Privacy policy

Aurei
Beyond Activewear.

Privacy Policy

Last updated: August 2026

1. Data controller

Identity INIOKOMACHI SL (hereinafter, Aurei)
Tax ID (CIF) B23964729
Email info@weareaurei.com
Website www.aurei.com


Aurei, as the party responsible for the website and in accordance with Regulation (EU) 2016/679, of 27 April 2016 (GDPR), Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), and any other applicable data protection legislation in force, informs you that it has implemented the technical and organizational security measures necessary to guarantee and protect the confidentiality, integrity and availability of the personal data processed.

2. Data we process and how we collect it

Data provided by the User. When the User makes a purchase, contacts us or subscribes to the newsletter, Aurei collects the data that the User voluntarily provides through the forms available on the website.

The data requested in the purchase form are:

  1. First and last name
  2. Delivery address, postal code, town/city and province
  3. Country
  4. Phone number
  5. Email address
  6. Payment data (card or PayPal account), managed directly by the relevant payment gateway; Aurei does not store your full card details

The data requested in the contact form and/or newsletter subscription are:

  1. Name
  2. Email address

Browsing data. When the User accesses the website, Aurei collects certain data associated with their browsing (IP address, device type, operating system, browser, pages visited, date and time). You can find details of this processing in our Cookie Policy.

Communications data. When you send us a communication (email, form, social media) we collect its metadata and the data you include in its content.

Prohibited data. You are prohibited from providing Aurei with data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation, unless such information is strictly necessary and its processing is covered by a valid legal basis.

The User warrants the authenticity and accuracy of the data provided and undertakes to keep it up to date, being solely responsible for any false or inaccurate statements made.

3. Purpose and legal basis of the processing

Your personal data are processed for the following purposes:

Processing Details
Website management Purpose: Processing and management of the data necessary for the correct operation of and navigation on the website. Retention period: As long as the consent given remains in effect. Legal basis: Consent of the data subject. Type of data: Identification and browsing data. Disclosures: None envisaged.
Contact form Purpose: To respond to the queries and/or requests submitted by the User. Retention period: As long as the consent given remains in effect. Legal basis: Consent of the data subject. Type of data: Identification data. Disclosures: None.
Purchase management Purpose: Recording and processing of data to manage the purchase, payment and delivery, as well as the correct development, performance and execution of the sales contract. Retention period: For the period necessary to manage the purchase, including any changes, returns, complaints or claims associated with it. Legal basis: Performance of a contract. Type of data: Identification, contact, shipping and payment data (the latter managed directly by the payment gateway). Disclosures: Payment entities (Stripe, PayPal), shipping and logistics companies, and technology providers that support the online store (e.g. Shopify).
Newsletter and commercial communications Purpose: Sending commercial and advertising communications about Aurei products, launches ("drops"), promotions and news, where the User has expressly subscribed. Retention period: Until the User withdraws their consent or unsubscribes. Legal basis: Consent of the data subject. Type of data: Name and email address. Disclosures: The provider of the email marketing platform used to manage the newsletter.
Financial and administrative management Purpose: Administrative management, invoicing, accounting and compliance with legal obligations. Retention period: 6 years in accordance with the Commercial Code; up to 10 years for certain tax documentation. Legal basis: Compliance with a legal obligation. Type of data: Identification and financial data. Disclosures: Tax authorities, banking entities and public bodies with competence in the matter, where legally required.


No decisions will be made based solely on automated processing that produce legal effects on the User, nor will profiling be carried out for that purpose, beyond the basic segmentation of commercial communications on the basis of their purchase or browsing preferences.

4. Retention periods

Your data will be kept as long as the commercial relationship or the consent given remains in effect. As a general rule, and pursuant to Article 30 of the Commercial Code, accounting, tax and commercial documentation will be kept for 6 years. Specific tax documentation may be kept for up to 10 years in compliance with tax legislation.

5. Recipients and international transfers

Your data may be disclosed to the following recipients, to the extent necessary to provide the service:

  1. Payment entities and payment gateways (card, PayPal), to process payment for your orders.
  2. Transport and logistics companies, for the delivery of your orders.
  3. Technology providers that support the online store, the sending of communications (email marketing), and the website's analytics and advertising.
  4. Public authorities, where there is a legal obligation.

Some of these providers may be located outside the European Economic Area. In such cases, Aurei ensures that the transfer is made to countries with an adequate level of protection recognized by the European Commission or, failing that, covered by appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission.

6. Rights of data subjects

As a data subject, you may exercise the following rights:

Right of access Obtain information about the personal data Aurei processes about you and the processing carried out.
Right to rectification Request the correction of data that is inaccurate or incomplete.
Right to erasure Request the deletion of your data when it is no longer necessary for the purposes for which it was collected, unless there is a legal obligation to retain it.
Right to restriction of processing Request that the purposes of the processing be restricted in certain cases provided for by law.
Right to data portability Receive your data in a structured, commonly used and machine-readable format, and transmit it to another controller.
Right to object Object to your data being processed for certain purposes, in particular for commercial purposes.
Right to withdraw consent Withdraw the consent given at any time, without this affecting the lawfulness of the processing carried out beforehand.


To exercise these rights, you may write to the postal address indicated in section 1, or send an email to info@weareaurei.com with the subject line "GDPR - Rights" and attaching a copy of a document that proves your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your personal data does not comply with the legislation in force.

7. Security measures

Aurei has adopted the technical and organizational measures necessary to guarantee the security of the personal data processed and to prevent its alteration, loss, unauthorized processing or access, in accordance with the state of the art, the nature of the data and the risks to which they are exposed. Payment operations are carried out through payment gateways that use SSL/TLS encryption.

8. Social media

Aurei maintains a presence on social media, mainly on Instagram (@weareaurei). The processing of the data of people who interact with our profiles is governed by this section and by the privacy policies of the relevant social network. Aurei will process the available public data for the purpose of managing its presence on the social network, responding to queries and sharing content about its products and activities.

9. Minors

The services and products offered through the website are aimed at people over 18 years of age. Aurei does not knowingly collect data from minors. Should we become aware that a minor's data has been provided without the consent of their parents or legal guardians, we will proceed to delete it.

10. Changes to this policy

Aurei reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments or to industry practices. Any change will be published on this same page indicating the date of the last update.

11. Applicable law

The relationship between Aurei and Users is governed by Spanish law. Any dispute will be submitted to the jurisdiction and courts that correspond under the applicable regulations on consumers and users.