1. Data controller

• Controller: VERTICAL STOCK 360, S.L.U. (Yotei Spirit)
• Tax ID (NIF): B75926394
• Address: Calle Fuente, 4, 50480 Paniza (Zaragoza), Spain
• Email: pedidos@yoteispirit.com

This policy explains how personal data obtained through yoteispirit.com and the contact channels linked to the website is processed, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

2. Data processing

2.1. Quote and sample requests

When you submit the quote form, we process your first name, last name, email address, phone number, the estimated volume you indicate and any information you include in your message. If you request samples, we will also process the data needed to send them to you.

• Purpose: to prepare and send you a quote, contact you about your request, send you samples when you ask for them and, if you accept the quote, manage the order, delivery and invoicing.
• Legal basis: steps taken at your request prior to entering into a contract and, where applicable, performance of the contract (Art. 6(1)(b) GDPR). Invoicing is also based on compliance with legal obligations (Art. 6(1)(c) GDPR).
• Retention: if an order is placed, for the duration of the business relationship and afterwards for the applicable legal periods, such as tax and commercial ones. If no order is placed, for a maximum of 12 months from the last contact, unless certain information needs to be kept longer to establish, exercise or defend legal claims.

2.2. Enquiries through the contact form, email, phone or WhatsApp

If you contact us through the contact form, by email, by phone or by WhatsApp, we will process the data you provide (such as your name, email address, subject and message) and any data needed to handle your enquiry.

• Purpose: to handle your enquiry and, where appropriate, prepare a quote or a possible business relationship.
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) when the enquiry relates to a possible purchase; otherwise, our legitimate interest in handling the communications we receive (Art. 6(1)(f) GDPR).
• Retention: for the time needed to handle the communication and, where applicable, for the duration of the business relationship and the applicable legal periods.

2.3. Marketing communications

Sending a quote request or an enquiry does not, in itself, subscribe you to marketing communications. You will only receive news or offers from Yotei Spirit if you agree by ticking the corresponding box, which is optional and not pre-ticked. You can withdraw that consent at any time.

Where there is a prior contractual relationship, communications about our own products similar to those purchased may be sent as permitted by Article 21 of the LSSI-CE, always offering a simple, free way to object or unsubscribe.

• Legal basis: consent (Art. 6(1)(a) GDPR); or legitimate interest linked to the exception in Article 21.2 of the LSSI-CE where its requirements are met.
• Retention: until you withdraw your consent or object to receiving these communications.

3. Recipients and providers

We do not sell personal data or share it with third parties unless required by law or necessary to handle your request. To run the website and provide our service, we use providers that may access personal data when necessary:

Where a provider involves an international transfer of data, the safeguards provided for in Articles 44 et seq. of the GDPR will apply, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, or the standard contractual clauses approved by the European Commission.

4. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent where processing is based on it, by writing to pedidos@yoteispirit.com. Where necessary to handle your request, we may ask for information to verify your identity.

If you believe the processing of your data does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

5. Security

We apply technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss, alteration or disclosure, including HTTPS connections, access control to the tools we use and the selection of providers with adequate security and data protection guarantees.

6. Minors

Yotei Spirit products are aimed at businesses and professionals and are not intended for minors. We do not knowingly collect data from children under 14 through the website.

7. Updates

This policy may be updated when the processing, providers, tools or legal requirements change. The version in force is the one published on yoteispirit.com.