Data Controller Information
Legal Entity: Studio Nina Dubarry, hereinafter referred to as «The Company.»

1.1. Applicable Regulation

Our Privacy Policy has been designed in accordance with the General Data Protection Regulation of the EU 2016/679 of the European Parliament and of the Council of April 27, 2016, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights. By providing us with your data, you declare that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data according to the purposes and terms expressed here. The Company may modify this Privacy Policy to adapt it to legislative, jurisprudential, or interpretative developments by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and General Conditions that, if applicable, are collected for certain products or services, if such access involves any specialty in the protection of personal data.

1.2. Data Protection Officer (DPO)

In our organization, we have not appointed a Data Protection Officer (DPO). The DPO is a figure responsible for supervising and advising on matters related to the protection of personal data, in accordance with applicable privacy regulations. Since our organization is not subject to the obligation to appoint a DPO according to the data protection laws in force in our jurisdiction and/or due to our nature and activities, we have not named a specific person for this role.

However, despite the absence of a DPO, we are committed to protecting the personal data of our users and customers. We have established internal policies and procedures to ensure compliance with privacy laws and data security. If you have any questions or concerns related to privacy and data protection, we encourage you to contact our customer service team, who will be happy to assist you.

This statement is essential to inform users and customers about the organization’s status regarding the DPO and to convey that, despite the absence of this figure, measures are taken to protect the privacy of personal data.

2. Purpose of Personal Data Processing

The processing of your personal data is carried out for the following purposes:

Communication Management: At Studio Nina Dubarry, we understand the importance of privacy and the protection of your personal data. We use the information you provide exclusively for the purpose of managing communication with our customers. This includes, but is not limited to, responding to your inquiries, providing relevant information about our products or services, processing orders, and ensuring effective interaction within our customer-company relationship.

We are committed to using your personal data responsibly and protecting your privacy in accordance with applicable laws and regulations. Under no circumstances will we share your data with third parties for commercial purposes without your explicit consent.

2.1. Data Retention Period

We will retain your personal data from the moment you provide your consent until you revoke it or request the limitation of processing. In such cases, we will keep your data blocked for the legally required periods.

3. Legitimacy and Data Collection

The legitimacy for the processing of your data is the explicit consent given through a positive and affirmative action (filling out the corresponding form and checking the acceptance box of this policy) at the time of providing us with your personal data.

3.1. Consent to Process Your Data

By filling out the forms, checking the «I Accept the Privacy Policy» box, and clicking to submit the data, or by sending emails to the Company through the designated email accounts, the User expressly acknowledges having read and accepted this privacy policy and provides their unequivocal and express consent to the processing of their personal data in accordance with the stated purposes.

3.2. Data Categories

Only basic personal data are collected and used for communication management with customers.

4. Security Measures

As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been taken to ensure the security of personal data and to prevent their alteration, loss, processing, or unauthorized access, taking into account the state of the technology, the nature of the stored data, and the risks to which they are exposed, in accordance with Article 32 of the GDPR EU 679/2016.

5. Data Disclosure

No data transfers or international transfers of your data are foreseen, except those authorized by tax, commercial, and telecommunications legislation, as well as in cases where a judicial authority requires it.

6. User Rights

Any interested party has the right to obtain confirmation as to whether we are processing personal data concerning them or not. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only retain them for the exercise or defense of claims. For reasons related to their particular situation, data subjects may object to the processing of their data. The data controller will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. In accordance with current legislation, you have the following rights: the right to request access to your personal data, the right to request their rectification or deletion, the right to request the limitation of their processing, the right to object to their processing, the right to data portability, and the right to withdraw the consent granted. Likewise, you have the right to file a complaint with the Spanish Data Protection Agency.

6.1. How to exercise my rights?

To exercise your rights, you must contact the data controller, requesting the corresponding form for the exercise of the chosen right. Optionally, you can contact the competent Control Authority for additional information about your rights. To exercise your rights, you can contact us via email at: Please remember to enclose a copy of a document that allows us to identify you.

7. Consent for the Sending of Electronic Communications

Likewise, and in accordance with what is established in Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, by completing the data collection form and checking the corresponding box «I Accept the Sending of Electronic Communications,» you are granting express consent to send information to your email address, telephone, fax, or other electronic means regarding the Company.