The website owner respects and protects users' personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and other applicable data protection regulations.
1. Responsible for the treatment
- Controller: kaioland
- Email: info@kaioland.com
- Representative (if applicable): kaioland
2. Data we process and purposes
We process the personal data that users provide to us through website forms, the purchase process, subscription to marketing communications, or contact with us, as well as data derived from browsing. The purposes of this processing are:
- Manage user registration and their account.
- Process and manage orders, payments, shipments and returns.
- To handle inquiries, requests, and support communications.
- Send commercial communications and information about products and news, when the user has consented.
- To compile usage statistics and improve the website and services.
- Comply with applicable legal obligations (tax, accounting and consumption).
3. Legal basis for the processing
- Execution of a contract: order management, payments and deliveries.
- Consent of the interested party: sending commercial communications and use of non-essential cookies.
- Compliance with legal obligations: tax, accounting and consumer protection obligations.
- Legitimate interest: site security, fraud prevention, and service improvement.
4. Data retention
The data will be kept for as long as necessary to fulfill the purpose for which it was collected and to comply with legal obligations arising from its processing. When it is no longer needed, it will be deleted using appropriate security measures.
5. Recipients and international transfers
The data may be communicated to service providers acting as data processors (e.g., payment platforms, logistics companies, web hosting services and analytics tools), only for the purposes described.
International transfers: If the data controller or any of its suppliers is established outside the European Economic Area (for example, if ownership belongs to an entity based in Hong Kong), these transfers will be carried out under the appropriate safeguards provided for in the GDPR (adequacy decisions or standard contractual clauses of the European Commission). Users can request information about these safeguards at the contact address provided.
6. User rights
The user may exercise the following rights at any time:
- Access to your personal data.
- Correction of inaccurate data.
- Data deletion.
- Limitation or opposition to treatment.
- Data portability.
- Withdrawing consent, without affecting the lawfulness of the previous treatment.
To exercise these rights, users can contact us by email at [CONTACT EMAIL], providing proof of identity. They also have the right to file a complaint with the competent data protection supervisory authority.
7. Security
The data controller has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access, in accordance with the state of the art.