Privacy Policy

“Revolt Clothing 198” is deeply committed to complying with Spanish and European personal data protection regulations, and guarantees full compliance with the obligations established, as well as the implementation of the security measures set forth in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that the use of our website may require certain personal data to be provided through registration or contact forms, or by sending emails, and that these will be processed by “Revolt Clothing 198”, as the Data Controller, whose details are:

• Company Name: Revolt Clothing 198, S.L.

• Tax ID (CIF): B86374949 • Registered Address: C/ Palma, 76 – 28015, Madrid, Spain

• Phone: 683 579 669

• Email: pedidos@unonueveocho.es

Obtaining and Processing Personal Data

Personal data is any information relating to an individual: name, email, address, phone number, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet access provider.

“Revolt Clothing 198”, as the Data Controller, has the duty to inform the Users of its website about the collection of personal data that may be carried out, either by sending an email or by completing the forms included on the website.

Only the data necessary to perform the contracted service or to adequately respond to the information request made by the User will be obtained. The data collected are identifying and correspond to a reasonable minimum to carry out the activity. In particular, no specially protected data is collected at any time. In no case will the data be used for a purpose other than that for which it was collected.

Contact/email forms

Purpose: To answer your information request made through our contact form(s).

Legitimation: The legal basis for this processing is the User's consent, which can be revoked at any time.

Data transfer: Personal data will be processed through servers managed by Loading, which will be considered the Data Processor.

Mailing list (newsletter) subscription forms

Purpose: Sending communications, some of which are commercial, of interest to Users according to the website's theme. As established by the LSSICE, “Revolt Clothing 198” undertakes not to send commercial communications without identifying them as such. For these purposes, information sent to customers for the maintenance of the existing contractual relationship, if any, will not be considered commercial communication.

Legitimation: The legal basis for this processing is the User's consent, which can be revoked at any time. Data transfer: Personal data will be processed through servers managed by Sendinblue, which will be considered the Data Processor. Registration/customer sign-up/contracting forms

Purposes:

• Manage your User registration on our website.

• Manage purchases made.

• Provide information about the processing and status of purchases.

• Historical record of purchases made on our website.

• Send communications via email and/or phone, to inform the User of possible incidents, errors, problems, and/or order status.

Legitimation: The legal basis for this processing is the performance of a contract. Data transfer: “Revolt Clothing 198” will not transfer or communicate your data to any third party, except in legally provided cases or when strictly necessary for the provision of a service. Specifically, data may be transferred to:

- Technology or IT service providers.

- Payment service providers.

- Courier and parcel delivery companies.

- Third parties or intermediaries, acting as service providers, operating on our behalf (management, consultancy, etc.).

Data transfers will occur respecting the strictest confidentiality, employing necessary measures such as signing confidentiality agreements, or adherence to their privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors, by written request, through any of the aforementioned means. Additionally, in cases where necessary, customer data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspectorate, etc.

Minors

Only individuals over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be an obligatory condition for us to process their personal data. Furthermore, only individuals over 18 years of age may contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be an obligatory condition for us to provide the offered services, unless the minor is emancipated.

User Registration

When the User registers through the corresponding form, the information we collect includes:

• Name and surname

• Email and/or phone

• Shipping addresses

• IP

• Username/password

Additionally, the User must accept the Terms and Conditions, set out in another section of the website.

The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue the process and modify it, by clicking on the link that will be sent to the entered email address. The User is responsible for maintaining the confidentiality of their password, as well as all uses made of it. They must notify "Revolt Clothing 198" of any unauthorized use of their account or password as soon as possible.

Once registered, the User has access to a private panel, where they can view certain content, a record of purchases made, etc. They can also manage their account options, such as password or User data. The User may receive the following notifications:

• Upon signing up to the platform (account validation email).

• When making purchases, such as proof of purchase, incidents, shipments made, etc.

• The User receives the store's newsletter if they have subscribed to it, from which they can unsubscribe in their User panel and through the corresponding links included at the bottom of the newsletter.

• For password recovery (specified in the previous field).

• Upon unsubscribing or deleting the account.

Security Measures

Users of the "Revolt Clothing 198" website are informed that we have adopted the technical and organizational security measures within our reach to prevent the loss, misuse, alteration, unauthorized access, and theft of data, thus guaranteeing the confidentiality, integrity, and quality of the information contained therein, in accordance with current data protection regulations. The personal data collected in the forms are processed solely by "Revolt Clothing 198" staff or by designated Data Processors.

The "Revolt Clothing 198" website also features SSL encryption, which allows the User to securely send their personal data through the website's contact or registration forms.

Accuracy of data

The User declares that all data provided by them is true and correct and undertakes to keep it updated. The User will be responsible for the veracity of their data and will be solely responsible for any conflicts or disputes that may arise from their falsity.

It is important that, in order for us to keep personal data updated, the User informs "Revolt Clothing 198" whenever there has been any modification to it. Data transfer "Revolt Clothing 198" will not transfer or communicate your data to any third party, except in legally provided cases or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected may be provided to these Data Processors (payment platforms, management, intermediaries, etc.), when necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in case of service provision, these may be, totally or partially, subcontracted to other individuals or companies, who will be considered Data Processors, with whom the corresponding confidentiality agreement has been agreed, or adhered to their privacy policies, established on their respective websites. The User may refuse the transfer of their data to the Data Processors, by written request, through any of the aforementioned means.

Additionally, in those cases where it is necessary, client data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspectorate, etc.

Exercise of User Rights

The LOPD and GDD and the GDPR grant data subjects the possibility of exercising a series of rights related to the processing of their personal data. To do this, the User must address, providing documentation that proves their identity (DNI or passport), by email to pedidos@unonueveocho.es, or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: User's name and surname, the object of the request, the address, and the supporting data.

The exercise of rights must be carried out by the User themselves. However, they may be executed by a person authorized as the User's legal representative, providing documentation that proves such representation. The User may request the exercise of the following rights:

• Right to request access to personal data, which is the right to obtain information on whether their personal data is being processed, the purpose of the processing, if applicable, as well as available information on the origin of such data and the communications made or planned for them.

• Right to request its rectification, in case the personal data is incorrect or inaccurate, or deletion of data that turns out to be inadequate or excessive.

• Right to request the limitation of its processing, in which case only the data strictly necessary for the exercise or defense of claims will be kept by "Revolt Clothing 198".

• Right to object to processing: refers to the right of the data subject to prevent the processing of their personal data or to cease it in cases where their consent is not necessary for processing, in the case of commercial prospecting files or those intended to make decisions concerning the data subject and based solely on automated processing of their data, unless legitimate reasons or the exercise or defense of possible claims require continued processing.

• Right to data portability: if you want your data to be processed by another company, "Revolt Clothing 198" will facilitate the portability of your data in an exportable format.

In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time, without affecting the legality of processing based on consent prior to its withdrawal.

We commit to exercising all these rights within the maximum legal period (1 month).

If a User believes there is a problem with how “Revolt Clothing 198” is handling their data, they can direct their complaints to the Security Manager or the corresponding data protection authority, with the Spanish Data Protection Agency being the appropriate one in the case of Spain.

Data retention

Personal data of Users who use the contact form or send us an email requesting information will be processed for the time strictly necessary to attend to the information request, or until the granted consent is revoked.

The Client's personal data will be processed until the contractual relationship ends. The retention period for personal data will be the minimum necessary, and may be kept for up to:

• 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, salary payments...); Arts. 66 et seq. General Tax Law (accounting books...)

• 5 years: Art. 1964 Civil Code (personal actions without special term)

• 6 years: Art. 30 Commercial Code (accounting books, invoices...)

• 10 years: Art. 25 Law on the Prevention of Money Laundering and Terrorist Financing.

• Indefinite: disaggregated and anonymized data.

For their part, the data of Users who subscribe to the bulletin or newsletter will be kept indefinitely, until the granted consent is revoked.

Social Media

“Revolt Clothing 198” has a profile on some of the main social networks on the Internet (Facebook, Twitter, Instagram, YouTube, Pinterest), being recognized in all cases as the Data Controller for the data of its followers, fans, subscribers, commenters, and other User profiles (hereinafter, followers) published by “Revolt Clothing 198”.

The purpose of data processing by "Revolt Clothing 198", when not prohibited by law, will be to inform its followers about its activities and offers, through any means allowed by the social network, as well as to provide personalized User support. The legal basis that legitimizes this processing will be the consent of the interested party, which can be revoked at any time. In no case will "Revolt Clothing 198" extract data from social networks, unless the User's specific and express consent for this is obtained (for example, for a contest).

Confidentiality

The information provided by the User will, in any case, be considered confidential, and may not be used for purposes other than those described herein. “Revolt Clothing 198” undertakes not to disclose or reveal information about the User's claims, the reasons for the advice requested, or the duration of their relationship with them. Validity This privacy and data protection policy was drafted by ExpertosLOPD®, a firm specializing in data protection for online stores, on April 26, 2022, and may vary depending on changes in regulations and jurisprudence that occur, with the data owner being responsible for reading the updated document, in order to know their rights and obligations in this regard at all times.