PRIVACY POLICY

This Platform is accessible via the URL https://goldnriff.com and offers high-quality clothing items, including but not limited to t-shirts, pants, dresses, jackets, and accessories, made from premium materials and designed to provide comfort, style, and durability. GOLDNRIFF Products are offered under its General Terms and Conditions accessible by clicking https://goldnriff.com.

Access to the purchase of GOLDNRIFF Products requires the registration of personal data (hereinafter, Data). Therefore, in compliance with current regulations on personal data protection, we want to be transparent about what we intend to do with the information you provide us. Please read this Privacy Policy carefully and if you have any questions, do not hesitate to contact us.

Among other things, the Privacy Policy contains information about:

  • Who is responsible for your data
  • Data collected by GOLDNRIFF and the processing that will be carried out
  • Purpose of data processing
  • Legal basis for data processing
  • Communication of personal data to third parties, if any, and its justification
  • Period during which we retain the data
  • Your rights and how to exercise them

We will notify you in advance of any changes made to this Privacy Policy and will not make retroactive changes that reduce your privacy rights unless legally required, and your consent will always be necessary. However, on our online store, users can request to unsubscribe from the newsletter or stop purchasing our products at any time if they disagree with the changes made to our services or policies.

In accordance with Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD); GOLDNRIFF and/or the data controller informs you about the processing of your data by this entity as responsible, applying the security, technical and organizational measures provided for in the current regulations.

In this regard and in accordance with the current legislation, we detail below the information about the processing that GOLDNRIFF performs on your data.

Data Controller

The contact person and the person responsible for the legality in the processing of your personal data under the Data Protection Law is:

  • GOLDNRIFF S.L
  • Tax ID: B70775887
  • Postal address: Seville
  • Email: info@goldnriff.com

Scope of Application

This Privacy Policy applies to the activity carried out by GOLDNRIFF and fully to its contents, functions, and Products of this Platform.

Processing of Personal Data

The personal data processed by GOLDNRIFF in the course of its activity are as follows:

USERS

On our online store, it is possible to browse our website without registering, during which time we collect data through our cookies, as detailed in our Cookies Policy.

USER ACCOUNT

To create a user account in our online store, it is necessary to register through the forms available on our website. This registration process involves the collection of personal data provided by the Users:

  • Contact data: Name, Surname, and email
  • Password

BUYING USERS

To make purchases in our online store, it is necessary to complete a purchase registration through the forms available on our website, in accordance with the General Terms and Conditions that regulate the sale of our products. This registration process involves the collection of personal data provided by the Users.

We may also offer the option to register via social login with a Google account and/or similar platform, which involves the processing of certain categories of personal data solely for the purchase of products.

  • Identification data: Name, surname, image, language, country of interaction
  • Contact data: Postal address, email, and phone number
  • Password, if you register your profile
  • Icon provided by Google and Facebook, if registered through these platforms
  • No special categories of data will be processed
  • Commercial information, if applicable
  • Economic and transactional information (payment or card data, order information, returns, purchases)

Accuracy of the data and majority of age. You guarantee that you are of legal age or over fourteen years old to provide your consent under current data protection regulations and that the data provided is true, accurate, complete, and up-to-date, being responsible for any damage or harm, direct or indirect, that may be caused as a result of the breach of this obligation.

USERS SUBSCRIBED TO OUR NEWSLETTER

For Users who wish to subscribe to our Newsletter and receive exclusive information about our products and offers, it is necessary to provide certain personal data through the subscription form available on our Website. Specifically, the following data will be required:

  • Contact data: email

This action allows Users to access special content and promotions directly in their email.

Remember that when we ask you to provide your personal data to give you access to some purchase functionality or service of the Web Platform, we will indicate some fields as mandatory, as they are data we need to provide you with the service or give you access to the functionality in question. Please note that if you decide not to provide these data, you may not be able to complete your registration as a user or you may not be able to enjoy those services or functionalities.

In other cases, we may obtain information passively using tracking tools, such as browser cookies or other similar technologies on our Web Platform or from the communications we send you. In certain cases, a third party may have provided us with information about you by using a feature or service of the Web Platform, for example, if they have sent you a gift card or if they send an order to your address.

Accuracy of the data and majority of age. You guarantee that you are of legal age or over fourteen years old to provide your consent under current data protection regulations and that the data provided is true, accurate, complete, and up-to-date, being responsible for any damage or harm, direct or indirect, that may be caused as a result of the breach of this obligation.

CANDIDATES

In the case of voluntarily submitting your resume or through any of the vacancies that GOLDNRIFF may open, GOLDNRIFF will process the following categories of data:

  • Identification data: Name and surname, ID/Tax ID/Identification document, address, and signature
  • Postal, electronic addresses, and phone number
  • Academic background
  • Professional experience
  • Those data required in the call and its application bases
  • No special categories of data will be processed

Accuracy of the data and majority of age. You guarantee that you are of legal age or over fourteen years old to provide your consent under current data protection regulations and that the data provided is true, accurate, complete, and up-to-date, being responsible for any damage or harm, direct or indirect, that may be caused as a result of the breach of this obligation.

SUPPLIERS

The personal data processed by GOLDNRIFF have been provided by you through the subscription of the Contract.

GOLDNRIFF will process the supplier's company data and the personal data of individuals necessary for the purpose of the Service Contract or others, processing only the minimum data for professional localization and only for the purpose of executing what is established in the Product Contract.

GOLDNRIFF informs you of the processing of the following categories of data:

  • Identification data (Name, Surname, ID, and signature)
  • Position in the organization
  • Postal, electronic addresses, and phone number
  • Commercial information
  • Contractual information
  • Bank data
  • Power of attorney data, if applicable
  • No special categories of data will be processed

Accuracy of the data and majority of age. You guarantee that you are of legal age or over fourteen years old to provide your consent under current data protection regulations and that the data provided is true, accurate, complete, and up-to-date, being responsible for any damage or harm, direct or indirect, that may be caused as a result of the breach of this obligation.

Purpose and Legal Basis for the Processing of Personal Data

USER ACCOUNT

GOLDNRIFF will process your data to provide you with the best service and, specifically, to:

  1. Manage your registration and identification as a User:

    If you choose to register on our Website, we will need to process your data to recognize you as a User and grant you access to various functionalities, products, and services exclusive to registered users. The cancellation of your user account can be done at any time by communicating with our Customer Service.

  2. Development, fulfillment, and execution of the contract complying with the general terms of use of GOLDNRIFF.
  3. Commercial purposes
  4. Conducting surveys and statistics

Legal basis for the processing of your data in accordance with the above purposes is as follows:

  1. I and II: Art. 6.1(b) GDPR, the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the data subject's request.
  2. III: Art. 6.1(a) GDPR, the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  3. IV: Art. 6.1(f) GDPR, the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

The processing of your data for purposes other than those detailed in this section will require your consent or another legal basis. The processing of your data for purposes based on your consent can be revoked at any time.

BUYING USERS

GOLDNRIFF will process your data to provide you with the best service in accordance with the Products offered on the Website and, specifically, to:

  1. Manage your registration and identification as a Buying User:

    If you choose to register on our Website, we will need to process your data to recognize you as a User and grant you access to various functionalities, products, and services exclusive to registered users. The cancellation of your user account can be done at any time by communicating with our Customer Service. It is important to mention that the information related to your activity on the Website, such as purchases made, will remain linked to your account, facilitating consolidated access to your history. For your identification on the Website, it may be necessary to undergo an identity verification process, through which you will be provided with different options to ensure that you are the legitimate owner of the contact details you are using.

  2. Development, fulfillment, and execution of the sales contract:

    Contact us to receive updates or informative communications about the functionalities, products, or services you have contracted, including participation in quality surveys about the products or services offered. Additionally, we will manage the payment of the products you purchase, regardless of the payment method selected.

    We will activate the necessary mechanisms to prevent and detect the improper use of the Website, especially during purchase and return processes, and to protect you against potential fraud. If we identify an operation as potentially fraudulent or detect abnormal behavior suggesting fraudulent use of our functionalities, products, and services, we may take measures such as blocking the transaction or canceling your User account.

    We will manage changes or returns after making a purchase and handle requests for information on the availability of items, as well as product reservations through the Website, according to the options available at any given time.

    We guarantee the use of other functionalities or services available, such as the purchase, receipt, management, and use of the Gift Card or Gift Ticket. Additionally, we facilitate access and use of Wifi in our physical stores for all our customers.

  3. Handle requests or inquiries you make through Customer Service channels:

    We only process personal data that is strictly necessary to manage or resolve your request or inquiry. If you use the telephone channel, the call may be recorded to adequately address your request and ensure service quality.

  4. Commercial purposes:

    (i) We will personalize the products we offer you, making recommendations based on your interaction with us on the Website for similar products.

    (ii) By subscribing to our Newsletter through your explicit consent, we will manage your personal data to administer your subscription, which includes sending you personalized information about our products or services and brand news via various channels, such as email or SMS. Additionally, if you have activated push notifications on your device, we may also send you this information through such notifications.

  5. Conducting surveys and statistics

Legal basis for the processing of your data in accordance with the above purposes is as follows:

  1. I, II, and III: Art. 6.1(b) GDPR, the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the data subject's request.
  2. IV(ii): Art. 6.1(a) GDPR, the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  3. IV(i) and V: Art. 6.1(f) GDPR, the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

The processing of your data for purposes other than those detailed in this section will require your consent or another legal basis. The processing of your data for purposes based on your consent can be revoked at any time.

CANDIDATES

GOLDNRIFF processes the data you provide us with to manage your application for the selection processes for the vacant positions offered by GOLDNRIFF and the filling of positions carried out through calls that you must accept, if applicable, beforehand.

For this purpose, you must complete your professional profile in the forms established for this purpose on our website if required, or you can send us your resume to any of the email addresses included on the website to apply for other vacancies that you consider of interest. GOLDNRIFF will not make automated decisions based on your professional profile.

The legal basis for the processing of your data by GOLDNRIFF is the processing necessary for the performance of a contract or the establishment of pre-contractual measures and your consent when explicitly required.

The processing of your data for established purposes and based on the consent requested can be revoked at any time.

SUPPLIERS

GOLDNRIFF processes the data you provide us with to manage the commercial relationship (presentation of projects, offers, and quotes) and/or contractual relationship (supplier management, accounting, tax, and administrative management) and maintain the necessary relationships for the execution of the contractual relationship (provision of the contracted Products and all necessary procedures).

The legal basis for the processing of your data is the performance of the Contract signed for the provision of Services and/or supply of products to GOLDNRIFF by the Supplier or for the implementation of pre-contractual measures at the Supplier's request. Additionally, in GOLDNRIFF's legitimate interest, the company will process the data of individuals, individual entrepreneurs, or freelancers that are necessary for the purpose of the Contract, processing only the minimum data for professional localization and solely to maintain the relationship with respect to the contract signed with the legal entity in which the affected person provides their Products.

The processing of your data for purposes other than those detailed in the previous section that is based on the consent requested, if applicable, can be withdrawn at any time without affecting the performance of the Service provision contract.

Data Communication

In other cases, GOLDNRIFF will not communicate data to third parties, except by legal obligation. Such communications will be carried out, in any case, complying with all legally established guarantees.

If the possibility of transferring your data for other circumstances is considered, your explicit consent will be requested.

Notwithstanding the above, GOLDNRIFF informs you that your data may be processed by third companies contracted by GOLDNRIFF. In such cases, the corresponding data processing agreement will be signed between the parties, with the requirement that the service provider knows the existing regulations on personal data protection and guarantees compliance during the contract's development.

International Data Transfers

GOLDNRIFF informs you that no international transfers of your personal data will be made. If international data transfers are necessary, GOLDNRIFF will carry them out to countries with an adequacy decision by the European Commission or to those whose legal framework for personal data protection offers sufficient protection and guarantees in accordance with current legislation.

Rights

Any person has the right to obtain confirmation as to whether GOLDNRIFF is processing personal data concerning them or not.

You can exercise the rights granted by current regulations: the right of access, rectification, deletion, and opposition, limitation of processing, data portability, and not to be subject to automated individual decisions.

  • Access: allows the data subject to obtain information about whether GOLDNRIFF is processing personal data concerning them or not and, if so, the right to obtain information about their personal data undergoing processing.
  • Rectification: allows correcting errors and modifying data that proves to be inaccurate or incomplete.
  • Deletion: allows data to be deleted and no longer processed by GOLDNRIFF unless there is a legal obligation to retain them and/or other legitimate reasons for their processing by GOLDNRIFF according to current regulations.
  • Limitation: under legally established conditions, allows data processing to be paused, so that GOLDNRIFF avoids processing them in the future, and will only retain them for the exercise or defense of claims.
  • Opposition: allows the data subject, in certain circumstances and for reasons related to their particular situation, to object to the processing of their data. GOLDNRIFF will stop processing the data unless for legal reasons or the exercise or defense of possible claims.
  • Portability: allows the data subject to receive their personal data and be able to transmit them directly to another controller in a structured, commonly used, and machine-readable format. To exercise this right, it will be necessary for the data subject to provide a valid email address.

GOLDNRIFF guarantees the adoption of the necessary measures to ensure the exercise of these rights free of charge; the request must be addressed to GOLDNRIFF as the file controller, at the postal or electronic address indicated in the "Data Controller" section of this Privacy Policy, indicating the reference "Data Protection".

As these are highly personal rights, the request must include: Name, surname, request in which the request is specified, address for notifications and/or email address. GOLDNRIFF may request your National Identity Document in case of reasonable doubts in verifying your identity. If you are not satisfied with GOLDNRIFF's response to the exercise of your rights, you have the right to complain to the Supervisory Authority (Spanish Data Protection Agency) for the protection of these rights.

Data Retention

GOLDNRIFF informs you that it will process and store your data as long as necessary to use them according to the purpose and legal basis for which they were collected, and as long as you do not oppose or expressly revoke your consent if this was the legal basis.

We will also process your data to comply with the requirements of applicable law, prevent illegal actions, resolve disputes, solve problems, execute our contract, and other actions permitted by law, such as the formulation, exercise, or defense of claims. Once the legal prescription periods have expired, according to applicable commercial and fiscal regulations, we will delete and/or block them according to our data retention and deletion policy.

Data processed for selection processes will be processed as long as necessary according to the purpose and legal basis for which they were collected and the data subject does not oppose or expressly revoke their consent if this was the legal basis. GOLDNRIFF will process and store the data you provide unless you revoke your consent or oppose such processing, only for the duration of the selection process for which you submitted your application, destroying them when GOLDNRIFF informs you that your application has been rejected, unless in such communication you are requested to retain them for other selection processes that are deemed appropriate.

According to industry standards, GOLDNRIFF informs you that it maintains technical and organizational measures against accidental or unlawful destruction, loss, or accidental alteration, unauthorized disclosure or access, and other illegal forms or procedures. In this regard, GOLDNRIFF will adopt the appropriate security measures to prevent the alteration, loss, processing, or unauthorized access to your data. Likewise, it will inform those who have access to your data about their security, confidentiality, and duty of secrecy obligations.