Privacy Policy

Effective Date: June 18, 2025

1. Introduction and Habsburgo's Commitment

Habsburgo is committed to protecting and respecting your privacy. This Privacy Policy describes how we collect, use, protect, and share your personal data when you visit and use our website ([Website Address]), purchase our products, or otherwise interact with us.

Our management of personal data is governed by the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. We recognize that trust is the cornerstone of our relationship with you, the connoisseur who values substance and excellence.

2. Geographic Scope and Exclusions

This policy is designed to comply with the data protection laws of the markets in which we operate. However, due to insurmountable regulatory and logistical complexities, we currently do not offer direct sales or shipping of our products to the Russian Federation or the Islamic Republic of Iran through this website.

3. The Information We Collect

We collect personal data to provide and improve your experience with Habsburgo. This information is classified as follows:

• Information You Provide Directly to Us:

  • Identification and Contact Data: First name, last name, email address, telephone number.
  • Shipping Data: Postal address, city, country, and postal code for the delivery of your pieces.
  • Communications: Any information you provide when contacting our customer service.

• Information Collected Automatically:

  • Technical and Usage Data: IP address, browser type and version, time zone setting, operating system, and data about your interaction with our website (pages visited, products viewed).

• Information from Third Parties:

  • Transaction Data: To process your payments, we use secure payment service providers such as PayPal and OpenPay (BBVA). These providers collect your payment information directly. Habsburgo does not store your full credit card or bank account details. We only receive a confirmation of the transaction.
  • Logistics Data: To manage international shipments, we share your shipping information with our logistics partner Envia.com, who in turn integrates with global carriers (such as DHL, FedEx, etc.) to perform the delivery.
     

4. Purpose and Legal Basis for Processing Your Information

We use your personal data based on clear legal grounds and for specific purposes:

5. Sharing of Personal Data

We do not sell your personal data. We only share it with third parties who are essential for the operation of our service, under strict confidentiality agreements:

• Payment Service Providers: PayPal, OpenPay.
• Logistics and Shipping Providers: Envia.com and its associated carriers. 
• Technology and Hosting Providers: For the maintenance of our website and systems (e.g., Google, Neubox).
   
• Public Authorities: When legally required to comply with the law, customs regulations, or judicial proceedings.

6. International Data Transfers

As a brand based in Mexico with global operations, your personal data will be processed in Mexico and potentially in other countries where our service providers are located. For data transfers outside of jurisdictions with robust data protection frameworks (such as the EEA, UK, Switzerland, Japan, etc.), we implement appropriate safeguards:

• For the European Economic Area (EEA), United Kingdom, and Switzerland: We use the Standard Contractual Clauses (SCCs) approved by the European Commission and their equivalents in the UK and Switzerland.
• For China: We will request your separate and explicit consent to transfer your personal data outside of China, in compliance with the PIPL.
• For other countries: We assess the legal framework of the recipient country and apply the necessary contractual or technical measures to ensure an adequate level of protection.

7. Data Security and Retention

We implement technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, and security systems.

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, fiscal, or reporting requirements.

8. Your Privacy Rights

You have rights over your personal data, which may vary depending on your place of residence. We are committed to honoring them globally.

• For Residents of the EEA, UK, and Switzerland (under GDPR/UK GDPR):

  • Access: Request a copy of your data.
  • Rectification: Correct inaccurate data.
  • Erasure (Right to be Forgotten): Request the deletion of your data.
  • Restriction of Processing: Limit how we use your data.
  • Portability: Receive your data in a structured, commonly used format.
  • Objection: Object to certain processing (e.g., direct marketing).
  • Right to lodge a complaint: With your local data protection authority.

• For Residents of California, USA (under CCPA/CPRA):

  • Right to Know: Know what personal information we collect and how we use and share it.
  • Right to Delete: Request the deletion of your information.
  • Right to Correct: Rectify inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: We do not sell your information, but should this practice change, you would have the right to object.
  • Right to Limit Use of Sensitive Personal Information.

• For Residents of Japan, Canada, Brazil, Australia, South Korea, and other jurisdictions: You also have rights of access, correction, and others applicable under your local laws (e.g., APPI, PIPEDA, LGPD).

To exercise any of these rights, please contact us using the details provided in section 10.

9. Cookie Policy and Tracking Technologies

Our website uses cookies to enhance your Browse experience, analyze traffic, and personalize content. For more details on the types of cookies we use and how you can manage them, please see our Cookie Policy (link to cookie policy).

10. Contact and Data Protection Officer

For any questions or to exercise your privacy rights, please contact our Data Protection Office:

• Email: [email protected]
• Mailing Address: Valle de los Ángeles 431, Valle de San Javier, Pachuca, Hidalgo, Mexico

11. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with a new effective date. We recommend that you review it periodically.