WE RECOMMEND THAT YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING YOUR PERSONAL DATA AND GIVING CONSENT FOR ITS PROCESSING.

1.- Who is responsible for the processing of your data?

Identity: BRUGANOLA SL

CIF: B04961744

Email: hello@crvsh.es

2.- What data of yours do we process?

2.1.- Data that has been provided to us when you registered in the online store (www.crvsh.es) and that corresponds to the following personal data: email, mobile phone, landline, name, surname, date of birth, address, postal code, town, province, sex and nationality.

2.2.- Request for Newsletters, and which correspond to the following personal data: email and date of birth.

2.3.- Customer Service and which correspond to the following personal data: email and mobile phone number.

2.4.- Data that has been provided to us when you registered in the physical store and that corresponds to the following personal data: name, surname, address, date of birth, email and mobile phone.

Please note that if you decide not to provide us with this information, you may not be able to complete your user registration or enjoy the requested service.

3.- For what purpose do we process your personal data and what is the legal basis?

We process your data for the following purposes, legal basis and retention periods, described below:

3.1 Online store customer registration.

Purpose: The main purpose is to manage your registration as a user of the online store, for the development, fulfillment and execution of the sales contract. The accessory purpose is profiling and marketing.

Legal basis: Main purpose (the Contract) and accessory purpose (legitimate interest).

Retention periods: The personal data you provide will be retained for a period of 6 years from the last purchase made, keeping them blocked until any liability actions expire.

3.2 Newsletter.

Purpose: The main purpose is to send personalized electronic communications about our products, via email. The accessory purpose is profiling and marketing.

Legal basis: Main purpose (consent) and accessory purpose (legitimate interest).

Retention periods: The personal data provided will be retained as long as you do not request your withdrawal, since until that time we will understand that you are still interested in receiving our communications.

Regarding profiling and marketing, we consider that we have a legitimate interest in profiling the information we have about you (such as your browsing habits and/or purchase history) and the personal data you have provided to us, since we understand that the processing of this data is also beneficial to you because it allows you to improve your user experience and access information according to your preferences. To this end, CRVSH has considered the interests and rights of the interested parties, and the measures adopted by the controller to comply with its general obligations in terms of proportionality and transparency, and has concluded that:

1.- the impact on people's fundamental rights and public freedoms is reduced;

2.- such treatment can be reasonably foreseen by the interested party;

3.- The processing of data for the above purposes does not give rise to exclusion, discrimination, defamation, or situations that put the interested party's reputation and/or bargaining power at risk.

3.3 Customer Service.

Purpose: The purpose is to manage or resolve your request or petition.

Legal basis: Contract and legitimate interest.

Retention periods: We will process your data for as long as necessary to respond to your request or petition, keeping it blocked until any liability actions expire.

3.4 Physical store customer registration.

Purpose: The main purpose (Sending by any means of remote electronic communication, personalized commercial communications from CRVSH: Newsletter, advertising information and brand news, exclusive promotions and offers, invitations to exclusive events, contests and raffles). The accessory purpose is the creation of profiles and marketing.

Legal basis: Main purpose (consent) and accessory purpose (legitimate interest).

Retention periods: The personal data you provide will be retained as long as you do not request your withdrawal, since until that time we will understand that you are still interested in receiving our communications.

3.5 Acceptance of Cookies on the www.crvsh.es websites. You will find additional information in our Cookies Policy.

4.- Who is the recipient of your data?

The personal data processed are only communicated to third parties in compliance with legal obligations.

To exercise these rights before the Data Controller, you can send an email to the following address: hello@crvsh.es.

You can also file a complaint with the Spanish Data Protection Agency, especially when you are not satisfied with the exercise of your rights. For more details, see the website https://www.agpd.es

4.2 Data Processors. Poete will collaborate with third-party service providers who may have access to your personal data and who will process the aforementioned data on behalf of and on behalf of the Company, as a result of their provision of services. Poete follows strict criteria for selecting service providers in order to comply with its obligations regarding data protection, and undertakes to sign the corresponding data processing contract with them.

Specifically, Poete will contract the provision of services by third-party providers who carry out their activity, by way of example and not limitation, in the following sectors: logistics services, legal advice, supplier approval, multidisciplinary professional services companies, maintenance-related companies, technology service provider companies, computer service provider companies, physical security companies, instant messaging service providers, infrastructure management and maintenance companies and call center service companies.

5.- What are your rights when you provide us with your data?

Your rights to the processing of personal data in relation to CRVSH are:

• Right to request access to your personal data
• Right to request rectification or deletion
• Right to request limitation of your treatment
• Right to object to processing
• Right to data portability
• Right not to be subject to automated decisions, including profiling

6.- What does the right of access consist of?

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed and the following information: the purposes of the processing; the categories of data being processed; the recipients or categories of recipients to whom the data have been or will be disclosed; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.

In these cases, we will provide you with a copy of the personal data being processed. In addition, when you request it by electronic means, the information will be provided in a commonly used electronic format.

You may exercise this right every six months, unless there is legitimate cause to request it, more than once, in said six-month period and we will inform you about the actions arising from your request within one month.

To exercise the right of access , send an email to: hello@crvsh.es

7.- What does the right of rectification consist of?

You will have the right to obtain rectification of inaccurate personal data concerning you. To do so, you must provide, where necessary, supporting documentation proving the inaccuracy or incompleteness of the data being processed.

To exercise the right of rectification , send an email to: hello@crvsh.es

8.- What does the right to erasure consist of? You have the right to obtain the erasure of personal data concerning you when one of the following circumstances occurs: they are not necessary in relation to the purposes for which they were collected or processed; you withdraw your consent and the processing is not based on another legal basis; you oppose the processing and no other legitimate reasons for the processing prevail; they have been processed unlawfully.

To exercise the right of deletion send an email to: hello@crvsh.es

9.- What does the right to restriction of processing consist of?

You will have the right to obtain restriction of data processing when any of the following conditions are met:

a. when you have contested the accuracy of your personal data, for the period that enables the data controller to verify the accuracy of the same;

b. if you consider that the processing is unlawful and the data controller has opposed the deletion of the personal data and you request instead the restriction of its use;

c. the data controller no longer needs the personal data for the purposes of the processing, but you need them for the formulation, exercise or defence of legal claims;

d. in the event that you have objected to the processing, while it is being verified whether the legitimate reasons of the person responsible for the file prevail over yours.

When you have obtained the limitation of the treatment in accordance with this section, you will be informed by the person responsible for the file.

To exercise the right to limit processing , send an email to: hello@crvsh.es

10.- What is the right to data portability?

You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used and machine-readable format, and to transmit it to another data controller when: the processing is based on consent, and is carried out by automated means.

When exercising your right to data portability, you will have the right to have personal data transmitted directly from controller to controller where technically feasible.

The right to portability shall not extend to data that the data controller has inferred from data that is derived directly from the use by said controller of the services provided.

To exercise the right of portability , send an email to: hello@crvsh.es

11.- What does the right of opposition consist of?

You have the right to object to the processing of data concerning you at any time. If you exercise this right, the data controller will stop processing your personal data, unless we demonstrate compelling legitimate reasons for the processing to prevail over your interests, rights and freedoms, or for the formulation, exercise or defence of legal claims.

To exercise the right of opposition , send an email to: hello@crvsh.es

12.- What is the right not to be subject to automated decisions, including profiling? You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or affects you in a similar way; unless:

-such decision is necessary for the conclusion or execution of a contract,

- is authorized by law or

- is based on consent.

To exercise your right not to be subject to automated decisions , send an email to: hello@crvsh.es

Additionally, we inform you that you can contact the Spanish Data Protection Agency to obtain additional information about your rights.

We also inform you, in the event that consent has been granted for a specific purpose, that you have the right to withdraw consent at any time, without affecting the legality of the processing based on consent prior to its withdrawal.

We also inform you that you can contact the DPD to make any claim regarding data protection, or, where appropriate, file a claim with the Control Authority, the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights.

Data Protection Act

In accordance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights. We inform you that the data supplied will become part of the "Web Contacts" file of BRUGANOLA SL, expressly authorizing that they be processed to address your request and / or query. Likewise, you are informed of the possibility of exercising your rights of access, rectification, cancellation and opposition (provided for in articles 15, 16 and 17 of the LOPD, as well as in articles 23 to 36 both inclusive of RD 1720/2007 of December 21) by means of communication to the following email address hello@crvsh.es. Also by letter addressed to the address indicated above.