Data Controller
CHILIS LAB SL
Calle de Parcerisa, 13
08014 Barcelona
Spain
Website: zenvenda.com
Owner’s email address: contacts@zenvenda.com
Types of Data Collected
Among the Personal Data collected by zenvenda.com, independently or through third parties, there are: Cookies, Usage Data, email addresses and various categories of personal data.
Complete details regarding each category of data collected are provided in the relevant sections of this Privacy Policy or through specific notices displayed before data collection.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using zenvenda.com.
Unless otherwise specified, all Data requested by zenvenda.com is mandatory. Failure to provide such Data may make it impossible for zenvenda.com to provide its services.
Where zenvenda.com specifically states that certain Data is optional, Users are free not to provide such Data without affecting the availability or operation of the service.
Users who have any doubts regarding which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies or other tracking technologies by zenvenda.com or by the providers of third-party services used by zenvenda.com serves the purpose of providing the service requested by the User, in addition to the purposes described in this Privacy Policy and Cookie Policy.
The User assumes responsibility for any Personal Data of third parties obtained, published or shared through zenvenda.com and confirms that he or she has the right to communicate or disclose such Data, releasing the Data Controller from any liability towards third parties.
Method and Place of Processing of the Collected Data
Processing Methods
The Data Controller adopts appropriate technical and organizational security measures designed to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
Personal Data is processed using IT and telematic tools, following organizational procedures and methods strictly related to the purposes indicated in this Privacy Policy.
In addition to the Data Controller, in certain circumstances the Data may be accessible to persons involved in the operation of zenvenda.com (administration, sales, marketing, legal advisors, system administrators) or to external service providers (such as hosting providers, technical service providers, couriers, communication agencies and IT service providers), where necessary appointed as Data Processors.
An updated list of Data Processors may be requested from the Data Controller at any time.
Legal Basis of Processing
The Data Controller processes Personal Data relating to the User where one of the following legal bases applies:
• the User has given consent for one or more specific purposes;
• processing is necessary for the performance of a contract with the User and/or for the implementation of pre-contractual measures;
• processing is necessary for compliance with a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
Users may request further information regarding the specific legal basis applicable to each processing activity by contacting the Data Controller.
Place of Processing
Personal Data is processed at the operational offices of the Data Controller and in any other location where the parties involved in the processing are located.
The User’s Personal Data may be transferred to and processed in countries other than the country in which the User is located.
Where Personal Data is transferred outside the European Economic Area (EEA), such transfers will be carried out in accordance with applicable data protection laws and appropriate safeguards will be adopted to protect the Data.
Users may obtain further information regarding the location of processing and any international transfers by contacting the Data Controller.
Retention Period
Personal Data is processed and stored for as long as required to fulfil the purposes for which it was collected.
In particular:
• Personal Data collected for the performance of a contract between the Data Controller and the User will be retained until the contract has been fully executed and for any additional period required by applicable law.
• Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained for as long as necessary to fulfil such purposes.
• Where processing is based on the User’s consent, Personal Data may be retained until such consent is withdrawn.
• The Data Controller may retain Personal Data for a longer period where required to comply with legal obligations, regulatory requirements or orders issued by competent authorities.
At the end of the applicable retention period, Personal Data will be deleted, anonymized or securely archived where required by law.
Purposes of Processing
User Data is collected and processed to allow the Data Controller to provide its services and, in particular, for the following purposes:
• Statistics and analytics;
• Advertising and marketing activities;
• Customer support and communication with Users;
• Interaction with social networks and external platforms;
• Management of contact databases and email communications;
• Remarketing and behavioural targeting;
• Heat mapping and session recording;
• Hosting and backend infrastructure management;
• Content and functionality performance testing (A/B testing);
• International data transfers where necessary;
• Display of content from external platforms;
• Fraud prevention, security monitoring and legal compliance.
Further details regarding the purposes of processing and the categories of Personal Data involved in each activity are provided in the following sections of this Privacy Policy.
To obtain more detailed information regarding the purposes of processing and the specific Personal Data used for each purpose, Users may refer to the relevant sections of this Privacy Policy.
Details on the Processing of Personal Data
Personal Data is collected for the following purposes and through the following services.
Contacting the User
Mailing List or Newsletter (zenvenda.com)
By subscribing to the mailing list or newsletter, the User’s email address may be automatically added to a contact database used to send newsletters, promotional communications, product updates and marketing information relating to zenvenda.com.
The User’s email address may also be added to the mailing list following the creation of an account, completion of a purchase or explicit consent provided through forms available on the Website.
Personal Data collected: email address.
Management of Contact Databases and Email Communications
These services enable the management of databases of email addresses and other contact details used to communicate with Users.
Such services may also collect information relating to message delivery, opening rates, click activity and interactions with email communications.
Heat Mapping and Session Recording
Heat mapping and session recording services are used to identify areas of the Website that receive the greatest level of interaction from Users.
These services help monitor and analyze traffic and user behavior in order to improve Website performance and user experience.
Some of these services may record browsing sessions and make them available for later analysis.
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a heat mapping and session recording service provided by Hotjar Ltd.
Hotjar may collect information regarding User interactions with the Website and respects browser-based “Do Not Track” settings where supported.
Personal Data collected: Cookies, Usage Data and other information specified in Hotjar’s Privacy Policy.
Place of processing: European Union.
Hosting and Backend Infrastructure
These services provide hosting, storage and infrastructure resources necessary for the operation and delivery of the Website.
Some hosting providers may process Personal Data through servers located in multiple jurisdictions.
DigitalOcean
DigitalOcean is a hosting and cloud infrastructure service provided by DigitalOcean LLC.
Personal Data collected: various categories of data as described in the provider’s Privacy Policy.
Place of processing: United States and other locations where DigitalOcean operates infrastructure.
Interaction with Social Networks and External Platforms
These services allow Users to interact directly with social networks and external platforms from pages within zenvenda.com.
Interactions and information collected through these services are subject to the User’s privacy settings on the respective social network.
Facebook Like Button and Social Widgets (Meta Platforms, Inc.)
The Facebook Like button and related social widgets allow interaction with the Facebook platform.
Personal Data collected: Cookies and Usage Data.
Google Social Features (Google LLC)
Google services integrated within the Website may allow interaction with Google platforms and services.
Personal Data collected: Cookies and Usage Data.
LinkedIn Button and Social Widgets (LinkedIn Corporation)
LinkedIn social features allow interaction with the LinkedIn platform.
Personal Data collected: Cookies and Usage Data.
Twitter/X Social Features (X Corp.)
Twitter/X widgets allow interaction with the Twitter/X platform.
Personal Data collected: Cookies and Usage Data.
Advertising
These services allow User Data to be used for advertising and marketing purposes, including the display of advertisements that may be tailored to the User’s interests and browsing behavior.
The use of advertising cookies and similar technologies is subject to the User’s consent where required by applicable law.
Google Ads and Google Advertising Services (Google LLC)
The Website may use Google advertising services, including Google Ads and related technologies, to display advertisements, measure campaign performance and improve advertising relevance.
These services may use cookies, advertising identifiers and similar technologies to collect information regarding User interactions with advertisements and the Website.
Personal Data collected: Cookies, Usage Data and advertising identifiers.
Place of processing: United States and other countries where Google operates.
Direct Email Marketing (DEM)
With the User’s consent where required, zenvenda.com may use contact information provided by the User to send newsletters, promotional communications, special offers, product updates and marketing information relating to products and services offered through the Website.
Users may unsubscribe from marketing communications at any time by following the instructions included in each communication or by contacting:
Personal Data collected: email address.
Remarketing and Behavioural Targeting
These services allow zenvenda.com and selected advertising partners to display advertisements to Users who have previously visited the Website or interacted with its content.
Remarketing activities may be performed through the use of cookies, advertising identifiers and similar tracking technologies.
Google Ads Remarketing (Google LLC)
Google Ads Remarketing enables zenvenda.com to display personalized advertisements to Users across Google’s advertising network based on previous interactions with the Website.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where Google operates.
Facebook Remarketing (Meta Platforms, Inc.)
Facebook Remarketing enables zenvenda.com to display personalized advertisements to Users through Meta’s advertising platforms based on previous interactions with the Website.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where Meta operates.
Facebook Custom Audiences (Meta Platforms, Inc.)
Facebook Custom Audiences enables zenvenda.com to create advertising audiences based on customer information and interactions with the Website.
Personal Data collected: Cookies, email addresses and Usage Data.
Place of processing: United States and other countries where Meta operates.
LinkedIn Website Retargeting (LinkedIn Corporation)
LinkedIn Website Retargeting enables zenvenda.com to display personalized advertisements to Users through LinkedIn’s advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where LinkedIn operates.
Users may manage advertising preferences, withdraw consent and disable advertising cookies through the Website’s cookie settings or through the privacy settings made available by the respective service providers.
Facebook Custom Audiences (Meta Platforms, Inc.)
Facebook Custom Audiences is a remarketing and behavioural targeting service provided by Meta Platforms, Inc. that enables zenvenda.com to create advertising audiences and display personalized advertisements based on Users’ interactions with the Website.
Personal Data collected: Cookies, email addresses and Usage Data.
Place of processing: United States and other countries where Meta operates.
Google Ad Manager Audience Extension (Google LLC)
Google Ad Manager Audience Extension is a remarketing and behavioural targeting service that enables advertising partners to display personalized advertisements to Users based on their interactions with zenvenda.com.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where Google operates.
Twitter/X Remarketing (X Corp.)
Twitter/X Remarketing is a remarketing and behavioural targeting service provided by X Corp. that enables personalized advertising based on User interactions with zenvenda.com.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where X Corp. operates.
LinkedIn Website Retargeting (LinkedIn Corporation)
LinkedIn Website Retargeting is a remarketing and behavioural targeting service provided by LinkedIn Corporation that enables personalized advertising through LinkedIn’s advertising network based on User interactions with zenvenda.com.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where LinkedIn operates.
Statistics
The services contained in this section enable the Data Controller to monitor, measure and analyze Website traffic and User behaviour.
Google Analytics (Google LLC)
Google Analytics is a web analytics service provided by Google LLC that allows zenvenda.com to analyze Website traffic, monitor User interactions and generate statistical reports.
Google may use the collected information to contextualize and personalize advertisements within its advertising network.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where Google operates.
Facebook Ads Conversion Tracking (Meta Platforms, Inc.)
Facebook Ads Conversion Tracking is a statistics service provided by Meta Platforms, Inc. that connects advertising data from Meta’s advertising network with actions performed on zenvenda.com.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where Meta operates.
Google Ads Conversion Tracking (Google LLC)
Google Ads Conversion Tracking is a statistics service provided by Google LLC that connects data from the Google Ads advertising network with actions performed on zenvenda.com.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where Google operates.
Twitter/X Ads Conversion Tracking (X Corp.)
Twitter/X Ads Conversion Tracking is a statistics service provided by X Corp. that connects advertising data from the Twitter/X advertising network with actions performed on zenvenda.com.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where X Corp. operates.
LinkedIn Conversion Tracking (LinkedIn Corporation)
LinkedIn Conversion Tracking is a statistics service provided by LinkedIn Corporation that connects advertising data from LinkedIn’s advertising network with actions performed on zenvenda.com.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where LinkedIn operates.
Performance Testing of Content and Functionality (A/B Testing)
The services contained in this section allow the Data Controller to test, analyze and improve the performance, usability and effectiveness of zenvenda.com by evaluating User interactions with different versions of content, layouts and functionalities.
Google Optimize and Similar Testing Services (Google LLC)
The Website may use A/B testing and optimization services provided by Google LLC or similar providers to analyze User behaviour and improve Website performance and user experience.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where the provider operates.
Transfer of Data Outside the European Economic Area (EEA)
The Data Controller may transfer Personal Data collected within the European Economic Area (EEA) to countries outside the EEA where necessary for the provision of services described in this Privacy Policy.
Such transfers are carried out in accordance with applicable data protection laws and appropriate safeguards are implemented to ensure an adequate level of protection for Personal Data.
Users may request additional information regarding the legal basis and safeguards applicable to international data transfers by contacting the Data Controller at:
Transfers Based on User Consent
Where required by law, Personal Data may be transferred outside the EEA on the basis of the User’s explicit consent after the User has been informed of the potential risks associated with such transfers.
Personal Data collected: various categories of Personal Data.
Viewing Content from External Platforms
These services allow content hosted on external platforms to be displayed directly within pages of zenvenda.com and enable Users to interact with such content.
These services may collect traffic and usage data even if Users do not actively interact with the embedded content.
Google Fonts (Google LLC)
Google Fonts is a font display service provided by Google LLC that allows zenvenda.com to integrate and display fonts within its pages.
Personal Data collected: Usage Data and technical information necessary for the delivery of fonts.
Place of processing: United States and other countries where Google operates.
YouTube Video Widget (Google LLC)
YouTube is a video content display service provided by Google LLC that allows zenvenda.com to embed video content within its pages.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States and other countries where Google operates.
Further Information on Personal Data
Profiling and Analysis of User Behaviour
The Data Controller may process Usage Data and other information collected through zenvenda.com in order to create or update user profiles.
Profiling activities may be carried out to better understand Users’ preferences, interests, browsing behaviour and purchasing habits, with the aim of improving services, personalizing content, optimizing advertising campaigns and enhancing the User experience.
Such profiling activities may be performed through automated systems, algorithms and third-party services where permitted by applicable law.
Users have the right to object to profiling activities at any time by contacting the Data Controller.
Automated Decision-Making
In certain circumstances, zenvenda.com may use automated systems to support decisions relating to fraud prevention, service optimization, advertising personalization, order verification or other legitimate business purposes.
Where applicable, such processing will be carried out in accordance with Regulation (EU) 2016/679 (GDPR) and any other applicable legislation.
Automated decision-making processes may be used to:
• improve operational efficiency and decision-making processes;
• enhance security and fraud prevention measures;
• personalize content, products and services;
• ensure fair and consistent treatment of Users;
• reduce errors and improve service quality.
Where legally required, Users may request information regarding the logic involved in automated processing and may request human intervention.
Rights of Users Subject to Automated Decision-Making
Users have the right to:
• obtain meaningful information regarding automated decision-making processes affecting them;
• express their point of view regarding a decision;
• request human review of a decision;
• challenge decisions taken exclusively through automated processing where permitted by law.
User Rights
Users may exercise their rights regarding Personal Data processed by the Data Controller.
In particular, Users have the right to:
• withdraw consent at any time where processing is based on consent;
• object to the processing of Personal Data where permitted by applicable law;
• access their Personal Data and obtain information regarding its processing;
• request correction or updating of inaccurate or incomplete data;
• request restriction of processing under the conditions provided by law;
• request deletion of Personal Data where applicable;
• receive their Personal Data in a structured, commonly used and machine-readable format and request data portability where technically feasible;
• lodge a complaint with the competent data protection authority;
• seek judicial remedies where permitted by law.
Right to Object
Where Personal Data is processed on the basis of legitimate interest, Users may object to such processing for reasons related to their particular situation.
Where Personal Data is processed for direct marketing purposes, Users may object to such processing at any time without providing any justification.
How to Exercise Your Rights
Users may exercise their rights by contacting the Data Controller using the following contact details:
CHILIS LAB SL
Calle de Parcerisa, 13
08014 Barcelona
Spain
Email: contacts@zenvenda.com
Requests submitted by Users are processed free of charge and handled as quickly as possible, and in any event within the time limits established by applicable data protection legislation.