Privacy Policy

Privacy Policy

At Sosomo, I take the protection of your personal data seriously. In this document, I clearly explain how and why I use it.

Data Controller

Controller: SOSOMO (Sosomo Rugs)
Contact: ventas@sosomorugs.com
Applicable legal framework: Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. What personal data do I process?

Depending on how you interact with the website or with me, I may process:

  • Identification and contact information: name, surname, email address, telephone number, postal address.
  • Purchase and billing information: products purchased, shipping address, billing information, VAT number where applicable.
  • Payment details: payment is processed through secure payment gateways; I do not store your full card number.
  • Communications: information that you send me by email, contact forms, or, where applicable, subscription to commercial communications.
  • Usage data and web analytics: information associated with cookies or similar technologies (see Cookie Policy).

2. What do I use your data for?

I use your personal data to:

  • Managing our relationship with you: processing orders and requests, managing payments, shipments and possible returns, and handling inquiries or requests for information.
  • Sending you commercial communications when we have your consent or a legitimate interest in the B2B field: news from the atelier, new pieces, special editions, information on tailor-made services and professional catalogs.
  • Ensuring security and preventing fraud: anti-fraud checks linked to payments and orders, and measures to protect the website and systems against abusive use.
  • Perform website analytics and improvement: compile aggregated and anonymous statistics to better understand website usage and improve the user experience.

3. Legal basis for processing

I process your personal data based on the following legal grounds:

  • Execution of a contract or application of pre-contractual measures: when you buy a piece, request an order, or ask me for a quote or information.
  • Consent: when you agree to receive commercial communications or when you accept certain non-technical cookies.
  • Legitimate interest: for certain marketing actions in the B2B environment and to guarantee the security of the website and transactions, always assessing your privacy beforehand.
  • Legal obligation: for compliance with tax, accounting and other obligations required by applicable regulations.

4. With whom do I share your data?

I only share your data with third parties when necessary and always under conditions of confidentiality and legal compliance:

  • Service providers necessary for the activity: transport and logistics companies, payment gateways and financial institutions, technical support providers, hosting and analytics providers. All of them act according to my instructions, through the corresponding data processing agreements when necessary.
  • Public administrations and authorities: when there is a legal obligation to communicate (for example, tax obligations or requirements of authorities).

I do not sell your personal data to third parties.

5. International Transfers

If at any time I use service providers located outside the European Economic Area, I will ensure that they offer adequate safeguards, for example through adequacy decisions by the European Commission and/or through Standard Contractual Clauses or other safeguards recognized by the GDPR.

6. Storage periods

I will keep your data only for as long as necessary for each purpose:

  • Order, billing and accounting data: will be kept for the periods required by tax and commercial legislation.
  • Data used for commercial communications: until you request to unsubscribe, object to the processing or it no longer makes sense to keep them.
  • Data related to cookies and analytics: according to the timeframes indicated in the Cookie Policy.

Once the relevant time periods have elapsed or when they are no longer needed, the data will be blocked and, where appropriate, securely deleted.

7. Your rights

You can exercise the following rights regarding your personal data at any time:

  • Access: knowing what data I have about you.
  • Rectification: correcting inaccurate or incomplete data.
  • Deletion: request that your data be deleted when legally possible.
  • Opposition: to oppose certain treatments (e.g., marketing).
  • Limitation of processing: request that the use of your data be limited in certain cases.
  • Portability: to receive your data in a structured and commonly used format, or to request that it be transferred to another controller.
  • Withdrawal of consent: when the legal basis is consent, you can withdraw it at any time.

To exercise these rights, you can write to me at ventas@sosomorugs.com indicating your name, the right you wish to exercise and, if necessary, some information that allows us to locate you in the system.

If you believe your rights have not been properly addressed, you can file a complaint with the competent supervisory authority. In Spain: Spanish Data Protection Agency (AEPD) — www.aepd.es.

8. Commercial communications and cancellation

When I send you marketing communications (for example, newsletters or information about new pieces):

  • I will send them to you only if I have a legal basis for doing so (consent or legitimate B2B interest).
  • You can unsubscribe at any time via the link included in each email, by managing it from your customer area (if one exists) or by writing to me at ventas@sosomorugs.com indicating that you do not wish to continue receiving them.

9. Cookies and analytics

At Sosomo I use cookies and similar technologies to remember your browsing preferences, improve website performance, and compile aggregated and anonymous statistics.

You can configure, accept, or reject cookies through the settings banner and your browser. For more details, please see the Cookie Policy, where you will find information about cookie types, their purpose, and retention periods.

10. Links to third-party sites

The website may contain links to other pages or third-party platforms (e.g., media outlets or social networks).

This Privacy Policy applies only to Sosomo Rugs. I am not responsible for the privacy practices of those third-party sites. I recommend that you read their own privacy notices or policies before providing them with personal information.