This Privacy Policy explains how Paula Reis Watches collects, uses, shares and protects your personal data when you visit paulareiswatches.com (the “Site”) or place an order with us. We are committed to handling your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller: Paula Reis Watches
Registered address: Calle de Fuencarral 15, 28004 Madrid, Spain
Email: info@paulareiswatches.com
Telephone: +34 663 59 14 61
You can contact us at any time at info@paulareiswatches.com for any question about this policy or about your personal data.
Data you give us — when you place an order, create an account, subscribe to our newsletter or contact us: first and last name, billing address, shipping address, email address, telephone number, order contents, and any message you send us.
Payment data — card and payment details are collected and processed directly by our payment providers (Shopify Payments, PayPal). We never see, receive or store your full card number.
Data collected automatically — when you browse the Site: IP address, browser type and version, device type, operating system, time zone, referring website or search term, pages and products viewed, and how you interact with the Site. We collect this through cookies, log files, pixels and similar technologies.
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Processing, shipping and invoicing your order; customer support; handling returns and warranty claims | Performance of a contract (Art. 6.1.b) |
| Keeping accounting and tax records | Legal obligation (Art. 6.1.c) |
| Screening orders for fraud and protecting the security of the Site | Legitimate interest (Art. 6.1.f) |
| Sending our newsletter and marketing emails | Your consent (Art. 6.1.a) — withdrawable at any time |
| Analytics, advertising and retargeting cookies | Your consent (Art. 6.1.a), given through our cookie banner |
| Sending you a review request after a purchase | Legitimate interest / consent, depending on your country |
You can withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand. Every marketing email contains an unsubscribe link.
We do not sell your personal data. We share it only with service providers who process it on our behalf, under a data processing agreement:
We may also disclose your data where we are legally required to do so, or to establish, exercise or defend legal claims.
Some of our providers are based outside the European Economic Area. Where that is the case, the transfer is covered by an adequacy decision of the European Commission or by the European Commission’s Standard Contractual Clauses, together with additional safeguards where required. You may request a copy of these safeguards at info@paulareiswatches.com.
Under the GDPR you have the right to: access your data; rectify it if it is inaccurate; erase it; restrict or object to its processing; receive it in a portable format; and withdraw your consent at any time.
To exercise any of these rights, email info@paulareiswatches.com stating which right you wish to exercise. We will respond within one month. We may ask you to confirm your identity before acting on the request.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
We use cookies that are strictly necessary for the Site to work (shopping cart, login session, security), and — only with your consent — analytics and advertising cookies. You choose which categories to accept through the cookie banner shown on your first visit, and you can change your choice at any time. Refusing non-essential cookies does not prevent you from browsing or ordering.
We use automated fraud-screening on orders. This never results in a decision with legal effects on you without human review: if an order is flagged, a member of our team reviews it before any action is taken.
The Site is not directed at children under 14. We do not knowingly collect personal data from children under 14. If you believe a child has provided us with personal data, contact us and we will delete it.
The Site runs over an encrypted HTTPS connection, and our platform and payment providers apply industry-standard technical and organisational security measures, including PCI-DSS compliance for card payments.
We may update this policy to reflect changes in our practices or in the law. The version published on this page is always the one in force, and we indicate the date of the last update below.
Last updated: 16 September 2026