Data protection
Last updated: October 2026
This policy explains how Legenda Fashion processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD) and the Spanish LSSI-CE.
Given the volume and nature of the data we process, we are not required to appoint a data protection officer.
Fields marked with an asterisk are required: without them we cannot handle your request. We do not process special categories of data or data relating to minors. This website is intended for professionals.
We collect data directly from you. Where we do not, it comes from the company you work for or from publicly available professional sources, such as your company’s website, LinkedIn or trade fairs, and is limited to professional contact data. In that case we will inform you in our first communication.
| Purpose | Legal basis |
|---|---|
| Answering your enquiries and requests for catalogues, samples or quotations. | Steps taken at your request prior to entering into a contract (Art. 6.1.b GDPR). |
| Managing the business relationship with clients and suppliers: orders, production, quality control, logistics and invoicing. | Performance of a contract (Art. 6.1.b GDPR) and legitimate interest in keeping in touch with company representatives (Art. 6.1.f GDPR and Art. 19 LOPDGDD). |
| Contacting industry professionals to present our services. | Legitimate interest in business-to-business prospecting (Art. 6.1.f GDPR). You may object at any time. |
| Sending you catalogues and B2B news by email. | Your consent (Art. 6.1.a GDPR and Art. 21 LSSI-CE) or, if you are already a client, our existing business relationship (Art. 21.2 LSSI-CE). You can unsubscribe in every email. |
| Complying with tax, accounting and commercial obligations, and defending the company against claims. | Legal obligation (Art. 6.1.c GDPR) and legitimate interest (Art. 6.1.f GDPR). |
We do not make automated decisions or build profiles that have legal effects on you.
Enquiries that do not lead to a business relationship are kept for a maximum of two years from the last contact. Client and supplier data are kept for the duration of the relationship and afterwards for the statutory limitation periods (generally six years under Article 30 of the Spanish Commercial Code and four years for tax purposes). Data used for commercial communications are kept until you withdraw your consent or object. After these periods, data are deleted or blocked in accordance with Article 32 LOPDGDD.
We do not sell your data. Only the following may access it:
Sharing data with our company in Hong Kong involves a transfer outside the European Economic Area. It is based on the standard contractual clauses approved by the European Commission (Art. 46.2.c GDPR) and, where necessary for the contract you have requested, on Article 49.1.b GDPR. If any technology provider processes data outside the European Economic Area, it will do so under an adequacy decision (for example, the EU-US Data Privacy Framework) or standard contractual clauses. You can ask us for a copy of the safeguards applied.
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent without affecting the lawfulness of prior processing. Write to contact@legendafashion.com with the subject “Data protection” and tell us which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month.
If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority of your country.
We apply technical and organisational measures appropriate to the risk to protect your data against loss, alteration or unauthorised access, including encrypted connections (HTTPS) across the whole website, restricted access to information and anti-spam protection on our forms. Staff with access to data are bound by a duty of confidentiality.
We may update this policy to reflect legal changes or changes in our activity. The version in force is always the one published on this page.
