PRIVACY POLICY

In this Privacy Policy you will find all the relevant information that applies to the use we make of the personal data of our clients and users, regardless of the channel or medium (online or in person) of CRU in Spain that you use to interact with us. We are transparent about what we do with your personal data, so that you understand the implications of the uses we carry out or the rights you have in relation to your data, we permanently make all the information in this Privacy Policy available to you. that you can consult whenever you deem appropriate.

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The person responsible for processing your data is: CRU BARF, SCP, CIF: J-67392969

  • Email to exercise rights provided for in section 6: protecciondedatos@crubarf.com

2. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on the products, services or functionalities that you want to enjoy at any given time, we will need to process some data or others, which in general will be, depending on the case, the following:

  • your identifying data (for example, your name, surname, address, language and country from which you interact with us, contact information, etc.);
  • economic and transactional information (for example, your payment or card information, information about your purchases, orders, returns, etc.);
  • connection, geolocation and navigation data (in case you interact with us from your mobile, for example);
  • commercial and promotional information,
  • data about your tastes and preferences.

Remember that, when we ask you to fill in your personal data to give you access to any CRU functionality, product or service, we will mark some fields as mandatory, since they are data that we need to be able to provide you with the product, service or give you access to the functionality in question. Please note that if you decide not to provide us with this data, you may not be able to complete your registration as a user or you may not be able to enjoy those products, services or functionalities. Depending on how you interact with CRU, we will process your personal data for the following purposes: To manage your registration as a CRU user : In case you decide to register as a user at www.crubarf.com, we need to process your data to identify you as a user of it and give you access to its different functionalities, products and services that They are available to you as a registered user. You can cancel your registered user account by contacting us through Customer Service. CRU uses your personal data for the development, fulfillment and execution of the sales contract or services that you have contracted with CRU. This purpose mainly involves:

  • Contact you regarding updates or informative communications related to the contracted functionalities, products or services, including sending quality surveys about the products or services provided.
  • Manage payment for the products you purchase.
  • Manage the shipping of your products.
  • Activate the necessary mechanisms in order to prevent potential fraud against you and against Us during the purchase process. If we consider that the operation may be fraudulent, this processing may result in the blocking of the transaction.
  • Manage possible returns once you have made a purchase and manage requests for information about product availability.
  • For billing purposes and to make available to you the tickets and invoices for purchases you have made on www.crubarf.com

To respond to the requests or requests you make through the Customer Service channels We only process the personal data that is strictly necessary to manage or resolve your request or request. For marketing purposes This purpose includes the processing of your data to, mainly:

  • To the extent that you subscribe to our Newsletter, we will process your personal data to manage your subscription, including sending personalized information about our products or services via email.
  • Carry out promotional actions (for example, to develop contests or send your list of saved articles to the email address you indicate). By participating in any promotional action, you authorize us to process the data you provide us based on each promotional action and we can communicate it through various means such as social networks (Facebook, Instagram, YouTube, LinkedIn, Pinterest...) or on the website itself. In each promotional action in which you participate, you will have available the legal bases where we will provide you with more detailed information about the processing of your data.
  • Disseminate photographs or images that you have shared publicly on the web or through our social media channels, as long as you give us your consent to do so.

Usability and quality analysis to improve our services If you access our website, we inform you that we will process your browsing data for analytical and statistical purposes, that is, to understand the way in which users interact with our website and thus being able to introduce improvements in it. Likewise, sometimes we carry out quality actions and surveys aimed at knowing the degree of satisfaction of our clients and users and detecting those areas in which we can improve.

3. WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA?

The legal basis that allows us to process your personal data also depends on the purpose for which we process it: Manage your registration as a CRU user The processing of your data is necessary for the execution of the terms that regulate the use of the website. In other words, in order for you to register as a user on the website, we need to process your personal data, since otherwise we would not be able to manage your registration. In the event that you choose to use access or login through a social network, the reason why we are entitled to process your data is the consent you give when authorizing the transfer of your data from the social network. Development, compliance and execution of the sales or services contract The processing of your data is necessary for the execution of the sales or services contract that links us to you. It is possible that some data processing associated with the purchase process is activated only because you request it or authorize us, such as the storage of payment data (card) for future purchases or the data processing necessary to inform you of the availability of our products. In these cases, the basis on which we process your data is your own consent. Customer Service We consider that we have a legitimate interest to respond to the requests or queries that you submit to us through the various existing means of contact. We understand that the processing of this data is also beneficial for you as it allows us to serve you appropriately and resolve any queries raised. When you contact us, in particular, to manage incidents related to your order or the product/service acquired through the provision of services, the processing is necessary for the execution of the purchase and sale contract. When your query is related to the exercise of the rights about which we inform you below, or to claims related to our products or services, what legitimizes us to process your data is compliance with legal obligations on our part. Marketing The legitimate basis for processing your data for marketing purposes is the consent you give us, for example, when you agree to receive personalized information through various means (for example, Newsletter) or when you accept the legal bases to participate in a promotional action. or to publish your photographs on the web or on our social media channels. To show you personalized information, we consider that we have a legitimate interest to carry out profiling with the information we have about you (such as your browsing, preferences or purchase history) and the personal data that you have provided us such as age range or language, since we understand that the processing of this data is also beneficial for you because it allows you to improve your experience as a user and access information according to your preferences. Usability and quality analysis We consider that we have a legitimate interest in analyzing the degree of user satisfaction since we understand that the processing of this data is also beneficial for you because the purpose is to improve the user experience and offer a better service. quality.

4. HOW LONG WILL WE KEEP YOUR DATA?

 The period of conservation of your data will depend on the purposes for which we process it, as explained below: Manage your registration as a user of the website We will process your data for as long as you maintain the status of registered user (that is, until you decide to unsubscribe). Development, compliance and execution of the purchase and sale contract or services We will process your data for the time necessary to manage the purchase of the products or services you have purchased, including possible returns, complaints or claims associated with the purchase of the particular product or service. On some occasions, we will only process the data until the time you decide, as is the case with payment (card) data that you have asked us to store for possible future purchases. Customer Service We will process your data for as long as necessary to respond to your request or request. Marketing We will process your data until you unsubscribe or cancel your subscription to the Newsletter. If you participate in promotional actions, we will keep your data for a period of six (6) months from the end of the action. Usability and quality analysis We will process your data promptly during the time in which we proceed to carry out a specific quality action or survey or until we anonymize your browsing data. Regardless of whether we process your data for the time strictly necessary to fulfill the corresponding purpose, we will subsequently keep it duly stored and protected for the time in which responsibilities arising from the processing may arise, in compliance with the regulations in force at all times. Once the possible actions are prescribed in each case, we will proceed to delete the personal data.

5. WILL WE SHARE YOUR DATA WITH THIRD PARTIES?

To fulfill the purposes indicated in this Privacy Policy, it is necessary that we give access to your personal data to third parties that provide us with support in the services we offer you, namely:

  • financial entities,
  • fraud detection and prevention entities,
  • technological service providers,
  • suppliers and collaborators of logistics, transportation and delivery services,
  • service providers related to customer service,
  • suppliers and collaborators of services related to marketing and advertising.

For the efficiency of the services, some of the aforementioned providers are in territories located outside the European economic area, such as the United States. In such cases, we inform you that we transfer your data with adequate guarantees and always maintaining the security of your data.

6. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

We are committed to respecting the confidentiality of your personal data and guaranteeing the exercise of your rights. You can exercise your rights free of charge by writing us an email to a single email address protecciondedatos@crubarf.com, simply indicating the reason for your request and the right you want to exercise. If we consider it necessary to identify you, we may request a copy of a document proving your identity. We remind you that regardless of the purpose or legal basis under which we process your personal data, the rights that you can exercise are those provided for in the General Data Protection Regulation, specifically: right of access, rectification, deletion, limitation, opposition, portability, and/or not to be subject to automated individualized decisions. Finally, we inform you of your right to file a claim with the relevant data protection supervisory authority, in particular, with: - the Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD /index-ides-idphp.php)

7. WHAT HAPPENS IF YOU PROVIDE US WITH THIRD PARTY DATA?

We offer functionalities or services that require us to process the personal data of a third party that you provide us, such as in the case of activating and sending the Gift Card or managing the Gift Ticket request. If you provide us with Personal Data of third parties, you guarantee that you have informed them about the purposes and the way in which we need to process their personal data.

8. CHANGES TO THE PRIVACY POLICY

 We may modify the information contained in this Privacy Policy from time to time as we deem appropriate. If we do so, we will notify you in different ways through the website (for example, through a banner, a pop-up), or we will even communicate it to your email address when the change in question is significant for your privacy, so that you can review the changes, evaluate them and, where appropriate, oppose or unsubscribe from any service or functionality. In any case, we suggest that you review this Privacy Policy from time to time in case there are minor changes or we introduce any interactive improvements, taking advantage of the fact that you will always find it as a permanent point of information on our Website.

In Barcelona, ​​March 1, 2019