Privacy Policy

Update: 02/13/2023

We would appreciate you taking a few minutes to read our privacy statement, we explain how we collect data, how we use it and how we process your personal information in CHAOS BRAND

In this privacy statement, we explain what we do with the data we obtain about you through www.chaosbrand.com

Our Privacy Policy affects both the personal information you provide us, as well as all the data you provide us when accessing any of the services available on the website, subscriptions to content, and the consent you give when you accept the policy. of cookies.

We have tried to be clear in the writing, but if after reading you have any questions, you can contact us.

WHO IS RESPONSIBLE FOR THE WEBSITE?

  • Responsible: Alejandra Fedriani Gonzalez Palomino
  • NIF: 29514556J
  • Postal address: 41013
  • Email: info@caosbrand.com

WHAT DATA DO WE PROCESS?

Based on the principle of minimization, the data that we may process will be adequate, relevant and limited to what is necessary based on the purposes for which they are processed, and always respecting the will of the client.

  • If you need to contact us, the mandatory information we request is your name and surname, email and telephone number.
  • To make a purchase you do not need to be registered, you can buy as a guest. But we will need the following data: The data we request from you are: name and surname, DNI (optional in the peninsula and the Balearic Islands, mandatory in the Canary Islands, Ceuta and Melilla), delivery address, telephone number, email address.
  • If you create an account, you will not need to complete the purchase form again, we will save your data for a next purchase, you will only have to identify yourself with your username and password.
  • In order to make product comments we need your Name and Email address.
  • Navigation data, during navigation, when you make a comment or submit a form, we store your IP.

If we need to process other categories of data, we will inform you beforehand and request your consent if necessary in accordance with applicable regulations.

WHY DO WE PROCESS YOUR DATA?

For these purposes, the treatments carried out by CAOS BRAND are the following:

  • Management of the pre-contractual relationship with clients

The information you provide us during the process will be used to correctly process the contracting of the service, manage any incident related to it and, in general, to provide customer service by resolving doubts and responding to queries and requests for information to through the different channels available.

  • Management of the relationship of registered users

The information you provide us in the registration process will be used for the management of Users of the online store, so that you can create your user account, access your profile, consult your orders and your wish list and make your Buy without having to re-enter your identifying information: name, surname and ID, and contact information, email and telephone number, if applicable, and delivery address. In addition, BRAND CHAOS You may send satisfaction surveys and product ratings.

  • Customer or user service through the contact form or chat

The personal data that you provide us through the contact form or the chat enabled on the website will be processed solely to respond to your query or request. The information collected is limited to identification and contact data, as well as data related to the nature of the request you send us.

  • Sending newsletters and personalized commercial communications

We will use your identification and contact data to send you personalized information about the news on the website, news of interest about the contracted service, promotions and offers of our products.

The information may be sent by postal, telephone and/or electronic means, and may involve sending personalized information about our products.

This data processing involves the prior analysis of your user or customer profile to determine what your preferences are and, therefore, which products may best fit your browsing and purchasing habits, when sending you information.

For example, based on your purchasing and browsing history, we may personalize our suggestions about products that we think may interest you.

  • Activate the necessary mechanisms in order to prevent and detect improper use of the Platform

If we consider that the operation may be fraudulent, we may block or cancel your account.

WHAT LEGITIMATES US TO PROCESS YOUR DATA?

The basis of legitimacy for each of the treatments and purposes described is the following:

  • User registration: it is necessary to be able to manage your registration.
  • Purchase: it is necessary to be able to manage your orders and comply with the contractual relationship.
  • Fraud Prevention - We consider that we have a legitimate interest to carry out the necessary checks to detect and prevent possible fraud when you make a purchase
  • Analysis and consumption habits: we have a legitimate interest in analyzing the use you make of our website, and the degree of user satisfaction since we understand that the processing of this data is also beneficial for you because the purpose is to improve the user experience. .
  • Customer service : this treatment is necessary to manage incidents related to your order or the product purchased. The processing is necessary for the execution of the contract.
  • Fraud prevention : we consider that we have a legitimate interest in this processing.
  • Exercise of rights or claims related to our products , what legitimizes us to process your data is compliance with legal obligations on our part.
  • Sending Newsletter and personalized commercial communications , the basis of legitimation is in the case of registered users, the legitimizing basis will be the legitimate interest of BRAND CHAOS to carry out promotional activities by sending commercial communications related to products and services aimed at its customers.

In the event that you have not registered on the website, we may process your contact data for this purpose as long as you have given us your consent.

INFORMATION CONSERVATION PERIODS

  • Registered users: we will process your data for as long as you remain a registered user, that is, until you decide to unsubscribe.
  • Purchase of products and customer service: We will process your data for the time necessary to manage the purchase of the products you have purchased, including possible returns, complaints or claims associated with the purchase of the particular product or service.
  • Contact or request to exercise rights: when you make a request, we will process your data for as long as necessary to respond to your request or request.
  • Newsletter sending : when you register or consent to the sending of commercial information, we will process your data until you unsubscribe or cancel your subscription to the newsletter.

INFORMATION WE SHARE: recipients or recipient categories

BRAND CHAOS has contracted trusted providers who may have access to personal data to manage some of the functions necessary to provide the service, such as Stripe , which we use to accept payments and manage commercial activities or other technological services.

You should know that when you save your card data, it is stored in Stripe, we do not have access to the information, nor do we handle your card data.

The providers will act as data processors and will be contractually obliged to comply with their legal obligations, to maintain the confidentiality and secrecy of the information. Some of these providers are outside the European Union, so the transfer will involve an international transfer of data.

In addition, we may communicate the CLIENT's personal data to the different public authorities by virtue of a legal obligation, such as tax authorities, judicial authorities, the judicial police, and any other that, depending on current regulations, may be applicable.

INTERNATIONAL DATA TRANSFERS

Some of the aforementioned providers are located in territories outside the European Economic Area, some of these countries may have a level of data protection that is considered not to be comparable to that of the European Community, as is the case of the United States.

You should know that the CJEU has invalidated the Privacy Shield Framework that protected international data transfers between the EU and the US. USA, but this implies that in order for them to be carried out it is necessary that there is a basis of legitimation, which is why we inform you

Active Campaign

We inform you that to send the Newsletter we use Active Campaign.

Active Campaign has servers in the US, the company claims to have adopted the necessary measures to ensure users are protected. You can consult its privacy policy by clicking on the link.

The basis of legitimacy is the legitimate interest in sending information and offers in the case of registered users and consent in the event that you have not registered.

Google Analytics

We use Google Analytics to analyze your use of our site, improve it and improve positioning.

Google Analytics is a web analytics tool that allows us to know users' browsing habits and how they interact with our website. Google Analytics allows us to access various reports in which it is described.

The IP address is personal data as defined by the GDPR. IP addresses are never exposed in a report by default, but Google uses them to provide geolocation data, so to make sure your data is protected, we only use Google Analytics with IP anonymization enabled.

IP anonymization means that Google will shorten the IP address of users within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address sent by the user's browser will not be merged with other data provided by Google.

By anonymizing the IPS before transferring them, and not transferring your real IP, we understand that we can use this technology without your consent, since it legitimizes our legitimate interest in knowing the use made of our website and being able to improve it, as well as improve our positioning.

Google Analytics Opt-Out Browser Add-on

If despite the above information you want to prevent Google Analytics from using your data, you can use the Google Analytics opt-out browser add-on for websites, developed by Google.

If you wish to unsubscribe, you can download and install the add-on for your web browser. According to information provided by Google, the Google Analytics opt-out add-on is designed to be compatible with Chrome, Safari, Firefox and Microsoft Edge.

For the opt-out supplement here .

Google reCAPTCHA

This website uses Google reCAPTCHA to check whether the data entered on our website (in a contact form, for example) has been entered by a human or by an automated program ("bots").

Google reCAPTCHA analyzes website visitor behavior based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website.

This service allows Google to determine from which website your request was sent and from which IP address the reCAPTCHA text entry box was used.

In addition to your IP address, Google may collect other information necessary to provide you with this service and ensure its functionality.

The legal basis for data transfer is legitimate interest (Art. 6 Para. 1 (f) GDPR).

Google Fonts

Google Fonts is an interactive and digital directory with more than 900 font families for free use.

We use it to show a uniform representation of our site, so that it is the server that provides the fonts that we need to use and the browser is the one that is responsible for showing them to you properly.

The legal basis for the transfer of data is legitimate interest (Art. 6 Para. 1 (f) GDPR), since its use is carried out for the sake of a uniform and attractive presentation of our site.

More information about the handling of user data can be found at https://developers.google.com/fonts/faq and in Google's privacy policy .

Google Maps

The use of Google Maps is provided on our website. Google maps may have access to your location if you give your consent, in order to provide you with greater specificity about the distance and/or routes of our physical store. In this regard, we refer to the Privacy Policy used by Google Maps , in order to know the use and processing of such data.

This processing is justified by legitimate interest (art. 6 section 1 (f) of the GDPR), since its use is carried out in order to facilitate access to our physical location.

Social networks

We operate various accounts on social media networks or platforms for the purpose of communicating with our customers, stakeholders and other users, and also to keep them informed about our brands, products and services.

Social media companies may process user data in countries that do not have an adequate level of protection in accordance with European regulations.

Although social networks are committed to complying with EU data protection regulations, you should be aware that when you visit the websites of social media platforms, they often process your data for market research and advertising purposes. . For example, user profiles may be created based on user behavior and documented interests of users, and these profiles may later be used to place advertisements on and off platforms that are supposed to match your interests.

For these purposes, cookies are usually stored on the user's computer.

In addition, data may also be saved in user profiles, regardless of the devices users use (in particular if users are registered users of the relevant platforms and are logged in).

When you visit our social media channels, we process your personal data on the basis of our legitimate interests in accordance with art. 6, section 1 (f) of the GDPR.

Regarding the exercise of your rights under the GDPR as a data subject, we would like to point out that it is more effective to assert them before the respective social media providers.

Only social media providers have access to your personal data and they can directly take appropriate measures and provide you with information. In any case, if you need help, contact us.

For a detailed description of the respective processing operations and opt-out options, please refer to the privacy policy of the social media companies.

EXERCISE OF RIGHTS

CHAOS BRAND guarantees the adoption of the necessary measures to ensure the interlocutor the free exercise of the corresponding rights of access, rectification, deletion, limitation, opposition and portability. You can obtain more information about these rights by clicking on the following link

CHAOS BRAND It facilitates your exercise through the following means:

  • By accessing your profile, in the GDPR section you can consult the information we collect about you.

You can also modify your data or withdraw the consent you have provided to us.

  • writing an email to hi@caosbrand.com indicating which right you want to exercise and attaching a copy of your ID when we consider it necessary.

You also have the right to file a complaint with the national control authority, for these purposes you must contact the Spanish Data Protection Agency, whose contact details are as follows:

Address: Jorge Juan street, 6. 28001 – Madrid

Telephone: 912 663 517

Or through the electronic headquarters https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/tramitesCiudadano.jsf

Security and confidentiality in the processing of your information

CHAOS BRAND cares about guaranteeing the security, secrecy and confidentiality of your data.

As part of our commitment and in compliance with current legislation, we have adopted the security measures and technical means necessary to prevent the loss of information, misuse or access without authorization.

Communication between users and www.chaosbrand.com uses a secure channel, and the data transmitted is encrypted thanks to https protocols, therefore, we guarantee the best security conditions so that user confidentiality is guaranteed.

Existence of automated decisions that produce legal effects for the client

You are informed that the processing of your data for the indicated purposes will not imply on the part of BRAND CHAOS the application of automated decisions that produce legal effects for the client.

cookies

Like other Internet portals, our website uses a technology called “cookies.”

If you want detailed information on how BRAND CHAOS uses cookies, you can consult the Cookies Policy by clicking on this link.

Miscellany

BRAND CHAOS may update this Data Policy at any time by notifying the client in the event that said update entails new data processing or a substantial change to it.

We recommend that you review this policy periodically.

In the event that any of the provisions of these conditions, or part of them, are declared illegal, invalid or not applicable by a competent administrative or judicial entity, it will be considered unenforced, without affecting the other provisions. 

 SMS 
We value your privacy and the information you agree to share in connection with our SMS marketing service. We use this information to send you text notifications (for your order, including abandoned payment reminders), text marketing offers, and transactional texts, including review requests from us. Our website uses cookies to keep track of the items you place in your shopping cart, even when you have abandoned your checkout process. This information is used to determine when to send SMS cart reminder messages.