Privacy Policy

Privacy Policy

Personal Data

Arrúe Art OE informs you that it will treat personal data under the terms of the following Privacy Policy.

With this privacy policy we want to give transparency to the processing of personal data that we make from our site. This privacy statement explains what personal data we collect from our users, how and for what purpose we use them. We invite you to read these terms carefully before providing your personal data on this website. We respect and take care of your personal data. As a user you should know that your rights are guaranteed.

Arrúe Art OE team has adapted this website to the requirements of Law 15/1999, of December 13, Protection of Personal Data (LOPD), and the Royal Decree 1720/2007 of December 21, known as the Regulation of development of the LOPD. It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (RGPD), as well as with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSICE or LSSI).

For the purposes of the provisions of the aforementioned General Data Protection Regulation, the personal data you send us through the web forms will be treated as “Web Users” data.

Responsible: Arrúe Art OE provided with C.I.F E40656050, society with address in C/ Pere Bonfill, nº12 (Valencia) The contact email address is

Data Protection Officer: Not applicable

Automated decisions: No automated decisions are made.

Legitimacy and legal basis for the processing of your data

The legitimacy and legal basis for the processing of your data is the execution of the contract, as well as for the implementation at the request of the customer or data subject of pre-contractual measures, such as budgets and prior consultations; such actions are covered by Article 6.1 b) of the RGPD as lawful.

Administrative and accounting management of the data subject’s data in compliance with accounting, tax and administrative obligations; such actions are covered by Article 6.1 c) of the GDPR as lawful.

In these cases, failure to provide such data may result in the impossibility of providing our services.

To contact or make comments on this website, consent to this privacy policy is required.

The prospective or commercial offer of our services is based on the consent requested if necessary, without in any case the withdrawal of this consent conditions the execution of the main contract.


Your data, if you choose to enter them, will allow us to:

Manage our contractual and commercial relationship with you, if this were to occur.

Comply with administrative and tax regulations, including, where appropriate, labor, and Social Security.

Keep you informed, if you decide to subscribe to our newsletter and give your consent to do so, of news and benefits that you can take advantage of. These newsletters will have a specific, easy, quick and simple procedure to unsubscribe from receiving them.

Manage the collection, if it were the case, through the payment gateways enabled on the web, for this purpose.

To manage the customer service


Failure to enter certain data may result in the impossibility of providing the requested service.

Category of data

The categories of data processed are identification data.

Sensitive data categories are not processed.

Security of your data

 Your data is stored on a secure server, protected by OVH.

But you must remember that these security measures are taken within the possible technical measures against attacks that may be foreseeable, and that Arrúe Art can not guarantee that third parties, authorized or not, may have knowledge of the type, conditions, characteristics and circumstances of the use that Users make of the functionalities or that they can access and, where appropriate, access, intercept, delete, alter, modify or manipulate messages, communications and content of any kind that users disseminate or make available to third parties through these features, because Internet security measures are not impregnable, with respect to privacy and security.

Information from minors:

We do not solicit, collect, or process data from minors under the age of 18. Therefore, it will not be admitted the introduction of data in any form by minors. Expressly the introduction of any personal data in any form implies the declaration of being of legal age of the person who introduces the data as well as of the holder of the introduced data. If, in spite of the above, a minor enters his/her own data or that of a third party of the same condition or, being of legal age, enters the data of a third party who is a minor, and therefore there is fraud and deception in the declaration as specified above, the parents or guardians of the minor owner of the data are informed that, due to the extreme complication of being able to verify the existence or not of deception in this case, they can send an e-mail to indicating it, and the data will be deleted immediately.


Sources of data collection and legitimacy for the collection of the same: The data are obtained from the interested parties themselves or legal or authorized representatives, being necessary for contact, execution of the purchase contract or pre-contractual measures; in the case of commercial information purposes, the source of obtaining is the consent of the interested party, obtained with the relevant legal requirements.


The categories of data processed are as follows:

Identification data

Commercial information

Financial data


How long will we keep your data?

The personal data provided will be kept:

As long as the business relationship is maintained.

Until their deletion is requested by the interested party.


Transfer of data:

We can only transfer your data to those third parties that are essential to manage the contractual, commercial and administrative relationship with you, and other purposes described above. Otherwise, and with the caveat then enunciated, we will not transfer, without your express consent, to third parties the data you provide us.


Some of the tools we use to manage your data are contracted by third parties.

To provide services strictly necessary for the development of the activity Arrúe Art OE shares data with the following providers under their corresponding privacy conditions:

Google Analytics: a service provided by Google, Inc, a Delaware company whose principal office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”), to help Arrúe Art analyze how users use the website. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. (Link to privacy policy in English)


What are your rights when you provide us with your data?

The interested party may exercise the following rights:

Right of access to their personal data.

Right to request its rectification or deletion.

Right to request the limitation of its treatment.

Right to object to the processing of their data.

Right to data portability.

Right to withdraw the consent given.


When exercising your right to data portability, you will have the right to have personal data transmitted directly from data controller to data controller when technically possible.

You may exercise these rights by sending an e-mail to, accompanied by a scan of your ID card.

Data subjects also have the right to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them is in breach of the Regulation.