This Privacy Notice applies to the information about you collected by Patricia Álvarez Herrero, owner of the e-commerce business (hereinafter, individually and collectively, “BRILLARELA”, “we”, “us” or “our”):
- (i) in relation to your visits to one of our stores or any other circumstance unrelated to the Internet in Spain;
- (ii) for purchases made through our catalog and sent to an address in Spain; or
- (iii) in connection with your visits to www.brillarela.com (or any of its subdomains) from which you can access this Privacy Notice (hereinafter, individually, the “Site” and, collectively, the “Sites”).
This Privacy Notice describes what types of information we collect and how we collect it, how we use it, and to whom and under what circumstances we may disclose it. The personal information we collect under this Privacy Notice is controlled by Patricia Álvarez Herrero, as the owner of the e-commerce site located at C/Nuestra Señora del Val 5, 28816, Camarma de Esteruelas (Madrid). The “personal information” we collect and process under this Privacy Notice refers to any information that allows you to be identified and includes your name, postal address, postal code, email address, telephone number, date of birth, payment information, demographic information, transaction data, IP address, website usage information, and other data we may collect depending on the circumstances.
Below you will find the Table of Contents for this Privacy Notice. You can consult the different sections and better understand our practices and your rights regarding your information:
- How we collect information
- Information that you provide to us directly
- Third-party sources and available public sources
- Website usage information and other automatically collected information
- How we use information
- With whom do we share the information
- Your choices/your rights
- How long do we store your personal information?
- Information transfer and processing
- Security
- Children’s Privacy
- Third-party websites
- Phishing, identity theft and other scams
- Changes to this privacy notice
- Contact
1. How we collect information
Information provided by you
We (and our service providers) collect personal information about you when:
- You acquire our products or services, whether on our Site or through private sale, including after-sales support services;
- You create an account with us or register in any other way to receive a service or feature;
- You agree to receive our marketing communications, including through third-party partners acting on our behalf;
- You complete a survey;
- participate in a draw, contest or other promotion organized or sponsored by BRILLARELA;
- You contact our customer service team;
- You communicate with us through third-party social networking sites;
- submit a rating or review on our site; or
- you contact us or provide us with information in any other way.
In some cases, you may provide us with personal information relating to another person, for example, if you buy a gift for someone and ask us to send it to them, or if you share content from our Site with another person. In these cases, you confirm that you have that person’s authorization to provide us with the information in question.
When you create an account for the first time at www.brillarela.com using an email address you previously provided in other circumstances (for example, during a private sale, when subscribing to our emails, or when participating in one of our sweepstakes or other promotions), we may identify that email address and, once you complete the online account creation process, automatically add some of your personal information to that account. This happens because we have identified your email address and, to facilitate the process, we have added your information to the online account. You can modify this information at any time by logging into your online account.
Third-party sources and available public sources
We also work closely with third parties (business partners, technical, payment, and shipping service providers, advertising networks, analytics providers, information search providers, address update providers, information aggregators, co-promotion partners, and credit reference agencies, among others) who may legally provide us with demographic and other personal data about you, which we may combine with the information you provide to us. For example, we may legally collect information about you through your social media accounts (when you log in to our Site using third-party social media platforms [such as Facebook], based on your actions and settings on those platforms). We do this to offer personalized products, services, Sites, and communications, and to ensure that we provide our customers and visitors with the best possible shopping and browsing experience. We process all data obtained from other sources in accordance with this Privacy Notice.
Please note that content and information you submit through Facebook, Twitter, Instagram, Tumblr, and other third-party platforms may appear on our Sites through channels or interfaces we have with those platforms. We are not responsible for the information, content, or privacy practices of these third-party platforms, or for content obtained through them.
Website usage information and other automatically collected information
As part of the normal operation of the Sites, certain information is automatically collected regarding your visits to the Sites or the device you use to access them. Our servers may automatically collect certain “Site usage information” (for example, your IP address and information about your browsers, your device, your location, your purchases, your browsing behavior, and other usage activities). In addition, with your consent, we (and our service providers) may use cookies and similar technologies to collect and track this information (see our Cookie Policy for more information).
2. How we use the information
| AIM | INFORMATION USED | JUSTIFICATION |
| To improve your experience in stores and on the Sites, including tracking your activities on the Sites; tracking clicks, purchases, and conversions; recognizing your computer or device so you can save your preferences and keep you logged in to the Site without having to re-enter your online account credentials; saving the contents of your basket and sending reminders if you have left items in it or left the Sites without adding items; and to improve, monitor, and analyze Site usage in any other way. | Name, email address, postal address (with postal code), telephone number, date of birth, demographic information, order history, IP address, preferences, Site usage information. | To defend our legitimate business interests in providing our customers and visitors with the best possible shopping and browsing experience, to constantly improve and protect the company, property and customers against fraud (hereinafter, “our legitimate interest”). |
| To process your requests for products and services, respond to them, and keep you updated on them. | Name, email address, postal address (with postal code), telephone number, payment information. | To fulfill our contractual obligations; to defend our legitimate interests. |
| To obtain more information about you (for example, through profiling activities) in order to provide you with relevant and personalized offers, as well as messages about or related to our Sites, services and products, and to personalize your experience on the Sites as permitted by applicable law. | Name, email address, postal address (with postal code), telephone number, date of birth, order history, IP address, preferences, site usage information. | To defend our legitimate interest; consent. |
| To contact you occasionally (by post, email, or any other method you have chosen) with promotional materials about BRILLARELA and selected partners. | Name, email address, postal address (with postal code), telephone number, date of birth, order history, IP address, preferences, site usage information. | To defend our legitimate interest; consent. |
| To contact you when necessary or relevant regarding your relationship with us (for example, by email in relation to your ratings or reviews). | Name, email address, postal address (with postal code), telephone number, date of birth, order history, IP address, preferences, site usage information. | To fulfill our contractual obligations; to defend our legitimate interests. |
| Conduct market research and review and improve our advertisements and emails, product selection, content, services, customer service, business planning, online and physical operations, and overall shopping experience. | Name, email address, postal address (with postal code), telephone number, date of birth, order history, IP address, preferences, site usage information. | To fulfill our contractual obligations; to defend our legitimate interests. |
| To enforce our terms and conditions, and to protect the security or integrity of the Sites, customers and the company in general (for example, providing protection against illegal or fraudulent activities, or against misuse, including cyberattacks). | Name, email address, postal address (with postal code), telephone number, date of birth, order history, IP address, preferences, site usage information. | Our legitimate interest. |
| To set up and manage your online account (for example, sending password reminders or notifications to change your account details) and to process your communications and privacy preferences. | Name, email address, postal address (with postal code), telephone number, date of birth, payment information, order history, preferences, site usage information. | To fulfill our contractual obligations; to defend our legitimate interests. |
| Process product returns, exchanges, repairs and alterations; resolve product-related issues (e.g., sending replacement products); and handle other customer service matters. | Name, email address, postal address (with postal code), telephone number, payment information, order history. | To fulfill our contractual obligations; to defend our legitimate interests. |
| Comply with the legal requirements to which BRILLARELA may be subject (e.g., tax requirements, financial reporting requirements and court orders). | Name, email address, postal address (with postal code), telephone number, date of birth, payment information. | Legal obligation. |
3. With whom do we share the information
| RECIPIENT/PURPOSE | SHARED INFORMATION | JUSTIFICATION |
| BRILLARELA, for the same purposes described in the section How we use the information. | Name, email address, postal address (with postal code), telephone number, date of birth, demographic information, order history, IP address, payment information, preferences, Site information. | Compliance with our contractual obligations, our legitimate interest or consent, depending on the purposes described in the section How we use the information. |
| Our service providers, who act as data processing entities for us and process such information on our behalf, for the same purposes described in the section How we use information*. | Name, email address, postal address (with postal code), telephone number, date of birth, demographic information, order history, IP address, payment information, preferences, Site information. | Compliance with our contractual obligations, our legitimate interest or consent, depending on the purposes described in the section How we use the information. |
| To provide information to state security forces or other local government authorities upon request, as required by law or to protect the rights and security of property, the company and customers. | Name, email address, postal address (with postal code), telephone number, date of birth, demographic information, order history, IP address, payment information, preferences, Site information. | Our legitimate interest, legal obligation. |
| Depending on the specific case, if BRILLARELA or all of its assets are acquired by one or more third parties as a result of an acquisition, merger, sale, consolidation, bankruptcy proceedings, liquidation, or other similar business reorganization, your information could become part of the transferred assets. | Name, email address, postal address (with postal code), telephone number, date of birth, demographic information, order history, IP address, payment information, preferences, Site information. | Our legitimate interest, legal obligation. |
| If you have given us your consent to share your personal information with third parties who may use it for their own marketing purposes, as permitted by applicable law. | Name, email address, postal address (with postal code), telephone number, date of birth, demographic information, order history, IP address, payment information, preferences, Site information. | Consent. |
These third parties act on our behalf, help us operate the Sites, and provide functionalities, content, communications, and other services, including the following: web hosting; database hosting; mailing list hosting and management; email implementation and management; analytics; content and product distribution; payment processing; fulfillment; inventory management; security; and fraud detection and prevention. If you would like more information about the third-party companies currently processing your data, please send your request to hello@brillarela.com .
We may also use third-party web analytics services (currently Google Analytics) to track and analyze the use of our Site, as well as to measure the effectiveness of advertising, content, and communications on the Site. These service providers act on our behalf and use tools such as cookies, tags, and web beacons to help us obtain this information. (See our Cookie Policy for more information about cookies, web beacons, and other tags.)
If you choose to contribute through a publicly available social, community, or other area or feature on our Site, the information you submit may be made available to the general public depending on your settings (this is why we recommend that you do not submit or post personal information in these forums, such as your full name, postal address, telephone number, and any other details that allow other people to contact or locate you).
4. Your choices/your privacy rights
You have several rights regarding our processing of your personal information. Each of these is explained below. If you wish to exercise one or more rights, please contact us at hello@brillarela.com and include your name, postal and email addresses, your request, and any other information we may need to fulfill or otherwise process your request.
- Access. You have the right to request a copy of the personal information we process about you. We will provide it to you electronically. For your privacy and security, at our discretion, we may ask you to provide proof of identity before providing you with the requested information.
- Rectification. You have the right to rectify any information processed by us that is incomplete or incorrect. Please note that you can always make certain adjustments to specific personal data directly through your online account.
- Deletion. You have the right to request that we delete the personal information about you that we process, except in those cases where we are not obliged to do so if we must retain it to comply with a legal obligation or to initiate, exercise or defend legal claims.
- Restriction. You have the right to restrict our processing of your personal information when you believe that your data is incorrect, that our processing is unlawful, or that we no longer need to process it for a specific purpose, unless we are legally or otherwise unable to delete the data or you do not wish us to delete it. In such cases, we will mark the stored personal information to limit processing for specific purposes in accordance with your request, or restrict its processing in some other way.
- Data portability. You have the right to obtain the personal information we hold about you in a structured, electronic format and to transmit that data to another data controller where (a) it is personal information that you have provided to us, and (b) we process this data after obtaining your consent (for example, to send direct marketing communications) or after entering into a contract with you (in order to manage your online account, among other things).
- Objection. You have the right to object to the processing of your personal data on grounds relating to your particular situation where the legal basis for such processing is our legitimate interest. We will respect your request unless there are compelling legitimate grounds for the processing which override your rights and interests, or if we need to continue processing the data to establish, exercise, or defend legal claims.
- Withdrawal of consent. If you have given your consent for the processing of your personal data, you have the right to withdraw it at any time free of charge. If you wish to withdraw your consent, including to stop receiving marketing communications, or if you want us to stop sharing your personal data with third parties, please contact us at hello@brillarela.com or follow the instructions in the relevant emails to unsubscribe from marketing communications. (We never share your payment information with other marketing companies.)
Please note that even if you unsubscribe from our promotional mail, we may still contact you regarding your online account, our relationship, your activities, transactions, and communications with us. Additionally, if you request that we stop sharing your personal information with third parties for direct marketing purposes, we recommend that you also contact those companies directly. - File a complaint. You have the right to file a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.
Please note that the rights described above do not apply to non-personal information.
5. How long do we store your personal information?
We and our service providers store your personal information for as long as necessary for the specific purposes described here and to the extent permitted by applicable law. When we no longer have legitimate business purposes that require the use of your personal information, or when you request that we delete such information (except where we are required to retain it to comply with a legal obligation or to establish, exercise, or defend legal claims), it will be deleted from our systems and records, including taking steps to anonymize it so that you cannot be identified.
6. Transfer and processing of information
Your personal and other information may be transferred, stored, and processed in Spain and by our service providers in accordance with the laws of Spain or other jurisdictions. We will ensure that such data is processed and transferred in accordance with this Privacy Notice and applicable laws.
7. Security
We have implemented organizational and technical security measures to safeguard the personal information under our control and custody. These measures include, for example, limiting access to personal information to only authorized employees and service providers who need to know such information for the purposes described in this Privacy Notice, as well as other administrative, technical, and physical security systems. Furthermore, our service providers are not authorized to use or disclose your personal information for any purpose other than providing services to or on behalf of our company, or as otherwise required by applicable law. We will always make every effort to protect our systems, sites, operations, and information from unauthorized access, use, modification, or disclosure; however, due to the nature of the internet as a global and open communication medium, as well as other risk factors, we cannot guarantee that all information will be completely secure during transmission or storage on our systems against intrusions by third parties, such as hackers.
To ensure maximum security, access to certain personal information stored in your online account is protected by your username and password. You are responsible for maintaining the confidentiality of your online account credentials, and we strongly recommend that you do not disclose your username or password to anyone. We will never ask for your password in communications you have not explicitly requested. In the event of any unauthorized use of your online account credentials or any other suspected security breach, please notify us immediately (see section 12 below).
8. Privacy of minors
The Sites are not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal information from individuals under sixteen through the Sites. If you are under sixteen, do not provide your personal information on or through any Site. Individuals under the age of eighteen (18) (or the applicable age of majority in the relevant jurisdiction) should not use the Sites or our Services without the authorization of their parent or legal guardian.
9. Third-party websites
The Sites may contain links (hyperlinks, widgets, logos, plugins, images, or clickable banners) to websites and services operated by companies other than BRILLARELA. This Privacy Notice does not apply to those websites or services, so we recommend that you review their privacy policies regarding their information collection, use, and disclosure practices.
10. Phishing, identity theft and other scams
It is increasingly common for hackers, cybercriminals, and other unauthorized individuals to send emails and other communications to consumers pretending to represent a legitimate business, such as a bank or online store, and requesting that the consumer provide personal and often confidential information. Sometimes, the domain name of the sender’s email address or the domain name of the website requesting such information may resemble that of a legitimate and trusted company. If you receive a request to provide information (including your online account password or any payment information) via email from a website or person that does not appear to be associated with BRILLARELA Sites, or that seems suspicious to you for any reason, do not respond or provide any information. BRILLARELA will never send you emails asking you to verify credit card details, financial information, or any other personal information. If you receive this type of communication or request, please notify us immediately at hello@brillarela.com .
11. Changes to this privacy notice
We may make changes to this Privacy Notice from time to time. The revised notice will be posted on the Sites. In certain circumstances (for example, if material changes occur that conflict with this Privacy Notice), we may also notify you of the changes through traditional means such as posting a notice on the Sites’ homepage or sending you an email.
12. Contact
If you have any questions about this Privacy Notice or the privacy policies and practices of our service providers, please contact us at hello@brillarela.com .