PRIVACY POLICY

PURPOSE	INFORMATION
CUSTOMER SERVICE	Process only the personal data strictly necessary to manage or resolve the query, request or enquiry made by the user.
MARKETING	Manage the sending of commercial communications, promotions or newsletters to all users who have subscribed.
QUALITY SURVEYS	Sending quality surveys about the products or services provided.

LEGAL BASIS FOR PROCESSING

The user shall in any case be responsible for the accuracy of the data provided. Where this is not the case, LEJAN BRAND may exclude the user from the services in which they have provided false data, without prejudice to any other legally applicable measures.

The legal basis allowing the processing of personal data provided by the user shall be governed by the following:

PURPOSE	LEGAL BASIS
CUSTOMER SERVICE	User consent when contacting through available forms or contact channels. Legitimate interest of LEJAN BRAND to attend to requests, queries or enquiries. Compliance with legal obligations where processing arises from the exercise of user rights.
MARKETING	User consent. Legitimate interest in the case of commercial communications regarding products or services similar to those previously purchased (Art. 21.2 LSSI-CE – soft opt-in), always guaranteeing the right to object.
QUALITY SURVEYS	Legitimate interest of LEJAN BRAND to evaluate user satisfaction and improve its services.

DATA RETENTION PERIOD

Personal data will be retained according to the following purposes:

PURPOSE	RETENTION PERIOD
CUSTOMER SERVICE	For as long as necessary to handle the request.
MARKETING	Until the user withdraws their consent.
QUALITY SURVEYS	For as long as necessary for analysis or until the data is anonymised. Additionally, LEJAN BRAND will retain personal data in duly blocked form for the periods during which legal liabilities may arise, in accordance with current legislation.

RECIPIENTS OF PERSONAL DATA

LEJAN BRAND may share personal data with:

Financial institutions

Fraud detection and prevention entities

Technology service providers

Customer service providers

Marketing and advertising providers

Public authorities where required by law

All third parties will act as data processors under contracts that ensure GDPR compliance.

INTERNATIONAL DATA TRANSFERS

LEJAN BRAND informs users that it contracts services from providers located outside the European Economic Area, ensuring in all cases an adequate level of protection through standard contractual clauses or other legally recognised mechanisms.

AUTOMATED DECISIONS AND PROFILING

LEJAN BRAND may carry out basic segmentation or profiling for commercial or statistical purposes (e.g. product recommendations or personalised communications).

In no case are automated decisions taken that produce legal effects on the user or that affect them in a similarly significant manner, in accordance with Article 22 of the GDPR.

USER RIGHTS

Users who have provided personal data for processing by LEJAN BRAND have the following rights:

RIGHT OF ACCESS	The user has the right to obtain confirmation from LEJAN BRAND as to whether or not personal data concerning them is being processed, and to access the personal data that LEJAN BRAND holds.
RIGHT TO RECTIFICATION	The user has the right to request that LEJAN BRAND rectifies inaccurate personal data concerning them. They also have the right to have incomplete personal data completed, including by means of a supplementary statement.
RIGHT TO ERASURE / RIGHT TO BE FORGOTTEN	The user has the right to request that LEJAN BRAND erase the personal data concerning them, subject to the requirements established by current legislation.
RIGHT TO RESTRICTION	The user has the right to request that LEJAN BRAND restrict the processing of their personal data, subject to the requirements established by current legislation.
RIGHT TO DATA PORTABILITY	The user has the right to receive from LEJAN BRAND the personal data concerning them in a structured, commonly used and machine-readable format, and to transmit it to another controller where processing is based on consent or a contract, and is carried out by automated means.
RIGHT TO OBJECT	The user has the right to object to LEJAN BRAND processing personal data concerning them where such processing is based on public or legitimate interest. In such case, LEJAN BRAND will cease processing the data, unless there are compelling legitimate grounds or the processing is necessary for the establishment, exercise or defence of legal claims.
RIGHT TO LODGE A COMPLAINT	The user has the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the rights set out in this privacy policy have been infringed, or if they believe that the processing of personal data concerning them is in breach of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.

The user may exercise the rights described above by sending a written communication to the address: Calle Hermosilla 48, 1D (28001), or by email to hola@lejanbrand.com, including in both cases a photocopy of their national identity document or equivalent identification document and the subject line "DATA PROTECTION – LEJAN BRAND".

DATA PROTECTION OFFICER

LEJAN BRAND is not legally required to appoint a Data Protection Officer (DPO), in accordance with current legislation and the nature of the processing carried out.

SOCIAL MEDIA

LEJAN BRAND is present on the main social media platforms: LinkedIn. As a result, it acts as Data Controller for the data published on its profiles arising from friends, likes, followers, comments, pins, etc.

The user expressly accepts being subject to the terms and conditions relating to privacy established by the various social networks or platforms where LEJAN BRAND is present, authorising LEJAN BRAND to use the means those platforms provide to inform users about the different activities and services it carries out.

MINORS.

Children under the age of 14 may not use the services available on this website without the prior authorisation of their parents, guardians or legal representatives, who will be solely responsible for all actions taken through this website by the minors in their care, including the completion of forms with the personal data of such minors and, where applicable, the ticking of any associated boxes.

In this regard, and to the extent that LEJAN BRAND has no means of verifying whether users are minors, it is the responsibility of parents, guardians or legal representatives to put in place the necessary mechanisms to prevent minors from accessing this website and/or providing personal data without their supervision. LEJAN BRAND accepts no liability in this respect.

DATA SECURITY AND SECURITY BREACHES

In order to guarantee the security and integrity of the personal data provided, LEJAN BRAND has adopted the necessary technical and organisational measures to prevent data loss, as well as unauthorised processing or access by third parties, in accordance with current legislation and having regard to the state of technology and the nature of the data stored.

CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated at any time based on the needs of the website and future legislative changes in the area of privacy. LEJAN BRAND reserves this right exclusively.

If such changes are made, LEJAN BRAND will inform the user of those changes that are significant for their privacy, so that they may review the changes introduced and decide whether to object to the processing of their personal data or to unsubscribe from a service or feature. In any case, where consent is required for the processing of personal data for purposes other than those set out in this privacy policy, the user's consent will be requested in accordance with the data protection legislation in force at the time.