In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), users are informed of the following data protection policy:

1. Data controller

Responsible: Yessica Delgado Fritz
NIF: 44005029A
Address: Pau Clarís, 72, 1º1ª – 08010 Barcelona
Contact email: info@royofritz.com

2. Personal data collected

The following personal data may be collected through the website:

• Name and email address (via newsletter subscription forms)

• Identification and contact information when creating an account or making a purchase (name, address, telephone number, email)

• Payment information through secure gateways (PayPal, Redsys)

Payment information is not stored on our servers. The process is managed by external gateways with their own privacy policies.

3. Purposes of the treatment

Personal data is collected for the following purposes:

• Manage product orders and shipments

• Customer service and after-sales support

• Sending informative and promotional newsletters (with prior consent)

• User account management

• Compliance with legal obligations (billing, accounting, etc.)

4. Legal basis for processing

• Execution of a contract (purchase of products)

• Consent of the interested party (newsletter)

• Compliance with legal obligations

• Legitimate interest of the controller

5. Recipients of the data

Your data may be communicated to:

• Payment gateways: PayPal, Redsys

• Email marketing platform: Mailchimp

• Courier companies for shipping products

• Public administrations when legally required

No international data transfers will be made unless required by Mailchimp (US), in which case compliance with EU-approved standard contractual clauses will be ensured.

6. User rights

You can exercise your rights of access, rectification, deletion, restriction, objection, and portability by submitting a written request to:

📧 info@royofritz.com

You can also file a complaint with the Spanish Data Protection Agency ( www.aepd.es ) if you believe your rights have not been respected.

7. Data retention

The data will be retained for the time necessary to fulfill the purpose for which it was collected, and subsequently for the applicable legal periods.

8. Security

Appropriate technical and organizational measures are applied to protect personal data.