Política de privacidad

Data Controller BRANDSXPASION TRADE SLL
Purpose Provision of online services
Management of web inquiries
Commercial communications related to our services
Legal Basis Explicit consent and legitimate interest
Recipients Data is not shared with third parties, except when legally required
Rights Access, rectify, and delete data, 
as well as other rights explained 
in the additional information
Additional Information You can consult the additional and detailed information about Data Protection in the attached clauses

At BRANDSXPASION TRADE SLL, we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe we should be transparent about it.

Therefore, and for the purposes of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the LAW 34/2002, of 11 July, on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), BRANDSXPASION TRADE SLL informs the user that, as the data controller, it will incorporate the personal data provided by users into an automated file.

Our commitment begins by explaining the following:

Your data is collected so that the user experience improves, taking into account your interests and needs.

We are transparent regarding the data we obtain about you and the reason why we do so.

Our intention is to offer you the best possible experience. Therefore, whenever we use your personal information, we will always comply with the regulations, and when necessary, we will request your consent.

We understand that your data belongs to you. Therefore, if you decide not to authorize us to process it, you can request that we stop processing it.

Our priority is to guarantee your security and process your data according to European regulations.

If you want more information about the processing of your data, please consult the different sections of the privacy policy below:

Who is responsible for processing your personal data?

Identity: BRANDSXPASION TRADE SLL

Registered address: Av. Teniente Montesinos, 10. 17ª. Espinardo, Murcia

Tax ID (CIF): B05568027

Email: contabilidad@brandsxpansion.com

The company has appointed a Data Protection Officer or an internal contact person within its organization. If you wish to make an inquiry regarding the processing of your personal data, you can contact them via the email provided in this section.

What personal data do we collect?

Personal data that the user may provide: Name

Email address, location.

IP address, date and time you accessed our services, internet browser used, and data about the device’s operating system.

Any other information or data you decide to share with us.

Why and for what purposes do we process your data?

We process the information provided by interested parties for the following purposes: To contract any of our services, either online or physically in the store.

To manage the sending of information requested.

In some cases, it will be necessary to provide information to Authorities or third-party companies for auditing purposes, as well as to handle personal data from invoices, contracts, and documents to respond to customer claims or Public Administration requests.

We inform you that the personal data obtained as a result of your registration as a user will be part of the Registry of Activities and Processing Operations (RAT), which will be updated periodically in accordance with the GDPR.

What is the legal basis for processing your data?

The processing of your data may be based on the following legal grounds:

  • Consent of the data subject for contracting services, contact forms, information requests, or subscription to newsletters.

  • Legitimate interest for processing our clients’ data in direct marketing actions.

  • Compliance with legal obligations for fraud prevention, communication with public authorities, and third-party claims.

How long do we keep your data?

The processing of data for the purposes described will be maintained as long as necessary to fulfill the purpose for which it was collected, as well as to comply with legal obligations arising from data processing.

To which recipients are your data communicated?

In some cases, only when necessary, the company will provide user data to third parties. However, data will never be sold to third parties. External service providers working with the company may use the data to provide the corresponding services, but they will not use such information for their own purposes or transfer it to third parties.

The company strives to guarantee the security of personal data when sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures to protect personal data. These third parties are obligated to ensure information is processed in accordance with data privacy regulations.

In some cases, the law may require personal data to be disclosed to public bodies or other parties; only the strictly necessary data will be disclosed to comply with these legal obligations.

Personal data obtained may also be shared with other companies within the group.

Where is your data stored?

As a general rule, data is stored within the EU. For data sent to third parties outside the EU, we ensure they offer an adequate level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the “Privacy Shield.”

What rights do you have and how can you exercise them?

You can send your communications and exercise your rights by submitting a request to the following email:

contabilidad@brandsxpansion.com

Under the GDPR, you may request:

  • Right of access: You can request information about the personal data we hold about you.

  • Right to rectification: You can notify any changes to your personal data.

  • Right to erasure and to be forgotten: You can request deletion, preceded by blocking of personal data.

  • Right to restriction of processing: This means limiting the processing of personal data.

  • Right to object: You can withdraw your consent to data processing and object to further processing.

  • Right to data portability: In some cases, you can request a copy of your personal data in a structured, commonly used, and machine-readable format to transfer it to another controller.

  • Right not to be subject to automated individual decisions: You can request not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect you.

In some cases, the request may be denied if it involves deleting data necessary for compliance with legal obligations.

Also, if you have any complaints about data processing, you can file a claim with the data protection authority.

Who is responsible for the accuracy and truthfulness of the provided data?

The user is solely responsible for the truthfulness and accuracy of the data provided, exempting the company from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and commit to keeping it duly updated. The user agrees to provide complete and correct information in the registration or subscription form.

Furthermore, the user certifies that they are over 14 years old and have the legal capacity necessary to give consent regarding the processing of their personal data.

How do we process personal data of minors?

In principle, our services are not specifically directed at minors. However, in cases where any of them are directed at children under fourteen years of age, in accordance with Article 8 of the GDPR and Article 7 of the Organic Law 3/2018 of 5 December (LOPDGDD), the company will require valid, free, unequivocal, specific, and informed consent from their legal guardians to process minors’ personal data. In this case, the ID or other form of identification of the consenting person will be requested.

For minors over fourteen years old, data processing may proceed with the user’s consent, except in cases where the law requires the assistance of those holding parental authority or guardianship.

What security measures do we apply to protect your personal data?

The company has adopted the legally required levels of protection for personal data and strives to implement additional technical measures within its reach to prevent loss, misuse, alteration, unauthorized access, and theft of personal data provided to the company.

How do we use cookies?

The company’s website and social networks use cookies to optimize and personalize your browsing experience. Cookies are physical information files stored on the user’s device; the information collected by cookies helps facilitate navigation and optimize the user experience. Data collected through cookies may be shared with the cookie creators, but under no circumstances will the information obtained be associated with personal data or data that can identify the user.

However, if the user does not wish to have cookies installed on their hard drive, they can configure their browser to block these files. For more information, consult our Cookie Policy.

Can the privacy policy be modified?

This privacy policy may be modified. We recommend reviewing the privacy policy periodically.