This privacy policy (hereinafter "Privacy Policy") has been drafted by Apparel Labs Spain S.L. (hereinafter "Apparel Labs" or the "Data Controller") with the purpose of complying with the transparency duty in the processing of personal data that it may carry out as a data controller in accordance with Regulation (EU)2016/679 of the European Parliament and of the Council of April 27, 2016,regarding the protection of natural persons with respect to the processing of personal data and the free movement of such data (hereinafter "GDPR") and Organic Law 3/2018 of December 5 on the Protection of Personal Data and guarantee of digital rights (hereinafter "LOPDGDD").
The information contained in this Privacy Policy allows you to consult the details of the different processing of your personal data that can be carried out as a result of access and use of the website (hereinafter the"Website") as well as the various legal or commercial relationships you may maintain with Apparel Labs.
Holder: Apparel Labs Spain SL (hereinafter "ApparelLabs").
Address:Guadalmina Baja Urbanization - C 9 A Casa 310. 29670 Marbella Málaga Spain.
NIE: B72788375
Email: hello@apparellabs.co
We inform you that mere access to the Website does not imply the obligation to provide any personal information except as provided in the Cookie Policy.However, the use of some services or functionalities of the Website does require you to provide certain personal data indicated in the corresponding forms and implies their processing for the purposes and the legal bases indicated in this Privacy Policy.Generally, the categories of data subject to processing will be as follows:
● Identification data: name, surname, tax identification (DNI, NIF) (when necessary for billing purposes)
● Contact data:postal address, email address, phone number.
● Economic data:payment information.
● Transaction data: information on purchases, orders, returns made by the user.
● Other data:additional information you provide in each case to process your request,contact, petition, or claim.
The refusal to provide the data required in the forms marked as mandatory or those necessary to execute the contract between the parties may result in the impossibility of providing you with some services or functionalities or processing the requests or contracts made.
The personal data you provide will be processed for the purposes stipulated specifically in this Privacy Policy and, where appropriate, in the different data forms provided herein. In this sense, the collection of data is aimed at the following processing purposes:
● (i) Management and attention of your information requests and contact Purpose and legal basis: When using any of the forms available in different tabs of the Website of the Data Controller, it will be necessary to process your personal data to manage and resolve your inquiries, complaints, requests, or any other type of information you wish to ask the entity and thus be able to send you a response according to your interests.When contacting the Data Controller using any of the web forms, your data will be processed based on the consent of the data subject who provides them through the sending of said form, which can be withdrawn at any time without affecting the legality of the processing prior to its withdrawal as provided in the section "Rights of the Data Subject" of this Privacy Policy.
● ii) Order and purchase management:
Purpose and legal basis:Managing user purchase orders through the Website, with the execution of the contractual relationship as the legal basis that enables data processing.
● iii) Registration and management of your registered user account:
Purpose and legal basis: Creating,managing, and maintaining your registered user account on the Website, with the general legal basis of the execution of the contractual relationship between the parties, although certain additional functionalities may require your consent, in which case it will be expressly requested. Through your user account, you can manage your preferences regarding data processing provided for additional functionalities.
● iv) Incident, return, and/or complaint processing:
Purpose and legal basis: Managing incidents and returns of products offered on the Website,with the execution of the contractual relationship as the legal basis that enables data processing.
● iv) Sending newsletters:
Purpose and legal basis: When you consent by completing the form provided for this purpose, your data will be processed to send you information about the activity and products of the Data Controller by email and/or other electronic means.The legitimacy of the described processing is consent, which can be withdrawn at any time without affecting the legality of the processing prior to its withdrawal as provided in the section "Rights of the Data Subject" of this Privacy Policy.
● v) Sending commercial information to registered customers:
Purpose and legal basis: Sending you commercial information and/or offers of products similar to those you have purchased, with the legitimate interest of the Data Controller oriented to promoting its services through commercial communications in accordance with the provisions of Law 34/2002 on information society services and electronic commerce. You may object to processing for this purpose at any time without preventing, limiting, or conditioning your access to our full product catalog, which is always at your disposal. The opposition to this processing, which you can make at any time through the space provided for this purpose in each communication or by sending an email to hello@apparellabs.co ,will also not prevent us from contacting you for the operational management of the products you have purchased. With your consent, we may process your data to send you commercial information about products offered by other entities of the business group to which the Data Controller belongs.
The data subject:
● Guarantees that they are over eighteen (18) years old, have sufficient legal capacity to provide personal data, and that these are true, accurate, complete, and updated. To this effect, the user is responsible for the truthfulness of all the data they communicate and will keep the information provided properly updated so that it corresponds to their real situation.
● Guarantees that they have informed third parties whose data they provide, if doing so, of the aspects contained in this Privacy Policy. Likewise, guarantees that they have obtained their authorization to provide their data for the purposes indicated.
● Will be responsible for false or inaccurate information provided through the Website and for the director indirect damages caused to the Data Controller or third parties.
Data will be processed for the time necessary to fulfill the purposes for which they were collected, to process and respond to your request, or to process the purchase of products and their shipment, and once completed, we will keep them blocked for the statute of limitations period of legal actions that may arise.
Data processed for sending commercial communications will be processed until you oppose processing for these purposes or, where appropriate, withdraw your consent.
Personal data may be communicated to the following entities or in the following cases:
● In compliance with the legal obligations applicable to the Data Controller, your data may be communicated to Public Administrations in the cases provided by law.
● To the companies belonging to the Apparel Labs Group for internal administrative purposes.
● If you have consented, your data may also be communicated to other companies in the DataController's Group for sending commercial information.
● Likewise, your data may be communicated to third parties such as courier companies and/or banking entities when necessary to manage and process your orders and purchases based on the execution of the contractual relationship.
For the aforementioned purposes, we commission the provision of services to carefully selected and contracted suppliers (IT service providers, communication service providers,etc.). In certain cases, these service providers are located or have auxiliary services located outside the European Economic Area (hereinafter EEA). In thesecases, the transfer of personal data to third countries is carried out in accordance with the EU data protection regulations and applicable national legislation. To ensure an adequate level of data protection, the Data Controller applies and requires suppliers to apply appropriate guarantees to establish an adequate level of protection in accordance with legal requirements, including the subscription of EU standard contractual clauses.
Likewise, the use ofcookies by third parties may involve the international transfer of yourpersonal data under the terms informed in the Cookie Policy. You can consultthe privacy information of third parties serving cookies on this websitethrough our Cookie Policy
You can exercise your rights by sending a written communication to hello@apparellabs.co , proving your identity at any time and free of charge,specifically the following rights in terms of data protection:
● Access your personal data and obtain confirmation as to whether Apparel Labs is processing personal data concerning you.
● Rectify inaccurate or incomplete data.
● Object to the processing of your personal data under certain circumstances and for reasons related to your particular situation (specifically when the processing is based on the legitimate interest of Apparel Labs).
● Withdraw the previously granted consent (when this is the applicable legal basis). The withdrawal will not affect the legality of processing carried out prior to its withdrawal.
● Limit the processing of your data when any of the conditions provided for in the regulations are met.
● Request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
● Request the portability of data provided by the user in those cases provided for in the regulations.
Additionally, you can file a complaint regarding the protection of your personal data with the Spanish Data Protection Agency at C/Jorge Juan 6, 28001 - Madrid, when you consider that the Data Controller has violated your rights recognized by the applicable data protection regulations.
Your personal data will be treated with absolute confidentiality and observing the required duty of secrecy concerning them, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organizational measures that guarantee the security of the data and prevent their alteration, loss,unauthorized processing, or access, considering the state of the technology,the nature of the data stored, and the risks to which they are exposed.
The Data Controller reserves the right to modify this Privacy Policy to adapt it to its needs or the legislative developments that may be appropriate. In such cases, they wil lbe published on this Website so that you can access them at any time and in a simple manner.