Through this website (WWW.THEYESBRAND.COM), personal data necessary for the management and maintenance of some of our services is collected.
We inform you that THE OWNER OF THE WEBSITE (Data Controller) complies with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), Regulation (EU) 2016/679 on Data Protection (hereinafter, GDPR), and other current regulations applicable at all times, ensuring the correct use and processing of the user’s personal data.
IDENTITY OF THE DATA CONTROLLER OF YOUR PERSONAL DATA
Data Controller: EXPERIENCE BRAND, S.L.
Address: C/ Pau Claris 170, Principal, 08037 Barcelona
VAT ID: B66223579
PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data will be used for the general purpose of managing and controlling the established commercial relationship and, specifically, for:
Managing full access and the correct use of services by users.
Communicating with users in response to incidents, requests, comments, and questions about the services, as well as through the contact forms on our website (including emails and/or phone calls).
Providing, updating, maintaining, and protecting the services.
Offering new services and special offers or updates.
Managing personnel selection processes in the selection of workers and/or collaborators.
Communications: We may send you emails, messages, and other types of communication regarding services, technical issues, and changes to the services. These communications are considered part of the services, and you cannot opt-out of them.
Commercial Communications (Marketing): We may use your data to contact you, both electronically and non-electronically, to conduct surveys, obtain your opinion on the service provided, and occasionally notify you of changes, significant developments in services, offers, and/or promotions of our services or third-party companies related to us. These commercial offers will always be expressly authorized and separate from the user, who can revoke their consent to receive these notifications at any time using the mechanism implemented for this purpose or from the customer account preferences.
We will not process your personal data for any other purpose beyond those described above unless required by law or there is a judicial requirement.
DURATION OF STORAGE
The personal data provided will be kept and processed for the duration of the provision of services, without prejudice to the possibility of exercising your data protection rights (access, rectification, deletion, opposition, limitation, portability, and not to be subject to automated individual decisions) and during the applicable legal prescription periods. In this case, your data will be processed for legal purposes only to verify compliance with the legal or contractual obligations of the Data Controller.
Once these prescription periods have elapsed, your data will be deleted or, alternatively, anonymized.
LEGITIMATION OF PROCESSING
EXPERIENCE BRAND, S.L. processes your personal data according to the following legal bases: Consent of the interested party (1), legitimate interest (2), execution of a contract (3), and compliance with a legal obligation applicable to the Data Controller (4).
The consent of the interested party, granted for the purposes described above, will be requested:
During the customer registration process on the website or through corporate email indicated on the website, in order to adequately address the queries and requests of users.
When sending communications from EXPERIENCE BRAND, S.L.
Requests for information that you send to us require the interested party to voluntarily and freely provide the necessary data to assist you. However, the interested party can freely refuse to provide us with this data or later revoke the previously granted consent to process their data, although such refusal will imply the impossibility for us to address their request.
The Data Controller will send commercial communications to users who have registered on the website and have given their consent for this.
The legitimate interest of EXPERIENCE BRAND, S.L., in maintaining and retaining its customers and/or users and better meeting their previously expressed expectations or interests, e.g., improving services, managing requests, queries or complaints, offering services similar to those contracted, informing about promotions, etc., without prejudice to the compliance by EXPERIENCE BRAND, S.L. with the rest of the obligations related to sending commercial communications electronically.
Contractual execution between EXPERIENCE BRAND, S.L. and the user, processing data that the user voluntarily provides to the Data Controller through the website, in order to manage and provide the requested and/or contracted services, payment, invoicing, and shipments.
Compliance with the legal obligations applicable to the Data Controller.
EXPERIENCE BRAND, S.L. understands that, by providing us with this data, the interested party guarantees and takes responsibility for its truthfulness, timeliness, and accuracy and expressly accepts and consents to its processing for the purposes described above.
RECIPIENTS OF TRANSFERS OR TRANSFERS
As a general rule, EXPERIENCE BRAND, S.L. will not transfer your personal data to third parties unless legally obliged to do so or to fulfill the purposes of the processing.
EXPERIENCE BRAND, S.L. will not make international transfers of personal data collected through this website, except in the following cases:
When the international transfer of data is necessary for the execution of a contract or pre-contractual measures in which the interested party is a part.
When the international transfer of data is necessary due to the application of current legislation.
When the international transfer of data takes place with the express consent of the interested party.
When the international transfer of data takes place because the website is hosted on servers located outside the European Economic Area.
In any case, in situations where international transfers of data may occur, EXPERIENCE BRAND, S.L. will verify that the importing country of the data guarantees an adequate level of protection in accordance with current regulations.
RIGHTS OF THE INTERESTED PARTIES
Data protection regulations allow you to exercise your rights before the data controller, including the rights of access, rectification, opposition, deletion (“right to be forgotten”), limitation of processing, portability, and not to be subject to individualized decisions:
Right of Access: Allows the interested party to know and obtain information about their personal data undergoing processing.
Right of Rectification: Allows the correction of errors, modification of data that proves to be inaccurate or incomplete, ensuring the accuracy of personal data.
Right of Deletion: Allows the request for the elimination of personal data when they are no longer necessary for the execution or provision of the service.
Right of Opposition: Allows the interested party to prevent the processing of their personal data or its cessation, except for legitimate reasons or for the exercise or defense of possible claims, in which case the data will be kept blocked for the corresponding period.
Right to Object to Advertising: Individuals may object to the sending of commercial communications. In this case, they can revoke their consent to receive these notifications at any time.
Limitation of Processing: In certain circumstances, individuals may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of claims.
Data Portability: Interested individuals can request to receive the data that concerns them and that they have provided to us or, whenever technically possible, have it sent to another data controller of their choice, in a structured format of common use and mechanical reading.
Right Not to be Subject to Automated Individualized Decisions (Including Profiling): Individuals have the right not to be subject to a decision based on automated processing that produces effects or significantly affects them.
The possibility of withdrawing consent: The interested party has the right to withdraw consent at any time, without affecting the legality of the processing based on the consent given at the time of providing their data.
If you wish to exercise any of the rights mentioned, please contact us through the contact details provided in the “Identification of the Data Controller” section, including the following information: name and surname, ID number, postal and email address, specifying the type of right and its conditions.
Possibility to file a complaint with the Control Authority: EXPERIENCE BRAND, S.L. also informs you of your right to file a complaint with the Spanish Data Protection Agency (www.agpd.es) if you believe that the processing does not comply with current regulations.
Retention of certain data
EXPERIENCE BRAND, S.L. informs that, in compliance with the provisions of Law 25/2007, of October 18, on the retention of data related to electronic communications and public communication networks, it must retain certain traffic data generated during the development of communications for the purpose of transferring them to the authorized authorities when the legal circumstances provided for in it occur.
Our servers automatically collect information when the user uses the services of the websites. This log data may include the IP address, the identification of the device from which the services are accessed, the operating system, and the device configuration.
Furthermore, you are informed that the OWNER OF THE WEBSITE (Data Controller) has implemented the necessary technical and organizational security measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorized processing and/or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed, whether due to human action or the physical or natural environment. Additionally, additional measures have been established to reinforce the confidentiality and integrity of the information in the organization. Continuous monitoring, control, and evaluation of processes are maintained to ensure respect for data privacy.
Users providing their personal data with the information available through their account and/or user profile on social networks are informed that the social network is responsible for the processing of personal data carried out, unless expressly informed otherwise in a specific treatment.
In accordance with the applicable data protection legislation, the OWNER OF THE WEBSITE/SOCIAL MEDIA respects the privacy of users and the confidentiality and security of personal data, adopting the legal, technical, and organizational measures necessary to prevent loss, misuse, alteration, unauthorized access, and theft of the provided personal data, considering the state of technology, the nature of the data, and the risks to which they are exposed.
The personal data of users will only be obtained for processing when they are appropriate, relevant, and not excessive in relation to the scope and purposes for which they were collected. Therefore, their processing will be limited to the purposes indicated to users in each case.
When personal data is collected, the user will be informed in advance, clearly and unequivocally, of the circumstances relating to the processing of their data, in accordance with the requirements of data protection laws in force at all times. Likewise, the personal data provided will be kept as long as the interested party does not request its deletion or rectification, does not object to the continued processing of their data, or in those treatments that require their authorization, does not withdraw their consent.
Accessing and registering on the website or through social networks is prohibited for individuals under 14 years of age. In the event that a minor or incapacitated person wishes to register, the intervention of the parent or legal guardian of the user, or their legal representative, will be necessary through a valid document certifying the legal representation of the incapacitated user for access. THE OWNER OF THE WEBSITE/SOCIAL MEDIA will be expressly exempt from any responsibility that may arise from the use of social networks by minors or incapacitated individuals.