At Contador & Basso Group, S.L. (hereinafter, the “Controller” or “AURUM”) we want to provide you with some details about how we process the personal data provided through our Website. In this regard, this Privacy Policy applies to everyone who provides us or has provided their personal data by any means, either through the submission of applications, contact information, or through other means related with our Website.
Here, we inform you about our Privacy Policy, taking into account that for us, guaranteeing the privacy of the personal data of our users is an essential value. Following the provisions of both the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) and the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, this is the basic information on the processing of your data and, below, you will find the developed information:
- Basic Information on how we process your data
| Data Controller | Name: Contador & Basso Group, S.L.Calle Milanos 8 – 28320, Pinto, Madrid. NIF: B-88553292 |
| Purposes of the processing | We use your data to:
|
| Legitimacy | Depending on the way in which you interact with us, the lawfulness of the processing will be based on:
|
| Recipients of the data – international transfers | Your personal data may be disclosed to public authorities in case of AURUM’s legal obligation or under request by such authorities. On the other hand, your personal data may be accessed by the provider that manages the website, when this is necessary for the provision of its services and the maintenance or improvement of the same. In connection with the purchase of our products, a series of communications of your personal data must necessarily take place:
Finally, we inform you that these communications may involve the transfer of data to third countries, which may or may not offer a guarantee of protection equivalent to that guaranteed in the European Union. However, we inform you that we have signed with them the corresponding document regulating this access to data, which regulates the taking of enough security measures to guarantee your right to the protection of personal data. |
| Data retention period |
After such period, data will be kept duly blocked for the legally established period to defend AURUM’s interests in the event of claims or legal obligations. |
| Data subject’s rights | Users may exercise their rights of access, rectification, erasure, portability, limitation and objection, as well as not being subject to decisions based solely on the automated processing of their data, where appropriate, through the email address lpd@aurumbikes.com, or through the postal address indicated above. You can also exercise these rights before the entities that receive your personal data, by sending a communication to the addresses provided by them. |
| Data protection authority | In case that the user does not agree with the processing that AURUM has carried out on his/her data, or its response of request of data protection rights, he/she can file a complaint with the Spanish Data Protection Agency. |
The data that you decide to provide us (in the past or in the future) through any of the enabled means, you provide them freely and you accept that these personal data are subject to the corresponding processing in each case, depending on the purpose for which you have provided them to us.
In accordance with the provisions of the GDPR, below we provide you with the information regarding the processing of your data that we will carry out more extensively, so that you have all the necessary information regarding the processing of your data. It is therefore essential that you carefully read the information below.
- What do we process your data for?
We use the personal data you provide in the forms provided for this purpose to manage the services we offer and to be able to respond to the queries you submit to us. These data allow us to maintain the relationship with users.
The data you provide when browsing our website are processed to optimize the performance of the same, ensure proper use including security assessment and optimize the connection.
We will also send you information about our products and services if there is a contractual relationship or if you give us your consent to do so. If you do not want to receive any information about our services or at any time you want to stop receiving it, please let us know by sending an email to lpd@aurumbikes.com.
- Why do we process your data?
The lawfulness’ basis of the processing of your data is will depend on the role you have and the way you interact with us, being a customer, user of our services, a representative of a supplier, etc. In any of these cases, we use your data:
- For the management of the requests made and, where appropriate, the corresponding online purchases made including the management of shipments and returns of the products, the legitimate basis is the execution of a contract or pre-contractual measures, as provided in paragraph b) of point 1 of Article 6 of RGPD.
- You have expressly, freely and unequivocally given us your consent to use your data for a specific purpose, by expressly ticking a consent box when filling a form, in accordance with the provisions of Article 6.1.a) GDPR. This will be used to send commercial communications about news or other offers.
- For legitimate interest, for the management of the company and our services, arising from all kinds of security reasons, improvement of our services, management of information requests, complaints and fraud management, of the responsible or a third party without jeopardizing the interests, rights or fundamental freedoms of the data subject, in accordance with the provisions of Article 6.1.f) RGPD.
The data we request are adequate, relevant and strictly necessary to carry out the purposes described. For your part, you must guarantee the authenticity, accuracy and veracity of all the information you provide us, committing to keep the data updated so that they respond, at all times, to your actual situation.
- Who do we share your information with?
Your personal data may be disclosed to public authorities in the event that we have to comply with a legal obligation or receive a request from such authorities.
On the other hand, it is possible that the provider that manages our website may, at some point access the information extracted of your browsing on it, when this is necessary for the provision of its services and the maintenance or improvement of the same.
In connection with the purchase of our products, a series of communications of your personal data must necessarily take place:
- First, your data will be communicated to the entity through which the payment is managed:
- In case it is made by bank transfer, the bank through which the money is deposited, in case it is in a third country outside the European Union, must communicate your data to the bank through which AURUM operates to make the payment effective.
- The data shall also be communicated to PayPal in case the payment is made through this system.
- They will also be communicated to the Santander Group, as necessary to allow payment through the Redsys platform, in the event of payment by credit/debit card.
- Finally, in case of financing the payment with Banco Cetelem, your data must also be communicated to this entity, as necessary to allow the financing of the payment.
- On the other hand, we will communicate your data to the entities that are in charge of the courier, shipping and logistics of our Products, so that you can receive the product at the address where you indicate us.
We also inform you that the above data communications may involve the transfer of data to third countries, which may or may not offer a guarantee of protection equivalent to that guaranteed by us.
However, we would like to inform you that we have formalized with all these third parties the corresponding document regulating this access to data, which regulates the warrant of offering enough security measures to guarantee your right to the protection of personal data. In any case, we remain at your disposal to clarify any questions regarding the processing of your data by us or by these third parties.
- How long do we retain your data?
We will retain the data for as long as necessary to fulfill the purpose for which they were collected, to ensure the provision of the service and to comply with our legal obligations, or until you withdraw your consent. After this moment, we will keep them properly blocked for the time necessary to respond to future claims and defend our interests, and then we will delete them.
You may unsubscribe from the newsletter, if you have subscribed to it, at any time through the link provided for this purpose in the newsletter itself, or by sending an email to lpd@aurumbikes.com.
- How do we secure your information?
In compliance with the GDPR, our obligation to keep the secrecy of the collection and handling of your personal data, as well as our duty to safeguard them, we engage the necessary technical and organizational security measures to avoid its modification, alteration, loss, processing or authorized access.
AURUM guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the Spanish Data Protection Law in order to protect the rights and freedoms of users and has provided them with the appropriate information so that they can exercise them.
At AURUM we recognize and take our responsibility very seriously when it comes to protecting your personal data. That is why we maintain security levels of personal data protection according to GDPR, for which we have established all the technical and organizational means at our disposal to prevent the loss, misuse, alteration, unauthorized access and theft of the data that you have provided, however, please be advised that there are no security measures on the Internet that are unwavering.
- How can you control the management of your data?
Again, we remind you that you can exercise your rights of access, rectification, erasure and objection as well as limitations and portability, in any of the addresses that we have given you at the beginning or at the email lpd@aurumbikes.com, indicating your query.
The exercise of all here contained rights is free, and to provide this policy with greater transparency, we offer you more information about these rights:
| Right | Content |
| Access | You can request information about what data we process about you, either by referring to the totality of the information or to specific data. |
| Rectification | One of the principles of the applicable regulations is the accuracy of the data, so you can request its rectification at any time, in order to keep them properly updated. |
| Erasure | You can request the erasure of personal data, which will also be deleted if they are no longer necessary for the purpose for which they were collected or when you exercise your right to object to them. Except if they are necessary for compliance with a legal obligation, public interest, or for the exercise or defense of possible claims. The consequence of the deletion of the data will be the impossibility of the correct provision of services by AURUM. |
| Objection | In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. AURUM will stop processing the data, except for compelling legitimate reasons, for the exercise or defense of possible claims, or to comply with our legal obligations. |
| Restriction of the processing | In certain circumstances, as if you dispute the accuracy of your data, you may request that we restrict the processing of your personal data in which case we will only keep them to comply with our legal obligations. |
| Data portability | If applicable, you can request the portability of your data in electronic format. |
| Withdraw of the consent | You can withdraw your approval at any time without this affecting the lawfulness of any processing already carried out. However, please bear in mind that if you withdraw your consent we will no longer be able to provide relevant services. Nevertheless, we will keep processing your data in any situation under which we can demonstrate compelling legitimate grounds to do so. |
You may also exercise your rights before the entities that receive your personal data of which we have previously informed you, by communicating directly with those entities.
Likewise, be advised that you can submit before the Spanish Data Protection Agency any claim regarding your personal data processing www.aepd.es. In any case, due to our strong commitment to privacy, we invite you to contact us directly to resolve any issue related to your personal data; we will be happy to help you.
- Amendments to our Privacy Policy
AURUM reserves the right to modify this policy to adapt it to future legislative or jurisprudential developments, as well as industry practices, previously informing users through our Website; thus, we advise you to frequently review the relevant policy. You can see at the bottom of this document the last update.
The new privacy policy will be effective from the moment of its publication. If you do not accept the modifications of the new policy, you can exercise any of the abovementioned rights or stop using our service. The use of our services after the publications of the relevant amendments will implies the agreement of the same.
This amendment does not affect the legal basis of the processing of your data. If we would like to use your data in a different way to the one established at the time of collection, we will notify you by email, requesting your explicit approval.
Likewise, AURUM reserves the right to terminate the services provided by those users who do not comply with the terms and legal conditions of use, as well as with current legislation.
Last update on January 2024.
