Privacy Policies

PRIVACY POLICY

1.- WHO ARE WE? We are BREAK THE BRAND and we process your personal data as the data controller. This means that we are responsible for how your data is used and protected.

2.- WHAT DO WE USE YOUR DATA FOR? We will use your data, among other purposes, to manage your registration as a user, manage the purchase of services, respond to your enquiries and, if you so wish, send you personalised communications.

3.- WHY DO WE USE YOUR DATA? We are entitled to process your data on different legal grounds. The main one is that we need to process it in order to perform the contract you enter into with us when you register and use any of our services or functionalities. However, there are other grounds that entitle us to do so, such as our interest in responding to your enquiries or the consent you give us to send you our newsletters, among others.

4.- WHO DO WE SHARE YOUR DATA WITH? We will share your data with service providers that assist or support us, or with external partners with whom we have entered into an agreement, located within or outside the European Union.

5.- YOUR RIGHTS. You have the right to access, rectify or erase your personal data. In certain cases, you also have other rights, such as the right to object to our use of your data or to request its portability, as explained in detail below.

You can read our full Privacy Policy below to understand in detail how we will use your personal data and the rights available to you in relation to it.

IMPORTANT…

In this Privacy Policy, you will find all relevant information concerning the use that BREAK THE BRAND makes of the personal data of our customers and users who use our services to interact with us.

We are transparent about what we do with your personal data so that you understand the implications of the uses we make of it and the rights available to you in relation to your data. To this end, we make all the information in this Privacy Policy permanently available to you, so that you may consult it whenever you deem appropriate. In addition, you will also receive information about each processing activity involving your personal data as you interact with us.

WHO IS THE DATA CONTROLLER FOR YOUR DATA?

In compliance with Article 10 of Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, and with all provisions of Regulation (EU) 2016/679 and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights, you are informed that the data controller responsible for processing your data is:

Data controller

Name: Bárbara Hanen, hereinafter BREAK THE BRAND

Tax ID (CIF): 60308777V

Address: Calle de Pilar de Madariaga Rojo, 9, Vallecas, 28031 Madrid

Telephone: (+34) 665045043

Email address: info@breakthebrand.com

Website: www.breakthebrand.com

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on the services or functionalities you wish to use at any given time, we will need to process certain types of data. In general, depending on the circumstances, these will include the following:

• Your identification data (for example, your first name, surname, contact details, etc.) in order to manage your purchase requests and maintain our contractual relationship.
• Financial and transaction information (for example, your payment or card details, information about your purchases, complaints, etc.).
• Connection and browsing data.
• Marketing information (for example, whether you are subscribed to our newsletter) and data concerning your tastes and preferences. Remember that you may unsubscribe from the newsletter at any time and free of charge through the “newsletter” section of the platform, as well as by following the instructions provided in each communication.
• To manage your registration as a user of the website.
• Browsing the website and using our digital channels: We process information to enable and facilitate your access to and browsing of our digital channels, as well as to provide the services we offer through them.
• Improving the services we offer and security: We also use the information to maintain, improve and enhance the effectiveness of our services and digital channels, allowing us to develop new functionalities, protect the security of your data and our digital channels, and detect and prevent fraud in transactions.

If you access our website, we inform you that we will process your browsing data for analytical and statistical purposes, that is, to understand how users interact with our website so that we can make improvements to it.

WHAT IS THE LAWFUL BASIS FOR PROCESSING YOUR DATA?

The legal basis that allows us to process your personal data also depends on the purpose for which we process it. The purposes are as follows:

1. Managing your registration as a user of the website. The processing of your data is necessary for the performance of the terms governing the use of the platform. In other words, in order for you to register as a user of the website, we need to process your personal data; otherwise, we would not be able to manage your registration.
2. Development, performance and execution of the contract for the sale or provision of services. The processing of your data is necessary for the performance of the service provision contract that binds us to you. We consider that we have a legitimate interest in carrying out the necessary checks to detect and prevent possible fraud when you make a purchase. We understand that processing this data is beneficial to all parties involved when payment for a purchase is made and, in particular, to you, as it allows us to implement measures to protect you against attempted fraud by third parties.
3. Customer Service. We consider that we have a legitimate interest in responding to requests or enquiries you submit through the various available contact channels. We understand that processing this data is also beneficial to you, as it allows us to assist you properly and resolve the enquiries submitted.
4. Marketing. The lawful basis for processing your data for marketing purposes is the consent you give us, for example, when you agree to receive personalised information through various channels or when you accept the terms and conditions for participating in a promotional activity.
5. Usability and quality analysis. We consider that we have a legitimate interest in analysing the usability of the website and the level of user satisfaction, as we understand that processing this data is also beneficial to you because its purpose is to improve the user experience and provide a higher-quality service.

HOW LONG WILL WE RETAIN YOUR DATA?

The retention period for your data will depend on the purposes for which we process it, as explained below:

1. Managing your registration as a user of the website. We will process your data for as long as you remain a registered user (that is, until you decide to unsubscribe).
2. Development, performance and execution of the requested service. We will process your data for the time required to manage the purchase of the services you have acquired, including any returns, complaints or claims associated with the particular service.
3. Customer Service. We will process your data for as long as necessary to respond to your request or enquiry.
4. Marketing. We will process your data until you unsubscribe or cancel your newsletter subscription.
5. Usability and quality analysis. We will process your data on an occasional basis for the duration of a specific quality action or survey, or until we anonymise your browsing data.

WILL WE SHARE YOUR DATA WITH THIRD PARTIES?

We protect the information we collect by implementing the technical and administrative security measures established by applicable law after carrying out the corresponding risk assessment, so that the information is protected against unauthorised access, unavailability, disclosure or use.

Your personal information may only be accessed by our employees, who are aware of the purposes for which it may be used and the applicable limitations; by the competent public and judicial authorities when they require it and applicable law so requires; and by other supplier companies in order to provide you with the services you have requested.

In order to achieve the purposes stated above, it may be necessary, or even mandatory, for your data to be disclosed to different service providers, who will be required to use your data solely and exclusively to fulfil the purpose of the contract. These providers may be located in third countries for which an international transfer of data is required.

Each of these companies undertakes to use your data solely and exclusively for these purposes and not for any other purpose. Once the provision of the service has ended, they are required to delete the information they have obtained or retain it in a duly blocked and protected form without being able to use it, for as long as it may be necessary to comply with a legal obligation or to exercise or defend contractual claims that must be addressed.

Where these companies are located in a country that does not offer a level of data protection similar to ours, we ensure that they comply with the necessary security measures equivalent to those we apply, as established by the applicable legal provisions. This is the case for companies located in the United States, which will be governed by the Privacy Shield (an agreement between Europe and the United States).

WHAT RIGHTS DO YOU HAVE WHEN YOU PROVIDE US WITH YOUR DATA?

We undertake to respect the confidentiality of your personal data and to guarantee the exercise of your rights. At BREAK THE BRAND, you may exercise these rights by emailing us at info@breakthebrand.com and simply stating the reason for your request and the right you wish to exercise.

If we consider it necessary in order to identify you, we may request a copy of a document proving your identity.

In particular, regardless of the purpose or lawful basis under which we process your data, you have the right to:

• Ask us for access to the data we hold about you.
• Ask us to rectify the data we already hold. In any event, please note that, when you actively provide us with your personal data through any channel, you guarantee that it is true and accurate and undertake to notify us of any change or amendment to it. Any loss or damage caused to the Website, the person responsible for the Website or any third party as a result of communicating incorrect, inaccurate or incomplete information in registration forms shall be the sole responsibility of the user.
• Ask us to erase your data where it is no longer necessary for the purposes for which we need to process it, as explained above, or where we no longer have a lawful basis for doing so.
• Ask us to restrict the processing of your data. This means that, in certain cases, you may ask us to suspend the processing of the data temporarily or to retain it beyond the necessary period when you may need it. If you have given us your consent to process your data for any purpose, you also have the right to withdraw it at any time. Where the lawful basis for processing your data is your consent or the performance of the service, you will also have the right to request the portability of your personal data. This means that you will have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format so that it may be transmitted directly to another entity, where technically feasible.
• Furthermore, where the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.

Lastly, we inform you of your right to lodge a complaint with the relevant data protection supervisory authority, in particular the Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php).

WHAT HAPPENS IF YOU PROVIDE US WITH THIRD-PARTY DATA?

If you provide us with personal data belonging to third parties, you guarantee that you have informed them of the purposes for which and the manner in which we need to process their personal data.

CONFIDENTIALITY AND DOCUMENT DESTRUCTION

Professional secrecy. BREAK THE BRAND and the collaborators who work with us and are involved in any way in the services provided undertake not to disclose or make use of information to which they have gained access by reason of their profession. The information you provide to us shall, in all cases, be considered confidential and may not be used for purposes other than those related to the services contracted from BREAK THE BRAND.

Document destruction. In order to preserve and guarantee confidentiality, BREAK THE BRAND undertakes to destroy all confidential information to which it has had access as a result of providing services when that information is no longer necessary for the purpose for which it was collected, unless there is a legal obligation to retain it. If you wish to keep the original or a copy of such information, you must print it or save it by your own means, or visit the premises of BREAK THE BRAND to collect it before it is destroyed.

TERM AND AMENDMENT OF THE PRIVACY POLICY

BREAK THE BRAND reserves the right to amend this Privacy Policy, in whole or in part, by publishing the changes on the website. It may also make, without prior notice, any amendments it deems appropriate, including changing, removing or adding both the content and services it provides and the way in which they are presented or located. Consequently, the general terms and conditions/policies published at the time you access the website shall be deemed to be in force, and you should read them periodically.

Notwithstanding the foregoing, BREAK THE BRAND may terminate, suspend or interrupt access to the website content at any time and without prior notice, without you being entitled to claim any compensation.

Last updated 23/07/2026