Noble España

Privacy Policy

1. Data protection at a glance & controller

The protection of your personal data is an important concern for us. We treat your personal data confidentially and in accordance with the statutory data protection regulations of the General Data Protection Regulation (GDPR) and this privacy policy.

The controller responsible for data processing on this website is Noble Society Institute S.R.L. Stefano Manda is the contact person responsible for all data protection matters and can be reached at admin@noble-society.net.

2. Collection and storage of personal data when visiting the website

When you visit our website, the browser on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called server log file. It includes the IP address of the requesting computer, the date and time of access, the name and URL of the file accessed, and the website from which access is made. We process this data to ensure a smooth connection and comfortable use of the website, and to evaluate system security. The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above.

3. Order processing and fulfilment with Billbee

When you place an order in our shop, we process the data you provide (such as first and last name, delivery and billing address, email address, and any customisation data for personalising the documents) to fulfil the purchase contract and process your order. The legal basis for this is Art. 6(1)(b) GDPR.

For efficient order processing, invoicing and inventory management, we use the web-based ERP and order management system of Billbee GmbH, Paul-Gerhardt-Straße 34, 32756 Detmold, Germany. The data collected during your order is forwarded to Billbee’s servers, where it is stored and processed exclusively for the purpose of processing your order, in accordance with Art. 28 GDPR. Data is only passed on to other third parties to the extent strictly necessary for contract performance, for example to the transport company commissioned with delivery (DHL).

4. Payment processing

To process payments, we offer various encrypted payment methods, including credit card payments, Klarna, and mobile payment services such as Apple Pay and Google Pay. Processing takes place through secure payment service providers. Your payment details are transmitted directly to the respective payment provider via encrypted connections. We do not store complete credit card numbers or sensitive bank details on our servers. The legal basis for the transmission and processing of payment data is Art. 6(1)(b) GDPR for the performance of the contract.

5. Web analysis with Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. The information generated by these cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. A transfer to Google LLC in the USA cannot be ruled out.

We have activated IP anonymisation on this website. This means that your IP address is shortened by Google within member states of the European Union or other states party to the Agreement on the European Economic Area before being transmitted. Google Analytics is used exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR, which you grant via the cookie banner. You can revoke your consent at any time with effect for the future via the cookie settings on our website.

6. Storage duration

Unless a specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for which it was processed no longer applies. If you submit a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining it (for example, tax or commercial retention periods); in the latter case, deletion will take place once these reasons cease to apply.

7. Your rights as a data subject

Within the framework of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of the data processing (Art. 15 GDPR). You also have the right to have incorrect data corrected (Art. 16 GDPR), to have your data stored with us deleted (Art. 17 GDPR), to have the processing of your data restricted (Art. 18 GDPR), and the right to data portability (Art. 20 GDPR).

If the data processing is based on your consent, you can revoke it at any time with effect for the future. If the data processing is based on legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. For these purposes and for any further questions regarding data protection, you can contact Stefano Manda at any time at admin@noble-society.net. You also have the right to lodge a complaint with the competent data protection supervisory authority.