing.
- International Data Transfers: The notice ensures compliance with international data transfer laws, including those under the GDPR and Privacy Shield (though the Privacy Shield is no longer valid post-Brexit, alternative safeguards like Standard Contractual Clauses (SCCs) are necessary).
