Privacy Policy

PRIVACY POLICY

1. General Privacy Policy

In accordance with the General Data Protection Regulation 2016/679, of the European Parliament and of the Council of 27 April 2016, this Privacy Policy aims to disclose how ARISTOCRAZY S.A. collects, processes and protects the personal data of persons who access or make use of its services.

RESPONSIBLE FOR THE TREATMENT

ARISTOCRAZY S.A.

VAT NUMBER: A48231146

Registered in the Mercantile Registry of Vizcaya in Volume 1959, Folio 170, Page 3970A. Inscription 8ª.

Postal Address: Calle Gran Vía 40 bis, tercero, 48009 Bilbao

Email: dpo@aristocrazy.com

PURPOSES OF THE PROCESSING OF PERSONAL DATA

ARISTOCRAZY S.A. treats the personal data collected, as appropriate, for the management of customer service and persons interested in ARISTOCRAZY products, customer loyalty, sending newsletters and commercial communications to inform about the organization's products and services, invitations to events and competitions, as well as for the creation of profiles linked to the preferences of the users without this involving the adoption of automated decisions that generate effects for individuals.

For each of the services offered, the user will find in this privacy portal a specific information policy regarding the processing of personal data requested for the execution of the service in question.

ORIGIN OF THE DATA

The personal data collected comes directly from the information provided by the persons to whom the data refers.

ACCURACY AND VERACITY OF THE DATA PROVIDED

The users of the services of ARISTOCRAZY S.A. guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated.

CONSERVATION

The personal data provided will be kept as long as they are necessary to meet the purposes for which, in each case, have been collected in order to maintain the relationship or link of the person concerned with ARISTOCRAZY S.A. and their deletion is not requested by the person, being also retained in accordance with the legal deadlines for compliance with legal obligations required to ARISTOCRAZY S.A.

LEGITIMACY. LEGAL TITLE ENABLING THE USE OF THE DATA.

The legitimacy for the processing of the data by ARISTOCRAZY S.A. will be carried out in the terms established by Article 6 of the European General Data Protection Regulation, relating to ordinary data, or, where appropriate, Article 9 of the said European Regulation relating to special categories of data, the data subject being informed of the title or titles of lawfulness that apply to each service provision, which may be consent, the execution of a legal relationship to which the person is a party, compliance with a legal obligation or the legitimate interest of ARISTOCRAZY S.A. in the development of its services and competences.

TARGET

During the processing of personal data ARISTOCRAZY S.A. will not make any transfer of these except in compliance with a legal obligation or prior authorization of the person who will be requested in the case where it is necessary, informing him of the consequences that failure to do so may entail and, in particular, the impossibility of providing the service in question. The provision of the various services may require the use of communications to computer service companies acting as data processors ARISTOCRAZY, S.A., subject to conditions of confidentiality and security in the processing of data, and may be located outside the European Union under the protection of legal provisions authorizing it.

RIGHTS

ARISTOCRAZY S.A. facilitates to the interested persons the exercise of the following rights related to the processing of their personal data:

  • Right to request access to your personal data.
  • Right to request its rectification or deletion.
  • Right to request the limitation of its processing.
  • The right to object to the processing.
  • Right to data portability.
  • Right to withdraw the consent given.

Any person has the right to obtain confirmation as to whether ARISTOCRAZY S.A. processes personal data concerning him/her, and interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the persons concerned may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, the persons concerned may object to the processing of their data.

In this case, ARISTOCRAZY S.A., will stop processing the data, except for legitimate reasons, or the exercise or defense of possible claims.

If consent has been given for a specific purpose, the data subject has the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdraw

To do so, you may send a letter to ARISTOCRAZY S.A. to the postal address Calle Gran Vía 40 bis, tercero, 48009 Bilbao or send an email to the electronic address dpo@aristocrazy.com

Aristocrazy does not make automated decisions in the processing of any of the data referred to in this policy.

In case you feel that your rights concerning the protection of your personal data are not satisfied, you can file a complaint with the competent Data Protection Agency via its website www.aepd.es.


2. Customer privacy policy

PURPOSE

What do we process your data for?

ARISTOCRAZY S.A. processes the data provided for the following purposes:

  • Manage the relationship with the customer in the entire process, from their interest expressed in the consultation or viewing of articles in establishments of the framework or through the website to the post-sales service.
  • Analyze the profiles of preferences and interests in the brand, of activity developed on the website and purchase of products, as well as the monitoring of the brand by the person, without this entailing the adoption of automated decisions that generate effects for individuals.
  • Manage the customer loyalty process.
  • Manage the sending of newsletters and commercial and informative communications of products and services of the organization, based or not on preferences, as well as the sending of birthday greetings, through physical and/or electronic means.
  • Manage invitations to events and participation in contests.
  • Tracking and accounting of sales generated from the newsletter, to determine the origin and consumption of buyers.
  • Attending to queries, complaints, claims and/or suggestions obtained from the contact channels with the organization for customer service.

  • Legal compliance with the regulations for the prevention of money laundering to which jewelry stores are obliged to comply.

LEGITIMACY

What is the legitimacy for the processing of your data?

The legal bases for the processing of data are the following:

  • Consent of the individuals, referred to in Article 6.1.a) of the European Data Protection Regulation.
  • Legitimate interest for sending commercial and informative communications of products and services, referred to in Article 6.1.f) of the European Data Protection Regulation.

TARGET

To which recipients will your data be communicated?

The management of the data does not involve the international transfer of such data.

INTERNATIONAL TRA

Our customer support software is managed by the American company SALESFORCE. This company has binding corporate standards accepted by the EU, which enables data transmission between the EU and the USA.

CONSERVATION

We keep the data for a period of ten years after the provision of the service in application of the money laundering prevention regulations.

We keep the data for sending commercial communications and profiles until the individual's request to unsubscribe.

RIGHTS

What are your rights when you provide us with your data?

  • Any person has the right to obtain confirmation as to whether ARISTOCRAZY S.A. is processing personal data concerning him/her.
  • Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances, the persons concerned may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
  • In certain circumstances and for reasons related to their particular situation, the persons concerned may object to the processing of their data. In this case, ARISTOCRAZY S.A. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Interested parties may request data portability in order to obtain the data they have provided to ARISTOCRAZY S.A. in a structured, commonly used and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY S.A. to another entity.
  • The person concerned may exercise his rights by sending an e-mail to the address dpo@aristocrazy.com
  • In addition, he/she can file a complaint with the Data Protection Agency, especially when he/she has not obtained satisfaction in the exercise of his/her rights, at the postal and/or electronic address indicated on the page www.aepd.es.

SECURITY

The data will be treated confidentially and under the submission of technical and organizational security measures to prevent alteration, loss, unauthorized access or processing.


3. Privacy policy newsletter

PURPOSE

What do we process your data for?

ARISTOCRAZY S.A. processes the data provided for the following purposes:

  • The data will be treated confidentially and under the submission to appropriate technical and organizational security measures to prevent alteration, loss, treatment or unauthorized access.
  • Manage invitations to events and participation in contests.
  • Activity tracking and accounting of sales generated from the newsletter, to determine the origin and consumption of buyers.

LEGITIMACY

What is the legitimacy for the processing of your data?

The legal bases for the processing of data are the following:

  • Consent (art. 6.1.a) and legitimate interest for the purposes stated above. referred to in article 6.1.f) of the European Data Protection Regulation.

TARGET

To which recipients will your data be communicated?

The management of the data does not involve the international transfer of such data.

INTERNATIONAL TRANSFERS

No international transfers are made within the scope of this treatment.

CONSERVATION

We keep the data for sending commercial communications and profiles until the individual's request to unsubscribe.

RIGHTS

What are your rights when you provide us with your data?

  • Any person has the right to obtain confirmation as to whether ARISTOCRAZY S.A. is processing personal data concerning him/her.
  • Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances, the persons concerned may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
  • In certain circumstances and for reasons related to their particular situation, the persons concerned may object to the processing of their data. In this case, ARISTOCRAZY S.A. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Interested parties may request data portability in order to obtain the data they have provided to ARISTOCRAZY S.A. in a structured, commonly used and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY S.A. to another entity.
  • The person concerned may exercise his rights by sending an e-mail to the address dpo@aristocrazy.com
  • In addition, he/she can file a complaint with the Data Protection Agency, especially when he/she has not obtained satisfaction in the exercise of his/her rights, at the postal and/or electronic address indicated on the page www.aepd.es

SECURITY

The data will be treated confidentially and under the submission of technical and organizational security measures to prevent alteration, loss, unauthorized access or processing.


4. Privacy policy events

PURPOSE

What do we process your data for?

ARISTOCRAZY S.A. processes the data provided for the following purposes:

  • Manage personal information relating to persons belonging or not to the organization for the development and participation in events, reports and acts related to the presentation of products or services of the organization, inauguration of establishments, edition of presentation formats to the media or the general public, as well as audiovisual recording of the same.
  • Management of personal information collected on the occasion of the celebration of such events for sending commercial and informative information about products and services of the organization based or not on preferences.

LEGITIMACY

What is the legitimacy for the processing of your data?

The legal bases for data processing are as follows:

  • Consent of the individuals, referred to in Article 6.1.a) of the European Data Protection Regulation.
  • Legitimate interest for the sending of commercial and informative communications of products and services, referred to in Article 6.1.f) of the European Data Protection Regulation.

TARGET

To which recipients will your data be communicated?

The management of the data does not involve the international transfer of such data.

INTERNATIONAL TRANSFERS

They do not fall within the scope of this data processing.

CONSERVATION

We keep the data related to the organization of events for a period of one year to attend the claims that, in its case, could derive from its realization.

We keep the data for the sending of commercial communications until the person's request to unsubscribe.

RIGHTS

¿Cuáles son sus derechos cuando nos facilita sus datos?

  • Any person has the right to obtain confirmation as to whether ARISTOCRAZY S.A. is processing personal data concerning him/her.
  • Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances, the persons concerned may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
  • In certain circumstances and for reasons related to their particular situation, the persons concerned may object to the processing of their data. In this case, ARISTOCRAZY S.A. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Interested parties may request data portability in order to obtain the data they have provided to ARISTOCRAZY S.A. in a structured, commonly used and machine-readable format, to be downloaded by themselves or transmitted from ARISTOCRAZY S.A. to another entity.
  • The person concerned may exercise his rights by sending an e-mail to the address dpo@aristocrazy.com which will be available on the website.
  • In addition, you can file a complaint with the Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights, at the postal and / or electronic address indicated on the page www.aepd.es.

SECURITY

The data will be treated confidentially and under the submission of technical and organizational security measures to prevent alteration, loss, unauthorized access or processing.


5. Privacy policy contests

PURPOSE

What do we process your data for?

ARISTOCRAZY S.A. processes the data provided for the following purposes:

  • Manage personal information related to participation in contests organized by the firm.
  • Manage the sending of commercial and informative information about products and services of the organization, by physical and electronic means, based or not on preferences.

LEGITIMACY

What is the legitimacy for the processing of your data?

The legal bases for data processing are as follows:

  • Consent of the individuals, referred to in Article 6.1.a) of the European Data Protection Regulation.
  • Legitimate interest for the sending of commercial and informative communications of products and services, referred to in Article 6.1.f) of the European Data Protection Regulation.

TARGET

To which recipients will your data be communicated?

The management of the data does not involve the international transfer of such data.

INTERNATIONAL TRANSFERS

They do not fall within the scope of this data processing.

CONSERVATION

We keep the data related to the organization of events for a period of one year to attend the claims that, in its case, could derive from its realization.

We keep the data for the sending of commercial communications until the person's request to unsubscribe.

RIGHTS

What are your rights when you provide us with your data?

  • Any person has the right to obtain confirmation as to whether ARISTOCRAZY S.A. is processing personal data concerning him/her.
  • Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances, the persons concerned may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
  • In certain circumstances and for reasons related to their particular situation, the persons concerned may object to the processing of their data. In this case, ARISTOCRAZY S.A. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Interested parties may request data portability to obtain the data they have provided to ARISTOCRAZY S.A. in a structured, commonly used and machine-readable format, to be downloaded by themselves or transmitted from LA ARISTOCRAZY S.A. to another entity.
  • The person concerned may exercise his rights by sending an e-mail to the address dpo@aristocrazy.com
  • In addition, you can file a complaint with the Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights, at the postal and/or electronic address indicated on the page www.aepd.es.

SECURITY

The data will be treated confidentially and under the submission of technical and organizational security measures to prevent alteration, loss, unauthorized access or processing.


6. Privacy policy inquiries

PURPOSE

What do we process your data for?

ARISTOCRAZY S.A. processes the data provided for the following purposes:

  • Manage communication with people who contact ARISTOCRAZY through the consultation channel (web form or others) to obtain information or direct inquiries to ARISTOCRAZY.
  • Manage the sending of commercial and informative information about products and services of the organization, by physical and electronic means, based or not on preferences.

LEGITIMACY

What is the legitimacy for the processing of your data?

Legitimate interest: Art. 6.1.f) of the European General Data Protection Regulation.

TARGET

To which recipients will your data be communicated?

Data management does not involve the transmission of data to third parties unless required to comply with legal obligations or to support the service.

INTERNATIONAL TRANSFERS

Our customer service software is managed by the American company Salesforce, which is included among the companies that comply with the privacy requirements established by the European Union with respect to companies located in the North American territory.

In the event that the procurement of services by external providers requires access to data by providers located outside the European Union, their adherence to such privacy requirements or compliance with appropriate data processing confidentiality safeguards shall be ensured.

CONSERVATION

The personal data will be kept for the time necessary to meet the request made by the person, passing to block where they will remain for a period of one year and will be deleted after that period.

The data necessary to carry out studies for statistical purposes and those others that result in the quality of the service for the users will be carried out by anonymizing the personal information obtained.

RIGHTS

What are your rights when you provide us with your data?

  • Any person has the right to obtain confirmation as to whether ARISTOCRAZY S.A. is processing personal data concerning him/her.
  • Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances, the persons concerned may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
  • In certain circumstances and for reasons related to their particular situation, the persons concerned may object to the processing of their data. In this case, ARISTOCRAZY S.A. will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims.
  • Interested parties may request data portability to obtain the data they have provided to ARISTOCRAZY S.A. in a structured, commonly used and machine-readable format, to be downloaded by themselves or transmitted from LA ARISTOCRAZY S.A. to another entity.
  • The person concerned may exercise his rights by sending an e-mail to the address dpo@aristocrazy.com
  • In case the person considers that his/her rights have not been duly attended, he/she has the right to file a complaint before the Spanish Data Protection Agency.

SECURITY

The data will be treated confidentially and under the submission of technical and organizational security measures to prevent alteration, loss, unauthorized access or processing.


7. Privacy policy virtual fitting rooms (Try-On)

PURPOSE

Why do we process your data?

ARISTOCRAZY S.A., as responsible for your data, informs you that we will process image data that includes biometric data exclusively to provide you with a personalized experience in our virtual piercing fitting room. Likewise, we may process data such as your email account in case you wish to receive the image of our fitting room.

LEGITIMATION

What is the legitimacy for the processing of your data?

The basis of legitimacy will be your express consent, contemplated in article 6.1.a) of the European Data Protection Regulation. This consent is revocable at any time, which you may do by sending a request to the email address provided below.

RECIPIENTS

To which recipients will your data be communicated?

Your data will not be shared with third parties, except with our technology provider, or when there is a legal obligation to do so.

INTERNATIONAL TRANSFERS

International data transfers may occur. In such cases, we guarantee that these transfers will be carried out respecting all the guarantees and security standards established by the GDPR.

CONSERVATION

Your data will only be kept for 24 hours and will then be deleted.

RIGHTS

What are your rights when you provide us with your data?

You have the right to access, rectify and delete your data, as well as to exercise other rights. To do this, you can contact us by email at ARISTOCRAZY S.A.. Likewise, we inform you that you have the right to complain to the AEPD.