Privacy Policy and use of Cookies | BUFF®

When you visit this website (the "Website") of ORIGINAL BUFF, SA (ORIGINAL BUFF®) and, in particular, when you contact us or sign up to receive commercial information and communications, ORIGINAL BUFF collects the personal data of each user (the "User"), which is provided with due care, and processes it based on the provisions of this privacy policy.

1. CONTROLLER

The controller of the personal data provided by the User is:

  • Company name: ORIGINAL BUFF, S.A.
  • REGISTERED ADDRESS: C/ França nº 16, Igualada (Barcelona) 08700, Spain
  • TAX ID: A58034000
  • Registration: Barcelona Commercial Registry, section 8, page number 119299.

2. PURPOSE OF THE PROCESSING

All data under the responsibility of ORIGINAL BUFF® is protected by appropriate technical and organisational security measures that guarantee its confidentiality in compliance with the current legislation on data protection.

The information provided by you includes, but is not limited to, your contact information (first name, surname, billing and delivery address, date of birth (to prevent people under 14 years of age from registering on the site), email address, and telephone number so that we can contact you quickly with questions about your order or service; your bank account or card details to pay for your purchases, although we do not store or process your card details ourselves; they are processed and stored by the financial institutions and payment platforms; if you have created an online profile, the preference or interests stored in your profile; and details and history of contacts in the event that you have used the "contact" option on the ORIGINAL BUFF Website.

PURPOSES

The personal data you provide will be used mainly for the following purposes:

a) To manage the general administration and development of your relationship with ORIGINAL BUFF®

-To manage your registration as a user of the Platform. If you decide to register as a user in our Platform, we need to process your data to identify you as a user of the Platform and give you access to its different features, products and services available to you as a registered user. You can cancel

your registered user account by contacting us at [email protected]

-If you have provided us with your personal data in connection with an order or purchase of a product, your personal data will be used for purposes relating to your order, including optional participation in quality surveys about the products or services provided.

-If you have provided us with your personal data in relation to a "contact", your data will be used to process and respond to your request if necessary.

b) For marketing purposes:

- If you have provided us with your personal data in relation to signing up for our newsletter, we will process your personal data to manage your subscription, including sending tailored information about our products or services, news about BUFF® by different methods (such as e-mail), always if you have given your consent to be contacted for this purpose by checking the acceptance box at the time of collection of your data.

- To carry out promotional actions (for example, to hold competitions, draws and sports events). When you participate in any promotional action, you authorise us to process the data you provide according to each promotional action and you allow us to disclose it through various media such as social media or the Platform itself.

Please note that this data processing involves an analysis of your user or customer profile to determine what your preferences are and, therefore, which products and services may be best suited to your style when sending you information. This analysis is carried out solely and exclusively through the installation of cookies. For more information, click HERE.

c) Usability and quality analysis:

-To improve our services: If you access our Platform, we inform you that we will process your browsing data for analytical and statistical purposes; i.e. to understand the way in which users interact with our Platform so that we can make improvements to it.

3. LAWFUL BASIS

a) To manage the general administration and development of your relationship with ORIGINAL BUFF®:

The legal basis of the processing is the performance of the contractual relationship between the User and ORIGINAL BUFF®, with the processing of personal data being strictly necessary in order to use the Website and, therefore, in order to be able to place an order and/or benefit from the services made available to Users through the Website.

b) For marketing purposes:

With regard to sending electronic commercial communications, the legal basis is the consent given by the User, which can be revoked at any time without affecting the provision of the service offered by ORIGINAL BUFF®.

In order to show you tailored information, we consider that we have a legitimate interest in profiling the information we have about you (such as your browsing, preferences, etc.) and the personal data you have provided, such as language, because we believe that the processing of this data is beneficial to you too because it allows you to improve your user experience and access information according to your preferences.

c) Usability and quality analysis:

We consider that we have a legitimate interest in analysing the usability of the Platform and the degree of user satisfaction, as we believe that the processing of this data is beneficial to you too because its purpose is to improve the user experience and offer a higher quality service.

4. WILL WE SHARE YOUR DATA WITH THIRD PARTIES?

Users' personal data will only be used for the purposes specified above. It can only be accessed by those third parties to whom ORIGINAL BUFF® is legally obliged to provide it, as well as by companies entrusted with technological, logistics, transport and delivery services, customer service services, internal management services and services related to the company's marketing and advertising.

ORIGINAL BUFF® may disclose your personal data to the companies in its Group, which are located both inside and outside the European Union. In such cases, international data transfers shall be carried out with the guarantees provided for in the applicable legislation.

In particular, ORIGINAL BUFF® may disclose the personal data to its subsidiaries – BUFF GmbH (Germany), BUFF Inc, (USA), BUFF Canada Ltd (Canada) and BUFF UK Ltd (UK) – as well as to its official distributors,

customers and suppliers, who will process it for the purposes described above. If they are located outside the European Union and European Economic Area, the international data transfers will be carried out with the guarantees provided for in the applicable legislation.

In order to fulfil the purposes indicated in this Privacy Policy, it is necessary for us to give access to your personal data to third parties that support us in the services we offer you, namely:

- Financial institutions and payment platforms.

- Technology service providers: New Relic, which traces the users of our website to detect faults in the system.

- Logistics, transport and delivery service providers and partners.

- Online sales partners (except for France, Spain and Germany): EshopWorld and international distributors.

- Providers of Customer Service-related services (SalesSupply for Germany and France).

- Marketing and advertising services-related suppliers and partners:

o Google Analytics: cookies for tracking user behaviour on our website.

o Nosto: cookies for making tailored product recommendations to our users.

o Trusted Shops: so that users of our website can evaluate the service provided by Original Buff.

o Dotmailer: a platform for sending email communications to our customers.

o Facebook: to segment our website users and send them advertising for the BUFF® brand via Facebook.

o Belboon: cookies for knowing the discount codes used.

5. RETENTION PERIOD

ORIGINAL BUFF® retains Users' personal data for as long as the User is a registered User of the Website or revokes his/her consent to the sending of promotional communications, and subsequently only in order to comply with its legal obligations.

In order to manage the sale or service contract requested, we will process your data for the time necessary to manage the purchase of the products or services purchased, including possible returns or associated complaints or claims.

Regardless of whether we process your data for the time strictly necessary to fulfil the relevant purpose, we will subsequently retain it, duly stored and protected for as long as liabilities may arise from the processing, in compliance with the legislation in force at any given time. Once the

possible actions in each case have expired, we will delete the personal data.

In any case, the personal data will be kept locked if it is not necessary for the purpose for which it was collected and until its final cancellation.

6. WHAT ARE YOUR RIGHTS WHEN YOU GIVE US YOUR DETAILS?

If necessary, you can exercise, free of charge, your rights to access, rectify or delete your data, restrict processing, object to processing, the right to the portability of your data, and the right to revoke the consent given in relation to the sending of commercial communications, subscription to newsletters, participation in events and promotions, etc. by writing to ORIGINAL BUFF, S.A. at C/ França, 16, 08700, Igualada (Barcelona) Spain or by sending an e-mail to [email protected], writing “Original Buff – Privacy Policy” on the envelope or in the subject of the message.

You may also lodge a complaint with the competent supervisory authority: Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php).

Furthermore, when the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.

7. WHAT HAPPENS IF YOU PROVIDE US WITH THIRD-PARTY DATA?

If you provide the personal details of a third party, you must prior to the inclusion of such data, have informed the third party and requested his/her consent for the purposes set out here, so that ORIGINAL BUFF® can use it to attend to the requests made by you or the said third party.

8. CHANGES TO THE PRIVACY POLICY

This privacy policy may be modified from time to time to adapt to new situations and the current legislation, and Users will be informed accordingly.