Privacy Policy
1. Data Controller
The operator of hernosale.com is responsible for processing your personal data in compliance with global privacy regulations (GDPR, CCPA, etc.).
2. Information We Collect
We process:
- Identity Data (name, address, contact details)
- Transaction Data (purchase history, payment information)
- Technical Data (IP address, device type, cookies)
3. Purpose & Legal Basis
| Purpose | Legal Basis (GDPR) | Retention Period |
|---|---|---|
| Order Processing | Contract (Art. 6(1)(b)) | 5 years |
| Customer Support | Legitimate Interest (6(1)(f) | 3 years |
| Marketing* | Consent (6(1)(a)) | Until withdrawn |
*Opt-in required for promotional communications
4. Data Sharing
Limited to:
• Payment processors (PCI-DSS compliant)
• Shipping carriers (address/contact only)
• Fraud prevention services
5. International Transfers
Data may be transferred to:
- EU-approved countries
- US providers with SCCs/Privacy Shield
6. Your Rights
You may:
→ Access/rectify your data
→ Request deletion*
→ Object to processing
→ Data portability
*Exceptions apply for legal obligations
7. Security Measures
We implement:
• AES-256 encryption
• Regular penetration testing
• Restricted staff access
8. Cookies
Essential cookies only for:
✓ Shopping cart functionality
✓ User authentication
Manage preferences via browser settings.
9. Policy Updates
Changes will be posted here with effective dates.
Exercising Your Rights
Submit requests via:
- Your account privacy dashboard
- Data Request Portal (requires verification)