Privacy Policy

PRIVACY POLICY

General information

At Aristocrazy, SA (hereinafter, “ Aristocrazy ”), we are committed to protecting your privacy and ensuring the security of your personal data. Therefore, we have adopted a transparent policy that will allow you to understand how we collect, process, and protect your personal data when you access or use our services.

Through this Privacy Policy, we inform you in detail about:

  • Who is responsible for your data? The data controller is Aristocrazy, SA; in most cases, we act as the sole controllers of said data.
  •   How do we process your data? Your personal data will be processed for the purpose of managing your registration as a client, sending you commercial communications, coordinating events, managing contests and raffles, carrying out personnel selection processes, guaranteeing the security of our facilities through video surveillance systems, among others.
  •  What rights do you have and how can you contact us? You have the right to access, rectify, erase, object to, and restrict the processing of your data, as well as other rights that will be detailed below. To exercise your rights or contact our Data Protection Officer (DPO), you can send an email to dpo@aristocrazy.com .

The information contained in this privacy portal also includes specific details about the processing of personal data collected in connection with the performance of the services you contract.

Data Controller

The data controller is the company Aristocrazy, SA, hereinafter referred to as “ Aristocrazy ” or the “ Controller ”.

§  CIF : A48231146

§  Postal Address : Calle Gran Vía 40 bis, third floor, 48009 Bilbao

§  DPO email : dpo@aristocrazy.com

In certain circumstances, such as the physical sale of products in other countries, Aristocrazy may act as a joint controller with other entities within the group. This applies, for example, to Portugal and Mexico, where Aristocrazy and Pináculos Singulares, LDA and Aristocrazy México, S de RL de CV, respectively, act as joint controllers of data processing. For more information on data processing at our physical points of sale, please refer to the specific section entitled “Data Processing at Physical Points of Sale.”

Processing of data obtained through our website

On our website, we process the personal data of users who browse our site or provide their information through the available forms. This data may be collected in various ways:

Register as a user on Aristocrazy

Registering as a user on our platform will allow you to make online purchases, access Aristocrazy news, save your favorite jewelry, among other things.

  • Purpose: When you contact us, we may request the data strictly necessary to manage and resolve your request. If you use third-party channels such as WhatsApp or social media, please note that your data will also be managed by those third parties, so we recommend that you consult their privacy policies and settings. We also inform you that when customer service is provided by telephone, Aristocrazy may record and transcribe the call in order to handle your contact request through our telephone channel and ensure the quality of service.
  • Legal basis: The processing of your personal data by us is based either on your consent, or for the performance of a contract to which you are a party (e.g., when dealing with inquiries and/or issues related to a purchase), or for compliance with a legal obligation on our part (e.g., when the inquiry concerns claims related to our products or is related to the exercise of a right in the area of ​​data protection), or for the defense of our legitimate interests.
  • Recipients: Your data will be processed by our legal advisors and, if necessary, by customer service platforms such as Zendesk, which store data outside the EU under a data processing agreement and the corresponding standard contractual clauses (STCs). In addition to the third parties mentioned (WhatsApp and social media), which may involve an international transfer of data, we may share your data with insurers, lawyers, or authorities, but only if legally required to do so.
  • Retention: We will process your data for as long as necessary to fulfill your request or inquiry.

Aristocrazy Universe

The Aristocrazy Universe community offers exclusive access to content such as news, events, new collections, private sales, newsletters, and other benefits. Users can register using the " Join our community " form when making a purchase or registering on our website.

  • Purpose: The processing of personal data is for the purpose of sending commercial and promotional communications about Aristocrazy products and services, invitations to events, participation in contests and sweepstakes, and sending newsletters via email, SMS, and WhatsApp. We also analyze profiles of preferences, interests, and activity on the website and social media, as well as sales generated through our communications. However, this analysis does not involve automated decision-making that could affect users. Remember that you can object to this processing (see below).
  • Legal basis: The legal basis for processing your data obtained through the aforementioned form is the consent you provide. We also process your personal data based on our legitimate interest in sending you marketing communications about similar goods and services, given our existing customer relationship (due to a purchase or registration on our platform). We also use this legitimate interest as the legal basis for showing you personalized information.
  • Recipients: Your data will not be shared with third parties, except with providers who offer us marketing and technology services, who will act as data processors. Furthermore, if you contact us via WhatsApp, please be aware that using this service may involve an international data transfer, as WhatsApp operates under policies that could require data to be stored outside the European Union. Therefore, we recommend that you review WhatsApp's privacy policy.
  • Data retention: You can unsubscribe from the community at any time, either by email, SMS, or WhatsApp, following the instructions provided in each communication. Your personal data will be retained until you request to unsubscribe, after which we will delete it.

Online purchase process

Our website has an e-commerce platform that allows online purchases for both registered users and guest buyers.

  •  Purpose: We process your data to manage and execute the sales contract, managing the customer relationship throughout the entire process, from initial interest (inquiry or viewing of products) to after-sales service. This includes sending quality surveys, communications related to purchased products (see previous section), fraud prevention (see section below), and managing repair services and returns. Additionally, and upon your request, we may process your data to prepare a complete invoice.
  • Legal basis: The processing of your personal data is necessary for the performance of the sales contract, in accordance with the General Terms and Conditions governing the online sale of our products. If a full invoice is required, the legal basis will be compliance with a legal obligation.
  • Recipients: Your data will only be communicated to third parties who provide us with services and act as data processors, such as technology providers, legal advisors and logistics and transport companies for the delivery of the products.
  • Data Retention: We retain your data for as long as necessary to process your purchase, including any returns or issues that may arise. Generally, purchase data will be kept for a maximum of 6 years, unless anti-money laundering regulations require a longer period, as indicated in the section “Data Processing for AML/CFT Purposes.”

Personnel selection process

Through the " Work with us " section, candidates can submit their CV or apply for jobs, provided they have an InfoJobs account. The following information supplements the details of each job posting:

  • Purpose: We manage candidate data for the Aristocrazy staff selection process.
  • Legitimation: This processing is legitimized by the intention to establish an employment relationship.
  • Recipients: Your data will be obtained from InfoJobs. Additionally, with your consent, it may be shared with companies within our Group. In all other cases, your data will not be shared with third parties, except where legally required.
  • Retention: Similarly, and unless you indicate otherwise, we inform you that if you are not selected for the position applied for or do not fit the profile of the currently open processes, your data will be kept for future selection processes that may fit your profile for a maximum period of two years (at which time your data will be permanently deleted).

Data processing in customer service

At Aristocrazy we offer various customer service channels, such as telephone, email, and our chat. and social media.

  • Purpose: When you contact us, we may request the data strictly necessary to manage and resolve your request. If you use third-party channels such as WhatsApp or social media, please note that your data will also be managed by those third parties, so we recommend that you consult their privacy policies and settings.
  • Legal basis: The processing of your personal data by us is based either on your consent, or for the performance of a contract to which you are a party (e.g., when dealing with inquiries and/or issues related to a purchase), or for compliance with a legal obligation on our part (e.g., when the inquiry concerns claims related to our products or is related to the exercise of a right in the area of ​​data protection), or for the defense of our legitimate interests.
  • Recipients: Your data will be processed by our legal advisors and, if necessary, by customer service platforms such as Zendesk, which store data outside the EU under a data processing agreement and the corresponding standard contractual clauses (STCs). In addition to the third parties mentioned (WhatsApp and social media), which may involve an international transfer of data, we may share your data with insurers, lawyers, or authorities, but only if legally required to do so.
  • Retention: We will process your data for as long as necessary to fulfill your request or inquiry.

Data processing at physical points of sale

Personal data provided in our physical stores will be processed by Aristocrazy. In certain cases, such as at points of sale in other countries, like Portugal and Mexico , the data may also be processed by the group company in that country.  In such cases, we act as joint controllers of the data with the company in question and the corresponding joint responsibility agreement is signed, which establishes the objectives and means of the processing.

  • Purpose: We process your data for the execution of the sales contract, managing the customer relationship at all stages, from viewing or inquiring about items to after-sales service. This includes sending quality surveys, communications about purchased products (see the relevant section), fraud prevention (see the section “Data Processing for AML/CFT Purposes”), and managing repair, maintenance ( Aristocrazy Care ), and returns services. We may also contact you to notify you when the product is ready or if there is any other type of update.
  • Legal basis: The processing of your personal data is necessary for the execution of the purchase agreement.
  • Recipients: The data will only be communicated to third-party providers who provide us with services and act as data processors, such as technology providers or legal advisors.
  • Data Retention: We retain your data for as long as necessary to process your purchase, including returns or resolving any issues. Purchase data will be kept for a maximum of 6 years, unless anti-money laundering regulations require a longer period, as specified in the relevant section.

Data processing using the Aristocrazy virtual try-on tool “ Try-On ”

In our store located at Avenida Diagonal, 594, 08021 - Barcelona, ​​we have a virtual piercing and earring try-on tool, hereinafter referred to as “Try-On”. When you choose to use this platform, we will process your image data, including biometric data, so that you can virtually try on the piercings and earrings in our store and safely and realistically preview the results before purchasing our products.

  •  Purpose: We will process your personal data to provide you with a personalized experience on our Try-On virtual piercing fitting tool.
  • Legal basis: The legal basis for processing your data will be your explicit consent, as provided for in Article 6.1.a) of the GDPR. This consent is revocable at any time, which you can do by sending a request to the email address provided in the section “Rights. What are your rights when you provide us with your data?”.
  • Recipients: Your data will not be shared with third parties, except with our technology provider acting as a data processor, or when there is a legal obligation to do so. International data transfers may occur. In such cases, we guarantee that these transfers will be carried out in compliance with all security safeguards and standards established by the GDPR.
  • Data Retention: Your data will only be kept for 24 hours and will then be deleted. You can also request the deletion of your data by contacting the email address indicated in the relevant section.

Data processing for AML/CFT purposes

At Aristocrazy, as entities subject to anti-money laundering and counter-terrorist financing regulations (hereinafter, “ AML/CFT ”), we process additional data when transactions exceed one thousand euros. Below, we explain how we will process your data in this context:

  • Purpose: We process your personal data to comply with legal obligations under AML/CFT regulations. This includes identity verification, financial transaction assessment, and the prevention of money laundering and terrorist financing.
  • Legitimation: The legitimizing basis for the processing will be compliance with the provisions established in Law 10/2010, of April 28, on the prevention of money laundering and the financing of terrorism.
  • Recipients: Personal data may be disclosed to the competent authorities responsible for the prevention of money laundering and terrorist financing, provided that such disclosure is made in compliance with our legal obligations. In addition, data may be disclosed to our legal advisors and technology providers, who will act as data processors.
  • Retention: The information will be retained for a period of 10 years, after which it will be destroyed, guaranteeing its confidentiality. Five years after the completion of the transaction, the retained documentation will only be accessible to the internal control bodies of the obligated entity, including the technical prevention units, and, where applicable, those responsible for its legal defense.

Processing of video surveillance data

At Aristocrazy, we have video surveillance systems in our facilities. The following information complements the information signs located in our stores and centers:

  • Purpose: We process the images obtained through the video surveillance systems installed in our administrative offices and establishments open to the public in order to preserve the safety of people, property and facilities.
  • Legal basis: This processing is based on legitimate interest and is carried out in accordance with the provisions of Law 5/2014, of April 4, on Private Security.
  • Recipients: This data may be accessed by companies with which we have subcontracted security services, as well as technical maintenance services for our video surveillance cameras, acting as data processors. It may also be disclosed to law enforcement agencies, if necessary.
  •  Retention: The data will be kept for a maximum period of 30 days, unless it is necessary to keep them for a longer period because it is convenient to clarify any detected infringement or illegal act.

Rights What are your rights when you provide us with your data?

You have the following rights in relation to your personal data:

  • Right of access : You have the right to obtain confirmation as to whether Aristocrazy is processing personal data concerning you. You also have the right to access such data.
  • Right of rectification: You may request the rectification of any incorrect or incomplete data concerning you. You also have the right to restrict its processing.
  • Right to erasure: You have the right to request the erasure of data concerning you, in the cases established by the regulations.
  • Right to data portability: You can request that your personal data be made available to you in a structured, commonly used and machine-readable format.
  • Right to object and withdraw consent: You have the right to object to the processing of your personal data, provided that the processing is based on legitimate interest. Furthermore, you may withdraw your consent at any time.
  • Right to limitation : You may request the limitation of the processing of your personal data to those cases you deem appropriate, without prejudice to being able to modify your preferences at any time.
  • Right not to be subject to automated individual decision-making (including profiling): You have the right not to be subject to decisions based solely on automated processing of your data that produce legal effects that significantly affect you.

To exercise your rights, you can contact us by email at dpo@aristocrazy.com . You can also file a complaint with the Spanish Data Protection Agency (AEPD), especially if you have not received a satisfactory response regarding the exercise of your rights, at the postal and/or email address indicated on the website www.aepd.es.

Security measures

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent its alteration, loss, unauthorized processing or access.