Data Protection and Privacy Policy

It is important that you read this clause carefully as it contains information about what personal data we request and the processing we will carry out with it, including transfers to third parties.

1. IDENTIFICATION OF THE DATA CONTROLLER

In compliance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016, on the protection of natural persons with regard to the processing of personal data, and the Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), JOYERÍA HAGO, S.L., with CIF: B92761311, hereinafter "JOYERÍA HAGO", informs you that whether you request information about our services or wish to contract some of our services or products, we need to process your personal data.

Your personal data must be truthful, complete, accurate, and updated, so any modification to them must be communicated without delay.

2. HOW DO WE OBTAIN YOUR PERSONAL DATA?

You may have provided them directly or we may have accessed them following your inquiries, requests, or previous service contracts at JOYERÍA HAGO.

In some cases, we obtain data about you that may be provided by third-party companies or entities to which you have given your consent for data transfer (for example, at events organized by a company or entity in which JOYERÍA HAGO participates as a collaborator or sponsor).

If you provide the data of a second person or more than one participant in the contracting of a product, we will process them in the manner indicated in this information.

3. TYPES OF DATA REQUESTED

IDENTIFYING DATA: those referring to your professional or labor activity, identity data including your name, ID/Passport, date of birth, image, contact data including postal address, email address, and phone number, commercial information, trademark, transactions of goods and services, bank details including your credit card number when making a payment, and solvency data when financing certain services or products.

4. WHY DO WE PROCESS YOUR PERSONAL DATA?

We process your identification and contact data in order to respond to your request for information about our services and products, marketing, sale and contracting of any of them, request and shipment of orders (when creating a CUSTOMER profile, a username and password are provided to operate through the websites managed by JOYERÍA HAGO).
To manage the loyalty card (points card).
JOYERÍA HAGO will not need to access sensitive data or other specially protected data.
For administrative, tax, service billing, and accounting management, and to fully and effectively comply with the provision of contracted services and products.
Compliance with legal obligations (e.g., tax regulations, prevention of fraud, or money laundering).
We will process your solvency data when you request or contract a product that involves credit risk assumption by JOYERÍA HAGO or the financing entities.
We inform you that JOYERÍA HAGO will use your mobile phone numbers (calls, SMS, or WhatsApp) and emails to inform you about the products or services of JOYERÍA HAGO. You can object to this commercial processing at any time by notifying JOYERÍA HAGO at the email address contacto@joyeriahago.com.
Commercial promotion of JOYERÍA HAGO through websites and social networks managed by JOYERÍA HAGO. You can object to this processing at any time by contacting contacto@joyeriahago.com.

Under no circumstances will JOYERÍA HAGO sell your personal data to third parties.

5. WHO DO WE SHARE YOUR PERSONAL DATA WITH?

Third-party companies or service providers as far as their intervention is necessary for the provision of the service (e.g., payment gateways or transport companies for shipping orders), acting under the instructions of JOYERÍA HAGO.
Competent Public Bodies, Tax Administration, judges, and courts, when the company has the legal obligation to communicate them.
Banking and financial entities.
Files of non-compliance with monetary obligations (defaulters' files) in accordance with applicable legislation.

If it is necessary to transfer data to entities or companies located outside the European Union, we guarantee that the information is shared with adequate safeguards and to countries that offer a level of data protection similar to that of the European Union.

6. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

We will keep your data as long as the purpose for which they were collected is maintained. When it is no longer necessary for this purpose, we will keep blocked those data that may be necessary during the legally established periods to address any issue related to its processing (for example, tax legislation requires keeping invoices for at least 4 years). After the legal periods have expired, personal data will be deleted adopting appropriate security measures.

7. SECURITY MEASURES

The data controller has adopted the legally required security levels for the protection of Personal Data and has installed all technical means and measures available according to the state of technology to prevent the loss, misuse, alteration, unauthorized access, and theft of the Personal Data provided.

8. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

You have the following rights regarding your data:

Right of Access: to know what data is being processed and for what purposes.
Right to Rectification: to modify your data when they are incomplete or inaccurate.
Right to Erasure (Right to be forgotten): deletion of your data if the purpose for which you provided them has disappeared or you revoke your consent.
Right to Object: to prevent us from processing your data for certain purposes.
Right to Restriction of Processing: to request the suspension of processing while the accuracy of the data is verified or if you believe the processing is unlawful.
Right to Data Portability: to receive your data in a structured, commonly used electronic format and transmit it to another controller.
Right not to be subject to automated individual decision-making.

To exercise any of these rights, you can write to JOYERÍA HAGO, Avenida Pries nº7, 29016 Málaga, Spain, or email contacto@joyeriahago.com, providing proof of your identity. We also inform you of your right to file a claim with the Spanish Data Protection Agency (www.aepd.es) if you believe you have not obtained satisfaction in the exercise of your rights.