PRIVACY POLICY

Introduction

At LOTTUSSE, we believe in, defend and promote the privacy of our customers, suppliers and friends, and we are therefore committed to transparency in our policies and actions regarding personal data. Therefore, we invite you to read our privacy policy and suggest improvements to better protect your rights.

Within the LOTTUSSE company, and for the purposes of establishing GDPR compliance policies, the LOTTUSSE Group is made up of other companies. You can access this information in our Legal Notice.

Identity of the Joint Controllers

  • Holders: LOTTUSSE, S.A.U. and WILD LIFE, S.L.U.
  • Registered address: Avda. del Raiguer, 2. Apartado 22. 07300 Inca, Mallorca
  • CIF (Spanish Tax ID Code): A07451495 and B07524069, respectively.
  • LOTTUSSE, S.A.U. registration: Commercial Registry of Majorca, Volume 798, Book 694 (Section 3), Folio 171, Page No. 19,547
  • WILD LIFE, S.L.U. registration: Commercial Registry of Majorca, Volume 848, Folio 51, Page PM-1,991, Entry 1
  • Website: https://lottusse.com
  • LOPD email: lopd@lottusse.com

Information on Data Processing

In accordance with personal data protection legislation, and any other relevant and current applicable legislation, the user is informed that the personal data provided, where applicable, will be incorporated into an automatic file, which will be used solely for the purposes described in the corresponding forms or contracts.

The user is also informed that failure to provide the data contained in the forms available on the website will make it impossible to fulfil the purpose for which the data was collected.

Purpose of the Processing

At LOTTUSSE, we collect personal data for different purposes: to manage your purchases (online and in-store), tailor our website and commercial communications to your interests, respond to inquiries, manage your registration as a user, remind you about products in your cart, give access to your purchase history, assist with product selection (model, size, colour), manage exchanges or returns, and keep you informed about news, discounts or promotions.

Legitimate Basis

We may process your data on several grounds: performance of the purchase agreement, legal obligations (invoicing, taxes, whistleblowing channel, etc.), our legitimate interest (enhancing your experience and addressing queries), or your express consent (e.g., to receive our newsletter).

Do we Share your Data?

We share data only with companies providing complementary services to manage our relationship (e.g., shipping, payment platforms, digital communications, local distributors, satisfaction surveys) or with other LOTTUSSE Group companies to handle your queries. If you create content containing personal data, we may share it on our social networks or website with your consent (see specific section).

Data may be transferred to hosting partners and third parties assisting with site design/operation, services, or analytics, subject to confidentiality and adequate technical safeguards. If providers are outside the EEA, we ensure appropriate protection (e.g., adequacy decisions and/or EU Standard Contractual Clauses).

Outside these cases, we disclose data only when required by law or competent authorities.

Confidentiality and Duty of Secrecy

All persons involved in processing within the LOTTUSSE Group are bound by strict confidentiality, which continues after the end of the employment or commercial relationship. This duty also applies to suppliers, processors, their subcontractors and staff.

Data Security

LOTTUSSE implements technical, organisational, physical and contractual measures to prevent unauthorised access, destruction, alteration, reproduction, disclosure, transmission or reuse of data. However, online transmission entails residual risk beyond our control. Please keep your data accurate and inform third parties whose data you provide beforehand.

Data Regarding Minors

Our services are intended for adults under Spanish law. Registrations from minors are rejected. Parents/guardians should supervise children’s online activity.

Communication Channels

LOTTUSSE offers physical (stores) and digital channels (website and other customer service means). Below are specific processing activities.

Registration Form and Shipping Data (E-shop / Stores)

If you register to place an order, we use your data to identify you, maintain your account, provide tracking and invoicing information, conduct quality surveys and respond to queries. Legal basis: consent and contract/pre-contractual measures. You can cancel your account by emailing lopd@lottusse.com or via Customer Service. We retain data for the duration of the relationship and, where applicable, to meet legal obligations.

Data may be shared with credit reference/fraud prevention agencies, banks, payment platforms and logistics partners to perform the contract or where fraud is suspected.

If we received your data from a third party (e.g., gift delivery), we will use it solely for that purpose. In stores and online we offer a product customisation service; in-store, staff will assist you on a tablet in a secure environment.

Marketing and Commercial Communications

If you subscribe to our newsletter or other information, we use your data to inform you about activities, promotions, discounts, new products/services or seasons, including from other LOTTUSSE Group companies when relevant. Messages may be sent by email, SMS or similar channels (WhatsApp, Telegram, social media) with an easy opt-out.

Processing may include profile analysis (browsing and purchase history) to provide relevant content. Legal basis: consent or legitimate interest (for web customers). Retention: while subscribed or until you object. A website chatbot addresses common questions; no automated decisions or profiling are carried out. Please avoid entering personal data; if needed, we will route you to a human agent.

Contact Form and Customer Service

Data provided via form, phone, chat, WhatsApp, Telegram or social media is used to resolve your query, notify order arrivals, propose alternatives or assist you in your usual/nearest store. Legal basis: consent and contractual/pre-contractual measures. Data may be shared within the LOTTUSSE Group when necessary. Retention: as needed to handle the request or until you unsubscribe; for individual queries, up to one year.

Data Collection in Stores

In physical purchases we may collect email, phone, postal address or WhatsApp usage (e-ticket, warranty, exchanges/returns). Legal basis: contractual/pre-contractual. For marketing communications we will seek consent (or rely on legitimate interest for existing customers). You may object or limit processing at any time. Retention: during the relationship and, afterwards, as required by law.

Content Creators

LOTTUSSE has created a virtual space on its website and social media where, with prior authorisation (e.g., tagging or hashtag #lottusse1877), user-generated content (photos, images, videos) can be shared on the LOTTUSSE website or current/future social channels. Where such content includes personal data (images of people, names, usernames, phone numbers or email addresses), it will be processed with the creator’s express consent for promotional and commercial purposes.

Data relating to Legal Entity Clients, Self-employed Workers and Suppliers

If you act as a contact for a client/supplier company or as a sole trader, we process your data solely for the (pre-)contractual relationship. Data may be shared within the LOTTUSSE Group when required by the service. Retention: for the relationship duration or as legally required. We may send commercial/corporate information based on legitimate interest (GDPR).

Employment Form

Job-applicant data is processed to manage current or future selection processes (pre-contractual measures and consent, particularly for non-strictly professional data or intra-group sharing). Retention: until withdrawal/deletion/objection; generally no longer than 24 months unless legal obligations apply. Third-party recruiters may be used.

Whistleblowing Channel

LOTTUSSE has implemented a Whistleblowing Channel (Law 2/2023, of 20 February). It is not for product/shipping/payment/warranty claims, which are handled via Customer Service.

Whistleblower data is processed in accordance with the GDPR and applicable Spanish laws. Purpose: manage and investigate reported irregularities. Legal basis: legal obligation and public interest. Retention: as necessary; deletion after three months unless a legal duty requires longer. Disclosures: Judicial Authorities, Public Prosecutor’s Office or competent authorities. Rights: via lopd@lottusse.com. Complaints: AEPD.

Other Claims

For claims regarding product errors/defects, shipping, improper charges, warranties or other issues, we process your data solely to resolve your claim. Legal basis: contractual relationship and consumer law. Possible sharing with LOTTUSSE Group companies involved, exclusively for that purpose. Retention: as legally required and until claims expire.

Recommendation of Websites

Links/recommendations are provided for user interest; we have no duty to monitor third-party sites. We will remove links when we have reliable evidence of illegality or rights infringement. No claims based on linked-site content will be addressed.

Use of Cookies

Click here for information regarding the use of cookies.

When you visit our website, we may collect “clickstream” data (server address, domain name, etc.). Combined with the information you have provided, this helps us better personalise your visits.

We Respect your Rights

You may exercise your rights of access, rectification, objection, restriction, deletion, portability and withdrawal of consent. Legal obligations may temporarily prevent immediate fulfilment of your request.

To exercise your rights, write to: Avda. del Raiguer, 2. Apartado 22. 07300 Inca, Mallorca; or contact our Data Protection Officer at lopd@lottusse.com.

You may also contact your national supervisory authority: EU Data Protection Authorities Directory. In Spain: the Spanish Data Protection Agency (AEPD).

Validity and Modification of the Privacy Policy

This Privacy Policy is effective from its publication on the website. It has been reviewed and adapted; users may store and/or reproduce it. It may be modified due to legal changes, court decisions, case law, or changes in LOTTUSSE’s business strategy. Publication and access will take place on this website; prior relationships are governed by the rules in force at the time of access.