PRIVACY POLICY

“The Brand Company” is deeply committed to compliance with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the established obligations, as well as the implementation of the security measures provided in the General Regulations. of Data Protection (RGPD) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5 on the Protection of Personal Data and guarantee of digital rights (LOPD and GDD, in forward LOPD).

In accordance with these regulations, we inform you that the use of our website may require certain personal data to be provided through registration or contact forms, or by sending emails, and that these will be processed by “ The Brand Company”. , Responsible for the treatment, whose data are:

 

·         Social denomination : The Brand Company, S.L.

·         CIF : B62752043

·         Registered Office : C/ Can Diners 1-11, Nave 6, 08310, Argentona, Barcelona, España

·         Phone : 937915188

.          Email:  shop@thebrandcompany.net

 

Obtaining and Processing of Personal Data

Personal data is any information related to a person: name, email, address, telephone number, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.

“The Brand Company”, as the Data Controller , has the duty to inform the Users of its website about the collection of personal data that may be carried out, either by sending an email or by completing the forms included on the website.

Only the necessary data will be obtained to be able to perform the contracted service, or to be able to respond appropriately to the request for information made by the User. The data collected is identifying and corresponds to a reasonable minimum to be able to carry out the activity carried out.  In particular, no specially protected data is collected at any time. In no case will the data be used differently than the purpose for which they were collected.

Contact/email forms

Purpose: Respond to your request for information made through our contact form(s).

Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.

Data transfer : Personal data will be processed through servers managed by Siteground ,who will be considered the Data Processor.

Registration/client registration/contracting forms

Purposes :

·         Manage your User registration on our website.

·         Manage purchases made.

·        Provide information about the processing and status of purchases.

·         Historical record of purchases made on our website.

·         Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or order status.

 

Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.

Data transfer : “The Brand Company” will not transfer or communicate your data to any third party, except in the cases legally provided for or when strictly necessary for the provision of a service. Specifically, the data may be transferred to:

-          Providers of technological or computer services.

-          Payment service providers.

-          Courier and parcel companies.

-          Third parties or intermediaries, as service providers, who operate on our own behalf (management, consulting...).

Data transfers will occur respecting the strictest confidentiality, using the necessary measures, such as signing confidentiality contracts, or adhering to their privacy policies established on their respective websites. The User may refuse to transfer their data to the Data Processors, by means of a written request, by any of the aforementioned means.

Furthermore, in those cases where it is necessary, Client data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspection, etc.

Minors

Only people over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition for us to process their personal data.

On the other hand, only people over 18 years of age may hire our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

User Registration

When the User registers through the corresponding form, the information we collect includes:

·         Name and surname

·         Email and/or telephone

·        Shipping addresses

·         IP

·        Username /Password

In addition, the User must accept the Contract Conditions, set out in another section of the website.

 The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping his password confidential, as well as for all uses he makes of it. You must notify “The Brand Company” of any unauthorized use of your account or password as soon as possible.

The User, once registered, has access to a private panel, where they can view certain content, records of purchases made, etc. You can also manage your account options, such as your password or User data.

The User may receive the following notifications:

·         When registering on the platform (account validation email).

·         When making purchases, such as proof of purchase , incidents, shipments made, etc.

·         The User receives the store's newsletter if they have registered for it, from which they can unsubscribe in their User panel and in the corresponding links included at the bottom of the newsletter .

·         By password recovery (specified in the previous field)

·         By unsubscribing or deleting the account.

Security measures

Users of the “The Brand Company” website are informed that the security, technical and organizational measures within our reach have been adopted to prevent the loss, misuse, alteration, unauthorized access and theft of data, and which thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current regulations on data protection. The personal data collected in the forms are processed only by the staff of “The Brand Company” or the designated Data Processors.

El Sitio Web de “ The Brand Company” also has SSL encryption, which allows the User to securely send their personal data through the website's contact or registration forms.

Veracity of the data

 

The User declares that all the data provided by him is true and correct and undertakes to keep it updated. The User will be responsible for the veracity of their data and will be solely responsible for any conflicts or litigation that may arise due to their falsity . It is important that, so that we can keep personal data updated, the User informs “The Brand Company” whenever there has been any modification to them.

Data transfer

“The Brand Company” will not transfer or communicate your data to any third party, except in legally provided cases or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected be provided to these Data Processors (payment platforms, agency, intermediaries, etc.), when necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in the case of provision of services, these may be, totally or partially, subcontracted to other people or companies, who will be considered Data Processors, with whom the corresponding confidentiality contract has been agreed, or adhered to their privacy policies, established on their respective web pages. The User may refuse to transfer their data to the Data Processors, by means of a written request, by any of the aforementioned means.

Furthermore, in those cases where it is necessary, Client data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspection, etc.

Ejercicio de Derechos del Usuario

 

The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do this, the User must contact, providing documentation that proves their identity (DNI or passport), by email to shop@thebrandcompany.net, or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: name and surname of the User, the purpose of the request, address and supporting data.

The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as the legal representative of the User, providing documentation that proves said representation.

The User may request the exercise of the following rights:

 

·         Right to request access to personal data, which is the right to obtain information about whether your own personal data is being processed, the purpose of the processing that, if applicable, is being carried out, as well as the information available about the origin of said data and the communications made or planned thereof.

·         Right to request rectification , in the event that personal data is incorrect or inaccurate, or deletion of data that turns out to be inadequate or excessive.

·         Right to request the limitation of your processing, in which case only the data strictly necessary for the exercise or defense of claims will be kept by “The Brand Company”.

·         Right to object to processing: refers to the right of the interested party to not have the processing of their personal data carried out or to cease processing in cases where their consent is not necessary for the processing, which is commercial prospecting files or that have the purpose of making decisions regarding the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims they must continue to be processed.

·         Right to data portability : in case you want your data to be processed by another company, “The Brand Company” will provide you with the portability of your data in exportable format.

In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time , without affecting the legality of the treatment based on consent prior to its withdrawal.

We undertake to execute all these rights within the maximum legal period (1 month).

If a User considers that there is a problem with the way in which “The Brand Company” is handling their data, they can direct their complaints to the Security Manager or to the corresponding data protection authority, the Spanish Data Protection Agency being the indicated in the case of Spain.

 

Conservación de los datos

The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to respond to the request for information ​ or until the consent granted is revoked.

The Client's personal data will be processed until the contractual relationship ends. The period of conservation of personal data will be the minimum necessary, and may be maintained until:

·         4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding membership, registrations, cancellations, contributions, payment of salaries...); Arts. 66 et seq. General Tax Law (accounting books…)

·         5 years: Art. 1964 Civil Code (personal actions without special term)

·         6 years: Art. 30 Commercial Code (accounting books, invoices...)

·         10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.

·        Without deadline: disaggregated and anonymized data.

Por su parte, los datos de Usuarios que se den de alta en el boletín o newsletter serán conservados indefinidamente, hasta que se revoque el consentimiento otorgado.

En el caso de tratamiento de datos de candidatos (C.V.), “The Brand Company” podrá mantener almacenado su currículo un máximo de dos años para incorporarlo a futuras convocatorias, a menos que el candidato se manifieste en contrario.

Social networks

“The Brand Company” has a profile en algunas of the main social networks on the Internet (Facebook, Instagram, YouTube ). The purpose of data processing by “The Brand Company” will be to inform its followers about its activities, using the tools that the social network in question allows, and to provide a personalized user service. The User must keep in mind that the use of these social networks is subject to their respective conditions of use and privacy policies of the platforms. “The Brand Company” recommends that Users consult these conditions and privacy policies before using the links or applications provided.

In no case will “The Brand Company” extract data from social networks, unless the User's consent to do so is promptly and expressly obtained. Furthermore, “The Brand Company” is not responsible for the privacy practices of these social networks or their applications, especially with regard to confidentiality, processing of personal data and content.

Selección de Personal

 The applicant who sends electronic communications to “The Brand Company”, with the purpose of accessing the personnel selection processes of the person in charge, authorizes us to analyze the documents sent (for example, the CV), all the content that is directly accessible through Internet search engines (for example, Google), the profiles you maintain on professional social networks (for example, LinkedIn), the data obtained in the access tests and the information you reveal in the job interview, with the objective of evaluating your candidacy and being able, if applicable, to offer you a job. In the event that the candidate is not selected, “The Brand Company” may keep their CV stored for a maximum of two years, to incorporate it into future calls, unless the candidate states otherwise. The legal basis that legitimizes this processing will be the consent of the interested party, which may be revoked at any time.

Confidentiality

The information provided by the User will, in any case, be considered confidential, and cannot be used for purposes other than those described here “The Brand Company” undertakes not to disclose or reveal information about the User's claims, the reasons for the advice requested or the duration of its relationship with the User.

Validity

This privacy and data protection policy was written on May 21, 2024. It may vary depending on changes in regulations and jurisprudence that occur, and it is the responsibility of the data owner to read the updated document. in order to know your rights and obligations in this regard at all times.