Privacy Policy
1. Who are we?
This Privacy Policy governs our privacy practices regarding the use of our website www.thekoozy.com and it provides information on the processing of personal data through the website.
Your personal data will be processed by THE KOOZY, S.L. (“The KOOZY”).
The KOOZY is the data controller of your personal data, i.e., it determines the purposes and means of the processing of personal data, in accordance with and pursuant to the General Data Protection Regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
2. What personal data do we process?
We may process your personal data in these circumstances:
• When you visit the website. For such, we collect browsing data (e.g., your IP address, pc domain name and URI/URL);
• When you log-in the website ́s user area. For such, we collect your e-mail;
• If you purchase our products and/or services via our website. For such, we collect identification data (e.g., your name and date of birth), contact data (your address, e-mail and/or telephone number) and payment data (your credit card number, card expiration date, and CVV2).
• When you subscribe our newsletter or wish to receive other marketing communications. For such, we collect contact data (e.g., your e-mail address and/or telephone number).
• If you send us an e-mail to hello@thekoozy.com. For such, we process the information you provide us in the referred e-mail.
• For any dispute resolution following the use of our website, where we would process the identification data we hold about you.
You may find information on the legal basis for the processing, as well as the purposes of the processing for which your personal data will be processed and the period for which your personal data will be stored in the following table:
| Legal basis | Purpose | Period of time |
| Legitimate interest | Website display in a more user-friendly, efficient and secure manner | For the time you visit the website |
| Consent and legitimate interest | Provide you with the website's user area (My Account) functionality for tracking your orders and to access your data | For the time you visit the website and as for as long as your user account is active |
| Performance of a contract | Process your order and send it to the selected address as well as report on order status updates and perform other after-sale services (e.g., administrative-accounting activities, organization and management of orders, shipping of orders, customer service and credit recovery) | For the duration of the exchange of products/ services/payment has been finalised and the item delivered, or the services concluded |
| Consent | Provide you with the newsletter you have subscribed and other communication related to The KOOZY products and/or services as well as to improve the communications through the analysis of statistical information on an anonymous basis | For the duration of the service subscription, unless a different deadline provided for by law applies |
| Legitimate interest | Analyse your e-mail and the information you have provide us in order to be able to reply to it | For the duration of reply to your queries |
| Legitimate interest | Resolution of any legal dispute regarding a purchase in our website or its overall use | For the duration of the dispute resolution |
3. What are our personal data recipients?
In order to provide you with certain services through our website, The KOOZY resorts to data processors who process personal data on its behalf.
For processing of payments, we resort to Stripe, Inc. and Moloni for invoicing.
Moreover, we resort to Shopify for the provision of our e-commerce platform. We may also resort to other service providers, for example, for marketing services, namely, for the sending of newsletters. Please be aware that you may opt-out from this service at any time, by withdrawing your consent through the unsubscribe functionality in the e-mails sent. We may also disclose your personal data with our legal support team or with public authorities in case of a dispute resolution.
We may also disclose your personal data with our legal support team or with public authorities in case of a dispute resolution.
4. Do we transfer your personal data outside of the EEE?
The information on our website will be stored at Amazon Web Services (“AWS”) in the United States of America (“USA”).
The KOOZY ensures that it has put in place appropriate safeguards in order to ensure the security of your personal data. For more information, please visit AWS website.
5. What are your rights?
At any time, you may ask us for:
• access to the personal data we have about you;
• rectification of your personal data if it is inaccurate or incomplete;
• the erasure of your personal data;
• the restriction of the processing, under certain circumstances provided for in the GDPR;
• the portability of your data, under certain circumstances provided for in the GDPR;
• objection to processing, under certain circumstances provided for in the GDPR;
• withdrawal of consent, at any time.
The withdrawal of your consent does not affect the lawfulness of the processing of your personal data based on your consent before your withdrawal. In order for you to withdraw your consent, please contact us at hello@thekoozy.com, stating that you wish to withdraw you consent.
You also have the right to submit a complaint to the Spanish Data Protection Supervisory Authority (“Agencia Española de Protección de Datos”), in https://www.aepd.es/es. You may also lodge a complaint before the Data Protection Supervisory Authority in the Member State of your habitual residence. For more information, please visit https://edpb.europa.eu/about-edpb/about-edpb/members_en.
6. How can you exercise your rights?
In order for you to exercise your rights please contact us at hello@thekoozy.com. You may be required to prove your identity in order to ensure that the personal data concerning you is only shared with you.
You should be aware that in certain cases (e.g., due to legal requirements) your request may not be immediately met. In any event, you will be informed without delay and at the latest within one (1) month of receipt of the request. That period may be extended by two (2) further months where necessary, taking into account the complexity and number of the requests. In that case, you will be informed of any such extension together with the reasons for the delay.
In the event that we do not take action upon your request, you will also be informed about the reasons for such without delay and at the latest within one (1) month of receipt of the request and on the possibility of lodging a complaint before CNPD.
The exercise of your rights is free of charge. Notwithstanding, where your requests are manifestly unfounded or excessive, in particular, because of their repetitive character, you may be charged a reasonable fee considering the administrative costs of providing the information or communication or taking the action requested.
7. Changes to this Policy
We reserve the right to make any alterations and/or amendments to this Policy. Therefore, you are advised to consult it regularly before using the website.