Privacy Policy

Date: November 2024

What do we use the data for?

The following Privacy Policy sets out the terms under which we will process personal data at ALOHAS. This includes any personal data collected through our website www.alohas.com and in our physical stores, as well as any other data we process in the course of our business activities.

ALOHAS collects the following personal data for the purposes indicated below:

Contact Form: The personal data collected through this form will be used exclusively to manage the reservation of the requested service.
Create an Account Form: The personal data collected through this form will be used exclusively to manage user registrations on the website.
Newsletter: The data collected will be used exclusively to send you newsletters, as well as commercial communications about promotions and/or advertising of our services.
Purchase Form: If you purchase any of our products, your personal data will be used solely for administrative management in relation to the product purchased, as well as to analyze the purchasing behavior of each user to provide advantages to VIP customers, and for sending commercial communications based on ALOHAS's legitimate interest. This encompasses the entire process from invoicing the product to providing your data to the transport companies contracted by ALOHAS to make deliveries to the place you have indicated.
WhatsApp and SMS: If, during the purchase process or independently, you provide us with your mobile phone number, the data collected will be used exclusively to inform you about the status of your reservation, to send you commercial communications about promotions and/or advertising of our services if you are a customer based on the legitimate interest of the company. If you are not a customer, your personal data (mobile number) will be used to send you promotional and commercial messages, provided you have given us your express consent for this purpose.
Product Testing Program: We collect registration data to identify potential product testers and gather feedback. These data will be used exclusively to test products and improve the quality of our offerings. We are committed to protecting your privacy and ensuring the security of your data throughout this process.
Waitlist: In case a product you desire is not available, we may ask for your personal contact details to inform you when we have the said product in stock.
Candidate Data for ALOHAS Job Vacancies: If you send us your CV or have a job interview at our offices, your data will be used to fill possible job vacancies in our company. In the event of being hired, your personal data will be used exclusively to manage the employment relationship with ALOHAS.
Social Media: Any data you provide us with or share through Social Networks where ALOHAS has an active account will be treated according to the Privacy Policies of each Social Network. We recommend that you read and periodically review them before interacting with ALOHAS through the mentioned Social Networks.

    Data Retention Period and Legal Basis for Processing

    Data of Customers, Registered Users, Newsletter, and Contact Form

    Data of potential customers obtained through the contact form who do not end up purchasing any product will be automatically deleted one year after the contact, provided the potential customer has not shown further interest in our services or products. The legal basis for processing these data is the fulfillment of the contractual relationship.

    If you purchase any product, the data will be processed for the duration of the commercial relationship and, once concluded, for the time necessary to respond to possible legal liabilities, especially those related to consumer goods warranties.

    Regarding the data provided when registering as a user of ALOHAS, these will be retained until you unsubscribe as a user.

    The data provided for sending the newsletter will be kept until you indicate your desire not to receive further communications from us. You can exercise the right to object through the channels announced in this Privacy Policy.

    The legal basis for processing the data of potential customers and users who register on our website is the consent of the data subject.

    Personal data of customers will be processed to fulfill the contractual relationship.

    The legal basis for processing your data for sending electronic commercial communications (newsletter, WhatsApp, or SMS) is the consent of the data subject. In the case of having the status of a current customer, we may send you electronic commercial communications based on ALOHAS's legitimate interest.

    Legitimate interest constitutes a legal basis for processing, provided that the interests or rights and freedoms of the data subject do not prevail, considering the reasonable expectations of the data subjects based on their relationship with the controller.

    Legitimate interest applies only to current customers of ALOHAS, considering as such those customers who have completed a purchase process in the last two years. In any case, the recipient of the electronic communication may request their wish to unsubscribe in each communication, in which case their personal data will no longer be processed for this purpose.

    Labor Data and CVs

    Regarding labor data, these will be processed for the duration of said relationship and, once concluded, for the time necessary to respond to possible breaches in this area. In the event that you have sent us your CV or have an interview for a job vacancy, your personal data will be archived for a period of one year, after which, if not selected, they will be deleted from our systems.

    Data Sharing with Third Parties

    Your personal data will not be transferred to third parties without your consent, except for those service providers with whom we have a current service contract or where a law requires ALOHAS to make such a data transfer.

    In the event that you give us your express consent for this purpose, we may share personal data such as your email or WhatsApp with social networks in order to create profiles of current and potential buyers of ALOHAS.

    Third-Party Service Providers with access

    Our online store is hosted by Shopify Inc. They provide us with the e-commerce platform that allows us to sell our products and services to you.

    Your data is stored through Shopify's data storage, databases, and general Shopify application. They store your data on a secure server behind a firewall.

    Additionally, BSPK provides us with the online platform to interact with our customers through digital channels: SMS, email, and WhatsApp.

    Payment

    If you choose a direct payment processor to complete your purchase, Shopify stores your credit card data. It's encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction information is stored only as long as necessary to complete your purchase transaction. Once completed, your transaction information is deleted.

    All direct payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express, and Discover.

    PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.

    For more information, you can also read Shopify's Terms of Service or Privacy Statement.

    In general, the third-party service providers we use will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us.

    However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies regarding the information we are required to provide to them for your purchase-related transactions.

    For these providers, we recommend that you read their privacy policies so you can understand how these providers will handle your personal information.

    In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So, if you choose to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

    For example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

    Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website's Terms of Service.

    In case we use any third-party service provider with access to data located outside the European Union territory, you will be duly informed.

    Types of Data Processed:

    Contact Information

    • Language
    • First and last name
    • Email address

      Account Registration Information

      • First and last name
      • Email address
      • Phone number

        Waitlist

        • Email address

        Transaction Information

        • Email address
        • First and last name
        • Postal address
        • Bank details

          Newsletter Form

          • First and last name
          • Email address

            WhatsApp

            • Phone number
            • First and last name
            • Date of birth

            Social Networks

            • Profile
            • First and last name
            Job Vacancies
            • First and last name
            • Phone number
            • Email address
            • Work experience
            • Academic background
            You have the right to
            • Access to your personal data.
            • Rectification of your personal data.
            • Erasure of your personal data (right to be forgotten).
            • Lodge a complaint or a written request for the protection of your rights before the Spanish Data Protection Agency (through their website: https://www.aepd.es or at c. Jorge Juan, 6; 28001 - Madrid) or before the regional data protection agency if one exists.
            • Be informed of any security incident that may affect your rights.
            • Restrict processing.
            • Data portability.

                Forms

                PURCHASE FORM

                Company name ALOHAS SANDALS
                Purpose Manage the purchase. Payment management Keep you informed of our products and services.
                Legitimation Consent. Means of payment regulations
                Recipients Your data will not be shared with any third party without your prior, express consent or for legal reasons only.
                Rights  You can access, rectify or erase data and exercise the rights indicated in our Privacy Policy.
                More information See the Privacy Policy.
                 
                 

                CONTACT FORM

                Company name ALOHAS SANDALS
                Purpose Manage the request.
                Legitimation Consent.
                Recipients Your data will not be shared with any third party without your prior, express consent or for legal reasons only.
                Rights  You can access, rectify or erase data and exercise the rights indicated in our Privacy Policy.
                More information See the Privacy Policy.
                 

                NEWSLETTER FORM

                Company name ALOHAS SANDALS
                Purpose To manage the sending of Newsletters.
                Legitimation Consent.
                Recipients Your data will not be shared with any third party without your prior, express consent or for legal reasons only.
                Rights  You can access, rectify or erase data and exercise the rights indicated in our Privacy Policy.
                More information See the Privacy Policy.
                 

                CREATE AND ACCOUNT FORM

                Company name ALOHAS SANDALS
                Purpose To manage the website user accounts.
                Legitimation Consent.
                Recipients Your data will not be shared with any third party without your prior, express consent or for legal reasons only.
                Rights  You can access, rectify or erase data and exercise the rights indicated in our Privacy Policy.
                More information See the Privacy Policy.