PRIVACY POLICY

Personal data is any information relating to an identified or identifiable natural person (e.g., name, email address, postal address, telephone number, tax identification number, etc.). When the User visits the Bernard Rives website, some information is collected automatically for technical reasons (e.g., the IP address assigned by the Internet service provider).

Bernard Rives, as Data Controller, informs Users about the different ways in which personal data is collected and processed through this website or through electronic communications (e.g., emails).

Only the data strictly necessary to provide the requested service, respond to the User's query, or manage other legitimate purposes detailed below will be collected . Under no circumstances will specially protected data be collected without express consent. Furthermore, Bernard Rives will not use the data for purposes other than those expressly described at the time of collection.

2.1. Contact Form / Email Address

• Purpose : To respond to information requests sent by the User through the contact forms available on the website or via the email address provided.
• Legitimation : The User's consent, which is deemed to have been granted by completing and sending the form or email. This consent may be revoked at any time.
• Data transfers : Hosting providers (Data Processors) may be used to host and maintain the website and email, subject to the appropriate contractual and legal guarantees (e.g., standard contractual clauses, confidentiality agreements, etc.).

2.2. Sending commercial information

• Purpose : To send commercial communications and news that may be of interest to the User, provided that the User has authorized it (e.g., newsletter subscription).
• Legitimacy : User consent. You may object or unsubscribe at any time by using the means provided in each communication or by sending a request to [contact email].

2.3. Customer registration/subscription forms

• Purposes :
• Legitimation : The execution of a contract (terms and conditions of sale) or pre-contractual measures (e.g., account creation before purchase).
• Data transfers :

Use of the website : Only those over 14 years of age may provide their personal data through the contact forms or subscribe to newsletters, in compliance with data protection regulations. For those under 14 years of age, the consent of their parents or guardians is required.

Hiring services/purchases : Only those over 18 years of age may make contracts or purchases. In the case of minors, the consent of their parents or guardians is required, unless the minor is legally emancipated.

When the User registers using a specific form, data such as:

• Name and surname
• Email address / phone number
• Postal address
• IP address
• Username and password

The chosen password must meet basic security requirements. It is the User's responsibility to maintain the confidentiality of their password and notify Bernard Rives of any unauthorized use.

Once registered, the User has access to a private dashboard where they can view their details, order history, change their password, and more. They can also receive notifications associated with their account (validation, purchase confirmations, order status, incidents, etc.).
The User can unsubscribe from the newsletter at any time from their dashboard or using the links at the bottom of each communication.

Bernard Rives declares that it has adopted the necessary technical and organizational measures to guarantee the security and integrity of personal data, and to prevent its loss, alteration, and/or unauthorized access, in accordance with current regulations.

Data communications are carried out securely using SSL/TLS encryption protocols (when indicated on the website), ensuring that information transmission is encrypted.

The User undertakes to ensure that all information provided is truthful, accurate, and up-to-date. Bernard Rives is not responsible for any conflicts or disputes arising from the inaccuracy or falsity of the information provided. It is the User's responsibility to notify us of any changes to their information in order to keep it up-to-date.

Bernard Rives will not communicate personal data to third parties, except:

1. Legal obligation : Public bodies (e.g. Tax Agency), banking or judicial entities, labor inspections, etc.
2. Suppliers and data processors : For the provision of essential services (hosting, messaging, payment gateways, etc.), always under confidentiality clauses and compliance with data protection regulations.

The User may object to these transfers by expressly requesting it, although this may make it impossible to provide certain services (for example, shipping an order).

The data protection regulations (GDPR and LOPDGDD) grant interested parties the following rights:

1. Right of Access : To know what personal data is being processed, the purpose and origin of said data, as well as the communications made or planned.
2. Right of Rectification : Request the modification of inaccurate or incomplete data.
3. Right to Deletion (“Right to be Forgotten”) : Request the deletion of data when it is no longer necessary for the purposes for which it was collected or when consent is withdrawn.
4. Right to Restrict Processing : Temporarily restrict the use of data in certain cases (e.g., while a claim is being resolved).
5. Right to Object : To refuse the processing of data in certain circumstances (e.g., for marketing purposes).
6. Right to Portability : Receive personal data in a structured, commonly used and machine-readable format, and transmit it to another controller without hindrance.
7. Right not to be subject to automated individual decisions , including profiling, that produce legal effects or significantly affect you.

To exercise these rights, the User may contact us ,

These rights must be exercised by the data subject or an authorized representative. The response will be communicated within the maximum legal period (one month from receipt of the request).

In the event of a disagreement with the response, the User may file a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority in the EU.

Personal data will be retained only for the time necessary to fulfill the purposes described or to determine any potential liabilities that may arise from such purposes and data processing.

• Contact information or queries : Until the request is resolved or while consent is maintained.
• Newsletter subscriptions : Until revocation of consent (opt-out).
• Contractual relationships or purchases : These will be maintained for the duration of the contractual relationship and, subsequently, for the legally established periods (tax, accounting obligations, etc.).

In any case, Bernard Rives may retain anonymous or duly pseudonymised data for statistical or service improvement purposes.

Bernard Rives maintains profiles on social media (e.g., Facebook, Instagram, Twitter, etc.). Under no circumstances will personal data be collected from followers without their consent. The purposes of processing on these platforms are limited to informing them of news or promotions, as well as providing customer service when appropriate.

The legal basis for such processing is the user's consent on the corresponding social network, which can be revoked at any time by unfollowing us or using the tools offered by each platform.

If candidates receive resumes or applications, Bernard Rives informs them that the data and documents provided may be analyzed to assess their candidacy and, if appropriate, offer them a position. If they are not selected, their CV may be retained for up to two years for future selection processes, unless the candidate indicates otherwise.

The information provided by Users will always be kept confidential and may not be used for purposes other than those described herein. Bernard Rives undertakes to maintain professional secrecy and adopt the necessary measures to protect the confidentiality of the data.

This Privacy Policy is applicable from [last updated date]. It may be modified in the event of regulatory, doctrinal, or internal changes. Users are advised to periodically review this section to stay informed of the current version.