Privacy policy
This policy explains how AURENS processes personal data when you visit aurens.eu, place an order, contact us or use the store's services.
Data controller
The data controller is the legal owner of AURENS, identified in the Legal notice. For privacy questions or to exercise your rights, email info@aurens.eu.
Data we may process
Depending on your relationship with the store, we may process identification and contact details, billing and delivery addresses, information about orders, exchanges and returns, customer-service communications, preferences, device and browsing data, and information needed to prevent fraud and manage payments.
Full card or other payment-method details are processed by the relevant payment providers under their own terms and security measures.
Purposes and legal bases
- Orders, payments, shipping, exchanges and returns: performance of the contract and pre-contractual steps.
- Queries and customer service: performance of the contract, pre-contractual steps or legitimate interest in supporting customers and users.
- Tax, accounting and consumer-law duties: compliance with legal obligations.
- Fraud prevention and security: legitimate interest and, where applicable, compliance with legal obligations.
- Marketing communications: consent where required. You can withdraw it at any time.
- Analytics, personalisation and non-essential cookies: consent where required by law.
Service providers and recipients
We disclose or allow access to personal data only where needed to provide the service or comply with legal duties. Recipients may include Shopify, payment providers, carriers, hosting and technical-support services, analytics and email providers, fraud-prevention services, professional advisers and public authorities where legally required.
Shopify
The store uses Shopify. Shopify processes certain data to host and operate the store, facilitate purchases, maintain security and provide contracted features. Shopify's own privacy notices and terms also apply to that processing.
International transfers
Some technology providers may process data outside the European Economic Area. Where applicable, transfers rely on mechanisms recognised under data-protection law, such as adequacy decisions or standard contractual clauses, together with required safeguards.
Retention
Data is kept for as long as needed for the purpose for which it was collected and afterwards for the periods required to meet legal obligations or potential liabilities.
Your rights
You may request access, correction or deletion of your data, restriction of or objection to certain processing and, where applicable, data portability. You may also withdraw consent at any time without affecting prior lawful processing.
To exercise these rights, email info@aurens.eu. We may request reasonable information to verify your identity.
If you believe your rights have not been handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).
Cookies
The store may use cookies and similar technologies that are necessary for operation and, with your consent where required, for measurement, personalisation or marketing. You can manage preferences through the consent mechanism on the website and your browser settings.
Children
The store is not specifically directed at minors and does not knowingly seek to collect children's personal data outside the circumstances permitted by applicable law.
Security
We apply reasonable measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
Changes to this policy
This policy may be updated to reflect legal, technical or operational changes. The current version is the one published on this website.