PRIVACY POLICY

One Oak Apparel, S.L., a company based at Calle Alcalá, 302 Oficina 4, Madrid (Spain), with CIF
[B04843256], (hereinafter, “One Oak” or the “Company”) is responsible for the processing of
your personal data. This privacy policy provides information regarding the treatment of the
personal data of our clients or potential clients, following the provisions of the General Data
Protection Regulation (“GDPR”).

You can contact us by sending an email to [email protected] to share any questions you
may have regarding this policy.

If you are a One Oak customer because you have bought or intend to buy any of our products,
we will treat your data as indicated below:

  • Purpose of the treatment.We process your data to maintain, fulfill, develop, control and
    execute the business relationship we maintain with you, as a customer of One Oak. In addition,
    we may send you commercial communications about our products and services, to keep you
    informed about news and offers that might be of interest to you.
  • Legal basis of the treatment.The processing of your data is necessary to execute our
    contractual relationship (for example, for the management and shipping of your order to the
    address you indicated). Regarding commercial communications, One Oak has a legitimate
    interest in maintaining contact with you to inform you of our news that may be of interest to
    you.
  • Recipients of your data.Only some of our service providers will have access to your personal
    data that, in order to execute the service they provide us with (for example, the shipping
    company). These service providers will treat your data according to our instructions and
    always under our command.
  • International data transfers.To provide the service we use the services of Google LLC, for
    which it is necessary that this company, from the United States, have access to your personal
    data following our instructions. Google LLC adheres to the Privacy Shield framework, an
    agreement signed between the United States and the European Union whereby the American
    entities adhered to the program, guarantee that they apply the same data protection
    standards as European companies.
  • Period of conservation of your data. Your data will be kept during the execution and
    maintenance of our contractual relationship. Regarding commercial communications, your
    data will be kept for as long as you wish, since you can request at any time that we stop
    sending you these communications, through the link included for this purpose in all our
    advertising communications. In case you do not interact with our commercial emails for two
    years (understanding interaction as the opening of one email), we will proceed to the deletion
    of your data for this purpose.

If you are not a One Oak customer yet, but want to receive our communications informing you
of news, offers, campaigns, launches, etc., we will treat your data as indicated below:

  • Purpose of the treatment. We process your data to keep you informed about news and offers
    that might be of interest to you.
  • Legal basis of the treatment. Your express consent, which you will demonstrate by checking
    the specific box that indicates this.
  • Recipients of your data. Only some of our service providers will have access to your personal
    data that, in order to execute the service they provide us with. These service providers will
    treat your data according to our instructions and always under our command.
  • International data transfers. To provide the service we use the services of Google LLC, for
    which it is necessary that this company, from the United States, have access to your personal
    data following our instructions. Google LLC adheres to the Privacy Shield framework, an
    agreement signed between the United States and the European Union whereby the American
    entities adhered to the program, guarantee that they apply the same data protection
    standards as European companies.
  • Period of conservation of your data. Your data will be kept for as long as you wish, as you can
    request at any time that we stop sending you these communications, through the link included
    for this purpose in all our advertising communications. In case you do not interact with our
    commercial emails for two years (understanding interaction as opening one email), we will
    proceed to delete your data.

In case you have made an inquiry to One Oak, we will treat your data as indicated below:

  • Purpose of the treatment. We treat your data to resolve the question or questions you have
    raised.
  • Legal basis of the treatment. One Oak has a legitimate interest in answering any question a
    person may ask.
  • Recipients of your data. Only some of our service providers will have access to your personal
    data that, in order to execute the service they provide us with. These service providers will
    treat your data according to our instructions and always under our command.
  • International data transfers. We provide users with a WhatsApp number to which the user can
    text if they wish to ask any question. Only in these cases and for the response to help the user
    through WhatsApp, will it be necessary for WhatsApp, Inc., from the United States, to have
    access to your personal data following our instructions. WhatsApp, Inc. adheres to the Privacy
    Shield framework, an agreement signed between the United States and the European Union
    whereby the American entities adhered to the program, guarantee that they apply the same
    data protection standards as European companies.
  • Period of conservation of your data. Your data will be kept for this purpose until we solve your
    query.

You can exercise the following rights before One Oak:

  • Right to access to your personal data to know which are being processed and the processing
    operations carried out with them;
  • Right to rectify any inaccurate personal data;
  • Right to delete your personal data, when this is possible;
  • Right to request the limitation of the processing of your personal data when the accuracy,
    legality or the need for the processing of the data is doubtful, in which case, we may retain the
    data to keep them for the exercise or defense of claims.
  • Right to object to the treatment intended to send you advertising communications, or to the
    resolution of issues. You will have the right to revoke your consent for this purpose at any
    time, through the link enabled for this purpose in all advertising communications sent by One
    Oak.
  • Right to the portability of your personal data, when you are a client of One Oak and in relation
    to the treatment aimed at maintaining our contractual relationship.

You can exercise your rights at any time for free by sending an email to the following email
address: [email protected] You must specify what right you want to exercise, as well as
your identifying data. If, in order to verify your identity, we need additional information to
those you provide, we will let you know.

If you believe that One Oak has committed a violation of personal data protection legislation,
please do not hesitate to contact us at the email address [email protected], indicating
your issue, so that we can solve the Problem as soon as possible. Furthermore, you can also
inform the Spanish Agency for Data Protection and claim before this authority the protection
of your rights.