Privacy policy

 

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The data controller responsible for processing the data is UDHARA BRAND SL, with Tax ID (NIF) number B19462811. UDHARA's contact details are as follows:

- Email: atencion@udhara.es

You can contact us at this address regarding any data protection matter. 

 

 

 

WHAT TYPE OF PERSONAL INFORMATION DOES UDHARA COLLECT?

UDHARA may collect the following personal information from users of the UDHARA website through the corresponding forms: name, email address, postal address, phone number, date of birth, gender, and credit card details (PAN+CVV2) in compliance with PCI DSS standards, or bank account number (provided by the customer in case of a return) when the user visits the WEBSITE, registers, places an online order, contacts UDHARA, or participates in UDHARA's promotions or surveys.

Additionally, UDHARA collects all information related to your browsing on the WEBSITE and your interaction with the brand.

All personal data collected by UDHARA comes directly from the data subject, except for contact details that may be provided by friends or family:

- For sending a gift card or other gift.

- For sharing saved favorites on the WEBSITE.

 

 

FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA?

The personal data of the data subject will be processed for the following purposes, as applicable:

- Manage and develop registration on the WEBSITE. Registration involves profiling user browsing on the WEBSITE. This profiling consists of using the customer's personal data and browsing information, such as products viewed or added to the cart, sections of the WEBSITE visited, and location to assess personal preferences and/or interests in order to offer WEBSITE content, offers, services, and products tailored to their profile.

- Manage and process online purchases. We use the customer's personal information to process and deliver their order, as well as to inform them via email and/or SMS about the status of their order.

- Manage and send information regarding exclusive promotions, latest news, and personalized information tailored to the profile, interests, and needs of the data subject as a customer via email, SMS, or postal mail. Sending this information involves user profiling, which consists of using personal data, purchase history where applicable, and browsing information on the WEBSITE to evaluate certain aspects related to personal preferences to offer commercial communications suited to their profile.

- Content, products, or services in communications will be personalized for the customer based on their interests. To manage communications, please consult the 'Subscriptions' section in My Account.

- Respond to the exercise of GDPR/ARCO+ rights, as well as inquiries and claims.

- Manage the alert service for when a specific item of clothing becomes available on the WEBSITE.

- Management and issuance of sales proof documents: digital receipt, sales invoice, or Tax Free.

 

 

HOW LONG WILL WE KEEP YOUR DATA?

UDHARA will store personal data only for as long as is reasonably necessary, taking into account the need to respond to inquiries or resolve issues, make improvements, activate services, and meet requirements under applicable law. This means that personal data may be retained for a reasonable period even after the data subject has stopped using UDHARA's services or the WEBSITE. After this period, personal data will be blocked across all UDHARA systems.

 

 

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

UDHARA relies on the following legal bases to process personal data:

Performance of a contract

The legal basis for processing the data subject's personal data collected is the performance of the purchase contract. In this regard, the data subject is required to provide the data necessary for its execution. If these data are not provided, the purchase cannot be completed.

Legal obligations

The management and issuance of the sales invoice is based on UDHARA's legal obligation in its relationship with customers.

Consent

Regarding the following purposes, the legal basis for processing the data subject's personal data will be their consent, if provided:

- Management of registration on the WEBSITE.

- Management of sending information about exclusive promotions, latest news, and personalized information tailored to the data subject's profile.

- Response to the exercise of rights, inquiries, and claims by the data subject.

- Management of the clothing availability alert service on the WEBSITE.

- Management and issuance of the following sales proof documents: digital receipt and Tax Free.

- Management of the Wi-Fi service in UDHARA stores.

The withdrawal of consent for these processing activities by the data subject will not condition the execution of the purchase contract entered into between them and UDHARA.

Legitimate interest

Regarding the following purposes, the legal basis for processing the data subject's personal data will be UDHARA's legitimate interest:

- Profiling through WEBSITE browsing by a registered user, as well as all users who have provided their data for any other purpose.

- Profiling for sending information about exclusive promotions, latest news, and personalized information tailored to the data subject's profile.

- Sending satisfaction surveys regarding products purchased or services used by UDHARA customers to request their opinion and improve them.

Our legitimate interest consists of ensuring that our WEBSITE remains secure, as well as helping UDHARA understand the needs, expectations, and level of satisfaction of users and, therefore, improve services, products, and brands. All these actions are carried out to increase customer satisfaction and ensure a unique browsing and shopping experience.

 

 

TO WHICH RECIPIENTS MAY WE DISCLOSE YOUR DATA?

The data subject's personal data may be transferred/disclosed to the following recipients:

- UDHARA group companies

- Public Administrations and Bodies when required by tax, labor, Social Security, or any other applicable regulations.

- Data processors, such as franchisees and service providers that deliver services to UDHARA (courier companies, communication platforms, agencies, profiling companies, etc.).

International data transfers may also occur in the context of the aforementioned disclosures, for which UDHARA will use Standard Contractual Clauses approved by the European Commission and the EU-U.S. Privacy Framework / legal mechanisms as guarantees for transfers made to countries without an adequacy decision from the European Commission. In any case, third parties with whom personal data is shared will have previously demonstrated the implementation of appropriate technical and organizational measures for its proper protection.

At UDHARA, we never sell customer data to third parties.

 

HOW DOES UDHARA PROTECT PERSONAL DATA?

The WEBSITE uses information security techniques such as firewalls, access control procedures, and cryptographic mechanisms, all aiming to prevent unauthorized access to data and guarantee its confidentiality. To achieve these purposes, the user accepts that UDHARA obtains data for authentication and access control purposes.

Additionally, any transaction carried out through the WEBSITE takes place through secure payment systems. Confidential payment details are transmitted directly and in encrypted form (SSL) to the corresponding financial entity.

UDHARA states that it has adopted all necessary technical and organizational measures to ensure the security and integrity of the personal data it processes, as well as to prevent its loss, alteration, and/or unauthorized third-party access.

 

WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?

You hold the following rights, which can be exercised via email at atencion@udhara.es:

Right of access	You have the right to obtain confirmation as to whether or not UDHARA is processing personal data concerning you, as well as to access the personal data UDHARA holds about you.
Right to rectification	You have the right to request that UDHARA rectify inaccurate personal data or complete incomplete data. If you are registered on our WEBSITE, it may be easier to correct it directly by updating your profile.
Right to erasure / right to be forgotten	You can request that your personal data be erased when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing	You have the right to request the restriction of the processing of your data, in which case we will only store it for the exercise or defense of legal claims.
Right to data portability	You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where the processing is based on consent or a contract, and is carried out by automated means.
Right to object	You can object to your personal data being processed based on public interest or legitimate interests pursued by UDHARA, including profiling. In such cases, UDHARA will cease processing the data, except for compelling legitimate grounds or the exercise or defense of potential claims.
Automated individual decision-making	You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on you or similarly significantly affects you. However, exercising this right will not be possible if the decision is necessary for entering into or performing a contract between you and UDHARA; is authorized by applicable law to UDHARA provided suitable measures are established to safeguard your rights, freedoms, and legitimate interests; or is based on your explicit consent.
Right to lodge a complaint	You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

To process your request, we may ask you to provide proof of your identity.