PRIVACY POLICY

LAST UPDATED: 6 DECEMBER 2025
Legally Compliant for the European Union

1. Data Controller

The data controller responsible for the processing of personal data on this website is:
821SCENT S.L.
Ronda Europa 60, Piso 8
08800 Vilanova i la Geltrú
Barcelona, Spain
Email: support@821scent.com

2. Scope of This Privacy Policy

This Privacy Policy explains how 821SCENT S.L. collects, uses, stores, and protects personal data when users:

• Visit www.821scent.com
• Create or place an order
• Contact customer support
• Subscribe to marketing communications
• Interact with cookies and similar technologies

This policy applies to all personal data processed through the website and related services.

3. Personal Data We Collect

Depending on user interaction, we may collect the following categories of personal data:

• Identification data (name, surname)
• Contact data (email address, phone number)
• Billing and shipping address
• Order and transaction details
• Payment confirmation data (excluding card details)
• IP address and device information
• Cookie and browsing data
• Marketing preferences (if consented)

821SCENT does not store or process payment card numbers.
All payment data is handled securely by Banco Sabadell’s authorized Redsys TPV Virtual gateway.

4. Legal Basis for Processing

Personal data is processed in accordance with GDPR Article 6 based on the following legal grounds:

• Contract performance — to process and fulfil orders
• Legal obligation — accounting, tax, and consumer law compliance
• User consent — marketing communications and non-essential cookies
• Legitimate interest — fraud prevention, security, and service improvement

Where consent is required, it is collected explicitly and may be withdrawn at any time.

5. Purpose of Data Processing

Personal data is processed for the following purpose:

• Order processing and delivery
• Payment verification and fraud prevention
• Customer communication and support
• Compliance with legal and regulatory obligations
• Website functionality and performance
• Marketing communications (only with consent)

Data is not used for purposes incompatible with those listed above.

6. Marketing Communications

Users may opt in to receive newsletters and promotional communications.

• Consent is optional and never pre-selected
• Users may unsubscribe at any time via the link in emails or by contacting support@821scent.com

Withdrawal of consent does not affect the lawfulness of prior processing.

7. Cookies and Tracking Technologies

The website uses cookies in accordance with the EU e-Privacy Directive and GDPR.
Cookies may be classified as:

• Essential cookies — required for site functionality
• Analytics cookies — to analyze website performance
• Preference cookies — to personalize user experience

Users may accept, reject, or manage cookie preferences via the cookie banner.
Essential cookies remain active as permitted by law.

8. Data Recipients and Processors

Personal data may be shared only with trusted service providers strictly necessary to operate the website, including:

• Payment processors (Banco Sabadell / Redsys)
• Shipping and logistics providers
• IT and hosting service providers
• Legal, accounting, and compliance advisors

All processors operate under GDPR-compliant data processing agreements.

9. International Data Transfers

Personal data is processed primarily within the European Economic Area (EEA).
If data is transferred outside the EEA, appropriate safeguards are applied in accordance with GDPR Chapter V.

10. Data Retention

Personal data is retained only for as long as necessary to:

• Fulfil contractual obligations
• Comply with legal and tax requirements
• Resolve disputes or enforce agreements

Marketing data is retained until consent is withdrawn.

11. Data Security Measures

821SCENT S.L. applies appropriate technical and organizational measures to protect personal data, including:

• Secure servers and encrypted communications
• Restricted access to personal data
• Payment security through PSD2 and Strong Customer Authentication

Despite security measures, no system can guarantee absolute security.

12. User Rights

Users have the right to:

• Access their personal data
• Request rectification or deletion
• Request restriction of processing
• Object to processing
• Request data portability
• Withdraw consent at any time

Requests may be sent to support@821scent.com.

Users also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).

13. Fraud Prevention and Monitoring

For security and fraud prevention purposes:

• IP and device information may be analyzed
• Suspicious activity may be reviewed or blocked

Processing is based on GDPR Article 6(1)(f) — legitimate interest in preventing fraud and ensuring secure transactions.

14. Third-Party Links

The website may contain links to third-party websites.
821SCENT S.L. is not responsible for the privacy practices or content of external websites.

15. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect legal or operational changes.
The “Last Updated” date will indicate the most recent revision.

Continued use of the website constitutes acceptance of the updated policy.

16. Contact Information

821SCENT S.L.

Ronda Europa 60, Piso 8
08800 Vilanova i la Geltrú
Barcelona, Spain
Email: support@821scent.com