Privacy policy

1. Data controller

• Identity: Black & White Jewellery S.L.
• Tax ID: B-XXXXXXXX
• Address: Carrer Example, 123 - 08001 Barcelona, Spain
• Email: privacy@blackandwhitejewellery.com

2. Purposes of data processing

We process the personal data you provide for the following purposes:

• Registered user management: Creation and management of your user account to access the intranet and warranty services.
• Warranty registration: Linking warranty certificates to customers who purchase our products.
• Incident management: Handling return requests, certificate copies and general enquiries.
• Commercial communications: Sending information about products and promotions (only with your consent).
• Customer support: Responding to your enquiries through the contact form.

3. Legal basis for processing

The legal basis for processing your data is:

• Performance of a contract: For the management of warranty registration and incident handling.
• Consent: For sending commercial communications.
• Legitimate interest: For the management of the contact form.

4. Categories of data

The categories of data we process are:

• Identification data: name, surname, ID number
• Contact data: email, phone, address
• Demographic data: date of birth, gender
• Transaction data: warranty records, incidents

5. Data retention

Personal data will be retained as long as the relationship with you is maintained and you do not request its deletion. Once the relationship ends, data will be retained for the legally established periods to address possible liabilities.

• Warranty data: 5 years from the date of registration
• Tax data: 6 years
• Contact data: until you request removal

6. Data recipients

Your data will not be shared with third parties, except by legal obligation. We use the following third-party services:

• Wasabi Technologies: Storage of warranty PDF certificates (EU servers).
• Hosting provider: Website and database hosting.

7. Your rights

You have the right to:

• Access: Request information about your data that we process.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request the deletion of your data.
• Objection: Object to the processing of your data.
• Restriction: Request the restriction of processing.
• Portability: Receive your data in a structured format.

To exercise these rights, you can contact us at privacy@blackandwhitejewellery.com attaching a copy of your ID.

You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security measures

We have adopted the necessary technical and organisational measures to ensure the security of your personal data and prevent its alteration, loss, processing or unauthorised access:

• Password encryption
• Secure connections (HTTPS)
• Regular backups
• System access controls