Privacy Policy

PRIVACY POLICY

General information

At Aristocrazy, SA (hereinafter, " Aristocrazy "), we are committed to protecting your privacy and ensuring the security of your personal data. Therefore, we have adopted a transparent policy that will allow you to understand how we collect, process, and protect your personal data when you access or use our services.

Through this Privacy Policy, we inform you in detail about:

  • Who is responsible for your data? The data controller is Aristocrazy, SA. In most cases, we act as the sole controller of your data.
  •   How do we process your data? Your personal data will be processed for the purposes of managing your customer registration, sending you marketing communications, coordinating events, managing contests and sweepstakes, conducting staff selection processes, ensuring the security of our facilities through video surveillance systems, among other purposes.
  •  What rights do you have and how can you contact us? You have the right to access, rectify, delete, object to, and restrict the processing of your data, as well as other rights detailed below. To exercise your rights or contact our Data Protection Officer (DPO), you can email us at dpo@aristocrazy.com .

The information contained in this privacy portal also includes specific details about the processing of personal data collected in connection with the performance of the services you contract.

Data Controller

The data controller is the company Aristocrazy, SA hereinafter identified as “ Aristocrazy ” or the “ Controller ”.

§  CIF : A48231146

§  Postal Address : Calle Gran Vía 40 bis, third, 48009 Bilbao

§  DPO Email : dpo@aristocrazy.com

In certain circumstances, such as the physical sale of products in other countries, Aristocrazy may act as a joint controller with other entities within the group. This applies, for example, to Portugal and Mexico, where Aristocrazy and Pináculos Singulares, LDA and Aristocrazy México, S de RL de CV, respectively, act as joint controllers. For more information on data processing at our physical points of sale, please see the specific section entitled "Data Processing at Physical Points of Sale."

Processing of data obtained through our website

On our website, we process the personal data of users who browse our website or provide information via the available forms. Data may be collected in various ways:

Register as a user in Aristocrazy

Registering as a user on our platform will allow you to make online purchases, access Aristocrazy news, save your favorite jewelry, and more.

  • Purpose: The purpose of this processing is to manage your registration as a user on our platform, using the " Register " form found in the "Create Account" section, in order to identify you and offer you access to the features and benefits of being part of the Aristocrazy community.
  • Legitimation: The processing of your personal data is necessary for the execution of the terms that regulate the use of our platform.
  • Recipients: Your personal data will only be disclosed to third parties who provide services to us and act as data processors, such as technology providers and legal advisors.
  • Retention: You can cancel your registered user account at any time by requesting deletion (see below). We will retain your data until your account cancellation is processed or in the event of prolonged inactivity.

Aristocrazy Universe

The Aristocrazy Universe community offers exclusive access to content such as news, events, new collections, private sales, newsletters, and other benefits. Users can register using the " Join Our Community " form, when making a purchase, or when registering on our website.

  • Purpose: The processing of personal data is intended to send commercial and promotional communications about Aristocrazy products and services, event invitations, participation in contests and sweepstakes, and newsletters via email, SMS, and WhatsApp. In addition, we analyze preferences, interests, and activity profiles on the website and social media, as well as sales generated through our communications. However, these analyses do not involve the adoption of automated decisions that may affect users. Remember that you can object to this processing (see below).
  • Legal Basis: The legal basis for processing your data obtained through the aforementioned form is the consent provided by the user. We also process your personal data based on our legitimate interest in sending you commercial communications about similar goods and services, based on an existing customer relationship (due to having made a purchase or registered on our platform). We also use this legitimate interest as a legitimate basis to show you personalized information.
  • Recipients: Your data will not be shared with third parties, except for providers who provide us with marketing and technology-related services, who will act as data processors. Furthermore, if you contact us via WhatsApp, please be advised that using this service may involve an international data transfer, as WhatsApp operates under policies that may involve storing data outside the European Union. We therefore recommend that you review the privacy policies of that provider.
  • Retention: You can unsubscribe from the community at any time, either by email or via SMS or WhatsApp, following the instructions we provide in each communication. Personal data will be retained until you request unsubscription, after which we will delete it.

Online purchasing process

Our website features an e-commerce platform that allows online purchases for both registered users and guest buyers.

  •  Purpose: We process your data to manage and execute the sales contract, managing the customer relationship throughout the entire process, from initial interest (product inquiry or viewing) to post-sales support. This includes sending quality surveys, communications related to the purchased products (see previous point), fraud prevention (see section below), and managing repair and return services. Additionally, and whenever you request it, we may process your data to prepare a full invoice.
  • Legal Basis: The processing of your personal data is necessary for the execution of the sales contract, in accordance with the General Conditions that regulate the online sale of our products. If you require a full invoice, the legal basis will be compliance with a legal obligation.
  • Recipients: Your data will only be shared with third parties who provide services to us and act as data processors, such as technology providers, legal advisors, and logistics and transportation companies for the delivery of products.
  • Retention: We retain your data for the time necessary to process the product purchase, including any returns or incidents. In general, purchase data will be retained for a maximum of 6 years, unless anti-money laundering regulations require a longer period, as indicated in the section "Data processing for AML/CFT purposes").

Personnel selection process

Through the " Work with us " section, candidates can submit their CVs or apply for job postings, provided they have an InfoJobs account. The following information supplements the disclosures for each posting:

  • Purpose: We manage candidate data for the Aristocrazy personnel selection process.
  • Legitimation: This processing is legitimized by the intention to establish an employment relationship.
  • Recipients: Your data will be obtained from InfoJobs. Additionally, with your consent, it may be transferred to companies within our Group. In any other case, your data will not be shared with third parties, except where legally required.
  • Conservation: Similarly, and unless you tell us otherwise, we inform you that if you are not selected for the position applied for or do not fit the profile of the currently open processes, your data will be kept for future selection processes that may fit your profile for a maximum period of two years (at which point your data will be permanently deleted).

Data processing in customer service

At Aristocrazy we provide various customer service channels, such as telephone, email, and our chat. and social networks.

  • Purpose: When you contact us, we may request the information strictly necessary to manage and resolve your request or application. If you use third-party channels such as WhatsApp or social media, please be aware that your data will also be managed by these third parties. We therefore recommend that you review their privacy policies and settings.
  • Legitimacy: We process your personal data either on the basis of your consent, or for the execution of a contract to which you are a party (e.g., when it comes to inquiries and/or incidents related to a purchase), or for compliance with a legal obligation on our part (e.g., when the inquiry concerns complaints related to our products or is related to an exercise of data protection rights), or for the defense of our legitimate interests.
  • Recipients: The data will be processed by our legal advisors and, if necessary, by customer service platforms such as Zendesk, which store data outside the EU under a data processing agreement and the corresponding standard contractual clauses (SCCs). In addition to the third parties indicated (WhatsApp and social networks), which may involve an international data transfer, we may share your data with insurers, lawyers, or authorities only in the event of a legal obligation.
  • Retention: We will process your data for as long as necessary to process your request or application.

Data processing at physical points of sale

Personal data provided in our physical stores will be processed by Aristocrazy. In certain cases, such as at points of sale in other countries, such as Portugal and Mexico , the data may also be processed by the group company in that country.  In such cases, we act as joint controllers of the data with the company in question, and a corresponding joint controllership agreement is signed, which establishes the purposes and means of processing.

  • Purpose: We process your data to execute the sales contract, managing the customer relationship throughout all phases, from inquiries or viewing of items to after-sales service. This includes sending quality surveys, communications about purchased products (see section), fraud prevention (see section "Data processing for AML/CFT purposes"), and managing repair, maintenance ( Aristocrazy Care ), and return services. We may also contact you to notify you when the product is ready or when there is any other type of update.
  • Legitimation: The processing of your personal data is necessary for the execution of the purchase agreement.
  • Recipients: Data will only be communicated to third-party providers who provide services to us and act as data processors, such as technology providers or legal advisors.
  • Retention: We retain your data for the time necessary to process the product purchase, including returns or incidents. Purchase data will be retained for a maximum of 6 years, unless anti-money laundering regulations require a longer period, as specified in the corresponding section.

Data processing using the Aristocrazy “ Try-On ” virtual fitting room

In our store located at Avenida Diagonal, 594, 08021 - Barcelona, we have a virtual piercing and earring fitting room, hereinafter referred to as "Try-On." When you choose to use this platform, we will process your image data, including biometric data, so that you can virtually try on the piercings and earrings in our store and safely and realistically preview the results before purchasing our products.

  •  Purpose: We will process your personal data to provide you with a personalized experience in our Try-On virtual piercing fitting room.
  • Legal Basis: The legal basis for processing will be your express consent, as provided for in Article 6.1.a) of the GDPR. This consent may be revoked at any time by sending a request to the email address provided in the "Rights. What are your rights when you provide us with your data?" section.
  • Recipients: Your data will not be shared with third parties, except with our technology provider, who will act as the data processor, or when there is a legal obligation to do so. International data transfers may occur. In such cases, we guarantee that these transfers will be carried out in compliance with all the safeguards and security standards established by the GDPR.
  • Retention: Your data will only be retained for 24 hours and will then be deleted. You can also request deletion of your data by contacting the email address indicated in the corresponding section.

Data processing for AML/CFT purposes

At Aristocrazy, as entities subject to regulations on the prevention of money laundering and combating the financing of terrorism (hereinafter, " AML-CFT "), we process additional data when transactions exceeding one thousand euros are made. Below, we explain how we will process your data in this context:

  • Purpose: We process your personal data to comply with the legal obligations established in the AML/CFT regulations. This includes identity verification, evaluation of the financial transaction, and the prevention of money laundering and terrorist financing.
  • Legitimacy: The legitimate basis for processing will be compliance with the provisions established in Law 10/2010, of April 28, on the prevention of money laundering and terrorist financing.
  • Recipients: Personal data may be communicated to the competent authorities for the prevention of money laundering and terrorist financing, provided that such communication is made in compliance with our legal obligations. In addition, the data may be communicated to our legal advisors and technology providers, who will act as data processors.
  • Retention: The information will be retained for a period of 10 years, after which it will be deleted, ensuring its confidentiality. Five years after the completion of the transaction, the retained documentation will only be accessible to the obliged entity's internal control bodies, including technical prevention units and, where applicable, those responsible for its legal defense.

Processing of video surveillance data

At Aristocrazy, we have video surveillance systems in our facilities. The following information complements the informational signs located in our stores and centers:

  • Purpose: We process images obtained through the video surveillance systems installed in our administrative offices and establishments open to the public in order to preserve the security of people, property, and facilities.
  • Legitimation: This processing is based on legitimate interest and is carried out in accordance with the provisions of Law 5/2014, of April 4, on Private Security.
  • Recipients: This data may be accessed by companies with which we subcontract security services, as well as technical maintenance services for our video surveillance cameras, as data processors. It may also be communicated to law enforcement agencies, if necessary.
  •  Retention: Data will be retained for a maximum period of 30 days, unless it is necessary to retain it for a longer period to clarify any detected violation or illegal act.

Rights What are your rights when you provide us with your data?

You have the following rights in relation to your personal data:

  • Right of access : You have the right to obtain confirmation as to whether Aristocrazy is processing personal data concerning you. You also have the right to access such data.
  • Right to rectification: You may request rectification of incorrect or incomplete data concerning you. You also have the right to restrict processing.
  • Right to erasure: You have the right to request the erasure of data concerning you, in the cases established by law.
  • Right to data portability: You can request that your personal data be made available to you in a structured, commonly used, and machine-readable format.
  • Right to object and withdraw consent: You have the right to object to the processing of your personal data, provided that the processing is based on legitimate interest. You may also withdraw your consent at any time.
  • Right to restriction : You may request that the processing of your personal data be restricted to those cases you deem appropriate, without prejudice to the right to modify your preferences at any time.
  • Right not to be subject to automated individual decisions (including profiling): You have the right not to be subject to decisions based solely on automated processing of your data that produce legal effects significantly affecting you.

To exercise your rights, you can email dpo@aristocrazy.com . You can also file a complaint with the Data Protection Agency, especially if you have not been satisfied with the exercise of your rights, at the postal and/or electronic address indicated on the website www.aepd.es.

Security measures

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent unauthorized alteration, loss, processing, or access.