Privacy policy — Heaven19

1. Data controller

Identity: Heaven19, S.L.
Tax ID (CIF): B-57803249
Postal address: 07800 Ibiza, Islas Baleares, España
Email: sales@heaven-19.com

2. Purposes of processing

We process personal data provided by users for the following purposes:

To handle quote and commercial information requests received via the contact form or email.
To process orders, invoicing and after-sales service.
To send commercial communications, only with the user's explicit consent.

3. Legal basis

The legal basis is contract performance or pre-contractual measures at the request of the data subject, the user's explicit consent, and the legitimate interest in maintaining the commercial relationship.

4. Data retention

Data will be kept for the time necessary to fulfil the above purposes and to meet applicable legal obligations (commercial, tax and accounting).

5. Recipients

Data will not be transferred to third parties except by legal obligation. Service providers (hosting, email, logistics) accessing personal data act as data processors under article 28 GDPR.

6. User rights

Users may exercise the following rights by emailing sales@heaven-19.com:

Right of access to personal data.
Right to rectification of inaccurate data.
Right to erasure when data are no longer necessary.
Right to object to processing.
Right to restriction of processing.
Right to data portability.
Right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

Heaven19, S.L. applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing, in line with article 32 GDPR.