*Privacy Policy

Responsible for the processing of your personal data

- Company name: Eva Cifuentes
- Commercial Name: White and Gray
- NIF: 02638787C
- Tax Address: La Favorita 3
- 28222 Majadahonda, Madrid
- Contact telephone number: 91.993.18.34
- Email: hello@whiteandgreystudio.com

We provide you with this Privacy Policy in accordance with Regulation 2016/679, on Data Protection and other applicable regulations on the matter. This Policy is limited to residents of the European Union who use our website and is intended to explain what personal information you have provided to us and how we use it to market our goods and/or offer our services.

White and Gray markets goods and provides services to its customers. Therefore, we are responsible for data processing according to the Personal Data Protection regulations. We include in this Privacy Policy a summary of your rights so that you can control how we use your personal information. WHITE AND GRAY will inform you of any updates that may affect the processing of your personal data. Your periodic purchase, through our stores and websites, and/or use of our services indicates your knowledge of the updates made to this Privacy Policy.

What personal information do you provide us?

Your personal information includes any information that relates to you in which you are or can be identified. This includes your name, address, contact information, payment information, purchase history, purchase recipient details, delivery addresses.

Where does your personal data come from?

We collect various types of personal information from different sources, such as:

• The information you provide us when you open an account on our website.
• The information you provide us when you register on the website to purchase the products you request from us.
• The information we collect about your use of our services, offers and promotions.
• Information about your use of our website, apps and any related promotional activities.

For what purposes do we process your data?

All personal information we obtain from you is used to provide the products you have requested from us to you or a third party; to fulfill our contractual obligations to provide you services, as well as to manage your personal account. Please note that your refusal or objection to providing the personal information necessary for these purposes may prevent WHITE AND GRAY from providing any of the aforementioned services.

We would like to use your name and email address to inform you about our products, services, offers and promotions with your consent. If you provide us with your consent to receive marketing, advertising or promotional communications, we will offer you the right to unsubscribe in each electronic communication. This information is not shared with third parties and you can unsubscribe at any time by email or through our website.

How long do we keep your data?

We retain your personal data related to the use of our services for the duration of the business relationship and for seven years after the customer account is closed for legal, regulatory, audit and/or tax reasons. Your personal data may be stored within the legal limitation period between three and fifteen years during which claims against us may arise. After this period has expired, personal information relating to your account and your use of the services will be deleted. Any personal information that you have provided to us for marketing purposes will be stored until you notify us that you no longer wish to receive this information or three years after you last contacted us.

What is our legitimacy for the processing of your data?

Specifically, we process your data on the basis of our legitimate business interests to manage any technical issues or support requests that may arise to comply with our commercial, legal and contractual obligations. In addition, our legitimate interests or those of third parties may require us to use your personal information in judicial proceedings or for other legal purposes that may affect WHITE AND GRAY, which may include the need to transfer your personal information to third countries with protection regulations. low data. In that case, we will take appropriate measures to protect your personal information as required by Data Protection regulations.

WHITE AND GRAY will safeguard the privacy and security of special categories of information in accordance with the requirements of Data Protection regulations.

We also use your information for advertising, promotional and/or marketing purposes where you can give us your consent to receive communications for this purpose. You can tell us at any time that you do not want to receive communications for this purpose, even if you have given us your consent previously.

We are also entitled to process your personal information in order to comply with our contractual and legal obligations, always in accordance with data protection regulations.

To which recipients will we communicate your data?

To the extent we send your personal information to those who may be located outside the European Union, we will provide an adequate level of protection for your personal information, including appropriate security, technical and organizational measures through the implementation of appropriate transfer protocols that ensure that it is carried out in accordance with applicable regulations.

Part of your personal information is processed by entities located in Spain, the United States and Canada, which is stored on servers located in said countries. By using our services, you acknowledge the transfer of some of your personal information to the United States, which may have a lower standard of data protection regulations in Spain. We have formalized standard contractual clauses to protect your transferred personal information in the manner approved by the European Commission.

http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915

We do not allow any third party to have access to your personal information, except as required or permitted by applicable regulations in accordance with this Privacy Policy. We may disclose your personal information to our subcontractors, agents or payment service providers (who may be located in the United States) with whom we have contracted to assist us in providing services, provided that such subcontractor or agent consents. in writing comply with the security and privacy standards described in this Policy. If the recipient is located in a country that does not have adequate Data Protection laws and is not certified under Privacy Shield, we will enter into standard contractual clauses to protect your transferred personal information in the manner approved by the European Commission.

http://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32010D0087

There may be other situations in which we may provide your personal information to third parties:

• To fulfill your orders and/or carry out the services, promotions or offers in which you have participated;
• To comply with the Law, respond to any judicial procedure, request for information from a regulatory body or any other legal purpose or
• To protect the rights, property or safety of WHITE AND GRAY, partners, clients or anyone based on legitimate interests of WHITE AND GRAY in accordance with Data Protection regulations.

We may share your personal information with other business entities in connection with the sale, assignment, merger or other transfer of all or a portion of WHITE AND GRAY's business to that business entity. WHITE AND GRAY may also communicate your personal data to the authorities that have requested it. In any case, where we have to share your personal information with third parties we will restrict the nature and categories of personal information that is required. We may re-identify your personal information to protect your privacy.

How do we protect your personal information?

WHITE AND GRAY understands that secure data custody is essential. WHITE AND GRAY stores personal information and other data using reasonable physical, technical and administrative safeguards to secure the data against foreseeable risks. Although we make good faith efforts to secure the information we obtain in a secure operating environment, which is not available to the general public, we cannot guarantee complete security. While we work to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent hackers from illegally obtaining this information.

What are your rights when you provide us with your data?

You have rights related to your personal information, as set out below, subject to Data Protection regulations:

• You have the right to access your data and ensure that your personal information is accurate;
• You have the right to revoke your consent at any time in relation to personal information that is processed based on your consent (the revocation must not affect the lawfulness of processing based on the consent before its revocation);
• You can object to the processing of your personal information, including for any action for direct marketing purposes;
• You have the right to request any correction of your personal data or that we delete your personal data;
• You have the right to request that we restrict the processing of your personal information (this may, however, jeopardize our ability to provide you with our goods and/or services);
• You also have the right to transfer your personal information to another service provider, where this information is processed on the basis of consent, and following your written request, we will provide you with your relevant personal information in a format suitable for transfer to another service provider. services.

To exercise these rights, please contact us by email at hello@whiteandgreystudio.com