1. Privacy Statement and Data Controller
WOODENSON is committed to privacy, the protection of User data, and safe browsing on www.woodensonusa.com (the Website). We aim to maintain a transparent relationship with our Users so that they understand how we process personal data through the Website, how we collect and use it, the purposes of each processing activity, possible disclosures, and the rights available to them.
This Privacy Policy is permanently available through the corresponding link in the Website footer.
Data Controller: In accordance with applicable personal-data protection law, particularly the General Data Protection Regulation (GDPR), the Data Controller is 3D Junquera Font, S.L., Tax ID B-99189326, with registered office at Paseo Sagasta 45, 50006 Zaragoza, Spain, and permanent establishment in Spain at Calle Tenor Fleta 22, Esc. Dcha. 1º Izda., 50007 Zaragoza, Spain, registered with the Zaragoza Commercial Registry in Volume 3592, Folio 42, Section 8, Sheet 45691 (hereinafter, WOODENSON).
Users may read this Privacy Policy before submitting personal data through Website or social-media forms. By providing personal information to WOODENSON through the Website or our social-media channels, the User acknowledges this Privacy Policy.
2. Definitions
Processing of personal data means any operation or set of operations performed by WOODENSON on personal data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, making available, alignment, combination, restriction, erasure, or destruction.
An identified or identifiable natural person is a person who can be identified directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural, or social identity.
Personal data means any information relating to an identified or identifiable natural person. This may include:
- First and last name.
- Username.
- Billing and shipping addresses.
- Landline or mobile telephone number.
- Email address.
- Payment-method information, such as the use of a credit card, debit card, or PayPal account. WOODENSON does not receive full card details entered directly with a payment provider.
- National identity or tax identification number, where required.
- Social-media username.
- Browsing and purchasing habits, preferences, interests, and similar information.
Special categories of personal data are particularly sensitive data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, health information, sex life or sexual orientation, or biometric or genetic data.
The Data Controller is the legal person—in this case WOODENSON—that determines the purposes and means of processing.
WOODENSON asks Users not to provide special-category data through the Website, social media, or by any other means. If a User voluntarily provides sensitive information, the User does so under their own responsibility and expressly requests that WOODENSON process it only for the stated purpose, subject to applicable law.
Personal Information about Third Parties
As a general rule, Users should not submit or publish personal information about anyone other than themselves through the Website or WOODENSON social-media channels without that person’s express consent.
If a User provides information about another person in connection with a gift—for example, a delivery address, contact telephone number, or photograph used to personalize a product—the User must ensure that they are legally entitled to provide it. The User is responsible for that disclosure.
3. Data Collected and Purposes
WOODENSON may collect personal data through Website forms and the following channels:
| Channel | Data | Purpose |
|---|---|---|
| Contact and support forms | Name, email address, contact details, message, and order number where applicable | Respond to questions, manage incidents, and provide customer service. |
| Account, order, and checkout | Identity, account credentials, billing and shipping details, contact information, order information, and payment status | Create and manage accounts; process purchases, payments, delivery, returns, warranty claims, and related legal or accounting obligations. |
| Product personalization | Text, drawings, designs, photographs, and order instructions supplied by the User | Create and manufacture the personalized product requested by the Customer. |
| Newsletter, promotions, and social media | Email address, social-media profile information, entries, and consent records | Manage promotions or contests and send commercial communications where consent or another lawful basis exists. |
| Cookies and analytics | Device, browser, online identifier, browsing, and interaction information | Operate and secure the Website, remember preferences, measure performance, and—with consent—personalize content or advertising. |
Information Voluntarily Provided by the User
WOODENSON may also collect information such as date of birth, gender, postal code, preferred communication method, or any other information the User voluntarily includes in free-text message or order-note fields.
Information Collected through WOODENSON Social Media
WOODENSON may collect personal data for the purposes explained in each case through its social-media channels, including Facebook, X/Twitter, and Instagram, in connection with offers, promotions, competitions, and published posts. Where appropriate, Users will be directed to the Website and informed about the processing, its specific purposes, their rights, and any consent required under applicable law.
Commercial Communications
Users may withdraw consent to electronic marketing and unsubscribe from distribution lists at any time, free of charge, by using the unsubscribe link included in a message or by emailing bajas@woodenson.com.
Children’s Data
The Website is intended for Users aged 16 or older. Access by children under that age is restricted.
WOODENSON strongly recommends that parents or legal guardians regularly supervise their children’s Internet and social-media activity and ensure that children do not provide us with personal data without the required prior authorization.
4. Lawful Basis for Processing, Authorization, and Consent
WOODENSON processes personal data only when a lawful basis applies. Depending on the processing activity, this may include: (i) the data subject’s freely given, informed, specific, and unambiguous consent; (ii) the need to perform a contract, such as a product purchase, or to take requested pre-contractual steps; (iii) compliance with a legal obligation; or (iv) another lawful basis recognized by applicable law, including a legitimate interest where appropriate and not overridden by the User’s rights.
When personal data is collected through a Website or social-media form, WOODENSON will provide information about the processing and its specific purpose and will request consent where required.
Data provided when creating an account or placing an order is processed as necessary to perform the product purchase contract and related services.
At the point of collection, the User will be informed whether providing particular data is mandatory and whether refusing to provide it would prevent WOODENSON from delivering a requested product or handling a request.
5. Data Recipients, Disclosures, and International Transfers
WOODENSON may disclose the minimum personal data necessary—such as name, delivery address, and contact telephone number—to transport and courier companies engaged to deliver products purchased by the Customer.
WOODENSON may send photographs or designs submitted for product personalization to national or international service providers when production work is outsourced, including vectorization, engraving preparation, or silhouette work. Some providers may be located outside the European Economic Area. In those cases, WOODENSON will use appropriate safeguards or providers in jurisdictions recognized as providing an adequate level of protection, in accordance with GDPR requirements.
WOODENSON may at times work with independent service providers based in Israel, a jurisdiction recognized by the European Commission as providing an adequate level of protection.
WOODENSON may also give IT, hosting, payment, website-maintenance, professional, and similar service providers access to data where necessary to operate the Website and provide services. Those providers process data under applicable contractual and legal safeguards.
Except in the cases described above or where disclosure is required by law, personal data will not be transferred to third parties.
6. User Rights
Users may exercise their rights of access, rectification, erasure, restriction, objection, portability, and the right not to be subject to a decision based solely on automated processing, including profiling, where it produces legal or similarly significant effects. Requests may be sent to privacidad@woodenson.com. Users may also lodge a complaint with the Spanish Data Protection Agency or another competent supervisory authority.
- Right of access: obtain confirmation as to whether WOODENSON is processing personal data concerning the User and, if so, access that data and information about the purposes, categories, recipients, and retention period.
- Right to rectification: have inaccurate personal data corrected without undue delay and incomplete data completed. WOODENSON will treat information supplied by Users as accurate and current until informed otherwise.
- Right to erasure or to be forgotten: request deletion where, among other grounds, the data is no longer needed for the purpose for which it was collected, consent has been withdrawn and no other lawful basis applies, the User validly objects, the processing is unlawful, or erasure is required by law.
- Right to restriction of processing: request that processing be limited, including while the accuracy of data is being verified, where processing is unlawful but erasure is opposed, where WOODENSON no longer needs the data but the User requires it for legal claims, or while an objection is being assessed.
- Right to data portability: receive personal data provided to WOODENSON in a structured, commonly used, machine-readable format and transmit it to another controller, including directly where technically feasible, when processing is based on consent or contract and carried out by automated means.
- Right to object: object at any time, on grounds relating to the User’s particular situation, to processing based on a public-interest task or legitimate interests, including related profiling. Users may object to direct marketing at any time.
- Right not to be subject to automated decisions: not be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, subject to the exceptions and safeguards established by law.
7. Data Retention
Personal data will be retained for as long as necessary for the purposes described, for the duration of the contractual or customer relationship, and for any period required to comply with legal obligations or establish, exercise, or defend legal claims. Where processing is based on consent, data will no longer be used for that purpose after consent is withdrawn, unless another lawful basis applies.
8. Withdrawal of Consent
Users may withdraw consent at any time, free of charge, by emailing privacidad@woodenson.com. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
9. Use of Cookies
WOODENSON uses first-party and third-party cookies to operate the Website, improve the User experience, and provide services. Non-essential cookies are used according to the User’s choices in the cookie banner.
Further information and preference controls are available in the Cookie Policy.
10. User Responsibility
The User is responsible for the truthfulness and accuracy of data entered on the Website. The User must also hold all permissions required for any data they access or provide and must obtain consent where data belongs to a third party. WOODENSON is not responsible for inaccurate, incomplete, or incorrect data supplied by the User or for the User’s failure to obtain required authorization.
11. Amendments
If this Privacy Policy is amended, WOODENSON will duly inform Users of material changes to the conditions governing the processing of personal data by displaying a notice on the Website.