Privacy Policy

PRIVACY POLICY

General information

At Suarez Trading SL (hereinafter, " Suarez "), we are committed to protecting your privacy and ensuring the security of your personal data. Therefore, we have adopted a transparent policy that will allow you to understand how we collect, process, and protect your personal data when you access or use our services.

Through this Privacy Policy, we inform you in detail about:

  • Who is responsible for your data?

The data controller is Suarez Trading SL, and in most cases, we act as the sole data controller.

  • How do we process your data?

Your personal data will be processed for the purpose of managing your registration as a customer, sending you commercial communications, coordinating events, managing contests and raffles, carrying out personnel selection processes, guaranteeing the security of our facilities through video surveillance systems, among others.

  • What rights do you have and how can you contact us?

You have the right to access, rectify, erase, object to, and limit the processing of your data, as well as other rights that will be detailed later. To exercise your rights or contact our Data Protection Officer (DPO), you can send an email to dpo@joyeriasuarez.com .

The information contained in this privacy portal also includes specific details about the processing of personal data collected in connection with the performance of the services you contract.

Data Controller

The data controller is the company Suarez Trading SL, hereinafter referred to as " Suarez " or the " Controller ".

§  Tax ID Number : B95352936

§  Mailing Address : Calle Gran Vía 40 bis, third floor, 48009 Bilbao

§  DPO email address : dpo@joyeriasuarez.com

In certain circumstances, such as the physical sale of products in other countries, Suarez may act as a joint controller along with other entities of the group. This applies, for example, in Portugal and Mexico, where Suarez and Joyería Suarez Portugal, Unipessoal LDA, Joyería Suarez Mexico SRLV de CV, respectively, act as joint data controllers. For more information on data processing at our physical points of sale, please see the specific section entitled "Data Processing at Physical Points of Sale".

Processing of data obtained through our website

On our website, we process the personal data of users who browse our website or who provide their information through the available forms. Data may be collected in various ways:

Register as a user at Suarez

Registering as a user on our platform will allow you to make online purchases, access Suarez's new products, save your favorite jewelry, and more.

  •  Purpose: When you contact us, we may request data strictly necessary to manage and resolve your request or inquiry. If you use third-party channels such as WhatsApp or social networks, you should be aware that your data will also be managed by those third parties, so we recommend that you consult their privacy policies and settings. Likewise, we inform you that when assistance is provided via telephone, Suarez may record and transcribe the call in order to attend to your contact request through our telephone channel and guarantee the quality of the service.
  •  Legitimation: Our processing of your personal data is based either on your given consent, or on the execution of a contract to which you are a party (e.g., when dealing with queries and/or incidents related to a purchase), or on compliance with a legal obligation on our part (e.g., when the query concerns claims related to our products or is related to the exercise of a right in the field of data protection), or for the defense of our legitimate interests.
  • Recipients: The data will be processed by our legal advisors and, if necessary, by customer service platforms such as Zendesk, which store data outside the EU under a processing agreement and the corresponding standard contractual clauses (SCCs). In addition to the third parties indicated (WhatsApp and social networks), which may involve an international data transfer, we may communicate your data to insurers, lawyers or authorities, only in case of legal obligation.
  • Retention: We will process your data for as long as necessary to address your request or inquiry.

Selected Suarez Community

The Selected Suarez community offers exclusive access to content such as news, events, new collections, private sales, newsletters, and other benefits. Users can join the community by registering using the " Selected Suarez " form, making a purchase, or registering on our platform.

  •  Purpose: The processing of personal data is for the purpose of sending commercial and promotional communications about Suarez products and services, invitations to events, participation in contests, and sending newsletters via email and SMS. We also analyze profiles of preferences, interests, and activity on the website and social networks, as well as sales generated through our communications. However, these analyses do not involve automated decision-making that could affect users. Remember that you can object to this processing (see below).
  •  Legitimation: The legal basis for processing your data obtained through the " Selected Suarez " form is the consent given by the user. We also process your personal data based on our legitimate interest in sending commercial communications about similar goods and services, by virtue of an existing customer relationship (having made a purchase or registered on our platform). We also use legitimate interest as a legitimizing basis to show you personalized information.
  • Recipients: The data will not be communicated to third parties, except to suppliers who provide us with services related to marketing and technology, who will act as data processors.
  • Retention: You can unsubscribe from the community at any time, either by email or SMS, following the instructions provided in each communication. Personal data will be kept until you request to unsubscribe, after which we will proceed to delete it.

Online purchase process

Our website has e-commerce capabilities that allow online purchases for both registered users and guest buyers.

  • Purpose: We process your data to manage and execute the sales contract, managing the customer relationship throughout the process, from initial interest (inquiry or product viewing) to after-sales service. This includes sending quality surveys, communications related to purchased products (see previous point), fraud prevention (see section below), and management of repair and return services. Additionally, and if you request it, we can process your data to prepare a complete invoice.
  •  Legitimation: The processing of your personal data is necessary for the execution of the sales contract, in accordance with the General Conditions governing the online sale of our products. If you require a full invoice, the legitimate basis will be compliance with a legal obligation.
  • Recipients: Your data will only be disclosed to third parties who provide us with services and act as data processors, such as technology providers, legal advisors, and logistics and transport companies for the delivery of products.
  • Data Retention: We retain your data for the time necessary to manage the purchase of the product, including possible returns or incidents. Generally, purchase data will be kept for a maximum of 6 years, unless the regulations for the prevention of money laundering require a longer period, as indicated in the section "Data Processing for AML/CFT Purposes".

Personnel selection process

Through the " Work with us " section, candidates can submit their CV or register for job offers, provided they have an account on InfoJobs. The following information complements the informative clauses of each offer:

  • Purpose: We manage the data of candidates for the Suarez recruitment process.
  • Legitimation: This processing is legitimized by the intention to establish an employment relationship.
  • Recipients: Your data will be obtained from InfoJobs. Furthermore, with your consent, it may be transferred to companies within our Group. In any other case, your data will not be shared with third parties, except by legal obligation.
  • Retention: Similarly, unless you indicate otherwise, we inform you that if you are not selected for the requested position or do not fit the profile of the currently open processes, your data will be kept for future selection processes that may match your profile for a maximum period of two years (at which time your data will be permanently deleted).

Data processing in customer service.

At Suarez, we offer various customer service channels, such as telephone, email, WhatsApp, and social media.

  • Purpose: When you contact us, we may request only the data strictly necessary to manage and resolve your request or inquiry. If you use third-party channels such as WhatsApp or social networks, you should be aware that your data will also be managed by those third parties, so we recommend that you consult their privacy policies and settings.
  • Legitimation: Our processing of your personal data is based either on your given consent, or on the execution of a contract to which you are a party (e.g., when dealing with queries and/or incidents related to a purchase), or on compliance with a legal obligation on our part (e.g., when the query concerns claims related to our products or is related to the exercise of a right in the field of data protection), or for the defense of our legitimate interests.
  • Recipients: The data will be processed by our legal advisors and, if necessary, by customer service platforms such as Zendesk, which store data outside the EU under a processing agreement and the corresponding standard contractual clauses (SCCs). In addition to the third parties indicated (WhatsApp and social networks), which may involve an international data transfer, we may communicate your data to insurers, lawyers or authorities, only in case of legal obligation.
  • Retention: We will process your data for as long as necessary to address your request or inquiry.

Data processing at physical points of sale

Personal data provided in our physical stores will be processed by Suarez. In certain cases, such as points of sale in other countries, such as Portugal and Mexico, the data may also be processed by the group company in that country (in this case, and respectively, Joyería Suarez Portugal or Joyería Suarez Mexico). In such cases, we act as joint data controllers with the company in question and the corresponding joint responsibility agreement is signed, which establishes the purposes and means of processing.

  •  Purpose: We process your data for the execution of the sales contract, managing the customer relationship in all its phases, from the consultation or viewing of items to after-sales service. This includes sending quality surveys, communications about purchased products (see the Selected Suarez Community section), fraud prevention (see the section on Data Processing for PBC-FT purposes), and management of repair and return services. We may also contact you via WhatsApp or other means to notify you when the product is ready or there is any other type of update. Additionally, and if you request it, we can process your data to prepare a complete invoice.
  • Legitimation: The processing of your personal data is necessary for the execution of the sales contract. If a full invoice is required, the legitimate basis will be compliance with a legal obligation.
  • Recipients: The data will only be disclosed to third-party providers who provide us with services and act as data processors, such as technology providers or legal advisors. Furthermore, if you choose WhatsApp as a method of communication to manage any order, we recommend that you review the privacy policy of that provider. Please note that the use of this service may involve an international data transfer, since WhatsApp operates under policies that may involve data storage outside the European Union.
  • Data Retention: We retain your data for the time necessary to manage the product purchase, including returns or incidents. Purchase data will be kept for a maximum of 6 years, unless the regulations for the prevention of money laundering require a longer period, as specified in the corresponding section.

Data processing for PBC-FT purposes

At Suarez, as entities obligated by the regulations for the prevention of money laundering and terrorist financing (hereinafter, " AML-FT "), we process additional data when transactions exceeding one thousand euros are made. Below, we indicate how we will process your data in this context:

  •  Purpose: We process your personal data to comply with the legal obligations established in the AML/CFT regulations. This includes identity verification, financial transaction assessment, and the prevention of money laundering and terrorist financing.
  • Legitimation: The legal basis for processing will be compliance with the provisions established in Law 10/2010, of April 28, on the prevention of money laundering and terrorist financing.
  • Recipients: Personal data may be disclosed to the competent authorities in matters of prevention of money laundering and terrorist financing, provided that such disclosure is made in compliance with our legal obligations. Furthermore, the data may be disclosed to our legal advisors and technology providers, who will act as data processors.
  • Retention: The information will be kept for a period of 10 years, after which it will be deleted, guaranteeing its confidentiality. Five years after the transaction is completed, the retained documentation will only be accessible to the internal control bodies of the obligated entity, including the technical prevention units, and, where applicable, those responsible for its legal defense.

Processing of video surveillance data

At Suarez, we have video surveillance systems in our facilities. The following information complements the informational posters located in our stores and centers:

  • Purpose: We process the images obtained through the video surveillance systems installed in our administrative offices and establishments open to the public in order to preserve the safety of people, property and facilities.
  • Legitimation: This processing is legitimized based on legitimate interest and is carried out in accordance with the provisions of Law 5/2014, of April 4, on Private Security.
  • Recipients: These companies with which we have subcontracted security services, as well as technical maintenance services for our video surveillance cameras, will have access to this data as data processors. They may also be disclosed to the security forces and bodies, if necessary.
  • Retention: The data will be kept for a maximum period of 30 days, unless it is necessary to keep them for a longer period to clarify any detected infraction or illegal act.

Rights What are your rights when you provide us with your data?

You have the following rights regarding your personal data:

  • Right of access : You have the right to obtain confirmation as to whether Suarez is processing personal data concerning you. You also have the right to access said data.
  • Right of rectification: You may request the rectification of incorrect or incomplete data that concerns you. You also have the right to restrict its processing.
  • Right to erasure: You have the right to request the erasure of data concerning you, in the cases established by law.
  • Right to data portability: You may request that your personal data concerning you be made available to you in a structured, commonly used and machine-readable format.
  • Right of objection and withdrawal: You have the right to object to the processing of your personal data, provided that the processing is based on legitimate interest. Furthermore, you may withdraw your consent at any time.
  • Right to limitation : You may request the limitation of the processing of your personal data to those cases that you deem appropriate, without prejudice to being able to modify your preferences at any time.
  • Right not to be subject to automated individual decision-making (including profiling): You have the right not to be subject to decisions based solely on the automated processing of your data that produce legal effects concerning you or similarly significantly affect you.

To exercise your rights, you can contact us by email at dpo@joyeriasuarez.com . You can also file a complaint with the Data Protection Agency, especially if you have not received satisfaction in exercising your rights, at the postal and/or electronic address indicated on the website www.aepd.es.

Security measures

The data will be treated confidentially and subject to appropriate technical and organizational security measures to prevent its alteration, loss, unauthorized processing or access.