Privacy Policy

I. PRIVACY AND PERSONAL DATA PROTECTION POLICY
The website WWW.KARENABBA.COM, hereinafter "KAREN ABBA SHOES," "WWW.KARENABBA.COM," or "the website" interchangeably, hereby informs all users of this privacy and personal data protection policy.
This privacy and personal data protection policy is part of the General Terms and Conditions of Use of the website WWW.KARENABBA.COM. For more information, please review the General Terms and Conditions of Use contained on the website.
Reading this policy will allow users to understand how KAREN ABBA SHOES collects, processes, and protects their personal data.
Access, use, and continued use of the website WWW.KARENABBA.COM implies acceptance of this privacy policy.
Of particular importance is the application of Law No. 19,628 on Personal Data Protection and Law No. 19,496 on Consumer Rights.
This policy, to the extent it does not contravene Chilean law, is adapted to the European General Data Protection Regulation (GDPR).
1. Definitions
a. Data storage: the preservation or safekeeping of data in a registry, bank, or database.
b. Statistical data: data that, either at its source or as a result of its processing, cannot be associated with an identified or identifiable data subject.
c. Personal data or personal data: data relating to any information concerning identified or identifiable natural persons.
d. Sensitive data: Personal data that refers to the physical or moral characteristics of individuals or to facts or circumstances of their private or intimate life, such as personal habits, racial origin, ideologies and political opinions, religious beliefs or convictions, physical or mental health, and sexual life.
e. Registry, bank, or database: An organized set of personal data, whether automated or not and regardless of the form or method of its creation or organization, that allows for interconnection of data, as well as for the performance of any type of data processing.
f. Registry, bank, or database controller: The natural or legal person responsible for decisions related to the processing of personal data, also known as the personal data controller.
g. Data subject: The natural person to whom the personal data refers.
h. Data processing: any operation or set of operations or technical procedures, whether automated or not, that allows for the collection, storage, recording, organization, processing, selection, extraction, comparison, interconnection, dissociation, communication, assignment, transfer, transmission, or cancellation of personal data, or their use in any other way.
2. Principles applicable to the processing of personal data
The processing of users' personal data will be subject to the following principles:
a. Principle of legality, fairness, and transparency: the user's consent will be required at all times after providing fully transparent information about the purposes for which the personal data is collected.
b. Principle of purpose limitation: personal data will be collected for specific, explicit, and legitimate purposes.
c. Principle of data minimization: the personal data collected will be only those strictly necessary in relation to the purposes for which they are processed.
d. Principle of accuracy: personal data must be accurate and will always be up-to-date.
e. Principle of retention limitation: Personal data will only be kept in a form that allows the identification of the user for the time necessary for the purposes of its processing.
f. Principle of integrity and confidentiality: Personal data will be processed in a manner that guarantees its security and confidentiality.

g. Principle of proactive accountability: The data controller will be responsible for ensuring that the above principles are met.
3. Data controller, database, or registry
The data controller for the personal data collected through the KAREN ABBA SHOES website is ABBA GATICA SPA, Tax Identification Number 77.552.389-1, represented by KAREN IOLE ABBA GATICA, National Identity Card Number 13.828.537-5, hereinafter the data controller.
The contact information for the data controller is:
Email: contacto@karenabba.com
4. Collection and recording of personal data and the purpose of its processing
The personal data obtained by KAREN ABBA SHOES through the forms on its pages will be incorporated and processed in our databases in order to facilitate, expedite, and fulfill the commitments established between KAREN ABBA SHOES and users, or to maintain the relationship established in the forms they complete, or to respond to a request or query from them.
Specifically, user data will be obtained by KAREN ABBA SHOES through the following actions:
When purchasing products offered on the website. When completing and/or making inquiries on the forms available on the website. When participating in contests published on the website.
5. Categories of Personal Data
The categories of data processed by KAREN ABBA SHOES are solely identifying data. Under no circumstances are sensitive personal data categories processed, such as a person's health status or their political opinions or religious beliefs.
Sensitive data may not be processed except when authorized by law, with the consent of the data subject, or when the data is necessary for determining or granting health benefits to which the data subject is entitled.
6. Legal Basis for the Processing of Personal Data
The processing of personal data may only be carried out when authorized by law or with the express consent of the data subject.
KAREN ABBA SHOES undertakes to obtain the express, written, and verifiable consent of the user regarding the personal data it owns, for the processing of such data for one or more specific, duly informed purposes.
Information will also be provided regarding the possible public disclosure of the stored and processed data.
The processing of personal data originating from or collected from publicly accessible sources does not require authorization when the data is of an economic, financial, banking, or commercial nature, is contained in lists relating to a category of individuals that merely indicate information such as the individual's membership in that group, their profession or activity, their educational qualifications, address, or date of birth, or is necessary for direct-response commercial communications or the direct marketing or sale of goods or services.
Nor does this authorization require the processing of personal data carried out by private legal entities for their exclusive use, that of their associates, and the entities with which they are affiliated, for statistical, pricing, or other purposes for the general benefit of those entities.
Personal data must be used only for the purposes for which it was collected, unless it originates from or was collected from publicly accessible sources.
Sensitive data may not be processed except when authorized by law, with the consent of the data subject, or when the data is necessary for determining or granting health benefits to which the data subject is entitled. The user has the right to withdraw their consent at any time. Withdrawing consent is as easy as giving it. As a general rule, withdrawing consent will not affect use of the website.
When the user must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the website, they will be informed if completing any of these forms is mandatory because they are essential for the proper development of the transaction.
7. Personal data retention period
Personal data will only be retained for the minimum period necessary for the purposes of its processing and, in any case, only for the following period: 1 year, or until the user requests its deletion.

At the time personal data is collected, the user will be informed of the period for which the personal data will be retained or, if this is not possible, the criteria used to determine this period.
8. Recipients of Personal Data
Users' personal data will not be shared, sold, transferred, leased, traded, or otherwise transmitted to third parties, except as required by law.
9. Personal Data of Minors
Only persons over the age of 14 may give their consent for KAREN ABBA SHOES to lawfully process their personal data.
If the person is under the age of 14, the consent of the child's parents or legal guardians, or of the person responsible for the child's personal care, will be required, unless expressly authorized or required by law.
Sensitive data of adolescents under the age of 16 may only be processed with the consent of their parents or legal guardians, or the person responsible for the minor's personal care, unless expressly authorized or mandated by law.
10. Confidentiality and Security of Personal Data
KAREN ABBA SHOES undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized communication or access to such data.
The website WWW.KARENABBA.COM has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as this transmission between the server and the user, and in feedback, is fully encrypted.
However, since KAREN ABBA SHOES cannot guarantee the impregnability of the Internet or the total absence of hackers or others who fraudulently access personal data, the data controller undertakes to notify users, without undue delay, of any personal data security breach that is likely to entail a high risk to the rights and freedoms of natural persons. A personal data security breach is understood to be any breach of security that results in the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized communication of or access to such data.
Personal data will be treated as confidential by the data controller, who undertakes to inform users of this information and to ensure, by means of a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom the information is made accessible. 11. Rights arising from the processing of personal data
The user has the following rights regarding KAREN ABBA SHOES and may, therefore, exercise the following rights against the data controller:
a. Right of access: This is the right of users to obtain confirmation of whether or not KAREN ABBA SHOES is processing their personal data and, if so, to obtain information about their specific personal data and the processing that KAREN ABBA SHOES has carried out or is carrying out, as well as, among other things, information available about the origin of said data and the recipients of any communications made or planned.
b. Right to rectification: This is the right of users to have their personal data amended if it is found to be inaccurate or, taking into account the purposes of the processing, incomplete.
c. Right to erasure ("the right to be forgotten"): This is the right of users, provided that current legislation does not establish otherwise, to obtain the erasure of their personal data when it is no longer necessary for the purposes for which it was collected or processed; when the user has withdrawn their consent to the processing and there is no other legitimate reason to continue processing it; when the personal data has been processed unlawfully; or when the personal data must be erased in compliance with a legal obligation.
If the erased or rectified personal data has been previously disclosed to specific or identifiable third parties, the data controller must notify them as soon as possible of the transaction. If it is not possible to determine the persons to whom the data has been disclosed, a notice must be posted that may be of general knowledge to those who use the information in the database.

The rectification, deletion, or blocking of personal data stored by legal mandate may not be requested, except in the cases provided for in the respective law.
d. Right to restriction of processing: This is the right of users to restrict the processing of their personal data. Users have the right to obtain restriction of processing when they contest the accuracy of their personal data, the processing is unlawful, the data controller no longer needs the personal data but the user needs it to make legal claims, and when the user has objected to the processing.
e. Right to data portability: If the processing is carried out by automated means, the user has the right to receive their personal data from the data controller in a structured, commonly used, and machine-readable format and to transmit it to another data controller. Whenever technically feasible, the data controller will transmit the data directly to that other controller.
f. Right to object: This is the right of users to prevent the processing of their personal data or to have their personal data processed by KAREN ABBA SHOES cease.
g. Right not to be subject to a decision based solely on automated processing, including profiling: This is the right of users not to be subject to an individualized decision based solely on the automated processing of their personal data, including profiling, unless otherwise provided by current legislation.
Users may exercise their rights by written communication to the data controller, as established in Article 16 of Law No. 19,628.
12. Links to third-party websites
The website WWW.KARENABBA.COM may include hyperlinks or links that allow access to websites of third parties other than KAREN ABBA SHOES. The owners of these websites will have their own privacy and data protection policies, and they are, in each case, responsible for their own databases and privacy practices.
13. Complaints before the supervisory authority
If the user considers that there is a problem or a violation of current regulations in the way their personal data is being processed, they will have the right to take appropriate action before the Courts of Justice.

II. COOKIE POLICY
Access to this website may involve the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user—on the various devices they may use to browse—so that the server remembers certain information that will later be read by only the server that implemented it. Cookies facilitate navigation, make it more user-friendly, and do not harm the browsing device. The information collected through cookies may include the date and time of website visits, pages viewed, time spent on the website, and the sites visited just before and after the visit. However, no cookie allows the website to contact the user's phone number or any other means of personal contact. No cookie can extract information from the user's hard drive or steal personal information. The only way a user's private information can become part of the cookie file is if the user personally provides that information to the server.
Cookies that allow a person to be identified are considered personal data. Therefore, the Privacy Policy described above will apply to them. In this regard, the user's consent will be required for their use. This consent will be communicated, based on an authentic choice, offered through an affirmative and positive statement, before initial processing, removable, and documented. 1. First-party cookies
These are cookies sent to the user's computer or device and managed exclusively by KAREN ABBA SHOES to ensure the website functions optimally. The information collected is used to improve the quality of the website, its content, and the user experience. These cookies allow us to recognize the user as a repeat visitor to the website and adapt the content to offer content tailored to their preferences.
The entity or entities responsible for supplying cookies may transfer this information to third parties, provided it is required by law or a third party processes this information for said entities.

2. Social Media Cookies
KAREN ABBA SHOES incorporates social media plugins that allow access to these sites from the website. For this reason, social media cookies may be stored in the user's browser. The owners of these social media sites have their own data protection and cookie policies, and are, in each case, responsible for their own files or databases and their own privacy practices. Users should refer to these sites to learn about these cookies and, where applicable, the processing of their personal data. For information purposes only, the following links are provided to some of the social networks where these privacy and/or cookie policies can be consulted:
https://www.facebook.com/policies/cookies
https://twitter.com/es/privacy
https://www.facebook.com/help/instagram/155833707900388
https://www.youtube.com/intl/es/about/policies/#community-guidelines
https://policies.google.com/privacy?hl=es
https://es.linkedin.com/legal/privacy-policy
https://policy.pinterest.com/es/privacy-policy
https://www.tiktok.com/legal/privacy-policy?lang=es
3. Disabling, rejecting, and deleting cookies
The user can disable, reject, and delete the cookies—in whole or in part—installed on their device by configuring their browser (among the following options: which can be found, for example, in Chrome, Firefox, Safari). In this regard, the procedures for rejecting and deleting cookies may differ from one internet browser to another. Consequently, the user should refer to the instructions provided by the internet browser they are using. If they reject the use of cookies—in whole or in part—they may continue to use the website, although their use of some of its features may be limited.

III. ACCEPTANCE AND CHANGE OF THIS PRIVACY POLICY
It is necessary that the user has read and agrees to the conditions regarding the protection of personal data contained in this privacy and cookie policy and that they accept the processing of their personal data so that the person responsible for the processing can proceed with it in the manner, during the periods, and for the purposes indicated. Use of the website implies acceptance of its privacy and cookie policy.
KAREN ABBA SHOES reserves the right to modify its privacy and cookie policy at its sole discretion, or as a result of legislative or jurisprudential changes. Users will be informed of any changes or updates to this privacy and cookie policy.
Users are advised to check this page periodically to stay informed of the latest changes or updates.
This privacy and cookie policy was created on June 12, 2025, and has been updated to comply with current legislation.

Karen Abba isotype, registered trademark, leather shoes, signature designs.