Last updated: 08/07/2026

1. Introduction

At Expresoriente Bijoux, S.L., we respect the privacy of our customers, suppliers, collaborators, and anyone who visits our website.

The purpose of this Privacy Policy is to inform clearly, transparently, and in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation or GDPR), the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and other applicable regulations, about how we collect, use, retain, and protect the personal data provided by users of www.expresoriente.com.

Access to and use of this website implies that you have read and understood this Privacy Policy.

However, the use of certain services may require the express acceptance of additional specific conditions.

2. Data Controller

The controller responsible for processing your personal data is:

Expresoriente Bijoux, S.L. CIF: B67124800

Registered office:

Avenida Pau Casals, 14, bajos 08870 Sitges (Barcelona) Spain

Telephone: +34 938 945 945

Mobile: +34 689 93 17 40

Email: info@expresoriente.com

For any queries related to the protection of personal data, users may contact us via the email address indicated above.

3. Scope of Application

This Privacy Policy applies to all processing of personal data carried out through the website www.expresoriente.com.

This policy affects, among others:

Users visiting the website.

Companies and professionals applying for registration as customers.

Registered customers.

Individuals making inquiries through contact forms.

Individuals maintaining commercial communications with Expresoriente Bijoux, S.L.

Subscribers to commercial communications when there is a prior commercial relationship or when they have given their consent.

The use of the website is exclusively directed to companies, professionals, and businesses within the sector.

This website is not intended for minors under 18 years of age.

Expresoriente Bijoux, S.L. does not knowingly collect personal data from minors. If it is detected that personal data of a minor has been provided, such data will be deleted as soon as possible.

4. Principles Applied to Data Processing

Expresoriente Bijoux, S.L. processes personal data in accordance with the principles set forth by the General Data Protection Regulation.

In particular, data will be processed according to the following principles:

Lawfulness, fairness, and transparency

Personal data will be processed lawfully, fairly, and transparently, keeping the data subject informed about the processing at all times.

Purpose limitation

Data will only be used for the purposes explicitly stated in this Privacy Policy and will not be further processed in a manner incompatible with those purposes.

Data minimization

Only data strictly necessary for each purpose will be requested.

Accuracy

Reasonable measures will be taken to ensure personal data is kept accurate and up to date.

The user is responsible for communicating any modifications to their personal data.

Storage limitation

Data will only be kept for the time necessary to fulfill the purposes for which it was collected and to address corresponding legal obligations.

Integrity and confidentiality

Expresoriente Bijoux, S.L. will implement appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of personal data and to prevent its loss, alteration, unauthorized processing, or access.

5. What Personal Data Do We Collect?

Depending on the relationship the user maintains with Expresoriente Bijoux, S.L., we may collect the following categories of personal data:

Identification data

First and last name.

Company name or corporate name.

CIF or NIF (Tax IDs).

Postal address.

Country.

Province / State.

Email address.

Telephone number.

Access data

When the user applies to register as a professional customer, they may provide:

Email address.

Access password.

Passwords are stored in an encrypted format and are never accessible in plain text by Expresoriente Bijoux, S.L.

Commercial data

Data relating to the following may be retained:

Registration requests.

Quotes.

Orders placed.

Invoicing.

Commercial history.

Communications maintained with the customer.

This data will be used exclusively for the correct management of the existing commercial relationship between the parties.

Data obtained during browsing

When the user browses the website, certain technical data necessary to ensure the proper functioning of the site, improve the browsing experience, enhance security, and compile usage statistics may be collected, always in accordance with the cookie configuration accepted by the user.

Detailed information about these technologies is available in the corresponding Cookies Policy.


6. Purposes of Processing Personal Data

At Expresoriente Bijoux, S.L., we process personal data only for the legitimate purposes described below.


6.1 Management of Registration as a Professional Customer

The data provided during the registration process will be used to:

Process the application for registration as a customer.

Verify the applicant's status as a company, professional, or business.

Validate or reject the creation of the user account.

Allow access to the private areas of the website.

Manage the commercial relationship between the parties.

The creation of a user account does not automatically imply acceptance as a customer.

Expresoriente Bijoux, S.L. may request additional information to verify the professional activity of the applicant and reserves the right to accept or reject any registration request when the professional purpose of the access cannot be verified or when there are reasonable grounds to justify it.


6.2 Order Management

Personal data will be processed to:

Manage orders placed through the website.

Prepare the requested products.

Organize their dispatch.

Manage deliveries, incidents, and returns.

Address any queries related to the order.

Maintain the necessary communication throughout the entire purchasing process.

6.3 Invoicing and Compliance with Legal Obligations

Personal data may be used to:

Issue quotes.

Issue invoices.

Manage collections and payments.

Comply with tax, accounting, and commercial obligations.

Respond to requirements from Public Administrations when legally required.

6.4 Customer Service

When the user contacts Expresoriente Bijoux, S.L. via email, telephone, or any other communication channel, the data provided will be processed exclusively to respond to their query, manage the issue raised, or fulfill the corresponding request.

6.5 Commercial Communications

Expresoriente Bijoux, S.L. may send commercial communications related to its products, novelties, promotions, or relevant information only when there is a prior commercial relationship with the recipient or when the recipient has given their consent in accordance with current regulations.

The recipient may request to stop receiving these types of communications at any time by using the unsubscribe link included in each email or by submitting a request via email to:

info@expresoriente.com

Commercial communications are managed through the Mailchimp platform.

6.6 Service Improvement

Certain information may be used to:

Improve the functioning of the website.

Detect technical incidents.

Increase the security of the platform.

Analyze the general use of the website.

Optimize the browsing experience.

Under no circumstances will these processing operations be aimed at creating individualized commercial profiles or making automated decisions that produce legal effects on the user.

7. Legal Basis for Processing

The processing of personal data carried out by Expresoriente Bijoux, S.L. is based on the following legal grounds provided for in the General Data Protection Regulation:

Execution of a contractual or pre-contractual relationship

When the user requests registration as a professional customer, requests commercial information, or places an order, the processing of their data is necessary to manage that relationship.

Compliance with legal obligations

Certain processing operations are necessary to comply with obligations imposed by tax, commercial, accounting, and other applicable legislation.

Legitimate interest

Expresoriente Bijoux, S.L. may process certain personal data when necessary to:

Ensure website security.

Prevent fraud.

Manage technical incidents.

Defend its rights against potential claims.

Maintain the existing commercial relationship with its customers.

Provided that such processing does not override the fundamental rights and freedoms of the data subject.

Consent

When required by regulations, the processing of personal data will be based on the express consent of the data subject.

Consent may be withdrawn at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.

8. Recipients of Personal Data

Personal data will only be communicated when necessary for the proper development of Expresoriente Bijoux, S.L.'s business activity or when a legal obligation exists.

In general, data may be processed by:

Transport companies, such as UPS and Correos, for order delivery.

Financial institutions for managing collections and payments.

Web hosting and technology service providers.

IT maintenance providers.

Platforms for sending commercial communications, such as Mailchimp.

Tax, accounting, or legal consultancies when necessary to comply with legal obligations.

Public Administrations, Courts, and Tribunals when a legal obligation or judicial request exists.

All providers with access to personal data will act as data processors or data controllers, as appropriate, and must comply with current regulations regarding data protection.

9. International Data Transfers

In general, Expresoriente Bijoux, S.L. ensures that personal data is processed within the European Economic Area.

However, certain technology providers used by the company, such as Mailchimp, may involve international data transfers.

In such cases, these transfers will only be carried out when the provider offers adequate safeguards in line with European data protection regulations, including, where applicable, the adoption of Standard Contractual Clauses approved by the European Commission or other legally recognized mechanisms.


10. Data Retention Period

Expresoriente Bijoux, S.L. will retain personal data only for the time necessary to fulfill the purposes for which it was collected, and subsequently, for the periods required by current legislation to address potential legal liabilities.

In general:

Data of customers and registered users will be kept as long as the commercial or contractual relationship remains in force, and subsequently, during the legally established periods.

Accounting, commercial, and tax documentation will be kept for the periods required by applicable regulations.

Data used for sending commercial communications will be kept as long as a commercial relationship exists or until the data subject requests to unsubscribe.

Data obtained through inquiries or contact forms will be kept only for the time necessary to address the request made.

Once the retention periods expire, the data will be deleted or blocked in accordance with current legislation.

11. Rights of Data Subjects

Any person whose personal data is processed by Expresoriente Bijoux, S.L. may exercise, under the terms provided for by current regulations, the following rights:

Right of access to their personal data.

Right to rectification of inaccurate or incomplete data.

Right to erasure (right to be forgotten) when the data is no longer necessary for the purpose for which it was collected.

Right to request restriction of processing.

Right to object to processing when legally provided circumstances apply.

Right to data portability, where applicable.

Right to withdraw previously granted consent, without affecting the lawfulness of processing carried out prior to its withdrawal.

The exercise of these rights is free of charge.

12. Exercising Rights

To exercise any of the rights indicated above, the data subject may send a request to:

Expresoriente Bijoux, S.L.

Email:

info@expresoriente.com

Postal address:

Avenida Pau Casals, 14, bajos 08870 Sitges (Barcelona) Spain

In order to guarantee the protection of personal data, Expresoriente Bijoux, S.L. may request additional information to verify the identity of the applicant before processing the request.

Furthermore, if the data subject considers that their rights have not been properly addressed, they may file a complaint with the Spanish Data Protection Agency (AEPD).

More information available at: https://www.aepd.es


13. Information Security

Expresoriente Bijoux, S.L. adopts appropriate technical and organizational measures to protect personal data against loss, alteration, unauthorized processing, or access, taking into account the state of technology, the nature of the data processed, and the existing risks.

However, the user must be aware that no computer system is completely invulnerable and that, even if all reasonable security measures are adopted, absolute security against external attacks or unpredictable circumstances cannot be guaranteed.

Therefore, the user also agrees to use the website responsibly and to maintain the confidentiality of their access credentials.

14. Confidentiality

All staff at Expresoriente Bijoux, S.L., as well as any suppliers involved in processing personal data, will be subject to the corresponding duty of confidentiality and the obligations provided for by current data protection regulations.

This obligation will remain in force even after the relationship between the parties has ended.

15. Links to Third-Party Websites

This website may contain links to third-party webpages.

Expresoriente Bijoux, S.L. is not responsible for the content, operation, or privacy policies of those websites.

Users are recommended to check the corresponding privacy policies before providing any personal data on pages outside of www.expresoriente.com.

16. Modifications to this Privacy Policy

Expresoriente Bijoux, S.L. may modify this Privacy Policy whenever necessary to adapt it to legislative changes, criteria of supervisory authorities, modifications in processing practices, or improvements in website operations.

The current version will always be the one published on this page, indicating the date of its last update.

Users are recommended to check this Privacy Policy periodically.

17. Applicable Legislation

This Privacy Policy shall be interpreted and applied in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, Law 34/2002 on Information Society Services and Electronic Commerce, as well as any other applicable Spanish and European regulations.

18. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, you can contact us at:

Expresoriente Bijoux, S.L.

Avenida Pau Casals, 14, bajos

08870 Sitges (Barcelona) Spain

Telephone:

+34 938 945 945

Mobile:

+34 689 93 17 40

Email:

info@expresoriente.com