Weldracingparts
Company: WeldFabs Group S.L.
VAT Number: ESB26943969
Address: Calle Figuera 24 N° 24, 08734 – Olerdola Barcelona
Phone: +34 654 475 484
Email: info@weldracingparts.com
Thank you for your interest in our online store. Protecting your privacy is very important to us. Below we provide detailed information about how we process your data.
1. Access data and hosting
You can visit our websites without identifying yourself. Each time a web page is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the provider making the access (access data) and which documents the access. This access data is analyzed exclusively for the purpose of ensuring the proper functioning of the site and improving our offer. This serves, pursuant to Art. 6(1)(f) GDPR, to safeguard, within the framework of a balancing of interests, our overriding legitimate interest in the correct presentation of our offer. All access data is deleted at the latest seven days after you access the site.
1.1 Content Delivery Network
In order to reduce loading times, we use a so-called Content Delivery Network (“CDN”) for some offerings. With this service, content—for example, large media files—is delivered via regionally distributed servers of external CDN service providers. Therefore, access data is processed on the servers of these providers. Our service providers work for us as processors. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.
2. Collection and use of data for contract processing and when creating a customer account
We collect personal data when you voluntarily provide it to us as part of your order, when you contact us (e.g., via the contact form or email) or when opening a customer account. Mandatory fields are marked as such, since in these cases we need the data to process the contract, handle your contact request or open your customer account, and without them you will not be able to complete the order and/or open the account or send the desired message. The respective data entry forms indicate which data is collected. We use the data you provide pursuant to Art. 6(1)(b) GDPR for contract processing and to handle your requests. You will find more information on the processing of your data, in particular on the transfer of data to our service providers for order processing, payments and shipping, in the following sections of this privacy policy. After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiry of the retention periods under tax and commercial law in accordance with Art. 6(1)(b) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1)(a) GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this statement. You can delete your customer account at any time by sending a message to the contact option described in this privacy policy or by using a function provided for this purpose in the customer account.
3. Transfer of data for shipping purposes
For the performance of the contract pursuant to Art. 6(1)(b) GDPR, we transfer your data to the mail/shipping company commissioned with the delivery insofar as this is necessary for the delivery of the ordered goods.
4. Data processing for payment processing
We work with these partners to process payments in our online store: technical service providers, credit institutions, payment service providers.
4.1 Data processing for handling payment transactions
Depending on the selected payment method, we transmit the data necessary to process the payment transaction to our payment service providers, who work for us as processors, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary to process the payment. This serves the performance of the contract pursuant to Art. 6(1)(b) GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, for example on their own website or through technical integration in the order process. In this respect, the data protection declaration of the respective payment service provider applies. If you have any questions about our payment processing partners and the basis of our cooperation with them, please use the contact option described in this privacy policy.
4.2 Data processing for fraud prevention and optimization of our payment processes
We will also provide our service providers with additional information that they can use together with the information required to process the payment, as our processors, for the purpose of fraud prevention and to optimize our payment processes (e.g., invoicing, handling disputed payments, accounting support). In accordance with Art. 6(1)(f) GDPR, this serves to safeguard our legitimate interests in protection against fraud and in efficient payment management, which prevail in the context of a balancing of interests.
5. Sending commercial communications
5.1 Newsletter
In accordance with Art. 6(1)(a) GDPR, if we have previously obtained your express consent to subscribe to our newsletter, we will use the data necessary for this to send commercial communications according to that consent. You can unsubscribe from the newsletter at any time by sending a message to our contact address described here or by clicking the link provided for this purpose in the email containing such commercial communication. After you unsubscribe, we will block your email address for this use, unless you have expressly consented to further use of your data or we reserve the right to continue using your data in cases permitted by law and about which we inform you in this document.
5.2 Sending commercial information about products similar to those already purchased
In accordance with Article 21(2) of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, if we receive your email address in the context of the sale of a good or provision of a service and you have not objected, we reserve the right to regularly send you by email offers of products from our company similar to those already purchased. This is intended to safeguard our legitimate interests, within the framework of a balancing of interests, in commercial communication with the customer pursuant to Art. 6(1)(f) GDPR. You may object to this use of your email address at any time via the corresponding link in the advertising email or by sending a message to our email address described here, without incurring any costs other than the basic transmission rates.
6. Cookies and other technologies
6.1 General information
To make visiting our website attractive, enable the use of certain functions, display suitable products or for market research, we use so-called “cookies” on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). We use technologies that are absolutely necessary for the use of certain functions of our website (for example, the shopping cart function). These technologies are used to collect and process IP addresses, visit time, device and browser information, as well as information about your use of our website (for example, information about the contents of the shopping cart). Within the framework of a balancing of interests, this serves the overriding legitimate interests in an optimized presentation of our offer pursuant to Art. 6(1)(f) GDPR. In addition, we use the technology to comply with legal obligations to which we are subject (e.g., to be able to demonstrate consent to the processing of your personal data), as well as for web analytics and online marketing. Further information can be found in the following sections of this privacy policy, including the respective legal basis for data processing. You can find your browser’s cookie settings at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™. To the extent that you have consented to the use of technologies pursuant to Art. 6(1)(a) GDPR, you can revoke your consent at any time by sending a message to the contact option described in the data protection declaration. Alternatively, you can click the following link: revoke or change your consent. If you do not accept cookies, the functionality of our website may be limited.
6.2 Cookiebot consent management platform
We use Cookiebot on our website to inform you about the technologies we use on our site and to obtain, manage and document your consent to the processing of your personal data by these technologies. This is required under Article 6(1)(c) GDPR to comply with our legal obligation under Article 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data. The Cookiebot consent management service is offered by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf. After submitting your cookie declaration on our website, Cookiebot’s web server stores your anonymized IP address, the date and time of your declaration, browser information, the URL from which the declaration was submitted, information about your consent behavior and a random anonymous key. In addition, a “Cookie Consent” cookie is used that contains information about your consent behavior and the key. Your data will be deleted after twelve months, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this statement.
6.3 Other web analytics and online marketing service providers
Live chat tool – Zendesk. If you use the live chat tool – Zendesk – to contact us, the data you voluntarily enter (name, email address, message) will be processed by us in accordance with Art. 6(1)(b) GDPR in order to respond to your inquiry as part of contract processing. In addition, the use of this tool serves, pursuant to Art. 6(1)(f) GDPR, to safeguard our legitimate interests in providing effective and improved customer communication, if a balancing of interests is carried out. The data will then be deleted. The Zendesk live chat tool is provided by Zendesk, Inc., 1019 Market Street, San Francisco, CA 94103, USA, which operates on our behalf. The European Commission has not found an adequate level for the USA. Our cooperation is based on the European Commission’s standard contractual data protection clauses. To display our ratings collected via Trusted Shops, the Trusted Shops Trustbadge has been integrated into this website.
7. Integration of the Trusted Shops Trustbadge
This is necessary to satisfy our legitimate interests in marketing our offer and ensuring the security of a purchase, pursuant to Art. 6(1)(f) GDPR. The Trustbadge, and the services advertised with it, are part of the offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. A content delivery network (CDN) provider supplies the Trustbadge as part of processing on behalf. Trusted Shops GmbH uses service providers in the USA. An adequate level of data protection is ensured. You can find more information about Trusted Shops GmbH’s data security here. Each time the Trustbadge is accessed, the web server automatically stores a server log file containing the IP address, date and time of the visit, the amount of data transferred and the requesting provider (access data), and records the visit. The individual access data is stored in a security database for the analysis of security issues. The log files are automatically deleted, at the latest, 90 days after creation. Additional personal data will be transferred to Trusted Shops GmbH to the extent that, after placing an order, you have opted to use Trusted Shops products or are already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Regardless of whether you are registered as a Trusted Shops customer, registration is carried out using a neutral parameter, the email address encrypted using a one-way encryption function. The email address is converted to this hash value, which Trusted Shops cannot decrypt prior to transmission. After checking for a match, the parameter is automatically deleted. This is necessary to fulfill our legitimate interests and those of Trusted Shops in providing buyer protection linked to the specific order and transactional review services pursuant to Article 6(1)(f) GDPR. You can find more details, including the right to object, in the Trusted Shops privacy policy linked above and within the Trustbadge.
8. Social networks
8.1 Social plugins for Facebook, Instagram
Social buttons from social networks are used on our website. These are only integrated on the page as HTML links, so that no connection is established with the provider’s servers when our website is called up. If you click on one of the buttons, the website of the respective social network opens in a new browser window. There you can, for example, press the “Like” or “Share” button.
8.2 Our online presence on Facebook
Provided that you have given your consent to the social media operator in accordance with Art. 6(1)(a) GDPR, the data you generate when visiting our online presences on social media is automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that are presumed to be of interest to you. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the social media operator, as well as a contact option and your rights and configuration options to protect your privacy, please consult the provider’s data protection information, which you will find via a link below at the following link. If you still need help in this regard, please contact us. Facebook is an offer of Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland about the use of our online presence on Facebook is generally transmitted to and stored on a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The European Commission has not found an adequate level for the USA. Our cooperation is based on the European Commission’s standard data protection clauses. The data processing of a visit to a fan page on Facebook is based on an agreement between the jointly responsible parties in accordance with Art. 26 GDPR. You can find more information here.
9. Rights of data subjects
As a data subject, you have the following rights in accordance with the General Data Protection Regulation (GDPR):
• pursuant to Art. 15 GDPR, the right, to the extent indicated therein, to obtain information about the personal data concerning you that we process;
• pursuant to Art. 16 GDPR, the right to obtain without undue delay the rectification of inaccurate personal data concerning you or the completion of incomplete personal data;
• pursuant to Art. 17 GDPR, the right to obtain the erasure of personal data concerning you, provided that processing is not necessary:
- for exercising the right of freedom of expression and information,
- for compliance with a legal obligation,
- for reasons of public interest, or
- for the establishment, exercise or defense of legal claims;
• pursuant to Art. 18 GDPR, the right to obtain restriction of processing where
- the accuracy of the personal data is contested by the data subject,
- the processing is unlawful and you oppose the erasure of the data,
- we no longer need the data but you require it for the establishment, exercise or defense of legal claims, or
- you have objected to processing pursuant to Article 21 GDPR;
• pursuant to Art. 20 GDPR, the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller;
• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your habitual residence or place of work or at the seat of our company.
If you have any questions regarding the collection, processing or use of your personal data, as well as to obtain information, rectify, block or delete data, revoke consents granted or object to a particular use of data, please contact us directly at the address indicated in the legal notice.
Right to object
Where we process personal data as set out above to safeguard, within the framework of a balancing of interests, our overriding legitimate interest, you may object to such processing with effect for the future. If processing is carried out for direct marketing purposes, you may exercise this right at any time, as indicated above. If the processing is carried out for other purposes, you only have a right to object if there are reasons arising from your particular situation.
Once you have exercised your right to object, we will no longer process your personal data for those purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In that case, your personal data will no longer be processed for such purposes.
Cookies and Google advertising
At weldracingparts, as on many other websites and apps, we use Google services to improve our content and offer it free of charge. To be able to use these services, we have to share information with Google. For example, when we use Google advertising, collect statistics with Google Analytics, or embed YouTube videos, your web browser automatically sends certain information to Google, such as the URL of the page you accessed and your IP address, among others. Google may also place cookies in your browser or read those already stored in it.
Google uses the information shared by websites and apps to provide, maintain and improve its services, develop new services, measure the effectiveness of advertising, protect users from fraud and abuse, and personalize the content and ads that appear on Google or on the websites and apps of its partners. You can consult its privacy policy for more information on how data is processed for each of these purposes and the ads page for more information about Google ads, how your information is used in the advertising context and how long Google stores this information.
You can find more information in the section How Google uses information from sites or apps that use our services.