Pursuant to the General Data Protection Regulation 2016/679, of the European Parliament and of the Council, of 27 April 2016, this Privacy Policy aims to publicize the way in which ARISTOCRAZY S.A. collects, processes and protects the personal data of persons who access or use its services.


1. Data controller


Corporate Tax Code A48231146

Filed with the Mercantile Registry of Vizcaya in Volume 1959, Folio 170, Sheet 3970A. Entry 8.

Postal Address: Calle Gran Vía 40 bis, tercero, 48009 Bilbao, Spain

Email address:




2. Purpose of processing personal data

ARISTOCRAZY S.A. processes the personal data collected to provide customer service and to respond to persons interested in ARISTOCRAZY products; customer loyalty; sending of the newsletter and informative commercial communications about the organisation’s products and services; invitation to events and the hosting of competitions, as well as for profiling linked to users’ preferences, without this implying the take-up of automated decisions that produce effects for persons.


With regard to each of the services offered, in this privacy policy the user will find a specific information policy regarding the processing of personal data requested in order to provide the service in question.



3. Data source

The personal data collected come directly from the information furnished by the persons to whom said data refer.



4. Accuracy and truthfulness of the data provided

Users of the ARISTOCRAZY S.A. services hereby guarantee and are liable for, in any case, the accuracy, validity and authenticity of the personal data furnished, and undertake to keep these data duly updated.



5. Storage

The personal data provided will be kept for as long as they are necessary to meet the purposes for which they have been collected, in each case, for the purpose of maintaining the relationship or link between the data subject and ARISTOCRAZY S.A. and while the person does not request erasure of such data. The data will also be stored for the legal periods of compliance with legal obligations imposed upon ARISTOCRAZY S.A.



6. Legitimacy. Legal title enabling the use of data

The legitimacy for data processing by ARISTOCRAZY S.A. will be pursuant to the terms established under article 6 of the European General Data Protection Regulation, relating to ordinary data, or, as the case may be, to article 9 of said European Regulation on special categories of data. The data subject will be informed of the title or titles of lawfulness that apply to each service provided and which may be the consent, the performance of the legal relationship in which the person is a party thereto, compliance with a legal obligation or the legitimate interest of ARISTOCRAZY S.A. in providing its services and within its terms of reference.



7. Recipients

During the processing of personal data ARISTOCRAZY S.A. will not make any assignment of these data except in compliance with a legal obligation or following authorisation from the data subject, if necessary, duly informing them of the consequences of not providing the authorisation and, more specifically, the impossibility of providing the service in question.

The provision of the different services may require the disclosures to IT companies that act as data processors of ARISTOCRAZY S.A., subject to conditions of non-disclosure and security in data processing. Such companies may be located outside the European Union under the aegis of the legal provisions that authorize it



8. Rights

ARISTOCRAZY S.A. assists data subjects in exercising the following rights associated to the processing of their personal data:

  • Right to request access to their personal data.
  • Right to request rectification or erasure.
  • Right to request restriction of processing.
  • Right to object to processing.
  • Right to data portability.
  • Right to withdraw the consent given.


Anyone has the right to obtain confirmation about whether ARISTOCRAZY S.A. is processing personal data that concerns them; the data subjects may access their personal data, as well as request rectification of inaccurate data or, if necessary, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, the data subjects may request the restriction on the processing of their data, in which case the data will only be stored in the exercise or defence of claims. In certain circumstances and for reasons related to the specific situation, data subjects may object to the processing of their data.

In this event, ARISTOCRAZY S.A. will cease processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.

If their consent has been given for a specific purpose, the data subject is entitled to withdraw the consent given at any time, without affecting the lawfulness of the processing based on consent given prior to its withdrawal.

To this end they may write to ARISTOCRAZY S.A. at the postal address Calle Gran Vía 40 bis, tercero, 48009 Bilbao, Spain, or send an email to

Aristocrazy does not make automated decisions in the treatment of any of the data referred to in this policy.

If you feel your rights have not been fulfilled as far as the protection of your personal data is concerned, you may file a complaint with the competent Data Protection Agency through its website