At Contador & Basso Group, S.L. (hereinafter, the “Controller” or “AURUM”) we want to provide you with some details about how we process the personal data provided through our Website. In this regard, this Privacy Policy applies to everyone who provides us or has provided their personal data by any means, either through the submission of applications, contact information, or through other means related with our Website.

Here, we inform you about our Privacy Policy, taking into account that for us, guaranteeing the privacy of the personal data of our users is an essential value. Following the provisions of both the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) and the Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, you can find here all the information regarding your data processing:  

1. Data Controller

• Name: Contador & Basso Group, S.L.
• Registered office: Calle Milanos 8– 28320, Pinto, Madrid.
• Tax Identification Number (NIF): B-88553292
• Contact email: lpd@aurumbikes.com

 

2. Purposes of the Processing

Here, we outline the purposes for which your personal data may be processed:

• To formalize and maintain the commercial relationship with our clients and users for the provision of our services and the sale of our products.
• To manage inquiries and requests for information submitted through the designated forms or the contact channels available on the website.
• To manage, administer, provide, and improve our services, as well as to maintain and enhance our website.
• To send newsletters from AURUM or companies related to us, containing information about our news, services, or those of entities within our business group.
• To communicate for administrative purposes or internal organizational matters with other companies within our business group. For clarification, such companies may include: Hayf Sports, S.L., Alberto Contador’s Cycling Sports Club, Alberto Contador’s Fundation, SCIO Procycling, S.L., as well as any other entities majority-owned by them.

3. Legitimacy

Depending on the way in which you interact with us, the lawfulness of the processing will be based on:

1. Regarding the formalization and maintenance of our contractual or commercial relationship, the legal basis for processing the data is the necessity of such processing for the performance of a contract, or in order to take steps prior to entering into a contract (Article 6.1(b) of the GDPR).
2. In all other cases, we will process your personal data only if you have given your express, free, and unambiguous consent to do so for a specific purpose, by explicitly checking a consent box when completing a form, in accordance with Article 6.1(a) of the GDPR.
3. Based on AURUM’s legitimate interest, in relation to communications with other companies within its corporate group for purely administrative, internal management, or financial purposes, pursuant to Article 6.1(f) of the GDPR and Article 19 of the Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

The data we request are appropriate, relevant, and strictly necessary to fulfill the purposes described. You are responsible for ensuring the authenticity, accuracy, and truthfulness of all the information you provide to us, and you agree to keep your data up to date so that it reflects your actual situation at all times.

4. Who do we share your information with?

Your personal data may be disclosed to public authorities in the event that we have to comply with a legal obligation or receive a request from such authorities.

On the other hand, it is possible that the provider that manages our website may, at some point access the information extracted of your browsing on it, when this is necessary for the provision of its services and the maintenance or improvement of the same.

Furthermore, we may share your data with the companies related to us, as previously mentioned, for the administrative and financial management of AURUM and other associated entities, or for sending newsletters if you have expressly consented to it.

In relation to the purchase of our products, the following communications of your personal data will necessarily occur:

• Firstly, your data will be shared with the entity through which the payment is processed:
  • If the payment is made by bank transfer, the bank through which the payment is made, and if it is located in a third country outside the European Union, it will need to communicate your data to the bank through which AURUM operates to complete the payment.

• Your data will also be communicated to PayPal if the payment is made through this system.

• • Your data will be communicated to the Santander Group, as necessary, to enable payment via the Redsys platform, in case the payment is made by credit/debit card.
  • Lastly, if the payment is financed with Banco Cetelem, your data will also need to be communicated to this entity to enable the financing of the payment.
• Additionally, we will share your data with the entities responsible for messaging, shipping, and logistics of our products, so that you can receive the product at the address you provide.

We also inform you that the aforementioned data communications may involve the transfer of data to third countries, which may or may not offer a level of protection equivalent to the one guaranteed by us. However, we would like to inform you that we have signed the corresponding agreement with all these third parties, regulating their access to data and ensuring that sufficient security measures are in place to protect your personal data. In any case, we remain available to clarify any doubts you may have regarding the processing of your data by us or by these third parties. 

5. How long do we retain your data for?

We will retain the data for as long as necessary to fulfill the purpose for which they were collected, to ensure the provision of the service and to comply with our legal obligations, or until you withdraw your consent. After this moment, we will keep them properly blocked for the time necessary to respond to future claims and defend our interests, and then we will delete them.

You may unsubscribe from the newsletter, if you have subscribed to it, at any time through the link provided for this purpose in the newsletter itself, or by sending an email to lpd@aurumbikes.com.

6. How do we secure your information?

In compliance with the GDPR, our obligation to keep the secrecy of the collection and handling of your personal data, as well as our duty to safeguard them, we engage the necessary technical and organizational security measures to avoid its modification, alteration, loss, processing or authorized access.

AURUM guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the Spanish Data Protection Law in order to protect the rights and freedoms of users and has provided them with the appropriate information so that they can exercise them.

At AURUM we recognize and take our responsibility very seriously when it comes to protecting your personal data. That is why we maintain security levels of personal data protection according to GDPR, for which we have established all the technical and organizational means at our disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the data that you have provided, however, please be advised that there are no security measures on the Internet that are unwavering.

7. How can you control the management of your data?

Again, we remind you that you can exercise your rights of access, rectification, erasure and objection as well as limitations and portability, in any of the addresses that we have given you at the beginning or at the email lpd@aurumbikes.com, indicating your query.

 

The exercise of all here contained rights is free, and to provide this policy with greater transparency, we offer you more information about these rights:

Right	Content
Access	You can request information about what data we process about you, either by referring to the totality of the information or to specific data.
Rectification	One of the principles of the applicable regulations is the accuracy of the data, so you can request its rectification at any time, in order to keep them properly updated.
Erasure	You can request the erasure of personal data, which will also be deleted if they are no longer necessary for the purpose for which they were collected or when you exercise your right to object to them. Except if they are necessary for compliance with a legal obligation, public interest, or for the exercise or defense of possible claims. The consequence of the deletion of the data will be the impossibility of the correct provision of services by AURUM.
Objection	In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. AURUM will stop processing the data, except for compelling legitimate reasons, for the exercise or defense of possible claims, or to comply with our legal obligations.
Restriction of the processing	In certain circumstances, as if you dispute the accuracy of your data, you may request that we restrict the processing of your personal data in which case we will only keep them to comply with our legal obligations.
Data portability	If applicable, you can request the portability of your data in electronic format.
Withdraw of the consent	You can withdraw your approval at any time without this affecting the lawfulness of any processing already carried out. However, please bear in mind that if you withdraw your consent we will no longer be able to provide relevant services. Nevertheless, we will keep processing your data in any situation under which we can demonstrate compelling legitimate grounds to do so.

 

You may also exercise your rights before the entities that receive your personal data of which we have previously informed you, by communicating directly with those entities.

Likewise, be advised that you can submit before the Spanish Data Protection Agency any claim regarding your personal data processing www.aepd.es. In any case, due to our strong commitment to privacy, we invite you to contact us directly to resolve any issue related to your personal data; we will be happy to help you. 

8. Amendments to our Privacy Policy

AURUM reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments, as well as industry practices, previously informing users through our Website; thus, we advise you to frequently review the relevant policy. You can see at the bottom of this document the last update.

The new privacy policy will be effective from the moment of its publication. If you do not accept the modifications of the new policy, you can exercise any of the abovementioned rights or stop using our service. The use of our services after the publications of the relevant amendments will implies the agreement of the same.

This amendment does not affect the legal basis of the processing of your data. If we would like to use your data in a different way to the one established at the time of collection, we will notify you by email, requesting your explicit approval.

Likewise, AURUM reserves the right to terminate the services provided by those users who do not comply with the terms and legal conditions of use, as well as with current legislation.

Last update on April 2025.