Privacy Policy
Privacy Policy
Through this website, personal data necessary for the management and maintenance of some of our services are collected.
We inform you that the owner of the website (data controller) complies with Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (hereinafter, LOPDGDD), EU Regulation 2016/679, General Data Protection Regulation (hereinafter, GDPR), and other applicable current regulations, ensuring the proper use and processing of users' personal data.
In accordance with Article 13 of the GDPR and Article 11 of the LOPDGDD, this Privacy Policy applies to the processing of personal data carried out by ARENA ROJA JEWELRY, S.L. (hereinafter, ARENA ROJA JEWELRY, S.L.) as the data controller, in relation to the data provided by users and/or customers (natural persons) as a result of requesting information and/or contracting the services and/or products offered and marketed through this website, or collected in any of its sections.
Identity of the Data Controller
Data Controller: ARENA ROJA JEWELRY, S.L.
Trade Name: ARENA ROJA JEWELRY, S.L.
Tax ID (NIF): B44685253
Address: Rambla Catalunya 105, 2º 2ª, 08008, Barcelona, Spain
Email: customerservice@arenarojabrand.com
PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data will be used for the general purpose of managing and controlling the commercial relationship established between the user and the data controller, and specifically for:
-
Managing full access to and proper use of the services and/or products by users.
-
Communicating with users in response to incidents, requests, comments, and questions made through the website’s contact forms (including emails and/or phone calls).
-
Providing, updating, maintaining, and protecting the services and/or products offered.
-
Offering new services and/or products, special offers, or updates.
-
Managing recruitment processes for staff and/or collaborators, if applicable.
-
Communications: We may send you emails, messages, and other types of communications regarding the contracted services and/or products, as well as for technical issues that may affect this website. These communications are considered part of the contracted or requested services and/or products.
-
Commercial communications (marketing): We may use your personal data to contact you—electronically or otherwise—for surveys, feedback, and occasionally to notify you about changes, updates, offers, and/or promotions related to our services and/or products or those of third parties associated with us. These commercial offers will always be explicitly and separately authorized by the user. This consent may be withdrawn at any time through the means provided for that purpose.
We will not process your personal data for any purpose other than those described above, unless required by law or by a judicial and/or administrative request that necessitates processing for different purposes.
DATA RETENTION PERIOD
The personal data provided will be kept and processed as long as the contractual relationship with the user remains in effect, without prejudice to the possibility of exercising your data protection rights. Data may also be retained for the time necessary to comply with legal obligations applicable to the data controller.
Personal data of individuals interested in receiving commercial information and newsletters will be kept indefinitely unless the individual requests to opt out of commercial communications or requests the deletion of their data.
LEGAL BASIS FOR PROCESSING
ARENA ROJA JEWELRY, S.L. processes your personal data based on the following legal grounds: (1) Consent of the data subject, (2) Performance of a contract or pre-contractual measures, and (3) Legitimate interest.
Consent of the data subject will be requested:
-
Before processing your data.
-
During the registration/contracting process as a client.
-
When sending commercial communications from ARENA ROJA JEWELRY, S.L.
Requests for information require you to voluntarily provide the necessary data to handle your request. However, you may freely refuse to provide this data or later withdraw the consent previously given. In such cases, we will be unable to process your requests. Withdrawal of consent will not affect the legality of any prior processing.
Data processing by ARENA ROJA JEWELRY, S.L. is necessary for the performance of a contract in which the data subject is involved or for the application of pre-contractual measures at their request.
Legitimate interest: ARENA ROJA JEWELRY, S.L. has a legitimate interest in maintaining and retaining its clients and/or users and better serving their expressed interests—for example, improving offered products/services, handling requests or complaints, offering similar products, or informing about promotions and discounts.
ARENA ROJA JEWELRY, S.L. understands that by providing their personal data, the data subject guarantees its truthfulness, accuracy, and currency, and expressly consents to its processing for the purposes described above.
RECIPIENTS OF DISCLOSURES OR INTERNATIONAL TRANSFERS
In general, ARENA ROJA JEWELRY, S.L. will not transfer your personal data to third parties unless legally required or expressly authorized by you when using our services and/or products.
ARENA ROJA JEWELRY, S.L. will not carry out international data transfers, except in the following cases:
-
When necessary for the execution of a contract or pre-contractual measures involving the data subject.
-
When required by applicable law.
-
When there is express consent from the data subject.
-
When the website is hosted on servers located outside the European Economic Area.
In all cases involving international data transfers, ARENA ROJA JEWELRY, S.L. will verify that the destination country ensures an adequate level of protection in accordance with current regulations.
RIGHTS OF DATA SUBJECTS
Under data protection law, you may exercise your rights of access, rectification, erasure (“right to be forgotten”), restriction, portability, objection, and the right not to be subject to automated decisions.
Access: To know and obtain information about your personal data being processed.
Rectification: To correct inaccuracies or incomplete data.
Erasure: To request deletion of your data when it is no longer needed.
Objection: To object to data processing, except for legitimate reasons or legal claims.
Restriction: To limit processing under certain circumstances.
Portability: To receive or transfer your data to another controller.
Automated decisions: To avoid being subject to decisions based solely on automated processing.
Withdrawal of consent: You may withdraw your consent at any time without affecting previous lawful processing.
To exercise any of these rights, please contact us via the details listed in “Identity of the Data Controller,” providing your full name, ID number, postal/email address, and the right you wish to exercise. Additional information may be requested to verify your identity.
You may also lodge a complaint with the Spanish Data Protection Agency (www.agpd.es) if you believe that your data has been processed in violation of applicable law.
ADDITIONAL INFORMATION
Minors:
ARENA ROJA JEWELRY, S.L. recommends the use of this website by individuals over 18 years old. If minors under 14 access the site, parental or guardian consent is required for data processing. Parents or guardians are solely responsible for the content accessible to minors.
Social Networks:
ARENA ROJA JEWELRY, S.L. may have profiles on various social networks. Users may access certain website areas using their social media accounts instead of usernames and passwords. In such cases, data provided through these profiles will be processed by ARENA ROJA JEWELRY, S.L., unless stated otherwise.
Data Retention under Spanish Law:
In compliance with Law 25/2007, of October 18, regarding data retention in electronic communications, ARENA ROJA JEWELRY, S.L. must retain certain traffic data for potential requests from authorized authorities.
Logged Data:
Our servers automatically collect certain information when the user accesses our services, such as IP address, device ID, operating system, and device configuration.
Security Measures:
The website owner has implemented the necessary technical and organizational security measures to guarantee the safety of your personal data and prevent its alteration, loss, or unauthorized access. Additional measures are in place to ensure confidentiality and integrity, with continuous monitoring and evaluation to safeguard data privacy.
Cookies:
Our website uses first-party and third-party cookies. You can find detailed information in our Cookies Policy.