Privacy Policy

PRIVACY POLICY

Last updated: [DATE]

1. IDENTITY OF THE DATA CONTROLLER

In compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR), and Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), the user is informed that the personal data provided through the website nyrabeauty.es (hereinafter, "the Website" or "NYRA BEAUTY") will be processed by:

(hereinafter, "the Data Controller").

For any matter related to the processing of your personal data, you can contact us via the email address provided.

2. PRINCIPLES APPLIED IN DATA PROCESSING

The processing of User data will be subject to the following principles:

  • Principle of legality, fairness, and transparency: the User's consent for the processing of their data will be required at all times, and may be withdrawn at any time.
  • Principle of data minimization: only data strictly necessary in relation to the purpose for which it is collected will be requested.
  • Principle of storage limitation: data will be kept for no longer than is necessary for the purposes of processing.
  • Principle of integrity and confidentiality: data will be processed in a way that guarantees its security, confidentiality, and integrity.

3. WHAT DATA DO WE COLLECT AND FOR WHAT PURPOSE?

3.1. Data provided directly by the User

When you place an order, register as a customer, subscribe to our newsletter, or contact us, we may collect the following data:

  • Name and surname
  • Email address
  • Phone number
  • Shipping address and, if applicable, billing address
  • Payment details (processed directly by the relevant payment gateway; NYRA BEAUTY does not store full card details)
  • Order history and purchase preferences

This data is processed for the following purposes:

Purpose Legal basis
Manage and process your order, including shipping, billing, and returns Execution of a contract (Art. 6.1.b GDPR)
Respond to inquiries, complaints, and requests through our customer service Execution of a contract / legitimate interest
Send commercial communications, offers, and newsletters about NYRA BEAUTY Consent of the data subject (Art. 6.1.a GDPR)
Request your opinion or review of a purchased product Legitimate interest / consent
Comply with legal obligations (tax, accounting) Compliance with a legal obligation (Art. 6.1.c GDPR)
Prevent payment fraud Legitimate interest

3.2. Automatically collected data

Through cookies and similar technologies, we may collect information about your browsing (IP address, browser type, pages visited, time spent, etc.). The details of these technologies, their purposes, and how to manage them are set out in our Cookie Policy, available at [LINK TO COOKIE POLICY].

4. HOW LONG WILL WE RETAIN YOUR DATA?

  • Data related to orders will be kept for the time necessary to comply with applicable legal, tax, and accounting obligations (generally, a minimum of 5-6 years in accordance with Spanish tax and commercial regulations).
  • Data processed for marketing and newsletter purposes will be kept until the User revokes their consent or requests to unsubscribe.
  • Browsing data will be kept for the periods indicated in the Cookie Policy.
  • In any case, the data will be kept blocked for the legal prescription periods before being definitively deleted.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

In order to provide our services, we share your data with certain providers who act as data processors, always under the guarantees required by the GDPR:

  • Shopify Inc. — platform for hosting and managing the online store.
  • Logistics and supply providers — for the preparation and shipping of your orders (including providers located in the European Union and, in certain cases, in third countries, depending on the product purchased).
  • Payment gateways (e.g., Shopify Payments, Bizum, or others enabled on the Website) — to securely process payments.
  • Meta Platforms Ireland Limited — for managing advertising campaigns on Meta Ads (Facebook and Instagram), when the User interacts with our campaigns or consents to the use of advertising cookies.
  • Loox and other review management platforms — for collecting and publishing product reviews.
  • Email marketing providers — for sending commercial communications and newsletters, when the User has given their consent.
  • Public administrations and Law Enforcement Agencies, when there is a legal obligation.

Personal data is not sold or transferred to third parties for purposes other than those described here.

6. INTERNATIONAL DATA TRANSFERS

Some of our providers and collaborators may be located outside the European Economic Area (EEA), including:

  • Product and logistics providers linked to the international supply chain (including, where applicable, China), within the framework of preparing and shipping certain orders.
  • Technology providers based in the United States or other third countries.

In these cases, NYRA BEAUTY guarantees that such transfers are carried out adopting the appropriate safeguards in accordance with Chapter V of the GDPR, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized mechanisms, with the aim of ensuring a level of protection equivalent to that required in the European Union.

7. WHAT ARE YOUR RIGHTS?

As the data subject, you have the right to:

  • Access: know what data of yours we are processing.
  • Rectification: request the correction of inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): request the deletion of your data when it is no longer necessary.
  • Restriction of processing: request that the processing of your data be limited in certain cases.
  • Data portability: receive your data in a structured, commonly used format, or request its transmission to another controller.
  • Objection: object to the processing of your data, particularly for direct marketing purposes.
  • Withdraw consent at any time, without affecting the legality of processing prior to withdrawal.

You can exercise these rights by sending an email to contacto@nyrabeauty.es, indicating the right you wish to exercise and attaching a copy of a document that proves your identity.

Likewise, if you consider that your data is not being processed correctly, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

8. SECURITY MEASURES

NYRA BEAUTY has adopted the necessary technical and organizational measures to guarantee the security of the personal data processed, preventing its alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data, and the existing risks.

9. MINORS

The Website and its products are exclusively for individuals over 18 years of age. NYRA BEAUTY does not knowingly collect data from minors. If you are aware that a minor has provided us with their data without the consent of their parents or guardians, please contact us to proceed with its deletion.

10. SOCIAL NETWORKS

NYRA BEAUTY has profiles on social networks (Instagram, TikTok, Facebook, etc.). The processing of data carried out on these platforms will be governed by the terms of use, privacy policies, and access regulations specific to each social network, which the User must consult independently.

11. MODIFICATIONS TO THIS PRIVACY POLICY

NYRA BEAUTY reserves the right to modify this Privacy Policy to adapt it to new legislative, jurisprudential, or interpretative developments by the Spanish Data Protection Agency. Any modification will be published on this same page with an indication of the last update date.

12. CONTACT

For any questions or queries related to this Privacy Policy, you can contact us at:

Aleon Proyect S.L. Avenida de Mijas, 28, Mijas, Málaga, Spain contacto@nyrabeauty.es