PRIVACY POLICY


WEBSITE PRIVACY POLICY

Introduction

Here at Art Hunter S.L., we undertake to ensure that your personal information will be protected and will not be misused.

By providing us with your personal information and using our website, you hereby state that you have read and understood the terms related to the data protection information put forward. AHC takes responsibility for complying with the EU and national data protection legislation in force and intends to process the data legally, loyally and transparently.

In this document, we explain who the controller of the data processing is, for what purpose your personal data will be processed, the legitimation for processing, how we collate data, why we collate it, how we use it and the rights you have; we also explain the processes that we have set up to protect your privacy.

Who is the controller?

AHC is the controller for your personal data. This means that AHC has certain objectives or purposes, and it has set up the necessary measures for protection your personal data during processing.

If you have any queries, comments or concerns, or if you wish to make a suggestion about how we use personal data, you can send an email to the Data Protection Officer at Art Hunter S.L. using the following address: info@arthunterclub.com

Information about Art Hunter S.L.:

Company Name: ART HUNTER , SL
Registered offices: C/ Ricardo Calvo, 17, 3º 1ª- 08017 Barcelona
Email: info@arthunterclub.com
Phone Number: +34 933 906 733
Tax ID Code (NIF): B-67453597
Companies Register of Barcelona
Website: www.arthunterclub.com

For what purpose do we collate your personal data?

The main reason for which we collate your personal information is to facilitate and improve the service that you as a customer expect from us.
We collate your personal data to manage your purchases, orders or requests that you make through our website or applications, at our warehouses, over the phone or any paper-based form.

We have included the main purposes that we have identified below:

  • Compliance with legal obligations, including but not limited to the Prevention of Money Laundering and Terrorist Financing Act 10/2010.
  • To manage the contracting of products and services that AHC offers, including remote sales and handling shipping and returns.
  • To manage the personal account with a single record to be used to purchase the products and services on offer on any AHC website.
  • To channel information requests, suggestions and claims from customers to manage and resolve them.
  • To conduct surveys to improve our services.
  • To conduct market research and commercial prospecting, reports on consumer habits, statistic data and market trends, in order to offer you products and services that could be of interest to you.
  • To generate profiles and analysis on our customers’ behaviour when using our websites or apps, but only if you grant consent.
  • To inform customers about our latest products, offers, opportunities, etc., but only if you grant consent.

How do we collate information about you?

Information that you provide
We collate information that you provide on the website www.arthunterclub.com , email address, mobile phone, when you take out a service, when you fill out a form, or others. In any case, when data is collated, you will be informed about the controller, the purpose of the processing, the recipients of the information, as well as how you can exercise the rights you have in accordance with the data protection legislation in force.

For example: you may provide us information when you contact our customer service team, when you make a purchase, you sign up on our website, update your preferences and account information, fill out a form, take part in a competition, etc.
In general, the personal information that you provide is: name and surname(s), address, ID card (DNI), date of birth, email address, contact number and payment details.

Information that we collate when you use our website
We collate and store limited personal data and overall anonymous statistics from all users that visit our websites, either because you actively provide such information or if you are just using our websites. The information that we collate includes the IP address of the device you are using, the browser software that you are using, the operating system, the data and time of access, the web address through which you accessed our website and also information on how you use our websites.

We use this information to find out how long our websites take to load, how they are used, the number of visits to the different sections and the type of information that is most attractive to visitors. This also helps to work out if the website is running correctly and if we can detect downtime or errors in how it runs, solve them and improve the performance of our websites to offer better service to all our users. This information is collated through cookies.

Social media
Social media usage is on the rise and, in this respect, AHC is present on most networks, which is another way of contacting you.
The information that we collate through social media sometimes includes personal information available to the public online. We always ensure that all of the information that we use is attributed to the correct source or made anonymous.
These social networks will probably have their own privacy policies, through which they will explain how they use and share your personal information. We recommend taking your time to read the privacy policies before accessing these social networks to ensure that you agree to the way in which your personal information will be collated and shared.

What is the legitimation for processing personal information?

To process your personal information, we have legitimation for various reasons:

  • To fulfil an agreement and/or commercial relationship.
  • To comply with various legal obligations.
  • Out of legitimate interest: e.g., for security reasons, fraud prevention, to improve our products and services through market research, or to handle requests, queries or possible claims that may arise.
  • For example, sending out personalised offers from AHC with your consent.

Who may we share your personal information with?

In some cases, we need to share the information you have send us with third parties in order to provide the service requested. Similarly, there are companies that provide other kinds of services for us, such as: IT services (information storage and processing), security services, auditing services, etc. These third parties will only have access to the personal information they need to carry out such services. We will require them to keep your personal information confidential and they cannot use it in any other way except that which we have requested.

In any case, AHC take responsibility for the personal information that you provide use with, and we request that the companies with which we share your information apply the same level of data protection as us.

Similarly, your personal information will be available to the Public Authorities, Courts and Tribunal, in order to cover any liabilities derived from the processing.

Links to third-party websites:

If we provide links to websites that AHC does not operate or control, this will be specified in each case since we do not have any control over such websites or how third parties collate and use your personal data, nor are we responsible for the content of such websites.

These websites must have their own privacy policies, through which they will explain how they use and share your personal information. We recommend taking your time to read the privacy policies before accessing these websites to ensure that you agree to the way in which your personal information will be collated and shared. 

How long do we store your personal information?

We only store your personal information for as longs as we need it in order to use it for the purpose for which it was collated and according to legal basis for processing it in accordance with the applicable legislation. We will keep your personal information while there is still a contractual and/or commercial relationship with you, or until you exercise your right to erasure and/or processing limitation over your data.

In such cases, we will keep the information duly locked, without using it, for as long as may be necessary in order to exercise or defend any claims, or if there are any judicial, legal or contractual liabilities in the processing which must be handled, for which it would be necessary to recover the data.

How can you exercise your rights?

Data protection legislation means that you can exercise your rights to access, rectification, objection, erasure, processing limitation, data portability or to not be subject to individualised decision-making with the controller.

These rights have the following features:

  • They can be exercised free of charge.
  • If requests are manifestly ungrounded or excessive (e.g., Because of repeated requests) the controller may
    • Charge a proportional fee for the administrative expenses incurred.
    • Refuse to act.
  • Requests must be responded to within one month; however, this term may be extended by two months more bearing in mind the complexity or number of requests.
  • The controller must provide information about the means for exercising these rights. These means must be accessible, and this right cannot be denied just because other means are used.
  • If the request is presented digitally, the information will be provided through this means where possible, unless the data subject requests otherwise.
  • If the controller does not expedite the request, they must report the reasons for their lack of action and the possibility of filing a claim with the Supervisory Authority.
  • You can exercise your rights directly or through a legal representative.
  • It is also possible that the processor may be the one to handle your request if both have an agreement or legal deed to such purpose that binds them.

Right to Access:

The right to access means that you can contact the controller to find out if your personal data is being processed.

Right to Rectification:

The right to rectification means that you can get your personal data rectified if it is inexact, without any undue delay by the processor. Bearing in mind the purposes of the processing, you have the right to have any incomplete aspect of your personal data completed, even though an additional declaration.

In your request, you must stipulate what data you are referring to and the changes that must be made. Furthermore, where necessary, you must attach documentation that proves that the data is inexact or incomplete.

Right to Objection:

As its name would suggest, this right means that you can object to the controller processing your personal data in the following circumstances:

  • When it is subject to processing based on a task carried out in the public interest or legitimate interest, including profiling.
  • When the processing is used for direct marketing, including the aforementioned profiling.

Right to Erasure:

You can exercise your right to erasure with the controller by requesting the erasure of your personal data in any of the following circumstances:

  • If your personal data is no longer necessary for the purposes for which it was collected or processed in another way.
  • If the processing of your personal data was based on the consent you granted to the controller, and you revoke such consent, so long as the aforementioned processing is not based on any other reason that makes it legitimate.
  • The processing conducted by the controller is based on the legitimate interest of fulfilment of a task carried out in the public interests, and there are no other prevailing motives to legitimise the processing of your data.
  • If your personal data is subject to direct marketing, including profiling related to the aforementioned marketing.
  • If your personal data has been processed illegally.

However, this right is not unlimited and, as such, it may be possible that the data is not erased when the processing is necessary for the purposes of freedom of speech and information, to comply with a legal obligation, to comply with a task carried out in the public interest or in the exercise of public powers granted to the controller, for public interest, in the field of public health, for archival purposes of public interest, for scientific or historical research or statistical purposes, to formulate, file or defend claims. The controller must lock the data when rectifying or erasing it.

Locking data means that the data is identified and reserved, implementing the technical and organisational measures to prevent it from being processed, even being viewed, except when the data must be sent to the courts and tribunals, the Public Prosecutor or the Public Authorities, specifically the data protection authorities, if there are any liabilities derived from the processing, and only for the statutory term therefor.
Once such term has elapsed, the data will be destroyed.

Right to Restriction or Objection to Processing:

This new right means that you can limit the processing of your data by the controller, while the exercise of such right has two sides:

You can request that the processing of your data be suspended:

  • When this involved the exact nature of your personal data, during a term that would allow for verification thereof.
  • When you have objected to the processing of your personal data by the controller based on the legitimate interest or tasks carried out in the public interest, while the controller check if such motives prevail over yours.

Request that the controller keeps your data:

  • When the processing is illegal and you have objected to the erasure of your data and, instead, request that the use thereof be limited.
  • When the controller no longer needs the personal data for the purposes of processing, but the data subject needs it to formulate, file or defend claims.

Right to Data Portability:

The purpose of this right is to further bolster your control over your data in so as when the processing is carried out automatically, you will receive your personal data in a structured and commonly used format, that can be mechanically read and is interoperable, so that it can be sent to another controller, as long as the processing is based on consent or within the framework of an agreement.
However, because of its nature, this right cannot be applied when processing is necessary in order to comply with a task carried out in the public interest or when exercising public powered bestowed on the controller.

Where can you exercise your rights?

To exercise your rights, AHC has set up the following means:

  • In a written request sent to AHC, and you must attach a photocopy of you National ID Card (DNI) or a proof of identity for the requesting party.
  • Sending a signed request along with a photocopy and/or scan of the National ID Card or proof of ID of the requesting party to the email address: info@arthunterclub.com

You can file a claim with the Spanish Data Protection Agency, especially if you are not satisfied with the response for exercising your rights.

What precautions must be born in mind?

This are some of the precautions that we recommend that our customers take:

  • Do not give anyone your username or password.
  • Do not write it down in places that are easily accessed: computer, diary, etc.
  • Always log out from your browser after accessing a secure zone or entering your username or password into the system.

Is data regarding minors processed?

If you are not of legal age, please do not try to register as a user on our websites, apps or products. If we find out that we have erroneously obtained personal information about a minor, we will erase such data as soon as possible.

Modifications to this data protection information

We will review and update the data protection information if there are modification to the legislation or any of the procedures for processing your personal information.