Privacy Policy - Areas

1. Introduction

This Privacy Policy (the “Policy“) describes how ÁREAS,S.A.U. (“ÁREAS” or “We”) collects, uses, stores, shares, and protects the personal information derived from the use made by the user of the domain https://es.areas.com (the “Website”), as well as of any specific services offered through the Website and, as the case may be, in our commercial establishments (the “Services“).

For the purposes of this Policy, the user of the Website and the user or customer of the various AREAS establishments shall be indistinctly referred to as the “User” and jointly as the “Users“.

2. Who is the Data Controller for the processing of your personal data?

Any personal data that ÁREAS may obtain from use of the Website and, as the case may be, as a result of the provision and acquisition of the Services, will be processed by ÁREAS, with registered office in C/ Gaspar Fàbregas i Roses 81, 2da planta, Joan, 08950, Esplugues de Llobregat, Barcelona, whose data protection officer can be contacted at gdpr-contact@areas.com.

Personal data processing is governed by this Policy. All the terms included in the Policy will have the meaning established in the Terms and Conditions (which can be viewed at this linka>), unless they are expressly defined in this Policy.

3. What are the purposes for which we process your data?

Personal data will be collected and process through the Website and, as the case may be, through the marketing of products and services carried out in the AREAS establishments and through the distance channels provided for that purpose for the following purposes:

To manage the development and compliance of our contractual relationship with the User, all in accordance with the Terms and Conditions and with any other terms and conditions that may be applicable.
To answer and manager User queries regarding the Services and/or the Website, as well as the potential claims that the User may file before ÁREAS.
To review and improve our Services and/or Website by means of research, statistics, polls, policy improvement, and market trend surveys, quality studies, among others.

Also, and only if the User allows it in each case, we will process their data for the following additional purposes:

At their request, to send you advertising or commercial information, even by electronic means, regarding the ÁREAS products and services that may be of the User’s interest.
To manage their participation in specific competitions and promotions, as well as their adherence to customer loyalty programs.
To find more about the User’s preferences by assessing their profile, on the bases of their behavior and their use of the Website and navigation, and to create audiences. Please consider that we can carry out these profiling activities by means of cookies, as described in detail in our Cookies Policy.

Your personal data will also be processed when ÁREAS must comply with an applicable obligation, such as those derived from the fiscal and money laundering prevention legislation.

4. What is the legitimate interest of the data processing?

The legal basis for the data processing is the implementation of the Terms and Conditions and, as the case may be, of the contractual relationship maintained with the User, with personal data processing being strictly necessary to use our Services and/or the Website and thus benefit from the services being made available to the User. In those cases in which the User contacts use to make questions or request information, as well as to review and improve our Services and/or the Website, the legal basis is ÁREAS’s legitimate interest.

Regarding the additional purposes, the consent given by the User, who may withdraw it at any time without affecting the provision of the User. Specifically, the User may withdraw their consent at any time by writing to [complete].

Regarding fulfillment of the obligations imposed on ÁREAS, the legal basis is the applicable law (for instance, the communication of personal data to the Spanish tax administration aurhotiry in order to comply with the tax obligations included in the Spanish Act 58/2003 of December 17 on General Taxation; and Spanish Act 35/2006 of November 28 on the Personal Income Tax and on the partial amendment of the Corporation Tax, Non-Resident Income, and Property Taxes, and their respective implementing regulations, and any other applicable regulations).

5. How long do we store personal data?

Your personal data will be processed only for the time that they are necessary, useful, and relevant in accordance with the purposes described in this Policy, as well as during the time required to fulfill the legal and contractual obligations applicable in each case.

Specifically, the personal data required to send you electronic commercial communications will be processed until the User withdraws their consent and, one it has been withdrawn, during the period required to meet any liabilities generated. In any case, when the personal data is not necessary for the purpose for which they were obtained and until they are to be finally canceled, they will be stored in a blocked form.

6. To which recipients will the data be transferred?

ÁREAS may transfer the personal data of the User/customer when required by law, to defend their legitimate rights and interests, and to ÁREAS suppliers in their capacity as data processors as part of the relevant provision of services. It is possible that certain service providers are located outside the European Economic Area. In these cases, ÁREAS will sign the relevant agreements and contracts with the suppliers to ensure that the transfer of your personal data is carried out at all times within a security and protection framework equivalent to that established in the European data protection regulations.

ÁREAS may also assign the personal data to the companies in its business group, should it be necessary for internal administrative management. The legal basis for this transfer is ÁREAS’s legitimate interest in corporate management of the Services provided.

7. What are your rights as Data Subject?

Right	Contents	Customer Service Channels
Access	You may receive confirmation when your personal data is processed, as well as consult your specific personal data being processed.	To exercise your rights, you must send an email to gdpr-contact@areas.com, specifying the right you want to exercise.
Rectification	You may modify your personal data when it is inaccurate, as well as complete those that are incomplete.
Erasure	You may request the erasure of your personal data when, among other reasons, the data is no longer required for the purposes for which it was collected.
Objection	You may request that your personal data not be processed. The data will cease to be processed, except for legitimate imperative reasons or for the exercise or defense of potential claims.
Restriction of processing	Your may request the processing of your data be restricted to the following cases: While the challenge to the accuracy of your data is verified; When the processing is unlawful, when the User opposes the removal of their data and requests limitation of their use; When their data need not be processed, but it is needs for the exercise or defense of claims; When you have opposed the processing of your data for fulfillment of a mission of the public interest or to meet a legitimate interest, while it is verified whether the legitimate interests for the processing prevail over yours.
Portability	You may receive, in an electronic format, the personal data provided and that obtained from your contractual relationship with ÁREAS, as well as transfer them to another entity.
If you believe that your personal data has been processed in accordance with the applicable regulations, you may file a claim with the relevant supervisory, through the website www.agpd.es.

8. Changes in the Privacy Policy

ÁREAS reserves the right to modify this Policy. When significant changes are made in this Policy, the User will be notified via the Website to offer the possibility of reviewing the changes before they are implement.

PRIVACY POLICY – ÁREAS, S.A.U.