PRIVACY POLICY

This Privacy Policy (hereinafter, the “PRIVACY POLICY”) generally governs the collection and processing by Carla María Castro-Rial Resines, trading as BYCATELIER (hereinafter, “BYCATELIER”), of the personal data you provide to us as a user of the website accessible through the domain www.bycatelier.com (hereinafter, the “WEBSITE”), including any services that may be available occasionally through the WEBSITE.

This is without prejudice to the specific provisions set out in certain sections, forms, or services available on the WEBSITE to provide you with relevant information and, where applicable, obtain your consent.

BYCATELIER reserves the right to modify the PRIVACY POLICY to adapt it to legislative, jurisprudential, and/or administrative updates, as well as to the practices it develops from time to time through the WEBSITE, always taking into account the rights and interests of users.

In any case, BYCATELIER will provide the appropriate technical resources so that you can access the PRIVACY POLICY and learn how your personal data is processed.

1. WHO IS THE DATA CONTROLLER?

The controller of the processing of your personal data is:

Carla María Castro-Rial Resines
Trading name: BYCATELIER
Tax ID: 49689999V
Address: Calle Peguerinos 30A, 28035 Madrid, Spain
Website: www.bycatelier.com

For any inquiries related to this PRIVACY POLICY and/or the processing of your personal data, you may contact BYCATELIER at the postal address provided above or via email at info@bycatelier.com.

2. HOW DO WE OBTAIN YOUR DATA?

The data processed by BYCATELIER is obtained directly from the user through:

(i) the various forms you may complete while browsing the WEBSITE, such as user registration, contact forms, the purchasing process, subscription to commercial communications, or other available forms;

(ii) the sending of emails or inquiries to BYCATELIER;

(iii) the placement of orders or the purchase of products through the WEBSITE; and

(iv) interaction with BYCATELIER's corporate profiles on the social networks where it is present.

If the personal data provided belongs to a third party, the user guarantees that they have informed said third party about the processing of their data and that they have sufficient authorization to provide it to BYCATELIER.

Likewise, BYCATELIER may process certain data derived from the user's interaction with its social media profiles, in accordance with the terms, conditions, and privacy policies established by each platform.

3. WHAT TYPE OF DATA DO WE PROCESS?

BYCATELIER may process the data provided by the user during their browsing and use of the WEBSITE, especially:

  • Identification and contact data: name, surnames, postal address, email address, telephone number, etc.
  • Data related to orders and purchases: products purchased, delivery and billing address, order-related information, returns, and communications related to the purchase.
  • User account data: when there is the possibility of creating an account on the WEBSITE.
  • Browsing data: IP address, device used, browser, pages visited, interaction with the WEBSITE, and other technical information related to browsing.
  • Data voluntarily provided through forms, communications, or interactions with BYCATELIER.

Data related to payment methods may be processed directly by the corresponding platforms or payment service providers used on the WEBSITE.

4. FOR WHAT PURPOSE AND UNDER WHAT LEGAL BASIS DO WE PROCESS YOUR DATA?

BYCATELIER may process the user's personal data for the following purposes:

  • Manage the user's registration and account, where applicable.
  • Manage access to and use of the content and services available on the WEBSITE.
  • Process and manage purchases made through the WEBSITE, including payment, order preparation and shipping, returns, exchanges, after-sales service, and other actions necessary to manage the contractual relationship with the customer.
  • Respond to requests for information, inquiries, suggestions, complaints, or claims.
  • Manage the relationship with customers and users.
  • Manage subscriptions to newsletters and other electronic communications.
  • Send commercial and advertising communications related to BYCATELIER, its products, updates, offers, or promotions, when there is a legal basis that allows it and, when necessary, the user has provided their consent.
  • Analyze the operation and use of the WEBSITE with the aim of improving the browsing experience, the services offered, and the operation of the online store.

The main legal bases for processing will be, as applicable:

  • The performance of the contractual relationship, when processing is necessary to manage a purchase, order, or service requested by the user.
  • The user's consent, when necessary, for example, for certain commercial communications or optional processing.
  • Compliance with legal obligations applicable to BYCATELIER.
  • Legitimate interest, when applicable and always respecting the rights and interests of users.

When processing is based on consent, the user may withdraw it at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.

5. TO WHOM DO WE DISCLOSE YOUR DATA?

BYCATELIER may provide third parties access to certain personal data when necessary to provide the services offered through the WEBSITE or properly manage a purchase.

These may include providers of:

  • E-commerce platform and web hosting.
  • Payment services and gateways.
  • Transportation, courier services, and logistics.
  • Technology services and maintenance.
  • Email marketing and communications.
  • Analytics and measurement.
  • Professional services necessary for the operation of the business.

Likewise, data may be disclosed to Public Administrations, public bodies, judicial authorities, or other third parties when there is a legal obligation.

Some technology providers may process information from countries located outside the European Economic Area. When international data transfers occur, BYCATELIER will ensure that they are carried out in accordance with the safeguards and mechanisms provided for in the applicable data protection regulations.

6. HOW LONG DO WE RETAIN YOUR DATA?

Personal data will be retained for the time necessary to fulfill the purpose for which it was collected.

When there is a contractual relationship, data may be retained for the time necessary to manage said relationship and, subsequently, for the periods required by applicable legislation to address possible legal, tax, or administrative liabilities.

Data used for commercial communications will be processed as long as the user does not withdraw their consent or request to stop receiving such communications.

Once the data are no longer necessary for the corresponding purposes, they may be deleted or properly blocked for the legally required periods.

7. WHAT ARE YOUR RIGHTS?

The data protection regulations applicable to BYCATELIER recognize different rights for users regarding their personal data.

In particular, you may exercise the following rights:

  • Access: learn what personal data BYCATELIER processes about you.
  • Rectification: request the correction of inaccurate or incomplete data.
  • Erasure: request the deletion of your data when the legally provided circumstances occur.
  • Restriction of processing: request that the processing of your data be restricted in certain cases.
  • Portability: receive certain personal data in a structured, commonly used, and machine-readable format and, where applicable, transmit it to another controller.
  • Objection: object to the processing of your data in the legally provided cases.
  • Withdrawal of consent: withdraw previously granted consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

To exercise any of these rights, the user may contact:

Carla María Castro-Rial Resines – BYCATELIER
Calle Peguerinos 30A
28035 Madrid, Spain

info@bycatelier.com

The request must properly identify the data subject and specify the right they wish to exercise.

Likewise, the user has the right to file a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their personal data does not comply with the applicable regulations.

8. SECURITY MEASURES

BYCATELIER will process personal data with due confidentiality and will adopt appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures are intended to prevent, to the extent possible, the alteration, loss, processing, or unauthorized access to personal data, taking into account the state of technology, the nature of the data processed, and the risks associated with the processing.