Privacy Policy

This website is the responsibility of MR. SHISHA EUROPE SL , a company with registered office at Calle Físicas, 40, 28923, Alcorcón (Spain).

Contact details of the Personal Data Security Officer: info@mrshisha.es

MR. SHISHA EUROPE SL respects the privacy rights of its users and recognises the importance of protecting the personal data that MR. SHISHA EUROPE SL collects about them.

The purpose of this policy is to inform users about the processing of personal data carried out on this website by MR. SHISHA EUROPE SL

In the processing of the user's personal data, MR. SHISHA EUROPE SL will apply the following principles:

• Principle of legality, loyalty and transparency : The Controller will always require consent for the processing of the user's personal data, which may be for one or several specific purposes about which the Controller will inform the user in advance with absolute transparency.
• Data minimization principle : The Controller will only request the data that is strictly necessary for the purpose or purposes for which it is requested.
• Principle of limitation of the conservation period : The data will be kept for the time strictly necessary for the purpose or purposes of the treatment. The Controller will inform you of the corresponding conservation period according to the purpose.
• Principle of integrity and confidentiality : Your data will be treated in such a way that its security, confidentiality and integrity are guaranteed. You should be aware that the Controller takes the necessary precautions to prevent unauthorized access or misuse of its users' data by third parties.

In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by MR. SHISHA EUROPE SL are collected exclusively through the forms on its website or by sending an email.

For order processing, MR. SHISHA EUROPE SL collects the following personal data from users:

• Name and surname.
• Country.
• Postal address.
• Zip code.
• Locality and Province
• Email address.
• Phone.

As a general rule, in the contact form MR. SHISHA EUROPE SL collects the following personal data from users, which are the minimum necessary and are merely for identification purposes:

• Name and surname.
• Email address.
• Telephone (optional).

Contact forms and Newsletter: We collect this data to facilitate, expedite and comply with the commitments established between MR. SHISHA EUROPE SL and the user, the maintenance of the relationship established in the forms that the user fills out (contact and Newsletter), to manage their request, to be able to maintain contact and, thus, to respond to any questions that may arise.

Payment form (checkout): We collect this data for the correct execution of the order placed by the user.

MR. SHISHA EUROPE SL does not provide this information to any third party, unless required to do so by current legislation (for example, an official request within the framework of a police investigation or a formal requirement by a court).

The legal basis that legitimizes this processing of personal data by MR. SHISHA EUROPE SL is your consent.

Your data will be processed for the period necessary to resolve your request, correctly process your order and tasks derived from it and/or for possible legal liabilities.

Data protection regulations guarantee Users the following rights:

• Access: Allows the user to know what information is held, where it was obtained, to whom it has been provided and for what purposes it has been processed.
• Rectification: Allows the user to rectify any erroneous or outdated data.
• Deletion: Allows the user to stop processing their data.
• Objection: Allows the user to stop using their data for a specific purpose.
• Limitation: Allows the user to restrict the processing of their data, but in such a way that they are kept for a subsequent purpose.
• Portability: Allows the user to obtain a copy of their data in electronic format and, in certain circumstances, request that it be communicated to another service provider. It is only applicable to computerized processing carried out with the user's consent or for the fulfillment of a contract.
• Revocation of consent: Allows the user to withdraw any consent they may have given for the processing of their data.

However, in order to exercise these rights, it is necessary to be able to link the data processed by MR. SHISHA EUROPE SL with the identity of the user who requests them. In principle, MR. SHISHA EUROPE SL cannot establish this link with any of the data it processes, unless the user can provide certain documentation that allows their identification (for example, sending an email from the email address they wish to unsubscribe from).

If Users wish to obtain further information on this matter or consider that their right to data protection has been violated, they may contact the Data Protection Control Authority ( www.aepd.es ) or the Security Officer of MR. SHISHA EUROPE SL ( info@mrshisha.es ).

MR. SHISHA EUROPE SL reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as to industry practices.

This policy will be in effect until it is modified by another duly published policy.