PRIVACY POLICY
The Data Controller undertakes to comply with regulations regarding the protection of personal data and to respect Users’ privacy. The goal is to provide the best possible service to the User, and to do so, it is necessary to process their personal data. The User may only provide their own personal data and, under no circumstances, the personal data of another person without that person’s express consent; the User shall be solely liable in the event of doing so.
1. Data Controller
DE RUY PERFUMES S.A.U.
Tax ID: A29596624
Address: La Red Industrial Park, C/ La Red Seis, No. 2. 41500. Alcalá de Guadaira, Seville.
Phone Numbers: 954661461 / 952703300
2. Purposes and Legal Basis
Handling Inquiries: To respond to inquiries from Users who contact us through the forms or communication tools available on the Website. The legal basis for processing is the User’s consent, in accordance with Article 6.1.a) of the GDPR.
Browsing data: Data collected by first-party or third-party cookies that may be generated by this Website, provided the User has been informed and has accepted them. The legal basis for processing is the User’s consent, in accordance with Article 6.1.a) of the GDPR.
The data processed for this purpose includes: data collected by cookies generated on the Website, in accordance with the purposes for which they are used. For more information, please consult our Cookie Policy or modify your preferences using our cookie management tool.
The Data Controller shall not be responsible for the processing of information collected by cookies from third-party advertising providers, nor shall it have access to the data collected by them. The Data Controller informs you that these third parties will process the data for their own purposes depending on each type of cookie and may, in turn, transfer the information to other service providers or process the data in combination with data collected on other websites by these or other publishers to provide the services entrusted to them by each of these parties.
Whistleblowing Channel: Data collected on the Whistleblowing Channel form—including information from both the complainant and affected third parties—necessary for managing the organization’s internal suggestion or complaint system. Individuals using this channel may choose, on a voluntary basis, whether or not to identify themselves. The lawful basis for processing is the User’s consent, in accordance with Article 6.1.a) of the GDPR, in the case of non-anonymous reports. In cases where the implementation of the internal reporting system is mandatory, the lawful basis for processing is compliance with a legal obligation, in accordance with Article 6.1.c) of the GDPR, in accordance with the provisions of Organic Law 7/2021 of May 26 on the protection of personal data processed for the purposes of preventing, detecting, investigating, and prosecuting criminal offenses and enforcing criminal sanctions, and Law 2/2023 of February 20 regulating the protection of individuals who report regulatory violations and the fight against corruption. In cases where the implementation of the internal reporting system is voluntary, the legitimate grounds for processing are the performance of a task carried out in the public interest, pursuant to Article 6.1.e) of the GDPR, and the entity’s legitimate interest in preventing non-compliance and improving internal management, pursuant to Article 6.1.f) of the GDPR and the enabling framework provided for in Article 24 of the LOPDGDD.
Commercial Communications: Users who voluntarily opt in to this option will receive promotions, advertisements, offers, news, invitations to events, and any other type of commercial information from the Data Controller. The lawful basis for this processing is the User’s consent, in accordance with Article 6.1.a) of the GDPR.
In any case, the User may subsequently opt out of receiving commercial communications at any time by sending an email to lopd@deruy.com from the same account used to receive the communications.
3. Retention Period
The data will be retained for as long as the relationship continues and no request for deletion is made, and in any case, in compliance with applicable statutory limitation periods.
4. Disclosures
There are no plans to disclose Users’ personal data collected through this Website to any third party without a legal basis that legitimizes such processing.
The Data Controller uses third-party providers that employ cookies to conduct analytical studies of usage and to generate advertising, which may be behaviorally targeted. The Data Controller does not have access to the data generated by these cookies.
Users may select in advance which cookies will be used on this Website, may subsequently manage their preferences, and may consult the Cookie Policy at any time.
With regard to the management of services, Users’ data may be processed by companies that provide the Data Controller with various services, including, but not limited to, shipping, courier services, accounting, consulting, IT maintenance, or any other service for which, due to their status as Data Processors, it is essential or unavoidable that they access or process this data. This processing shall in no case be considered a transfer of data.
5. Rights of Data Subjects
Users may exercise their rights of access, rectification, erasure, objection, restriction of processing, data portability, and the right not to be subject to automated individual decision-making (including profiling) by sending a request with the subject line “Data Protection” to the following address: Polígono Industrial La Red, C/ La Red Seis, No. 2, 41500. Alcalá de Guadaira, Seville, or by email to lopd@deruy.com, from the same account you provided to us, indicating your contact information in all cases. If you believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Free-text Fields
The free-text fields made available to the User on the Website’s forms are intended solely and exclusively to collect information to improve the quality of the Services.
The User shall not include, in any spaces that the Website may offer as “free-text fields,” any personal data that could be classified as requiring a special level of protection, such data being understood to include, but not limited to, information regarding economic and financial status, psychological profiles, ideology, religion, beliefs, union membership, health, racial origin, and/or sexual life.
7. Non-Mandatory Fields
The Data Controller informs the User that the collection of certain data is not mandatory, except in fields where otherwise indicated by an (*). However, failure to provide such data may prevent the provision of all Services linked to that data, thereby releasing the Data Controller from any liability for the non-provision or incomplete provision of these Services.
8. Access to and Correction of Personal Data
The User agrees to provide accurate information regarding their personal data and to keep the data provided to the Data Controller up to date at all times. The User shall, in any case, be responsible for the accuracy of the data provided, and the Data Controller reserves the right to exclude from the services any User who has provided false data, without prejudice to any other actions that may be applicable under the law. The data provided by the User will be presumed to be correct; therefore, in the event that the User submits incorrect data, the Owner disclaims any liability for the incorrect execution or failure to execute the submission, as well as for the incorrect completion of the necessary administrative procedures.
9. Confidentiality
Furthermore, any information of any kind exchanged between the parties shall be considered confidential, including information that the parties agree is of a confidential nature, or information that simply pertains to the content of such information. The display of data via the Internet shall not constitute direct access to such data, unless the owner expressly consents to such access on a case-by-case basis.
10. Photographs
In compliance with current regulations on the Protection of Personal Data, we hereby inform you that photographs in which people appear are considered personal data. We hereby inform you that this Website may feature photographs of individuals for promotional purposes, and that these individuals have voluntarily consented to their use. If, in any case, a person appearing in a photograph wishes for that photograph not to be displayed, please contact us and we will remove it as soon as possible. This does not apply to individuals who have provided services in a professional capacity.