PRIVACY POLICY

1. General Privacy Policy

In accordance with the General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, this Privacy Policy aims to explain how ARISTOCRAZY SA collects, processes, and protects the personal data of individuals who access or use its services.

DATA CONTROLLER

ARISTOCRAZY SA

CIF: A48231146

Registered in the Commercial Registry of Vizcaya in Volume 1959, Folio 170, Page 3970A. Entry 8.

Postal Address: Calle Gran Vía 40 bis, third floor, 48009 Bilbao

E-mail: dpo@aristocrazy.com

PURPOSES OF THE PROCESSING OF PERSONAL DATA

ARISTOCRAZY SA processes the personal data collected, as the case may be, for the management of customer service and for persons interested in ARISTOCRAZY products, customer loyalty, sending newsletters and commercial communications about the organization's products and services, invitations to events and holding competitions, as well as for the creation of profiles linked to user preferences, without this involving the adoption of automated decisions that have any impact on individuals.

For each of the services offered, the user will find a specific information policy on this privacy portal regarding the processing of personal data requested for the provision of the service in question.

ORIGIN OF THE DATA

The personal data collected comes directly from the information provided by the individuals to whom the data refers.

ACCURACY AND TRUTHFULNESS OF THE DATA PROVIDED

Users of ARISTOCRAZY SA's services guarantee and are responsible, in all cases, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep them duly updated.

CONSERVATION

The personal data provided will be kept as long as necessary to meet the purposes for which, in each case, they have been collected in order to maintain the relationship or link of the interested party with ARISTOCRAZY SA and their deletion is not requested by the person, being also kept in accordance with the legal deadlines for compliance with legal obligations required by ARISTOCRAZY SA.

LEGAL RIGHT. LEGAL AUTHORIZATION FOR THE USE OF DATA

The legitimacy for the processing of data by ARISTOCRAZY SA will be carried out in the terms established by article 6 of the European General Data Protection Regulation, relating to ordinary data, or, where appropriate, article 9 of said European Regulation relating to special categories of data, the data subject being informed of the title or titles of lawfulness that apply to each service provision, and which may be consent, the execution of a legal relationship in which the person is a party, compliance with a legal obligation or the legitimate interest of ARISTOCRAZY SA in the development of its services and competences.

RECIPIENTS

During the processing of personal data, ARISTOCRAZY SA will not transfer any of these except in compliance with a legal obligation or with prior authorization from the person to whom it will be requested, if necessary. They will be informed of the consequences that failure to do so may entail, specifically, the impossibility of providing the service in question. The provision of various services may require communications with IT service companies acting as data processors for ARISTOCRAZY, SA. These companies are subject to conditions of confidentiality and security in the processing of data. These companies may be located outside the European Union under the legal provisions that authorize it.

RIGHTS

ARISTOCRAZY SA provides interested parties with the following rights related to the processing of their personal data:

Right to request access to your personal data.
Right to request rectification or deletion.
Right to request limitation of your processing.
Right to object to processing.
Right to data portability.
Right to withdraw consent given.

Any person has the right to obtain confirmation as to whether ARISTOCRAZY SA is processing personal data concerning them. Data subjects may access their personal data and request rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request that the processing of their data be restricted, in which case it will only be retained for the purpose of exercising or defending legal claims. In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data.

In this case, ARISTOCRAZY SA will stop processing the data, except for compelling legitimate reasons, or to exercise or defend against potential claims.

If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on your consent prior to its withdrawal.

To do so, you can send a letter to ARISTOCRAZY SA at the postal address Calle Gran Vía 40 bis, third, 48009 Bilbao or send an email to the electronic address dpo@aristocrazy.com

Aristocrazy does not make automated decisions regarding the processing of any of the data referred to in this policy.

If you feel that your rights regarding the protection of your personal data are not being met, you may file a complaint with the competent Data Protection Agency through its website www.aepd.es.

2. Privacy policy regarding our customers and users

We process our customers' and users' data when they register on our platform or complete a purchase.

PURPOSE

Why do we process your data?

ARISTOCRAZY SA processes the data provided for the following purposes:

Manage the customer relationship throughout the entire process, from their expressed interest in consulting or viewing items in retail stores or through the website to after-sales service.
Analyze profiles of preferences and interests in the brand, website activity, and product purchases, as well as brand tracking by the individual, without this resulting in automated decision-making that impacts individuals.
Manage the customer loyalty process
Manage the sending of newsletters and commercial and informative communications about the organization's products and services, whether or not based on preferences, as well as the sending of birthday greetings, through physical and/or electronic means.
Manage event invitations and contest participation.
Tracking and accounting for sales generated from the newsletter, allowing for determining the origin and consumption of the buyers.
Respond to queries, complaints, claims, and/or suggestions received through the organization's customer service contact channels.
Legal compliance with anti-money laundering regulations required by jewelry stores.

LEGITIMATION

What is the legitimacy for processing your data?

The legal bases for the processing of data are the following:

Registered users: Execution of the conditions of use of the platform
Clients: The execution of a contract of sale or provision of services to which they are a party.
Clients: Legal compliance with anti-money laundering regulations required by jewelry stores.

RECIPIENTS

To which recipients will your data be communicated?

Your data will be shared with providers located in the European Union to provide support and maintenance for our platform. These providers operate under strict safeguards and security measures to ensure the protection of your data.
In the case of online purchases, your data may be shared with our logistics, transportation, and delivery services, and/or their partner establishments.
For the purpose of sending communications, data may be shared with marketing and advertising service providers.

INTERNATIONAL TRANSFERS

Our customer service software is managed by the American company SALESFORCE. This company enjoys binding corporate standards accepted by the EU, which allow data transmission between the EU and the US.

CONSERVATION

We retain data for a period of ten years after the service is provided in accordance with anti-money laundering regulations.

RIGHTS

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether ARISTOCRAZY SA is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request that the processing of their data be restricted, in which case we will only retain it for the purpose of exercising or defending legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, ARISTOCRAZY SA will cease processing the data, except for compelling legitimate reasons or to exercise or defend potential legal claims.
Interested parties may request data portability to obtain the data they have provided to ARISTOCRAZY SA in a structured, commonly used, and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY SA to another entity.
The interested party may exercise their rights by sending an email to dpo@aristocrazy.com , which will be available on the website.
In addition, you may file a complaint with the Data Protection Agency, especially if you have not received satisfaction in the exercise of your rights, at the postal and/or electronic address indicated on the website www.aepd.es.

SECURITY

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent unauthorized alteration, loss, processing, or access.

3. Newsletter Privacy Policy

PURPOSE

Why do we process your data?

ARISTOCRAZY SA processes the data provided for the following purposes:

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent unauthorized alteration, loss, processing, or access.
Manage event invitations and contest participation.
Tracking and accounting for sales generated from the newsletter, allowing for determining the origin and consumption of the buyers.

LEGITIMATION

What is the legitimacy for processing your data?

The legal bases for the processing of data are the following:

Consent (Article 6.1.a) and legitimate interest for the purposes indicated above, as provided for in Article 6.1.f) of the European Data Protection Regulation.

RECIPIENTS

To which recipients will your data be communicated?

Data management does not involve international transfers of such data.

INTERNATIONAL TRANSFERS

No international transfers are made within the scope of this treatment.

CONSERVATION

We retain data for the purpose of sending commercial communications and profiling until the individual requests to unsubscribe.

RIGHTS

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether ARISTOCRAZY SA is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request that the processing of their data be restricted, in which case we will only retain it for the purpose of exercising or defending legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, ARISTOCRAZY SA will cease processing the data, except for compelling legitimate reasons or to exercise or defend potential legal claims.
Interested parties may request data portability to obtain the data they have provided to ARISTOCRAZY SA in a structured, commonly used, and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY SA to another entity.
The interested party may exercise their rights by sending an email to dpo@aristocrazy.com
In addition, you may file a complaint with the Data Protection Agency, especially if you have not received satisfaction in the exercise of your rights, at the postal and/or electronic address indicated on the website www.aepd.es.

SECURITY

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent unauthorized alteration, loss, processing, or access.

4. Privacy Policy events

PURPOSE

Why do we process your data?

ARISTOCRAZY SA processes the data provided for the following purposes:

Manage personal information relating to individuals within or outside the organization for the development and participation in events, reports, and events related to the presentation of the organization's products or services, establishment openings, editing presentation formats for the media or the general public, as well as audiovisual recordings of such events.
Management of personal information collected during the holding of such events for the purpose of sending commercial and promotional information about the organization's products and services, whether or not based on preferences.

LEGITIMATION

What is the legitimacy for processing your data?

The legal bases for the processing of data are the following:

Consent of individuals, as provided for in Article 6.1.a) of the European Data Protection Regulation.
Legitimate interest in sending commercial and informative communications about products and services, as contemplated in Article 6.1.f) of the European Data Protection Regulation.

RECIPIENTS

To which recipients will your data be communicated?

Data management does not involve international transfers of said data.

INTERNATIONAL TRANSFERS

They are not included in the scope of this data processing.

CONSERVATION

We retain event organization data for a period of one year to address any claims that may arise from the event.

We retain your data for the purpose of sending marketing communications until you unsubscribe.

RIGHTS

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether ARISTOCRAZY SA is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request that the processing of their data be restricted, in which case we will only retain it for the purpose of exercising or defending legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, ARISTOCRAZY SA will cease processing the data, except for compelling legitimate reasons or to exercise or defend potential legal claims.
Interested parties may request data portability to obtain the data they have provided to ARISTOCRAZY SA in a structured, commonly used, and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY SA to another entity.
The interested party may exercise their rights by sending an email to dpo@aristocrazy.com , which will be available on the website.
In addition, you may file a complaint with the Data Protection Agency, especially if you have not received satisfaction in the exercise of your rights, at the postal and/or electronic address indicated on the website www.aepd.es.

SECURITY

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent unauthorized alteration, loss, processing, or access.

5. Privacy policy contests

PURPOSE

Why do we process your data?

ARISTOCRAZY SA processes the data provided for the following purposes:

Manage personal information related to participation in contests organized by the firm.
Manage the sending of commercial and promotional information about the organization's products and services, by physical and electronic means, based on preferences or not.

LEGITIMATION

What is the legitimacy for processing your data?

The legal bases for the processing of data are the following:

Consent of individuals, as provided for in Article 6.1.a) of the European Data Protection Regulation.
Legitimate interest in sending commercial and informative communications about products and services, as contemplated in Article 6.1.f) of the European Data Protection Regulation.

RECIPIENTS

To which recipients will your data be communicated?

Data management does not involve international transfers of such data.

INTERNATIONAL TRANSFERS

They are not included in the scope of this data processing.

CONSERVATION

We retain event organization data for a period of one year to address any claims that may arise from the event.

We retain your data for the purpose of sending marketing communications until you unsubscribe.

RIGHTS

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether ARISTOCRAZY SA is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request that the processing of their data be restricted, in which case we will only retain it for the purpose of exercising or defending legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, ARISTOCRAZY SA will cease processing the data, except for compelling legitimate reasons or to exercise or defend potential legal claims.
Interested parties may request data portability to obtain the data they have provided to ARISTOCRAZY SA in a structured, commonly used, and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY SA to another entity.
The interested party may exercise their rights by sending an email to dpo@aristocrazy.com
In addition, you may file a complaint with the Data Protection Agency, especially if you have not received satisfaction in the exercise of your rights, at the postal and/or electronic address indicated on the website www.aepd.es.

SECURITY

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent unauthorized alteration, loss, processing, or access.

6. Privacy Policy inquiries

PURPOSE

Why do we process your data?

ARISTOCRAZY SA processes the data provided for the following purposes:

Manage communication with people who contact ARISTOCRAZY through the inquiry channel (web form or others) to obtain information or direct inquiries to ARISTOCRAZY.
Manage the sending of commercial and promotional information about the organization's products and services, by physical and electronic means, based on preferences or not.

LEGITIMATION

What is the legitimacy for processing your data?

Legitimate interest: art. 6.1.f) of the European General Data Protection Regulation.

RECIPIENTS

To which recipients will your data be communicated?

Data management does not involve the transfer of data to third parties unless required to comply with legal obligations or to support the service.

INTERNATIONAL TRANSFERS

Our customer service software is managed by the North American company Salesforce, which is included among the companies that meet the privacy requirements established by the European Union for companies located in North America.

If the contracting of services from external providers requires access to data by providers located outside the European Union, their adherence to these privacy requirements or compliance with appropriate confidentiality guarantees in data processing will be guaranteed.

CONSERVATION

Personal data will be retained for the time necessary to address the individual's request. Data will be locked for a period of one year and deleted after this period.

The data required for statistical studies and other studies that contribute to the quality of service for users will be collected by anonymizing the personal information obtained.

RIGHTS

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether ARISTOCRAZY SA is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request that the processing of their data be restricted, in which case we will only retain it for the purpose of exercising or defending legal claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, ARISTOCRAZY SA will cease processing the data, except for compelling legitimate reasons or to exercise or defend potential legal claims.
Interested parties may request data portability to obtain the data they have provided to ARISTOCRAZY SA in a structured, commonly used, and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY SA to another entity.
The interested party may exercise their rights by sending an email to dpo@aristocrazy.com
If a person believes their rights have not been properly respected, they have the right to file a complaint with the Spanish Data Protection Agency.

SECURITY

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent unauthorized alteration, loss, processing, or access.

7. Privacy Policy for Virtual Fitting Rooms (Try-On)

PURPOSE

Why do we process your data?

ARISTOCRAZY SA, as the data controller, informs you that we will process image data, including biometric data, exclusively to provide you with a personalized experience in our virtual piercing fitting room. We may also process data such as your email address if you wish to receive an image of our fitting room.

LEGITIMATION

What is the legitimacy for processing your data?

The basis for legal action will be your express consent, as provided for in Article 6.1.a) of the European Data Protection Regulation. This consent may be revoked at any time by sending a request to the email address provided below.

RECIPIENTS

To which recipients will your data be communicated?

Your data will not be shared with third parties, except with our technology provider, or when there is a legal obligation to do so.

INTERNATIONAL TRANSFERS

International data transfers may occur. In such cases, we guarantee that these transfers will be carried out in compliance with all the safeguards and security standards established by the GDPR.

CONSERVATION

Your data will only be kept for 24 hours and will then be deleted.

RIGHTS

What are your rights when you provide us with your data?

You have the right to access, rectify, and delete your data, as well as to exercise other rights. To do so, you can contact us by email at ARISTOCRAZY SA. We also inform you that you have the right to file a complaint with the Spanish Data Protection Agency (AEPD).