Helarea | Privacy Policy

1. Who is responsible for processing the data?

HELAREA FINE ART, S.L.U. is the entity responsible for processing your personal data for the purposes of providing the services identified in this Privacy Policy.

HELAREA FINE ART, S.L.U. is a company domiciled at C/ Paseo de la Castellana, 259, D, planta 50 Sur, Madrid – 28046 and its NIF number is B-88478359 (hereinafter, “HELAREA”). We also inform you that HELAREA has a Data Protection Officer appointed in accordance with the Spanish Data Protection Agency (www.aepd.es), who is at your disposal for any questions or inquiries regarding the processing of your data and whom you can contact via dpd.cliente@conversia.es.

2. What information do we process?

a) The data you provide to us directly:

We collect information about you when:

• You contact us through the channels provided for this purpose

• You contact us through the web form in the “Contact Us” section

• You subscribe to our newsletter

• You request a quote or custom artwork.

• You register on our Marketplace and make any purchase.

When you contact us through these channels, we will request your: first and last name and contact details (email address and phone number).

In addition, when you register on our Marketplace, we will require your home address and your national identity card number or similar document. We will also obtain information about payments made through the Marketplace to properly manage the service, which includes the bank account number and the amount paid.

All fields marked with an asterisk (*) in the forms provided to you through the channels will be mandatory, so that omitting any of them could make it impossible to provide the services requested. You must provide truthful information, and impersonation or the use of aliases or anonymous names is prohibited.

To ensure that the information provided is always up to date and error-free, you must inform HELAREA as soon as possible of any changes to your personal data. Likewise, you can also correct or update your data by accessing your profile settings.

Likewise, by “clicking” the “Send” button (or equivalent) in the aforementioned forms, you declare that the information and data you have provided in them are accurate and truthful.

b) The data obtained indirectly:

When you browse, various cookies and other tracking devices may be installed on your device, as explained in our Cookie Policy.

3. What is the origin of the data?

We consider that all the data processed by HELAREA has been provided by you freely.

In the event that the personal data provided belongs to a third party, you guarantee that you have informed them of this Privacy Policy and have obtained their authorization to provide the data to HELAREA for the purposes indicated above. Likewise, you guarantee that the data provided is accurate and up to date, and you assume responsibility for any direct or indirect damage or loss that may result from a breach of this obligation.

4. For what purpose and on what legal basis do we process the data?

HELAREA acts as the data controller for personal data for the following purposes and on the following legal bases:

● On the basis of managing the contractual or pre-contractual relationship:

a) Provision of a general customer service, including resolving issues with your HELAREA account, providing other customer service, and handling complaints about fees

b) Managing your account on our Marketplace and managing purchases made through it.

c) Managing the purchase of products we sell on our Website and their corresponding payment.

d) Compliance with our General Terms and Conditions.

e) Authorization of events you register for (including managing the registration process and sending the necessary information in the context of the event).

● On the basis of fulfilling legal obligations of HELAREA:

a) Allowing users to exercise their rights.

b) Complying with the regulations applicable to HELAREA, such as data protection, consumer and user, trademark and intellectual property, e-commerce, tax, and accounting regulations.

c) Participating, when required, in investigations and proceedings (including judicial ones) carried out by competent authorities to prevent and, where appropriate, combat unlawful acts.

● On the basis of the express, free, and unambiguous consent you, where applicable, grant us when we collect your data:

a) Keeping you informed about products services and events offered by us or third parties, always sent through HELAREA by electronic means, provided that the communications do not refer to products or servicessimilar to those previously contracted.

b) Obtaining discounts on our products and services.

● On the basis of HELAREA's legitimate interest:

a) Keeping you informed about HELAREA products and services related to those previously contracted and that may be of interest to you.

b) If you decide to obtain discounts on our products and services, we may contact you by phone or other means to get to know you better and make better recommendations.

c) Conducting periodic reviews of our services and carrying out satisfaction surveys to evaluate and improve the quality of the service we provide.

d) Conducting internal reviews and, where appropriate, contacting the customer in the event that founded suspicions regarding possible fraud or identity theft are detected or exist.

e) Creating statistics on the use and proper functioning of our website

f) Mproving our content recommendation system within our Marketplace that may interest you.

However, if you do not want your data to be processed for these purposes, you can object at any time by contacting us at info@helarea.com as indicated in the Exercise of Rights section of this Privacy Policy.

5. Who is the data disclosed to?

All personal data transfers we make are necessary to fulfill the stated purposes, or are carried out to comply with a legal obligation:

a) To the Public Administrations and theJustice Administration, and the State and Defense Forces of theState in compliance with the legal obligations applicable to us.

b) To the packaging and courier companies we work with to deliver the orders you place, so that we can properly manage the contractual relationship maintained with you.

c) To the companies that sell our products on our Marketplace, so that we can properly manage the contractual relationship maintained with you, and manage purchase-related issues, such as returns or misdirected transactions.

d) IT service providers, tools, or IT infrastructure companies on which the services provided by HELAREA are based, such as hosting providers, CRMs, email ing service companies, data analysis, etc.

e) Payment service providers, for the proper management of the contractual relationship.

f) To our advertising and audience creation supply providers, based on the free consent you provided through the cookie banner. More information in our Cookie Policy.

In this regard, we inform you that any transfer that occurs will be carried out taking into account all necessary legal safeguards. Likewise, we guarantee that we sign specific contracts with all our service providers in accordance with the regulations.

HELAREA carries out international transfers of your personal data to provide you with these services. In any case, HELAREA guarantees that if there are providers located in countries outside ofthe European Economic Area not considered adequate in accordance with data protection regulations, the necessary precautions are taken to ensure that the data can be transferred securely, either because the provider offers adequate guarantees, through, among others, the signing of the European Commission's Standard Contractual Clauses, or because one of the exceptions set out in the regulations is met.

6. Exercise of your rights.

We inform you that you can exercise the following rights:

1. Right of access to your personal data to (i) obtain a copy of your data, (ii) know which ones are being processed and (iii) the processing operations carried out with them.

2. Right to rectify any inaccurate personal data.

3. Right to erasure of your personal data, when this is possible.

4. Right to request the limitation of the processing of your personal data when the accuracy, legality, or necessity of the processing of the data is doubtful, in which case we may retain the data for the exercise or defense of claims.

5. Right to object to automated decision-making, including profiling.

6. Right to object to the processing of your personal data when the legal basis that authorizes us to process it, according to section 4 above, is legitimate interest.

7. Right to data portability, when the legal basis that authorizes us to process it, as indicated in section 4 above, is the existence of a contractual relationship or your consent.

8. Right to revoke the consent granted to HELAREA.

You can exercise your rights at any time and free of charge in the following ways:

1. Send an email to info@helarea.com from the email address you used to register for our services, stating the right you wish to exercise.

2. Send a written request to the address C/ Paseo de la Castellana, 259, D, planta 50 Sur, Madrid – 28046, stating the right you wish to exercise.

3. In addition, when you receive any communication from us, you can unsubscribe from all previously accepted commercial communications by clicking on the unsubscribe section contained in that communication.

When you exercise your rights, and only if we have doubts about your identity, we may request additional information to verify your identity.

Likewise, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that we have committed a breach of data protection legislation regarding the processing of your personal data.

In addition, we inform you that you can sign up for the Robinson List at www.listarobinson.es: the advertising exclusion system managed by the Spanish Association of the Digital Economy (ADIGITAL), where you can register to express your opposition to the use of your data for the purpose of sending you commercial communications.

7. Retention period of your data.

We will retain your data as long as the contractual relationship remains in effect, plus the limitation periods established for the exercise of legal actions arising from compliance with the obligations contained in these terms, as well as the limitation periods applicable to actions that may be brought against HELAREA by a competent Administration or a court of law.

If you do not have a contractual relationship with HELAREA, we will retain your data until you request its deletion, object to the processing, or revoke your consent, as the case may be; unless there are legal or compelling reasons that require its retention.

8. Security and confidentiality.

To prevent unauthorized access to or unauthorized disclosure of personal data, we have taken appropriate technical and physical measures, as well as management processes, to safeguard and secure the information we collect from you.

9. Minors.

Minors under 14 years of age may not use the services available through our website without the prior authorization of their parents, guardians, or legal representatives, who will be solely responsible for all actions carried out by the minors under their care through the site, including the completion of forms with the personal data of said minors and the marking, where applicable, of the accompanying checkboxes. In this regard, and to the extent that HELAREA has no capacity to control whether users are minors or not, parents and guardians must enable the necessary mechanisms to prevent them from accessing the website and/or providing personal data without supervision, and HELAREA accepts no liability in this regard.

10. Privacy policy update.

We make our best efforts to keep our privacy policy fully up to date. If we make changes, they will be clearly identifiable in a clear and specific manner, as far as possible in the relationship we have established with you (for example: we can communicate the changes to you by email).

This privacy policy has been reviewed and published on 10 April 2026.