"TAGSS" is deeply committed to complying with the Spanish and European regulations for the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures provided for in the General Protection Regulation. of Data (RGPD) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights (LOPD and GDD, hereinafter LOPD ).

In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through registration or contact forms, or by sending emails, and that these will be processed by "TAGSS" , Responsible for the treatment, whose data are:

• Company Name: CREATIT MARKETING PROJECTS SL
• CIF: B02721124
• Registered Office: Calle Piamonte 23, 28004, Madrid
• Email: hello@tagssjewelry.com

 

Collection and processing of personal data
Personal data is any information related to a person: name, email, address, telephone, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by his Internet access provider.

"TAGSS", as the Data Controller, has the duty to inform the Users of its website about the collection of personal data that can be carried out, either by sending an email or by filling in the forms included. on the website.
Only the precise data will be obtained to be able to perform the contracted service, or to be able to respond adequately to the request for information made by the User. The data collected is identifying and corresponds to a reasonable minimum to be able to carry out the activity carried out. In particular, specially protected data is not collected at any time. In no case will the data be used differently from the purpose for which they were collected.

 

Contact forms/email

• purpose: Respond to your request for information made through our contact form(s).
• Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
• Data transfer: Personal data will be processed through servers managed by Shopify, which will be considered Processor.

Mailing list registration forms (newsletter)

• purpose: Sending communications, some of them commercial, of interest to Users according to the theme of the web. As established by the LSSICE, "TAGSS" undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to clients for the maintenance of the existing contractual relationship, if applicable, will not be considered as commercial communication.
• Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
• Data transfer: Personal data will be processed through servers managed by Mailchimp and Klaviyo, which will be considered as Processor.

 

Registration forms/customer registration/contracting

• Purposes:
  • Manage your User registration on our website.
  • Manage purchases made.
  • Provides information on the processing and status of purchases.
  • Historical record of purchases made on our website.
  • Comments and content management.
  • Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or status of the order.
• Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.
• Data transfer: "TAGSS" will not transfer or communicate your data to any third party, except in the cases provided by law or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:
  • Providers of technological or computer services.
  • Payment service providers.
  • Courier and parcel companies.
  • Third parties or intermediaries, such as service providers, who operate on their own account (management, consultancy...).

Data transfers will be carried out respecting the strictest confidentiality, using the necessary measures, such as the signing of confidentiality contracts, or compliance with their privacy policies established on their respective web pages. The User may refuse to transfer their data to the Treatment Managers, upon written request, by any of the aforementioned means.

In addition, in those cases in which it is necessary, the Client's data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspectorate, etc.

 

feedback form

• Purpose: make a comment or review for publication on the website.
• Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
• Data transfer: Personal data will be processed through the servers of this website, managed by  this, which will be considered as the Treatment Manager.

 

minors
Only persons over the age of 14 may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition for us to process their personal data.

On the other hand, only people over 18 years of age can hire our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to be able to provide the services offered, unless the minor is emancipated.

User register
When the User registers through the corresponding form, the information we collect includes:

• Name and surname
• Email and/or phone
• shipping addresses
• IP
• Username Password

The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping the confidentiality of his password, as well as for all the uses he makes of it. You must notify "Aleyole Jewelry" of any unauthorized use of your account or password as soon as possible.

The User, once registered, has access to a private panel, in which he can see certain contents, register the purchases made, etc. You can also manage your account options, such as your password or user data.

The User may receive the following notifications:

• When registering on the platform (account validation email).
• When making purchases, such as proof of purchases, incidents, shipments made, etc.
• The User receives the newsletter of the store if they have registered in it, from which they can unsubscribe in their User panel and in the corresponding links included at the bottom of the newsletter.
• For comments made and responses to them.
• By password recovery (specified in the previous field).
• Canceling or deleting the account.

Security measures
Users of the "TAGSS" website are informed that the security, technical and organizational measures at our disposal have been adopted to prevent the loss, misuse, alteration, unauthorized access and theft of data, and thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current regulations on data protection. The personal data collected in the forms are subject to treatment, only, by the personnel of "TAGSS" or the Designated Treatment Managers.

The "TAGSS" Website also has SSL encryption, which allows the User to securely send their personal data through the contact website or registration forms.

 

Data accuracy
The User declares that all the data provided by him are true and correct and undertakes to keep them updated. The User will be responsible for the veracity of their data and will be solely responsible for any conflicts or litigation that may arise from their falsity. It is important that, so that we can keep their personal data updated, the User informs "TAGSS" whenever there has been any change in them.

Data transfer
"TAGSS" will not transfer or communicate your data to any third party, except in the cases provided by law or when the provision of a service implies the need for a contractual relationship with a Treatment Manager. Thus, the User accepts that some of the personal data collected is provided to these Treatment Managers (payment platforms, agencies, intermediaries, etc.), when necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in the case of provision of services, these may be, totally or partially, subcontracted to other persons or companies, which will be considered Treatment Managers, with whom the corresponding confidentiality agreement has been agreed, or adhering to to their privacy policies, established on their respective web pages. The User may refuse to transfer their data to the Treatment Managers, upon written request, by any of the aforementioned means.

In addition, in those cases in which it is necessary, the Client's data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspectorate, etc.

Exercise of User Rights
The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do this, the User must attend, providing documentation proving their identity (ID or passport), by email to help@aleyole.com, or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: name and surname of the User, object of the request, address and supporting data.

The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as the legal representative of the User, providing the documentation that proves said representation.

The User may request the exercise of the following rights:

• right to request access  to personal data, which is the right to obtain information on whether your own personal data is being processed, the purpose of the treatment that, if applicable, is being carried out, as well as the information available on the origin of said data and the communications made or planned from them.
• right to requestrectification , in the event that the personal data is incorrect or inaccurate, or  suppression of data that is inadequate or excessive.
• Right to request thelimitation of its treatment, in which case only the data strictly necessary for the exercise or defense of claims will be kept by "TAGSS".
• Right tostand against< span data-mce-fragment="1"> treatment: refers to the right of the interested party not to carry out the processing of their personal data or to cease it in the cases in which they have their Consent not necessary for processing, in the case of commercial prospecting files or for the purpose of making decisions regarding the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of potential claims have to continue processing.
• Right to dataportability : in case you want your data to be processed by another company, "TAGSS" will facilitate the portability of your data in an exportable format.

In case consent has been given for a specific purpose, the  The user has the right to withdraw consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.

We promise to exercise all these rights within the maximum legal term (1 month).

If a User considers that there is a problem with the way in which "TAGSS" is treating their data, they can direct their claims to the Security Manager or to the corresponding data protection authority, being the Spanish Data Protection Agency the indicated one. in the case of Spain.

 

Data retention
The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to meet the information request, or until the consent granted is revoked.
The Client's personal data will be processed until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, and may be kept until:

• 4 years: Law on Violations and Sanctions in the Social Order (obligations regarding affiliation, registrations, cancellations, contributions, payment of salaries...); Letters. 66 and following General Tax Law (accounting books...)
• 5 years: art. 1964 Civil Code (personal actions without special term)
• 6 years: art. 30 Commercial Code (accounting books, invoices...)
• 10 years: art. 25 Law for the Prevention of Money Laundering and Terrorist Financing.
• No deadline: disaggregated and anonymized data.

On the other hand, the data of the Users who register in the bulletin or newsletter will be kept indefinitely, until the consent granted is revoked.

In the case of processing candidate data (C.V.), "TAGSS" may keep your resume stored for a maximum of two years, incorporate it in future calls, unless the candidate states otherwise.

Social networks
"TAGSS" has a profile on some of the main social networks on the Internet (Facebook, Pinterest, Instagram, YouTube, Tiktok), acknowledging in all cases as the Data Controller of its followers, fans, subscribers, commentators and others. User profiles (hereinafter, followers) published by "TAGSS".

The purpose of the data processing by "TAGSS", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide a personalized attention service to the user. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.
In no case will "TAGSS" extract data from social networks, unless the User expressly consents. and obtained expressly for this (for example, to carry out a contest).

International data Transfers
"TAGSS" uses the services of sending electronic communications from companies < /span>Mailchimp and Klaviyo, which is located in the United States. Standard contractual clauses approved by the European Commission have been signed with this entity, in order to guarantee the adequate level of protection in the processing of your personal data, in accordance with the criteria established by the GDPR.

With the acceptance of this privacy policy, the User expressly and unequivocally grants his consent for the international transfer of his data to this service company/s provider/s.

 

Staff pick
The applicant who sends electronic communications to "TAGSS", in order to access the personnel selection processes of the person in charge, authorizes us to analyze the documents that are sent (for example, the C.V.), all the content that is directly accessible through Internet search engines (for example, Google), the profiles that you maintain in professional social networks (for example, LinkedIn), the data obtained in the entrance tests and the information that you reveal in job interviews, with the objective of assessing your candidacy and being able, where appropriate, to offer you a job. In the event that the candidate is not selected, "TAGSS" may keep his C.V. for a maximum of two years, to incorporate it into future calls, unless the candidate states otherwise. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.

confidentiality

The information provided by the User will, in any case, be considered confidential, and may not be used for purposes other than those described here. "TAGSS" undertakes not to disclose or disclose information about the User's claims, the reasons for the requested advice or the duration of their relationship with the User.

Validity

This privacy and data protection policy has been drafted by ExpertosLOPD®, a firm specialized in data protection for online stores, on April 28, 2022, and may vary depending on the regulatory and jurisprudential changes that occur, being the responsibility of the The owner of the data read the updated document, in order to know at all times their rights and obligations in this regard.