PRIVACY POLICY

The purpose of this Privacy Policy is to inform interested parties about the collection and processing of personal data provided by customers or users through the website www.havaianas-store.com (hereinafter, the "Website"). The Website is owned by ALPARGATAS EUROPE S.L.U., with registered office at Avenida Arroyo del Santo, 4 bis, 28042 Madrid, with Spanish NIF B85358596, which is responsible for collecting and processing your personal data (hereinafter, "ALPARGATAS").

1. CATEGORIES OF PERSONAL DATA ALPARGATAS

processes the following information about customers or users:

- Identification data: Name, surname, address, phone number, age, email.

- Browsing data: IP address, domain name, unique device identifier, browser fingerprint, device fingerprint, and cookie IDs when configured in your browser.

- Data obtained from participation in promotions: Contact details (name, address, email, phone number, image).

- Social media interaction data: Name, email address, image, social media name, and interactions on social media. - Contact/inquiries data: Name, email, comment, or inquiry submitted.

2. PURPOSE OF PROCESSING

ALPARGATAS informs you that the personal data you provide us with as a result of i) browsing the Website, ii) the queries you make through any of the means indicated in the ‘Contact us’ section of the Website, as well as queries related to the management of your subscription to our newsletter and/or the sending of commercial communications, and/or iii) the request or purchase of any product, or any transaction or operation you carry out through the Website, will be processed for the following purposes: 

PROCESSING	PROCESSING CATEGORIES OF PERSONAL DATA
Managing pre-contractual and contractual situation	Identification data Browsing data Contact/inquiries data

 

The purposes of managing any situation in the pre-contractual and/or contractual framework are:

- Identify you and, where appropriate, assist and manage your registration.

- To contact you and answer any questions you may have. In this case, we may send you an email to complete the registration process. - Carry out all necessary actions and procedures related to your purchase.

- To carry out all necessary procedures in case you have any pre-contractual or contractual relationship.

- Carry out all the necessary procedures so that you can take advantage of our promotions and discounts. - Send you an email informing you of the status of your shopping basket. - Record our telephone conversation to clarify the details of the conversation and for internal training and customer service quality control purposes. When you wish to make a payment by telephone, we do not record the part of the conversation that includes your bank account number, security code or payment card details.

- Request your bank details on exceptional occasions when you have requested cancellation of your order and it is no longer possible to refund you by the same means you used when you placed your order.

PROCESSING	CATEGORIES OF PERSONAL DATA
Conduct usability and quality analyses in order to improve our services.	Browsing data

 

The purposes of carrying out usability and quality analysis in order to improve our services are:

- Marketing, to improve products and services.

- To draw up statistical profiles.

- To know your opinion and conduct surveys about our products, services and your relationship with ALPARGATAS.

 

PROCESSING	CATEGORIES OF PERSONAL DATA
Marketing actions	Identification data Browsing data Data obtained from participation in promotions

 The purposes of carrying out marketing actions are:

- To send you information, by any means, about products, actions and promotions of the Havaianas brand.

- To send you offers of products, actions and promotions of the Havaianas brand, personalised and improved through the preparation of automated profiles.

- Send you our newsletter on a regular basis.

- Keep your Havaianas product wish list active.

- Send you notifications when a product is in stock.

PROCESSING	CATEGORIES OF PERSONAL DATA
Human Resources Actions	Identification data

 The purposes of the human resources actions are:

- Forwarding your data to our Human Resources department in order to process your job application submitted via the Website.

- To take all the necessary steps to enable you to benefit from the privileges of our loyalty programme, if you so request.

 

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis on which we process your personal data is as follows:

- The execution of the contract you accept when you register and make a purchase.

- The consent freely given, in order to manage the requests and/or requests you make, including questions, queries and/or complaints, manage the registration and cancellation, sending commercial communications about products and services, as well as making it possible for you to enjoy our services or functionalities. Although you can withdraw your consent at any time, without it we will not be able to respond to your queries. This will not affect the lawfulness of any processing previously carried out.

- Legitimate interest in order to carry out satisfaction surveys and to monitor users' use of the computer systems from which the services are offered.

3. DATA RETENTION

The data provided will be kept for the time necessary to ensure compliance with the legal obligations that correspond to ALPARGATAS, including:

- For processing activities based on the user's consent, personal data will be retained until the user withdraws the consent given.

- For activities based on the legitimate interest of ALPARGATAS, personal data will be retained until the user objects to the processing activity.

- For processing based on the contractual relationship established with the purchase of our products, personal data will be retained for the duration of the obligations or liabilities arising from such provision. In any case, once you withdraw your consent or object to the processing activity, the data will be blocked as appropriate and will be retained until the expiration of the legal blocking periods related to the liabilities to which ALPARGATAS is subject. In determining the appropriate retention period for your personal data, ALPARGATAS will consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether or not ALPARGATAS can achieve those purposes by other means, as well as any applicable legal, regulatory, tax, accounting or other requirements.

4. DISCLOSURE AND ACCESS TO YOUR DATA

We inform you that your personal data may be shared with other ALPARGATAS Group companies, as well as our subsidiaries and franchisees, which are located within the European Economic Area, for the purpose of providing services related to your purchase and delivery of products. In this regard, ALPARGATAS has taken all necessary legal measures to ensure that the transfer of data to these countries is secure and in accordance with the provisions of the applicable regulations. In addition, your data may be accessed by service providers or suppliers with whom we have signed respective agreements when they need to have access to such data in order to preserve ALPARGATAS' relationship with its customers. In any case, the necessary legal and organisational measures will be taken to guarantee the security and access to the data.

5. SECURITY IN THE PROCESSING OF YOUR DATA

ALPARGATAS has implemented the necessary technical and organisational security measures to guarantee the security of your personal data and to avoid its alteration, loss and processing and/or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether by human action or the physical and natural environment. Any processing related to the services of this Website is carried out only by designated data processing personnel or personnel involved in maintenance operations.

6. UPDATING DATA

You must notify ALPARGATAS of any change in the data you have provided and, in any case, you will be responsible at all times for the truthfulness and accuracy of such data.

7. RIGHTS OF DATA SUBJECTS

In accordance with data protection regulations, you have the right to:

- Right of access. You have the right to obtain confirmation as to whether or not personal data is being processed and, if so, access to it and to information about the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data is disclosed and the intended period for which the personal data will be stored, among other information.

- Right to rectification of inaccurate personal data. You have the right to obtain rectification of inaccurate personal data concerning you.

- Right to data portability. You have the right to receive personal data concerning you, in a structured, commonly used and electronically readable format, and to share such data with another data controller, without hindrance, in the cases provided for in the regulations.

- Withdraw consent. You may withdraw your consent at any time, without prejudice to the lawfulness of the processing previously carried out.

- The right to object to a processing activity based on legitimate interests. - The right to erasure of personal data concerning you, where the data are no longer necessary for the purposes for which they were collected.

- The right to obtain the restriction of the processing of personal data, which will be further processed only for the establishment, exercise or defence of legal claims. The aforementioned rights may be exercised by sending a written communication to the following e-mail address dataprotection@alpargatas.com. We inform you that ALPARGATAS will deal with the right exercised within one month from the date of receipt of the request. This period may be extended to two months, taking into account the complexity and number of requests, in which case the interested party will be notified. In addition, you may lodge a complaint concerning the processing of personal data with the competent supervisory authority, where you consider that your rights under applicable law have been infringed.

8. INTERNATIONAL DATA TRANSFERS

We inform you that, although no international transfer is foreseen, the provision of services by ALPARGATAS to its customers may be associated with implicit international data transfers. If this is the case, such transfers will be regulated in accordance with the provisions of current data protection legislation, as indicated by such third parties.

9. THIRD PARTIES PERSONAL DATA

In the event that you include personal data relating to another person, you must, prior to the inclusion or communication of such data, inform such persons of the content of this Privacy Policy. In any case, you guarantee that you have obtained the prior consent of these third parties for the communication of your personal data to ALPARGATAS.

10. MODIFICATION OF THE PRIVACY POLICY

ALPARGATAS reserves the right to modify and/or update this privacy policy at any time in order to adapt it to applicable legislation. In any case, the new policy will be published on this Website and will remain available to users and visitors at all times. We recommend that you regularly check the Website to ensure that you are aware of any changes.

11. PROCESSING OF YOUR PHOTOS THROUGH INSTAGRAM AND OUR WEBSITE

If you have voluntarily entered our competitions and promotions and have therefore given us your consent via Instagram to use your photos, you may withdraw your consent at any time by emailing us at dataprotection@alpargatas.com, and we will process your request within four (4) working days of receiving it. Please note that we will only use the photos you have given us access to on our Instagram profile @havaianaseurope, our newsletters and this Website with your consent.

Updated March 2025