Through the stores, apps and web shops of Just Brands, PME Legend, Cast Iron and Vanguard, all part of Just Brands B.V., New Yorkstraat 50, 1175 RD Lijnden, the Netherlands ("Just Brands"), privacy sensitive data or personal data is processed. We process personal data with care and keep it secure. In this processing we adhere to the requirements set by privacy legislation, including the General Data Protection Regulation (GDPR).

Just Brands' websites include:

 - www.pme-legend.com

- www.vanguard-clothing.com

- www.castiron-clothing.com

- www.jbfo.nl

This Privacy Policy applies to all aforementioned websites.

In this Privacy Policy, we explain what we do with your personal data and why we need it. If you have any questions after reading our Privacy Policy, please do not hesitate to contact our customer service department by writing to privacy@justbrands.com. If you wish, you can also contact the Spanish Data Protection Agency: https://www.aepd.es/.

This Privacy Statement may change from time to time as a result of new developments or legislator changes. You can always find the most current Privacy Statement on our website(s).

Just Brands is the legally responsible party for processing all Personal Data of our (potential) customers, visitors and users of our websites and apps.

This Privacy Policy applies to you if you:
- are a customer of Just Brands and place an order online;
- created an account;
- are subscribed to a Just Brands newsletter or participating in a Just Brands promotion;
- visit a Just Brands website;
- visit an app from Just Brands.

You can visit our website without providing any personal information. If you only use our website for information purposes, i.e. do not log in, register, place an order or otherwise provide us with information about yourself, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmitted to us in the context of cookies used for statistical analysis of the use of our website.

 In Spain, if you are under 14, consent must be provided or authorized by your parent or legal guardian. We do not knowingly collect data from children under 14.

You can visit our website without providing any personal information. If you only use our website for information purposes, i.e. do not log in, register, place an order or otherwise provide us with information about yourself, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmitted to us in the context of cookies used for statistical analysis of the use of our website.

For the purpose of the technical provision of the website, it is necessary that we process certain automatically transmitted information from you so that your browser can display our website and you can use the website. This information is automatically collected each time you visit our website and stored in our server log files. This information relates to the computer system of the calling computer. The following information is collected:

 - IP address;
- Browser type/version (Ex.: Firefox 59.0.2 (64 Bit));
- Browser language (ex.: English);
- Operating system used (ex.: Windows 10);
- Inner resolution of the browser window;
- Screen resolution;
- Javascript activation;
- Java On / Off;
- Cookies On / Off;
- Color depth;
- Time of access. 

Furthermore, we use cookies to make our website available for your use. Cookies are text files that are stored on your computer system in the Internet browser or by the Internet browser when you call up a website. A cookie contains a characteristic string of characters that makes it possible to uniquely identify the browser when the website is called up again. We use these cookies exclusively to provide you with our website and its technical functions. Some functions of our website cannot be offered without the use of cookies. You can find out more about the cookies we use in our Cookie Policy, which you can access here.

Your information collected through cookies will not be used by us to create user profiles or to evaluate your surfing behaviour.

We process your personal data for the technical provision of our website on the basis of the following legal grounds:
- for the performance of a contract or for the implementation of pre-contractual measures; and
- based on our legitimate interests. Our legitimate interest here is to be able to provide you with an attractive, technically functioning and user-friendly website, as well as to take measures to protect our website against cyber risks and to prevent cyber risks to third parties from our website.

If you place an order on a Just Brands website you will be asked to provide name, (billing) address, email and payment details as well as your phone number. The data you provide, as well as your order number and payment details, will only be used by Just Brands for the following purposes:
- making an order as fast and efficient as possible;
- informing you about the status of the order;
- the handling of the order (such as payment, confirmation and its shipment or return);
- providing customer service.

We process your personal data when ordering via website on the basis of the following legal grounds:
- for the performance of a contract or for the implementation of pre-contractual measures; and
- based on our legitimate interests. Our legitimate interest here is to be able to provide you with an attractive, technically functioning and user-friendly website, as well as to take measures to protect our website against cyber risks and to prevent cyber risks to third parties from our website and to inform you about similar products/services offered by us in the future.

Just Brands only shares your data with the here described third parties in the cases mention below: 
-we share your data within the Just Brands group when necessary for the intended processing purpose, such as order fulfilment, payment processing, accounting systems, software development tools and marketing content creation;
- we share your data with business partners to make analyses of your buying behaviour and to inform you about personalized offers or promotions, for this purpose we link your purchase data with your customer data;
- we provide your data to third parties if this is necessary for the execution of the agreement you have entered into with Just Brands and/or on the basis of any legal obligations applicable to Just Brands.

We use a payment service provider to process your order.

We process your personal data for the processing of orders on our website on the basis of the following legal grounds:
- for the performance of a contract or for the implementation of pre-contractual measures

If you create an account, we use your information to identify you, display your purchase history and personalized information, including your ‘wish list’. We use your: name, address, email address, date of birth, account number, payment information and purchase/order history. 

After successful registration, you can carry out certain activities via your user account, such as changing your data or also ordering a newsletter.

We process your data for the above purposes on the basis of the following legal grounds:
- for the performance of a contract or for the implementation of pre-contractual measures; and
- based on our legitimate interests in order to make the portal technically available to you. Our legitimate interest is to be able to provide you with an attractive, technically functioning and user-friendly portal and to make product suggestions based on your previous purchases.

Just Brands is also active on social media platforms such as Facebook, Twitter, LinkedIn, YouTube and Instagram. When you contact Just Brands via social media, we process your data for the following purposes: 

To answer any questions you submit via social media and to contact you if you participate in a promotion on a Just Brands social media page. For details of each promotion please refer to the terms and conditions of the relevant promotion.

It involves the following data:
email address when asking questions via social media and when participating in a contest: email address, address, first and last name and phone number (optional).

When signing up for the newsletter via social media, this involves email address and first name. How this works we explain in our Cookie Policy. 

Finally, we work with several affiliates partners.

We process your personal data to respond to user inquiries on the basis of the following legal grounds:
- based on our legitimate interests. Our legitimate interest is to respond appropriately to customer inquiries. 

We process your data for sending newsletters, surveys, etc. and personalizing the approach on the following legal basis:
- based on your preferences. Provided that you have given us your consent;

- based on our legitimate interest insofar as you have provided us with your e-mail address in connection with the purchase of goods or services or we send you personalized advertising. Our legitimate interest is based on our economic interests in the implementation of advertising measures and target group-oriented advertising.

We use location data for the store locator feature on our websites to show Just Brands stores near you. This feature can only be used if you have given your consent through the pop-up in which we ask for this prior consent. This location data is not stored or shared with third parties.

We process your location data on the following legal basis:
- Based on your consent.

If you are having trouble logging in or have another problem with your account, please contact Just Brands customer service at (webshoperrors@justbrands.nl). A customer service representative can then look into your account to fix the problem or, for example, manually reset your password.

We process your data for the above purposes on the basis of the following legal grounds:
- to perform a contract or to carry out pre-contractual measures; and
- based on our legitimate interest in order to make the portal technically available to you. Our legitimate interest here is to be able to provide you with an appealing, technically functioning and user-friendly portal.

Just Brands is constantly working to ensure that your personal data is as secure as possible and in accordance with the requirements set out in the GDPR. Your data will therefore be stored (partially) hashed or anonymised. Employees of Just Brands only have access to your personal data if this is necessary to provide services. Appropriate technical measures are taken for this.

Personal data shall be retained only for the period strictly necessary for the purposes for which they are processed, in accordance with the applicable legislation. In particular:

a) Data relating to orders and invoicing shall be retained for the period legally required under the applicable commercial and tax legislation;

b) User account data shall be retained for as long as the account remains active and shall be erased or anonymised following its closure, unless a legal obligation requires otherwise;

c) Data processed for marketing purposes, including newsletters, shall be retained until the data subject withdraws consent or exercises the right to object;

d) Data processed on the basis of legitimate interests, namely for the prevention of fraud, security and the establishment, exercise or defense of legal claims, shall be retained for the period necessary to pursue those purposes and shall not exceed the applicable statutory limitation period;

e) Technical and browsing data, including logs and data associated with cookies, shall be retained for the periods defined in the Cookies Policy or for as long as necessary to ensure the security and proper functioning of the website.

Upon expiry of the applicable retention period, personal data shall be erased or irreversibly anonymised.

The website uses cookies that are stored on your computer/tablet or phone by your browser.  

Functional cookies are required for the Just Brands websites to function. They are used in the ordering process to store information about your orders and to facilitate your next visit to the website. These cookies will always be used regardless of your privacy settings.

The use of other cookies requires your consent. Our cookie banner offers “Accept”, “Reject” and “Settings” options with equal prominence.

You can find more information about the cookies we use and how to set your cookie preferences here in our Cookie Policy. You can withdraw consent at any time via the permanent “Cookies” link in the footer.Want to change your cookie settings right away? Please do so here.

If you would like to be informed about promotions, offers, new products and services of Just Brands you can subscribe to our newsletter. We will then use the information provided by you such as name, date of birth, address, email address, IP address, account number and other generated data (such as purchase history, click behaviour, and browsing history) to inform you of this. We do this through email, social media, digital campaigns, and direct mail. These channels may contain personalized content, depending on your chosen cookie settings.  

You can unsubscribe from these communications at any time. For communications via social media and digital campaigns, you can unsubscribe by changing your cookie preferences. You can unsubscribe from communication by e-mail via the unsubscribe link in the newsletter. 

We process your data for sending newsletters, surveys, etc. and personalizing the approach on the following legal basis:
- based on your consent.

We may use profiling (e.g., purchase history + cookie preferences) to tailor marketing. We do not take decisions producing legal or similarly significant effects solely by automated means. You can object to profiling for direct marketing at any time

If you have previously placed an order with us, you will also receive news updates from us. We will then use your e-mail address/electronic data obtained as part of your purchase to inform you about our own similar products/services offered by us in the future. You can unsubscribe from our newsletter at any time by using the unsubscribe link in the newsletter.  

After unsubscribing, we will delete your email address from our mailing list.

We process your data for sending newsletters after a purchase on the following legal basis:
- based on our legitimate interest if you have provided us with your e-mail address in connection with the purchase of goods or services or we send you personalized advertising. Our legitimate interest is based on our economic interests in the implementation of advertising measures and target group-oriented advertising.

If you would like to receive advice on Just Brands products of interest to you, you can use our 'Personal Style Advice' service. A Just Brands stylist will select clothing and accessories based on your interests and place them in the shopping basket in your account. You decide which clothes you ultimately order.

To use this service, we use the following information from you:
First name, last name, e-mail address, phone number, address, date of birth and clothing size.

We process your data for the above purposes on the basis of the following legal grounds:
For the performance of a contract or for the performance of pre-contractual measures, if you register to use the user account and the styling services offered there. You can withdraw from this service at any moment.

We also process your personal data in order to comply with other legal obligations that we have in connection with the processing of the order. These include, in particular, retention periods under commercial-, trade- or tax law. In Spain, this period is of 6 years for commercial record-keepping and 4 years for tax purposes, and could be longer if needed for legal claims. Customer account data are kept while the account remains active; marketing data until you opt out plus 12 months.

In doing so, we process your personal data on the basis of the following legal grounds:

- To fulfil a legal obligation to which we are subject to according to commercial-, trade-, or tax law, insofar as we are obligated to record and store your data.

We also process your personal data in order to be able to assert our rights and enforce our legal claims. Also, we process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences.

We process your personal data for this purpose on the basis of the following legal grounds:

- To protect our legitimate interests, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offences.

Initially, only our employees receive knowledge of your personal data. In addition, we share your personal data, to the extent permitted or required by law, with other recipients who provide services for us in connection with our websites and apps. We limit the transfer of your personal data to what is necessary, in particular to process your order. In some cases, our service providers receive your personal data as order processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently with your data that we transmit to them.

Below we list the categories of recipients of your personal data:  

- Payment service providers and banks, if applicable, when processing payment,

- External service providers for sending invoices by mail,

- Logistics service providers, in order to be able to deliver the goods to you,

- IT service providers in the administration and hosting of our website,

- Collection companies and legal advisors in the assertion of our claims

We do not transfer your personal data to countries outside the EU or EEA or to international organizations. If, exceptionally, data are transferred outside the EEA, we rely on an “adequacy decision” or “Standard Contractual Clauses” and additional safeguards. You can obtain a copy by contacting us.

We reserve the right to change this privacy policy at any time. Any changes will be announced by publishing the amended privacy policy on our website. Unless otherwise specified, such changes will take effect immediately. Therefore, please check this Privacy Policy regularly to view the most current version.  

Just Brands websites may contain links to third party websites. Just Brands is not responsible for the content of these websites or how these third parties handle personal data. For more information about the use of your personal data by these third parties please refer to the privacy statement of the third party in question.

In the event of a merger or acquisition, or other business transaction, Just Brands is entitled to transfer your personal data to the relevant third party.

The websites of Just Brands are managed by the private company Just Brands B.V., located at New Yorkstraat 50, in (1175 RD) Lijnden in the Netherlands and registered in the trade register of the Dutch Chamber of Commerce under number 33241012.

As a data subject, you have the following rights under the GDPR:

-         The right to request information about your personal data processed by us;

-         The right to demand correction of incorrect or incomplete personal data stored by us;

-         The right to request deletion of your personal data stored with us, unless further processing is necessary for:

o   the fulfilment of an outstanding order,

o   handling a question to our customer service department,

o   settlement of outstanding payments,

o   the fulfilment of a legal obligation,

o   for reasons of public interest, or

o   asserting, exercising or defending legal claims.

-         The right to request restriction of the processing of your personal data, to the extent that:

o   the accuracy of the data is not disputed,

o   the processing is unlawful, but you do not want us to delete it,

o   we no longer need the data, but you need it to bring, exercise or defend legal claims, or

o   If you have objected to the processing of your personal data;

-         The right to withdraw consent for the processing of personal data that Just Brands shall only apply to the processing of data for which you have granted us consent.

-         The right to receive the personal data you have provided to us in a structured, up-to-date and machine-readable format or to request its transfer to another controller;

To exercise these rights or other questions about Just Brands' privacy policy, please contact us at privacy@justbrands.nl. We answer to rights requests within one month, or two months in complex cases.

If you believe that Just Brands has used your personal data unlawfully you have the right to report this to the national Data Protection Authority. More information about the Spanish Data Protection Authority can be found at  https://www.aepd.es/