Legal notice

Aurei
Beyond Activewear.

Privacy Notice / Privacy Policy

Last updated: August 2026

1. Data controller

In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (General Data Protection Regulation or "GDPR"), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights ("LOPDGDD"), the User is informed that the personal data provided through the website www.weareaurei.com (hereinafter, the "Website") will be processed by:

Controller: INIOKOMACHI SL
Commercial brand: Aurei
Tax ID (CIF): B23964729
Email: info@weareaurei.com
Website: www.weareaurei.com

Hereinafter, "Aurei".

2. Personal data we may process

Aurei may process the personal data provided directly by the User while browsing the Website, when making a purchase, contacting Aurei or using any of the forms or features available.

Depending on the interaction carried out by the User, the following categories of data may be processed:

Identification data: first and last name.
Contact data: postal address, email address and, where necessary, phone number.
Order-related data: products purchased, size, color, amount, shipping address, information on deliveries, changes, returns, incidents and communications related to the purchase.
Billing data: information necessary for the issuance and management of invoices and compliance with applicable tax and accounting obligations.
Payment-related data: information necessary to manage payment for the order through the payment service providers enabled on the Website.
Data provided in communications: any information the User voluntarily provides when contacting Aurei.
Technical and browsing data: information related to access to and use of the Website that may be obtained through cookies or other similar technologies, in accordance with the provisions of the relevant Cookie Policy.

The User warrants that the personal data provided is true, accurate and up to date, and undertakes to report any changes that may occur.

3. Purposes of the processing

Aurei may process the User's personal data for the following purposes:

Manage the purchase process: process, confirm and manage the orders placed through the Website.
Manage payment: process the payment operations associated with the orders.
Manage shipping and delivery: provide the data necessary to logistics operators to prepare, manage, carry out and track the delivery of the order.
Manage changes, returns and withdrawals: handle requests related to the right of withdrawal, changes, returns, refunds and defective products.
Respond to queries and incidents: respond to requests for information, queries or communications made by the User.
Comply with legal obligations: meet the tax, accounting, administrative, consumer and any other legal obligations applicable to Aurei.
Ensure the operation and security of the Website: prevent fraudulent, abusive or improper uses contrary to the General Terms of Use and Contracting and maintain the security of the systems.

4. Legal basis of the processing

The legal basis that legitimizes the processing of personal data will depend on the purpose for which it is used:

Performance of a contract: where the processing is necessary to manage a purchase, process an order, arrange its delivery, manage a payment, return, exchange, withdrawal or any other action related to the contractual relationship between Aurei and the User.
Compliance with legal obligations: where Aurei must retain or process certain information to comply with legal, tax, accounting, consumer or administrative obligations.
Legitimate interest: where the processing is necessary to ensure the security of the Website, prevent fraud, defend Aurei's rights and interests or manage certain incidents related to its services, provided that the User's rights and freedoms do not prevail.
User's consent: where the processing is based on an express authorization from the User. In these cases, consent may be withdrawn at any time without this affecting the lawfulness of the processing carried out beforehand.

5. Data relating to payment methods

Payments made through the Website may be made using the payment methods available at any given time, including credit or debit card and PayPal.

When the User enters banking or card data to make a purchase, such data is managed directly through the relevant payment gateway or payment service provider.

Aurei does not store or record on its servers the full details of the bank cards used by the User to make their payments.

6. Recipients of the data

The User's personal data will not be disclosed to third parties except where necessary to provide the requested services, manage the contractual relationship or comply with a legal obligation.

In particular, certain data may be processed by or disclosed to providers that collaborate with Aurei, such as:

Technology providers necessary for the operation and hosting of the Website.
E-commerce platforms and service providers.
Financial entities, platforms and payment service providers.
Transport, courier and logistics companies responsible for the delivery and management of orders.
Providers of professional, administrative, accounting or legal services where necessary.
Public authorities, official bodies, courts or tribunals where there is a legal obligation.

Where such providers act as data processors, Aurei will adopt the necessary measures to ensure that the data processing is carried out in accordance with the applicable data protection legislation.

7. International data transfers

Some of the technology providers used to deliver the Website's services may be located outside the European Economic Area or may process information from other countries.

Where international transfers of personal data take place, Aurei will adopt the safeguards provided for in the applicable data protection legislation, including, where appropriate, adequacy decisions of the European Commission, standard contractual clauses or other legally recognized mechanisms.

8. Data retention period

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected and for as long as a contractual or commercial relationship with the User exists.

Once that relationship has ended, certain data may be kept for the periods required by applicable law to address possible legal, tax, accounting, administrative or contractual liabilities.

Where a processing activity is based solely on the User's consent, the data may be processed until that consent is withdrawn, without prejudice to the legal retention periods that may apply.

9. User's rights

The User may exercise at any time the rights recognized by data protection legislation and, in particular:

Right of access: to know whether Aurei is processing their personal data and to obtain information about that data.
Right to rectification: to request the correction of inaccurate or incomplete personal data.
Right to erasure: to request the deletion of their data where the legally established requirements are met.
Right to object: to object to the processing of their data in certain circumstances.
Right to restriction of processing: to request that the processing of their data be restricted in the cases provided for by law.
Right to portability: to receive the personal data provided to Aurei in a structured, commonly used and machine-readable format and, where technically possible, to transmit it to another controller.
Right to withdraw consent: to withdraw at any time the consent given for those processing activities based on it.

The User may exercise these rights by sending a request to info@weareaurei.com, indicating the right they wish to exercise and providing the information necessary to correctly identify and address their request.

Likewise, if the User considers that the processing of their personal data infringes the legislation in force, they may lodge a complaint with the Spanish Data Protection Agency (AEPD), through its official channels.

10. Security and confidentiality

Aurei will adopt the technical and organizational measures reasonably necessary to protect personal data against loss, alteration, unauthorized access, disclosure or improper processing, taking into account the nature of the data processed and the risks associated with the processing.

Transactions involving the transmission of information through the Website are carried out using secure connections and systems designed to protect the confidentiality of the data transmitted.

11. Third-party data

Should the User provide personal data corresponding to third parties, they warrant that they have sufficient legitimacy to do so and that they have previously informed those persons about the processing of their personal data where legally necessary.

The User will be responsible for the accuracy and legitimacy of the third-party data they provide to Aurei.

12. Minors

To purchase products through the Website you must be over 18 years of age and have sufficient legal capacity to contract.

Aurei may adopt the reasonable measures it deems necessary to verify compliance with this requirement where there are doubts about the age or capacity of the User.

13. Cookies and similar technologies

The Website may use cookies and other similar technologies necessary for its operation and, where applicable, to obtain information about Users' browsing.

Detailed information about the cookies used, their purposes, providers and mechanisms for configuring or withdrawing consent will be available in the Website's relevant Cookie Policy.

14. Links to third-party websites

The Website may contain links to websites, platforms or services managed by third parties. Aurei does not control the privacy policies or data protection practices of such third parties.

The User should consult the relevant privacy policies before providing personal information through those external sites or services.

15. Changes to the Privacy Policy

Aurei reserves the right to modify this Privacy Policy where necessary to adapt it to legislative, regulatory, technical or operational changes or changes related to the services offered through the Website.

Where the modifications are significant, they will be communicated through the Website or by the means deemed appropriate given the circumstances.

The version of the Privacy Policy in force will be the one published at any given time at www.weareaurei.com.

16. Contact

For any query related to this Privacy Policy or the processing of your personal data, the User may contact Aurei through:

INIOKOMACHI SL — Aurei
Email: info@weareaurei.com
Website: www.weareaurei.com