Privacy policy

In summary…

  1. Who are we? We are PIP AVANT, S.L. (formerly Itziar Castillo Cuesta) and we handle your personal data as data controllers. This means that we take responsibility for keeping the data you have provided safe. 

  2. Why do we use your data? We will use your data (obtained both online and in person), among other purposes, to manage your registration as a user, manage the purchase of products or services, respond to your inquiries, as well as to send you our personalized communications if you wish. 

  3. Why do we use it? We are legitimized to process your data for various reasons. The main reason is that we need to process it to execute the contract you accept with us when you register and make a purchase or enjoy any of our services or features. We also use your data for other reasons, for example, to respond to your inquiries or to send you newsletters that you have requested to receive. 

  4. Who do we share your data with? We will share your data with service providers who help us or support us in order to offer you the service. 

  5. Your rights → you have the right to access, rectify, or delete your personal data. In some cases, you also have other rights, for example, to object to our use of your data or to port it, as we will explain in detail below. 

We invite you to read our complete Privacy and Cookies Policy below to understand in detail how we will use your personal data and the rights you have in relation to it. 


Before we begin…

  • In this Privacy Policy, you will find all the relevant information that applies to the use we make of our customers' and users' personal data, regardless of the channel or medium (online or in person) you use to interact with us. 

  • If you want information on how we use cookies and other similar devices that may be installed on our customers' and users' terminals, we recommend that you consult the Privacy Policy. 

  • We are transparent about what we do with your personal data, so you understand the implications of the uses we carry out or the rights you have in relation to your data: 

    • We permanently make all the information in this Privacy and Cookies Policy available to you, which you can consult whenever you deem appropriate. 

    • Additionally, you will also find information about each processing of your personal data as you interact with us. 

  • Some names that we will use in this Policy of Privacy:

    • When we talk about our Platform, we generally refer to any of the channels or digital means or in person that you have used to interact with us. The main ones are: 

      • Our Website. 

      • In person, or in one of the physical stores. 

 

  1. Who is responsible for the processing of your data?

The entity responsible for your data is PIP AVANT, S.L., with NIF: B19789833 (hereinafter: the company), an entity that currently operates in Spain selling cosmetic products, among others. 

  • Tax Address: Avenida Tres, 14, Santa Perpetua de Mogoda, 08130 (Barcelona), Spain. 

  • Email of the Data Protection Officer: [email protected]

  1. For what purpose do we process your personal data?

Depending on the products, services, or functionalities you want to enjoy at any given moment, we will need to process certain data, which will generally be, as applicable, the following: 

  • Your identifying data (name, surname, image, language, country from which you interacted with us, contact data, etc.)

  • Economic and transactional information (payment or card details, information about your purchases, orders, returns, etc.)

  • Connection, geolocation, and navigation data (location data, device identification number, advertising ID, etc.)

  • Commercial information (for example, if you are subscribed to our newsletter)

  • Data about your tastes and preferences

  • Special categories of data may be necessary (for example, health data in cases where it is necessary to manage certain incidents related to cosmetic products)

Remember that when we ask you to provide your personal data to give you access to a functionality or service of the Platform, we will indicate some fields as mandatory, as they are data we need to provide you the service or grant you access to the functionality in question. Please note that if you decide not to provide us with that data, you may not be able to complete your registration as a user or enjoy those services or functionalities. 

In other cases, we may obtain information passively by using tracking tools, such as browser cookies or other similar technologies from our Platform or from the communications we send you. In In certain cases, a third party may have provided us with information about you when using a feature or service of the Platform, for example, if they sent you a gift card or if they are sending an order to your address. 

In such cases, we will only process your data in relation to that feature or service, in accordance with the provisions of this Privacy and Cookies Policy.
Depending on how you interact with our Platform, we will process your personal data for the following purposes: 

  1. To manage your registration and identification as a user of the Platform

If you decide to register as a user on our Platform, we need to process your data to identify you as a user and give you access to its different functionalities, products, and services available to you as a registered user. You can cancel your registered user account by contacting us through Customer Service.

We inform you that the data we collect about your activity, obtained through the different channels of the Platform, which includes your purchases, will remain linked to your account so that all information can be accessed at once.

For your identification on our Platform, it may be necessary for you to undergo an identity verification process, for which various methods will be offered to you. This process will ensure that you are the owner of the contact data you are using.


  1. For the development, fulfillment, and execution of the sales or service contract you have contracted with Us on the Platform. 

This purpose includes the processing of your data primarily for: 

  • Contacting you regarding updates or informational communications related to the functionalities, products, or services contracted, including sending quality surveys about the products or services provided.

  • Managing the payment for the products you purchase, regardless of the payment method used. For example: 

    • If when purchasing any of our products through the Website, you choose to activate the feature to save your payment data and shipping address for future purchases (if that feature is available), we will need to process the indicated data for the activation and development of that feature. Consent for the activation and development of this feature allows your payment data to be auto-filled in subsequent purchases so that you do not have to re-enter it in each new process, and it will be understood as valid and current for future purchases. You can modify or delete your payment data at any time through the corresponding section for payment information.

  • Activating the necessary mechanisms to prevent and detect the misuse of the Platform, for example, during the purchase and return process, as well as potential fraud against you and/or against us. If we consider that the operation may be fraudulent or We detect abnormal behaviors with indications of being fraudulent uses of our functionalities, products, and services; this treatment may have consequences such as blocking the transaction or canceling your user account.

  • Manage possible changes or returns once you have made a purchase and manage requests for information about product availability, product reservations through the Platform, depending on whether such options are available at any given time. 

  • For billing purposes and to make available the tickets and invoices for the purchases you have made on the Platform.

  • Ensure your use of other functionalities or services as long as they are available, such as the purchase, receipt, management, and use of the Gift Card or the Gift Ticket, as well as facilitating your access and use of the Wifi that we provide to our customers in the Physical Store. 

  • Finally, we may process your data to comply with legal obligations that may apply.


  1. To attend to the requests or inquiries you make through the Customer Service channels. 

We only process personal data that is strictly necessary to manage or resolve your request or inquiry.

If you use the telephone channel, the call may be recorded to address your request and ensure its quality.

If available, and you decide to use WhatsApp as a channel to communicate with Customer Service, we will provide your phone number to WhatsApp Inc. (a company located in the U.S.) to verify that you are a user of this service. We recommend that you review your privacy settings and read WhatsApp's privacy policy for more detailed information on how WhatsApp uses the personal data of users who use its services.

If available, and you decide to contact Customer Service through the chat service of a social network or another partner, some of your data, such as your name or username, will be imported from your social network or partner account. You should also be aware that the data you enter in this service will be available to your social network or partner and will be subject to their respective privacy policies. Therefore, we recommend that you review your privacy settings and read the privacy policy of the social network or partner for detailed information on how they use your personal data when using their services.


  1. For Marketing purposes

This purpose includes the processing of your data mainly for: 

  • Personalizing the services we offer you and being able to make recommendations based on your interaction with us on the Platform and the analysis of your user profile (for example, based on your purchase and browsing history).

  • As far as we can... subscribe to our Newsletter, we will process your personal data to manage your subscription, including sending personalized information about our products or services through various means (such as email or SMS). Likewise, we may send you this information through push notifications if you have activated them on your device.

    • Therefore, please note that this data processing involves analyzing your user or customer profile to determine what your preferences are and therefore which products and services best match your style when sending you information. For example, based on your purchase and browsing history (namely, based on the items you have clicked on), we will make suggestions about products that we believe may interest you and, if you are a registered user, we will provide you with the "cart recovery" functionality.

    • Remember that you can unsubscribe from the Newsletter at any time and at no cost through the "Newsletter" section of the Platform, as well as through the instructions we provide in each communication. If you do not wish to receive push notifications, you can disable this option on your device.

  • Show you advertising on the Internet that you can see when browsing websites and apps, for example, on social networks. The advertising you see may be displayed randomly, but at other times it may be advertising that is related to your purchase history, preferences, and browsing.

    • If you are a social media user, we may provide certain information to those with whom we collaborate so they can show you ads for our brand and, in general, offer you or other similar users, advertising taking into account your profile on those social networks. If you want information about the use of your data and how ads work on these social networks, we recommend that you review the privacy information on the social networks you participate in.

    • Additionally, we use your data to carry out measurement and segmentation analyses of the ads we show to users on some partner platforms. To do this, we collaborate with these third parties who provide us with the necessary technology (for example, through cookies, pixels, SDK) to use these services. Please note that while we do not provide identifiable personal data to these partners, we communicate some unique identifier (for example, the advertising identifier associated with the device, identifier of some cookie, etc.). If you want more information on this, please review our Cookie Policy. Likewise, you can reset your advertising identifier or disable ad personalization on your device by modifying your preferences in the settings section of your device.

  • Data enrichment: When we obtain your personal data from various sources, we may combine them under certain circumstances to improve our understanding of your needs and preferences regarding our products and services (including purposes for analysis, user profile generation, marketing studies, surveys of quality and improvement of interaction with our customers). We refer, for example, to the combination of information we can make if you have a registered account and, with the same email address or phone number linked to your account, you make purchases as a guest; or to information collected automatically (such as IP addresses, MAC or metadata) that we can link with the information you have directly provided us through your activity on the Platform or in any of our stores (for example, information related to your purchases, whether in physical stores or online, your preferences).

  • Carry out promotional actions (for example, for the development of contests or sending your saved items list to the email you specify). By participating in any promotional action, you authorize us to process the data you provide based on each promotional action and we can communicate them through various means such as social networks or on the Platform itself. In each promotional action you participate in, the legal bases will be available where we will provide you with more detailed information about the processing of your data.


  1. Usability and quality analysis for the improvement of our services

If you access our Platform, we inform you that we will process your data for analytical and statistical purposes, that is, to understand how users interact with our Platform and with the actions we can carry out on other websites and apps and thus be able to introduce improvements. Likewise, we sometimes carry out quality actions and surveys aimed at understanding the degree of satisfaction of our customers and users and detecting those areas where we can improve.


  1. What is the justification for the processing of your data?

The legal basis that allows us to process your personal data also depends on the purpose for which we process them: 

  1. Manage your registration as a user of the platform and identification

The processing of your data is necessary for the execution of the terms that govern the use of the Web. In other words, for you to register as a user on the Platform, we need to process your personal data, as otherwise we would not be able to manage your registration. Additionally, in our Physical Stores, you can register and create a profile that allows you to enjoy personalized benefits, such as having all your electronic tickets grouped together. For this functionality, the basis on which we process your data is your own consent.

We consider that we have a legitimate interest in linking your purchases and the data we collect about your activity through the different channels of the Platform to your account.


  1. Development, fulfillment, and execution of the sales or service contract.

The processing of your data is necessary for the execution of the sales or service contract that binds us to you. This includes the contact data we process to offer you, the electronic tickets of your purchases in the Stores. Physics and facilitate the use of them. It is possible that some data processing related to the purchase process is activated only because you request it or authorize us, such as storing payment data for future purchases or processing data necessary to scan purchase tickets through the Wallet section of the App or to inform you about the availability of our products (in case this functionality is available). In these cases, the basis on which we process your data is your own consent. We believe that we have a legitimate interest in making the necessary verifications to detect and prevent possible fraud or fraudulent use of the Platform, for example, when making a purchase or a return, or to analyze the effectiveness of various services included in the Platform, such as the size recommender. We understand that processing this data is beneficial for all parties: for you, as it allows us to put measures in place to protect you against attempts at fraud by third parties; for us, because it allows us to prevent misuse of the Platform; for all our customers and society, because it also protects their interest in ensuring that fraudulent activities are discouraged and detected when they occur.


  1. Customer service

We believe that we have a legitimate interest in attending to the requests or inquiries that you make through the various existing contact methods. We understand that processing this data is also beneficial for you as it allows us to assist you adequately and resolve the inquiries raised. When you contact us, particularly for managing incidents related to your order or the product/service purchased through the Platform, the processing is necessary for the execution of the sales contract. When your inquiry is related to the exercise of the rights we inform you about below, or with claims related to our products or services, what legitimizes us to process your data is the compliance with legal obligations on our part. In some cases related to product claims, it may be necessary for the processing of data to be carried out to ensure the public interest in public health.


  1. Marketing

The legitimate basis for processing your data for marketing purposes is the consent you provide us, for example: when you agree to receive personalized information through various means, when you authorize the sending of push notifications to your device, when you give your consent through the configuration of cookies or the privacy settings of your device, or when you accept the legal bases to participate in a promotional action or to publish your photographs on the Platform or on our social media channels. To offer you personalized services or show you personalized information, whether on our Platform or on third-party platforms, as well as to carry out data enrichment, we consider that we have a legitimate interest in profiling with the information we have about you (such as your browsing activity, preferences, or purchase history) and the personal data you have provided us, such as age range or language, as we understand that processing this data is also beneficial for you because it enhances your user experience and allows you to access information according to your preferences.

  1. Usability and quality analysis

We consider that we have a legitimate interest in analyzing the usability of the Platform and the degree of user satisfaction, as we understand that processing this data is also beneficial for you because the purpose is to improve the user experience and provide a higher quality service.


  1. How long will we keep your data?

The retention period of your data will depend on the purposes for which we process them, as explained below: 

  1. Manage your registration as a user of the Platform and identification

We will process your data for as long as you maintain the status of registered user (i.e., until you decide to delete your online account or your store profile).

  1. Development, compliance, and execution of the purchase or service contract

We will process your data for the time necessary to manage the purchase of products or services, including possible returns, complaints, or claims associated with the purchase of the specific product or service. In some cases, we will only process the data until you decide, such as in the case of payment data that you have requested us to store for possible future purchases (if this functionality is available).

  1. Customer service

We will process your data for as long as necessary to address your request or inquiry, as well as for the time periods established in the regulations that apply in each case

  1. Marketing

We will process your data until you unsubscribe or cancel your newsletter subscription. Additionally, we will show you personalized ads until you change the device, browser, or cookie settings, which will revoke that permission. If you participate in promotional actions, we will keep your data for a period of six (6) months from the end of the action.

  1. Usability and quality analysis

We will process your data specifically during the time we conduct a specific quality action or survey or until we anonymize your browsing data.

Regardless of whether we process your data for the strictly necessary time to fulfill the corresponding purpose, we will subsequently keep them duly stored and protected for the time during which responsibilities arising from the processing may arise, in compliance with the regulations in force at each moment. Once the possible actions in each case prescribe, we will proceed to delete the personal data.


  1. Will we share your data with third parties?

To fulfill the purposes indicated in this Policy of Privacy and Cookies, it is necessary for us to provide access to your personal data to third parties that assist us in the services we offer you, for example: 

  • financial entities, 

  • fraud detection and prevention entities, 

  • technology and analytics service providers, 

  • logistics, transportation, and delivery service providers and their associated establishments, 

  • customer service-related service providers, 

  • marketing and advertising-related service providers and collaborators, such as advertising agencies, advertising partners, or social networks that, in certain cases, may act as joint controllers. 

For service efficiency, some of the mentioned providers are located in territories outside the European Economic Area that do not provide a level of data protection equivalent to that of the European Union. In such cases, we inform you that we transfer your data with adequate safeguards while always maintaining the security of your data, as we use the most appropriate tools for international data transfer, such as Standard Contractual Clauses or any other relevant supplementary measures. You can consult the content of the Standard Contractual Clauses at the following link: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-dataprotection/standard-contractual-clauses-scc_en. 

In the event that we sell or transfer all or part of our business or our assets to another company, or engage in any other commercial activity as a result of a corporate reorganization, we may disclose your personal data to the potential recipient of the business or assets. 

In the case of such a sale or transfer, we would make reasonable efforts to ensure that the beneficiary treats the personal information you have provided in accordance with our Privacy Policy. In this case, we consider that we have a legitimate interest based on the reorganization of our corporate structure.

On the other hand, if you decide to use the Platform in different markets (i.e., creating registered user accounts in different markets with the same email address), we may need to disclose or transfer the information linked to your account or your activity to the brand companies operating in those markets, to the extent that they are directly involved in achieving any of the objectives described in section 2. We consider this necessary to meet our mutual interests and preferences.

  • How does Google use your data?

Google's advertising services are testing new ways to publish and measure digital advertising that better protect the privacy of online users through the initiative Privacy Sandbox in Chrome and Android. Users with the relevant Privacy Sandbox settings enabled in Chrome or Android will be able to see ads relevant advertising services from Google based on data from Topics or Protected Audience stored in your browser or mobile device. Google’s advertising services may also measure ad performance with data from attribution reports stored in your browser or mobile device. More information about Privacy Sandbox

How Google uses information from websites or applications that use our services

A large number of websites and applications use Google services to enhance their content and offer it for free. By integrating our services, these websites and applications share information with Google.

For example, when you access a website that uses advertising services like AdSense, which includes analytics tools like Google Analytics or embeds video content from YouTube, the web browser automatically sends certain information to Google. The data we receive includes the URL of the page you accessed and its IP address, among others. We may also include cookies in your browser or read those already stored in it. Applications that use Google’s advertising services also share information with us such as, for example, the name of the application and a unique identifier for advertising.

Google uses the information shared by websites and applications to provide, maintain, and improve its services, develop new services, measure the effectiveness of advertising, protect users from fraud and abuse, and personalize the content and ads that appear on Google or on the websites and applications of our partners. Please see the privacy policy for more information on how we handle data for each of these purposes and the page on advertising for more information about Google ads, how your information is used in the context of advertising, and how long Google retains this information.

If you want to know more about how Google uses your data, you can check this link for more information: https://business.safety.google/privacy/

  1. What are your rights when you provide us with your data?

We are committed to respecting the confidentiality of your personal data and ensuring your rights are exercised. The Co-Controllers have agreed that you can exercise them at no cost by sending us an email to a unique email address [email protected], simply indicating the reason for your request and the right you wish to exercise. If we deem it necessary to identify you, we may request a copy of a document verifying your identity.

Likewise, we can offer you the possibility to exercise your rights and configure your privacy preferences when using some of our services or by providing specific channels within our Platform. In particular, regardless of the purpose or legal basis under which we process your data, you have the right to:

  • Request access to the data we hold about you. We remind you that if you are a registered user on the Platform, you can also consult this information in the section corresponding to your personal data.

  • Request us to rectify the data we already have. Remember that if you are a registered user on the Platform, you can also access the section corresponding to your personal data in your account to modify or update your personal data. In any case, please keep in mind that by actively providing us with your personal data in any way, you guarantee that they are true and accurate and you commit to notifying us of any changes or modifications to them. Any loss or damage caused to the Platform or the person responsible for the Platform or any third party due to the communication of erroneous, inaccurate, or incomplete information in the registration forms will be the sole responsibility of the user. Please remember that as a general rule, you should only provide us with your own personal data, not those of third parties, except as permitted in this Privacy and Cookies Policy.

  • Request us to delete your data to the extent that they are no longer necessary for the purpose for which we need to process them as we have informed you above, or that we no longer have the legitimacy to do so.

  • Request us to limit the processing of your data, which means that in certain cases you may request us to temporarily suspend the processing of the data or that we retain it beyond the necessary time when you may need it.

If you have provided your consent for the processing of your data for any purpose, you also have the right to withdraw it at any time. Some of the ways in which you can withdraw your consent are explained in section 2, where we explain for what purposes we process your data. 

If you do not want information to be sent to third parties to show you ads, you have several means, such as changing preferences on the device, the browser, or the cookie settings, reviewing the privacy policy and the settings of the social networks where you have a profile, or sending us an email with your request to the previously mentioned address. 

When our legitimacy for processing your data is your consent or the execution of the contract, as explained in section 3, you will also have the right to request the portability of your personal data. 

This means that you will have the right to receive the personal data you have provided us in a structured, commonly used, and machine-readable format, in order to transmit it to another entity directly, as long as it is technically feasible. On the other hand, when the processing of your data is based on our legitimate interest, you will also have the right to object to the processing of your data.

Finally, we inform you of your right to file a complaint with the relevant data protection authority, particularly with the Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php).


  1. What happens if you provide us with third-party data or if a third party has provided us with your data?

We offer functionalities or services that require us to process the personal data of a third party that you, as a user or client, provide to us, such as for the activation and sending of the Gift Card or the management of the Gift Ticket request (if these functionalities are available), or when you authorize a third party to collect an order at our stores or partner establishments. If you provide us with Personal Data of third parties or if it is necessary for them to provide us with such data due to a third party collecting an order in your name, you guarantee that you have informed them about the purposes and the way we need to process their personal data. If a third party has provided us with your data or you have provided it yourself as a result of a functionality or service requested by one of our users, we will use it to manage the functionality or service being developed in each case, within the purposes outlined in this Privacy and Cookies Policy, the link to which we usually include in our communications.


  1. Changes to the privacy policy

We may modify the information contained in this Privacy and Cookies Policy when we deem it appropriate. If we do so, we will notify you through various means via the Platform (for example, through a banner, a pop-up, or a push notification), or we may even communicate it to your email address when the change in question is significant for your privacy, so that you can review the changes, assess them, and, if necessary, oppose or unsubscribe from any service or functionality. In any case, we suggest that you review this Privacy and Cookies Policy from time to time in case there are minor changes or we introduce some interactive improvement, taking advantage of the fact that you will always find it as a permanent point of information on our Website.