Privacy Policy

Confidentiality and security are core values of XAGEMA, S.L. We are committed to safeguarding your privacy at all times and to not collecting unnecessary information. This policy explains how we process the personal data you provide through this website (joyeriasuiza.com).

Processing is governed by Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and the rest of the data-protection legislation in force. Merely accessing or browsing the site does not constitute consent to the processing of your data: where consent is required, we will ask for it through an affirmative action on your part.

You must be at least 18 years old to provide personal data through this site. Users guarantee the truthfulness, accuracy and currency of the data provided. The data we request is necessary to handle your enquiries and provide the associated services; without it we will not be able to assist you properly.

Pursuant to Article 13 of the GDPR, the identity of the data controller is as follows:

Company name

XAGEMA, S.L.

Tax ID (CIF)

B36906790

Registered address

C/ Venezuela, 47 — 36203 Vigo (Pontevedra), España

Registry

Registro Mercantil de Pontevedra, Libro 2736, Folio 170, Hoja PO

Phone

+34 986 22 11 25

Email

info@joyeriasuiza.com

We process your data only for the purposes detailed below, each with its legal basis and retention period:

• Contact forms and enquiries

  Purpose

  To handle your enquiries, information requests, corporate proposals and watch valuation or purchase requests, and to reply through the contact channels you provide.

  Legal basis

  Your consent, given when you submit the relevant form.

  Retention

  Until your request is resolved and, thereafter, for the periods needed to address any liability.

• Registration and user account

  Purpose

  To create and manage your customer account: access to your personal area, favourites, order history and profile details.

  Legal basis

  Performance of the contractual relationship you accept when registering (Art. 6(1)(b) GDPR).

  Retention

  While your account remains active and, after deletion, for the applicable statutory periods.

• Orders and online purchases

  Purpose

  To manage purchases made through the online store: order processing, payment, invoicing, shipping or in-store pickup, and after-sales service (returns, exchanges and claims).

  Legal basis

  Performance of a contract to which you are a party (Art. 6(1)(b) GDPR).

  Retention

  For the duration of the contractual relationship and, once ended, 5 years for tax obligations (Spanish Law 58/2003) and 3 years for contract claims. In the event of a dispute, until it is finally resolved.

• Appointment booking

  Purpose

  To manage appointment bookings at our boutique and remind you of the agreed date and time.

  Legal basis

  Pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).

  Retention

  Until the appointment takes place and, thereafter, for the periods needed to address any liability.

• Analytics and site improvement

  Purpose

  Measure how the site is used through heatmaps and session recordings (Microsoft Clarity) and audience and behaviour statistics (Google Analytics) and, if you also accept marketing cookies, link your browsing to your contact record (HubSpot) and measure the performance of our ad campaigns (Google Ads) to better understand your interest in our products.

  Legal basis

  Your consent, given through the cookie banner (art. 6.1.a GDPR). You can withdraw it at any time from “Cookie preferences” in the footer.

  Retention

  Until you withdraw your consent; each cookie expires within the periods stated in the Cookies Policy.

• Commercial communications

  Purpose

  To send you communications about our products, services, promotions and news through the indicated channels (email or messaging). If you are already a customer, they may relate to products similar to those you purchased.

  Legal basis

  For customers, our legitimate interest in maintaining the commercial relationship (Art. 6(1)(f) GDPR and Art. 21.2 LSSICE); for non-customers, your explicit consent (Art. 6(1)(a) GDPR). Not giving it never conditions any purchase.

  Retention

  Until you unsubscribe or withdraw your consent; withdrawal does not affect the lawfulness of prior processing.

  Every communication includes a link to unsubscribe immediately. You can also request it at any time by writing to info@joyeriasuiza.com.

As a general rule, your data is not disclosed to third parties except where legally required. To run the store we rely on providers that may access personal data, with whom the contracts required by Article 28 of the GDPR are in place:

Some of these providers are based outside the European Economic Area, in particular in the United States. In those cases the international transfer is covered by the Standard Contractual Clauses approved by the European Commission (Implementing Decision (EU) 2021/914) and, where applicable, by the EU-US Data Privacy Framework.

You can request further information about the safeguards applicable in each case through the controller's contact details.

You may withdraw your consent at any time where processing is based on it, without affecting relationships established beforehand. You may also exercise the following rights:

• Request access to your personal data, or its rectification where inaccurate.
• Request its erasure when, among other reasons, it is no longer needed for the purposes it was collected for.
• Request the restriction of its processing in certain circumstances.
• Object to the processing on grounds relating to your particular situation.
• Request the portability of your data in the cases provided for by law.
• Any other right recognised by the applicable legislation.

You can exercise them by writing to the controller at its postal address or at info@joyeriasuiza.com, quoting the reference “Personal Data” and the right you wish to exercise.

If you consider that the processing does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

We have adopted the technical and organisational measures needed to guarantee the security of the personal data you provide and to prevent its alteration, loss and unauthorised processing or access.

So that we can keep your data accurate, please let us know whenever it changes; otherwise we cannot answer for its accuracy.

We are not responsible for the privacy practices applied to personal data you may provide to third parties through the links available on this website.

This policy may be amended to reflect changes on the site or new legislation or case law, so we recommend reading it every time you provide us with your data.

This site uses technical cookies that are necessary for it to work and, subject to your acceptance in the cookie banner, analytics and marketing cookies. You will find the full details in our Cookies Policy.