STL

STL designs, produces and commercializes its products under the brands PURIFICACIÓN GARCÍA and CH CAROLINA HERRERA brands. In order to provide more transparent information in regard to how we treat our customers data, we make our Privacy Policy available on the Group's website.
 
We remind you that this website has only informative purposes and as communication channel in case you want to contact STL. The present Privacy Policy will only be applicable to the user of this website to the extent that it corresponds to the use and purposes described.
 
Who is the controller of your personal data?
 
Sociedad Textil Lonia, S.A. (hereinafter, "STL") with registered office at Parque Empresarial Pereiro de Aguiar, 31792, Pereiro de Aguiar, (Ourense-Spain) and developer of the CH Carolina Herrera brand, is the controller of your personal data.
 
You can contact our Data Protection Office at the above address or by email at: lopd@stlonia.com
 
Data Protection Officer
 
We have appointed a Data Protection Officer to ensure that we continuously process your personal data in an open, accurate and legal manner. You can contact our Data Protection Officer at: lopd@stlonia.com stating DPO as the subject matter.
 
For what purposes do we treat your personal data? How do we legitimize the processing of your data?
 
1. Management of your business relationship with STL
 
Your personal data will be treated in order to develop, control, manage and maintain the contractual relationship established on making purchases in stores managed by STL. Where necessary, STL will communicate the personal data that you provide us by filling in the card in order to manage your relationship as a client.
 
Said treatment for the purposes indicated is legitimized by the execution of the existing contractual relationship between you and STL. The obtaining of your data for this purpose is mandatory in order to enable STL to establish and manage your contractual relationship.
 
2. Management of profile registration and cancellation in the shared database
 
Your personal data will be processed for your registration and entry into the customer database managed by STL. When necessary, and exclusively for the management of the contractual relationship, STL will communicate the identifying data that you provide us by filling in the card in order to be able to manage your relationship as a customer. In addition, if you have consented to the transfer of your data to STL from PUIG Group companies or STL franchisees, it will be included in our database whose data treatment is explained below.
 
Said treatment for the purposes indicated is legitimized by the execution of the existing contractual relationship between you and STL. The obtaining of your data for this purpose is mandatory in order to enable STL to establish and manage your contractual relationship.
 
3. Processing of your data for commercial purposes by STL
 
Your personal data will be processed by STL for the sending of commercial information related to own products linked to and marketed by STL, in addition to opinion surveys. Said information to be sent by any means, including electronic, commercial communications, sending of bulletins and personalized offers. Similarly, your data may be used for profiling purposes in order to send personalized commercial actions and / or oriented to your preferences.
 
Said treatment for the purposes indicated is legitimized by the application of legislation that foresees said treatment and by having obtained STL consent to that effect.
 
For those cases legally provided for under article 21.2 of Law 34/2002, of July 11, concerning services of the information society and electronic commerce, as well as by article 16 of the Electronic Privacy Regulation 2017/0003 (e-privacy) of the European Union, STL will be entitled to send commercial communications electronically as long as the content thereof is related to products and / or services similar to those offered in the context of your relationship with STL.
 
You may, at any time, revoke your consent for the sending of commercial communications of STL products and services. You may refuse such procedure both at the time of data collection and on receipt of each commercial communication sent by STL.
 
Similarly, STL may use your data in legitimate interest to better meet your expectations and increase your level of satisfaction as a client in cases where legislation permits, provided that these legitimate interests respect your right to personal data protection, honor and personal and family privacy. Remember that you can always exercise your right of opposition if you consider it appropriate at the email: lopd@stlonia.com.
 
4. Data transfer Group STL and franchisees  
 
In order to manage the relationship with you as a customer, STL may communicate to those companies that use the STL customer database any identification data that you provide us by filling in the card or via the website in order to verify your identity, as well as to manage all purchases and operations you make in the stores of Carolina Herrera (CH) and Purificación García (PG). With this in mind, your data will be included in a centralized database that can be accessed by both STL franchisees and other STL Group companies. In no case will your personal data be communicated to other entities that do not belong to the STL Group or to STL franchisees, without your prior consent.
 
Said treatment for the purposes indicated is legitimized according to the existence of a legitimate interest for STL. As a result of the use of a centralized customer database, for administrative, operational and logistics purposes, STL may communicate data to all STL's dependent entities with which it shares access to said database with the sole purpose of being able to improve the logistics, administration and your personal management needs by being able to centralize all the purchases you make. This centralization does not entail any detriment to you, on the contrary, it will speed up any order or process, thereby avoiding delays.
 
The obtaining of your data for this purpose is mandatory in order to enable STL to establish and manage your contractual relationship.
 
5. International data transfers to the STL Group
 
In order to manage the relationship with you as a customer, STL may communicate to those companies that use the STL customer database any identification data that you provide us by filling in the card or via the website in order to verify your identity, as well as to manage all purchases and operations you make in the stores of Carolina Herrera (CH) and Purificación García (PG). With this in mind, your data will be included in a centralized database that can be accessed by both STL franchisees and other STL Group companies that may be located in countries that do not offer a protection level comparable to European standards. In no case will your personal data be communicated to other entities that do not belong to the STL Group or to STL franchisees, without your prior consent.
 
Said treatment for the purposes indicated is legitimized by the adoption of adequate guarantees by STL. For these purposes, these international data transfers will be covered by the implementation of adequate guarantees through the signing of a contract to that effect based on the Standard Contractual Clauses for data protection adopted by the European Commission.
 
The obtaining of your data for this purpose is mandatory in order to enable STL to establish and manage your contractual relationship.
 
6. Transfer of data to PUIG Group companies (only for CH Carolina Herrera customers)
 
You give explicit and express consent for us to transfer your personal data to the PUIG Group in order to coordinate and update the information you provide us via the website concerning the subscription interests: “Carolina Herrera New York”, “212 Carolina Herrera” and “Bridal”.
In this case, the PUIG Group will be responsible for your data and the previsions as stipulated in their privacy notice will apply. To this effect, you may refer to the PUIG Group Privacy notice concerning how your data is processed and managed.
 
From where do we get your data?
 
The personal data processed by STL has been provided directly by you by completing the forms provided for that purpose by STL.
 
How long will we keep your data?
 
STL will keep your data during the validity of your contractual relationship with STL and once  expired during the prescription period of the actions that may arise from the relationship maintained.
 
For merely illustrative purposes, articles 1962-1972 of the Civil Code set deadlines for the prescription of actions that may go from one to thirty years, depending on the type of action to be exercised.
 
 
To whom do we give your data?
 
Your data will be transferred to the different entities that form part of the STL Group (subsidiaries and franchisees) and that have access to the customer database, to which your personal data will be sent as a customer of STL products, for the handling of the following:

–        Collection and payment derived from the relationship with you

–        Registration and removal of customer profiles in the STL database

–        For operative and harmonizing reasons, your unsuscription to CH Carolina Herrera will be transferred to the PUIG Group

The companies of the PUIG Group to which your personal data will be sent as a subscriber to commercial communications requested via the chcarolinaherrera.com website for the handling of the following:

- Your purchase activity

- The sending of communications, promotions and commercial offers for products marketed by these entities

- Registration and removal with respect to the sending of the newsletters managed by the PUIG Group

Similarly, STL may outsource certain functions in order to improve the quality of service and/or for internal administrative purposes, and to this effect it will collaborate with Data Processors, always within the context of a Data Processing Agreement (DPA) that offers adequate guarantees.
 
What are your rights when you provide us with your information and how can you exercise them?
 
You may, in the terms established in the data protection regulations, revoke at any time the authorization granted for the processing and transfer of your personal data, as well as exercise the rights of access, rectification, opposition, including the processing of data on the basis of legitimate interest, limitation, suppression, portability and not to be the subject of automated decisions, by writing to the Data Protection Office of Sociedad Textil Lonia, SA, at the following address: Parque Empresarial Pereiro de Aguiar, 31792, Pereiro de Aguiar (Ourense-Spain), or by email at lopd@stlonia.com.
 
For greater transparency regarding your rights, please find below further information:
 
Right to access:
 
You have the right to obtain confirmation about the personal data we hold on you. You can contact us for further information concerning the aforementioned data by email.
 
Right to portability:
 
As long as STL processes your personal data through automated means based on your consent or an agreement, you have the right to obtain a copy of your data in a structured, commonly used and machine-readable format transferred to your name or to a third party. It will only include the personal information that you have given us.
 
Right of rectification:
 
You have the right to request the rectification of your personal data if it is inaccurate, including the right to complete incomplete data. Remember that in your User Area you can modify your personal data.
 
Right of suppression:
 
You have the right to obtain without undue delay the suppression of any personal data processed by STL at any time, except in those situations that the law considers an exception, such as compliance with a legal obligation.
 
Right to oppose the processing of data on the basis of legitimate interest:
 
You have the right to object to the processing of your personal data based on the legitimate interest of STL. We will not be able to continue processing personal data unless we can attest compelling legitimate reasons for said processing that prevail over your interests, rights and freedoms, or for the formulation, exercise or defense of claims.
 
Right to oppose direct marketing:
 
You have the right to oppose direct marketing, including profile analysis made for direct marketing purposes.
 
Right to restriction:
 
You have the right to request that STL limit the processing of your personal data in the following circumstances:
 
- If you object to the processing of your data based on the legitimate interest of STL, STL must limit any processing of such data pending the verification of legitimate interest.
 
- If you claim that your personal data is incorrect, STL must limit any treatment of such data until its accuracy is verified.
 
- If the treatment is illegal, you can object to the deletion of personal data and, instead, request limitation of its use.
 
- If STL no longer needs personal information, but you need it for the formulation, the exercise or the defense of claims.
 
To which supervisory authority can you assert your rights in terms of data protection?
 
In the event that you deem it necessary, you can contact the Spanish Agency for Data Protection with address at Calle Jorge Juan, 6, 28001, Madrid, Spain, in order to safeguard your rights.
 
Updates to our Privacy Notice
 
We may proceed to update our Privacy Policy. The latest version will always be available on our website.