PRIVACY POLICY

We hereby inform you that the website www.nicolishop.com (the "Website") is operated by NICOLI NETWORK, S.L. (hereinafter, "Nícoli," with Tax ID B-848508094 and registered offices at C/Londres, 16. 28232 Las Rozas, Madrid. "You" and "Your" refers to you as a user of our Website.

This Privacy Policy intends to inform you of how we collect, define and use Your Information. This Privacy Policy, our Legal Notice, and our Cookies Policy make up the "Terms and Conditions" of our website.

Your access to and use of the Website implies your full acceptance of the Terms and Conditions of the Website. In this regard, if you access and use our Website, you agree to comply with the provisions indicated in the aforementioned legal documents. The provision of the Website service is limited to the period during which you are connected to the Website or any of the services provided through it. Therefore, you must carefully read this Privacy Policy whenever you intend to use the Website, as it may change.

Definitions

• Personal data: All information about an identified or identifiable individual, such as: full name, national ID, postal address, email address, images, likes, interests and hobbies.

Data controller: The individual or legal entity, public authority, service or other body that, alone or together with others, determines the purposes and means of processing. In this case, and unless otherwise stated, Nícoli is data controller for data processed at www.nicolishop.com.

Data processor: The individual or legal entity, public authority, service or other body that processes personal data on behalf of the data controller. In other words, they are Nícoli service providers, who may access certain personal data for the provision of their services. The relationship between Nícoli and its data processors will always be governed by a contract that specifically regulates the terms of access to data, as required by current legislation.

Recipient: The individual or legal entity, public authority, service or other body to which personal data is sent, whether or not a third party.

Consent of the data subject: Any free, specific, informed and unambiguous expression of the data subject's wishes through which the data subject accepts, either through a declaration or a clear affirmative action, the processing of their personal data.

Who is the data controller for your personal data?

NICOLI NETWORK, S.L.
C/Londres, 16. 28232 Las Rozas (Madrid)
Tax ID B-848508094
Telephone: 91 591 53 93
Email: info@nicolishop.com

Information processed as data controller

When you browse our website, you can provide us with data in various ways, including:

1. Data that you provide us when using the website's data forms or when you communicate with us using means such as email.
   The data will be processed for the purpose specified in each form. If you send us a message, we will process it for the purpose of managing any communications that may be established, based on your request.
   We can obtain your express consent for the purpose of sending you marketing communications through each data collection form, or by sending a request in an email. In these cases, we will always inform you in advance of all the aspects required by applicable data protection regulations.
   Furthermore, if once you have given your consent, you do not wish to continue receiving marketing communications, you can revoke your consent by sending an email to info@nicolishop.com.

2. Data that the website automatically collects during browsing, if you have previously given your consent under the terms specified in this Privacy Policy and the Cookies Policy.
   Like most commercial websites, our website uses a technology called "cookies" (small pieces of data your browser stores on your device's hard drive) and web server logs to collect information on how our website is used.
   For more information on how we use cookies, please see our Cookies Policy.

For what purposes do we process your personal data?

At Nícoli we process the data you provide to us in order to:

1. Manage your registration on our website: if you decide to register as a user on our website, we will process your data to identify you as a registered user and give you access to its different functionalities, products and services that will be available to you.

2. Your purchases will be linked to your account so that you can access the information in one place.

3. Manage any enquiries you may make.

4. For the development, fulfilment and execution of the contract between the parties, including fraud prevention actions.

5. If you have subscribed to our Newsletter, we will use your details to manage the communications and promotional actions for our products and services.

6. If you have submitted your CV, we will process the details you have provided us with the purpose of managing your application for job vacancies at Nícoli.

What is our legitimate basis for processing your data?

The legal basis for processing your data is:

1. The consent you provide when you accept the privacy policy when you request registration on our website or request information about some of our products or services.

2. Execution of a contract or pre-contractual measures for managing the online purchase and sale process and for sending your CV, respectively.

3. Legitimate interest in carrying out the necessary actions to detect and prevent possible fraud in the use of our website.

To what recipients may your data be disclosed?

No transfer of data to third parties is planned, except when legally mandated. Without prejudice to the foregoing, Nícoli informs you that the provision of some of its Services and/or products require storage at Nícoli or third-party installations and access by it or third parties to your data, requiring Nícoli to comply with the applicable current legislation. For these purposes, Nícoli informs you that it will entrust processing to third parties such as tax and job administration services, storage on both physical and cloud servers and services with third parties that Nícoli might use to confirm the selection processes carried out if we process CV data.
In this context, data processing will be carried out generally by suppliers located in the European Economic Area or in countries which can evidence an appropriate level of protection similar to that of the European Union. If international data transfers are made to third countries that are not included in the aforementioned list, Nícoli will use the European Commission's Standard Contractual Clauses as a guarantee for their execution.

What are your rights when you supply us your personal data?

You have the right to obtain confirmation as to whether or not we are processing your personal data. As a data subject, you have the right to access your personal data, as well as to request rectification of inaccurate data or, where applicable, to request its deletion when, among other reasons, the data is no longer necessary for the purposes that it was collected. In certain circumstances, you may request the restricted processing of your data, in which case we will only keep it for the exercise or defence of claims. In certain cases and for reasons related to your particular situation, you may object to the processing of your data. We will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
In cases where the processing of your data is based on your consent, you may revoke it at any time.
In cases where it is legally applicable, you will have the right to data portability, which means you have the right to receive your personal data which we are processing, and store it on your own device. This right also entitles you to request that we send your data to another data controller.
Similarly, if you believe that there is a problem or an incident in relation to data processing, you can contact the entity through the contact address indicated in this document, and in any case, you are entitled to file a claim with the Supervisory Authority regarding personal data protection.

To exercise your rights, you must send a request to the email address info@nicolishop.com attaching a copy of your national ID, or another document that legally identifies you.

How have we obtained your personal data?

The personal data subject to processing has been provided by you by completing the corresponding forms, signing a Contract, or, where applicable, by sending your CV.

Data subject to processing

In general, the data to be processed is that specified in each data form. In any case, Nícoli informs you of the processing of the following data categories:

• Status as registered user.

• Identifying details.

• Postal address, email address and telephone number.

• Commercial information (for example, if you are subscribed to our newsletter).

• Financial and transactional information (e.g. payment or card details, information about your purchases, orders, refunds, etc.).

If you submit your CV, we will process the following data categories:

• Identifying details.

• Postal address, email address and telephone number.

• Education.

• Professional experience.

• No specially protected data is processed.

Obligation to provide data and consequences of not providing it

When we ask you to fill in your details to give you access to some functionality or service on our website, we will mark some fields as mandatory, as it is the data that we need to be able to provide you with the service or give you access to the functionality in question. If you decide not to provide us with this data, you may not be able to complete the registration or you may not enjoy these services or functionalities.

Automated decisions

If you have subscribed to our Newsletter, automated decisions will be made in order to tailor the commercial proposals and electronic newsletters that we send you to your interests and preferences. We will prepare communications based on these criteria: type of clothes selected (if children's or teenagers' clothing is purchased) and the city or Autonomous Community from which the purchase is made.

How long will we store your personal data for?

In relation to the registration process, we will process your data during the time when you maintain the status of registered user.
With regard to the execution of the purchase and sale contract, we will process your data for the time necessary to manage the purchase of the products or services you have acquired, including possible refunds, complaints or claims associated with the purchase of the particular product or service.
In the case of requests, we will process your data for as long as necessary to deal with your request or query.
If you have agreed to receive marketing information or subscribed to the newsletter, we will process your data until your consent is revoked.
If you have submitted your CV, we will process the details you have provided us during the selection process.
Regardless of the previous periods, we will keep the data for as long as liability arising from the processing may arise. Once actions are time-barred in each case, we will delete the personal data.

p style="text-align: justify;">Security

Nícoli has implemented security measures in accordance with the risks inherent to the processing of personal data.
The security measures implemented are designed to provide an adequate level of security, including confidentiality, taking into account industry standards and the cost of application with regard to the risks and nature of the personal data subject to processing.
When assessing the risk in relation to data security, the risks arising from the processing of personal data have been taken into account, such as the destruction, loss or accidental or unlawful alteration of personal data sent, stored or otherwise processed, or unauthorised disclosure or access to said data, which may in particular cause physical, material or immaterial damages.