PRIVACY POLICY AND DATA PROTECTION
Last updated: 27/06/2026
Official Website: www.ayjoya.com
Welcome to the privacy policy of AY Joya. In compliance with the provisions of the
General Data Protection Regulation (GDPR) of the European Union and the Organic
Law 3/2018 on the Protection of Personal Data and guarantee of digital rights
(LOPDGDD), this document details in a transparent manner how the personal data of
users browsing and interacting with our online boutique are collected, processed, and
protected.
SECTION I: GENERAL INFORMATION AND CONTACT CHANNELS
For any inquiry regarding the processing of your personal data, the exercise of your
rights, or the management of your privacy, AY Joya provides the following official
support channels:
• Trading Name: AY Joya
• Official Website: www.ayjoya.com
• Business Correspondence Address: AY Joya, Carrer de Floridablanca 68,
Local 9F, 08015 Barcelona, Spain
• Customer Service WhatsApp: +34 611 819 111
• Contact Email: info@ayjoya.com
SECTION II: DATA COLLECTION AND PURPOSES OF PROCESSING
AY Joya only collects information strictly necessary to manage its commercial activity,
ensure the correct functioning of the Website, and improve the browsing experience
of the user. The data are divided according to their origin:
1. Browsing data and Website operation: When visiting this Website, the server
automatically records technical log files necessary for the correct operation of
the page (such as the anonymised IP address, date, time of access, and the
browser used). This data is analyzed exclusively for the prevention of technical
errors and system security, and is deleted within a maximum period of seven
days.
2. Order and Customer Data: When formalizing an order or registering as a
customer, the identifying and contact data voluntarily provided by the user are
collected (name, surname, shipping address, email address, and telephone
number). The legal basis for this processing is the execution of the purchase
contract for our artisan jewelry items.
3. Communications and inquiries: When the user contacts AY Joya via email or
WhatsApp, the data provided are used exclusively to manage the inquiry and
respond to the request for support information.
SECTION III: DATA CONTROLLER
The data controller for the personal data processed through the AY Joya Website is
Yuliya Sidorenko Sidorenko (NIF: 43213475V), legal owner of the business.
For any matter related to the processing of personal data or the exercise of rights
under applicable legislation, the data subject may contact the email address indicated
in Section I of this document.
SECTION IV: RECIPIENTS AND TRANSFER OF DATA
The personal data collected will not be sold, transferred, or shared with third-party
companies for commercial purposes alien to AY Joya. For the provision of certain
services, AY Joya may rely on technological providers, web hosting providers,
payment gateways, and transport companies, who will process the data solely when
necessary for the provision of the contracted service and in accordance with
applicable regulations on data protection.
Financial transactions and banking details are processed directly through credit
institutions and secure, encrypted payment platforms, without AY Joya having access
at any time to the complete card details of the buyer. Likewise, general technical
storage is carried out within servers located within the territory of the European
Union, ensuring an appropriate level of technical and legal security in accordance
with the GDPR.
SECTION V: RETENTION AND SECURITY OF INFORMATION
1. Retention periods: Personal data will remain stored only for the time
necessary to fulfill the commercial purposes for which they were collected.
Once the commercial relationship has ended or the right to erasure has been
exercised by the user, the data will be kept duly blocked and without use
during the mandatory periods required by Spanish tax and commercial
legislation to address potential legal liabilities.
2. Security of the digital environment: AY Joya adopts the appropriate technical
and organizational measures to safeguard the integrity of the information and
prevent unauthorized access, accidental loss, or unlawful alterations of the
data. The Website uses secure connections via an SSL (Secure Socket Layer)
certificate that guarantees that any transfer of information between the user
and the platform travels in a confidential and encrypted manner.
3. Regulation of minors: The services of this Website are oriented toward users
of legal age. In accordance with Spanish legislation, minors under 14 years of
age may not grant their consent for the processing of their personal data
without the supervision and express authorization of their parents or legal
guardians.
SECTION VI: RIGHTS OF THE DATA SUBJECTS
In accordance with the GDPR, the user possesses the right of access, rectification,
erasure, restriction of processing, data portability, and objection to the processing
thereof.
To exercise any of these rights free of charge, the data subject may send a request in
writing, attaching a clear description of the right they wish to exercise, to the official
email: info@ayjoya.com.
Likewise, if the user considers that their personal data are being processed
improperly, they have the right to lodge a formal complaint with the relevant
supervisory authority, which within the territory of Spain is the Spanish Data
Protection Agency (AEPD) through its official web portal.
SECTION VII: MODIFICATIONS TO THE PRIVACY POLICY
AY Joya reserves the right to modify or update this Privacy Policy in order to adapt it
to legislative developments, case law, or operational changes in the business model.
Users are recommended to review this document periodically to know the most
recent version applicable to the protection of their personal data. The continued use
of the Website after the publication of such modifications will imply the acceptance of
the current version of this Privacy Policy.
