Privacy Policy

THE OWNER is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by THE OWNER implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated herein. Please note that although there may be links from our website to other websites, this Privacy Policy does not apply to the websites of other companies or organizations to which this website may redirect. THE OWNER does not control the content of third-party websites nor accepts any responsibility for the content or privacy policies of these websites.

Information on data processing (Regulation (EU) 2016/679 and LO 3/2018)

• Data Controller: THE OWNER. Our details are listed in the legal notice of this website.
• Purpose of processing: To offer and manage our products and/or services.
• Legal basis: Consent obtained from the data subject. Execution of the service contract.
• Recipients: Data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the processing.
• Data subjects’ rights: Data subjects have the right to exercise the rights of access, rectification, restriction of processing, erasure, data portability, and objection, by sending their request to our address.
• Data retention period: As long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.
• Complaint: Data subjects may contact the AEPD to file any complaint they deem appropriate.
• Additional information: You can consult additional and detailed information below in the “Privacy Matters” section.

Privacy Matters

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPDGDD), we offer you the following information regarding the processing of your personal data:

Who is responsible for processing your data?

THE OWNER.
Our details are listed in the legal notice of this website.

For what purpose do we process your personal data?

• We process the information provided to us to provide and bill for our services and products.
• If you give us your consent, we may also process your data to send you information about our activities, services, and products.
• If you participate in any of our raffles and/or contests, we will publish your first and last name, and your image, in the different spaces and communication and dissemination channels we use, including social networks, for the purpose of promoting our activities, services, and products.

How long will we retain your data?

The personal data provided will be retained as long as you are a user of our services or wish to receive information, and if you participate in a promotion, while it is active, and thereafter, for the periods established to comply with our legal obligations.

What is the legal basis for processing your data?

The legal basis for processing your data is the consent you provide.

Regarding information sent to us by minors under 14 years of age, it will be understood that it has been done with the consent of their legal representatives. If this is not the case, the minor’s legal representative must notify us as soon as they become aware of it.

To whom will your data be communicated?

Data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the processing.

What are your rights when you provide us with your data?

• Any person has the right to obtain confirmation as to whether or not we are processing their personal data.
• Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• In certain circumstances, interested parties may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defense of claims.
• Also, in certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case, we will cease to process them, except for compelling legitimate reasons or for the exercise or defense of possible claims.
• Interested parties also have the right to data portability.
• Finally, interested parties have the right to file a complaint with the competent Supervisory Authority.

How can you exercise your rights?

By sending us a written request, attaching a copy of an identification document, to our physical or electronic address.

How did we obtain your data?

The personal data we process comes from the data subject themselves, who guarantees that the personal data provided is true and is responsible for communicating any modification. Data marked with an asterisk are mandatory to provide the requested service.

What data do we process?

The categories of data we may process are:

• Identification data.
• Postal or electronic addresses.
• Other data requested in our forms.

The data is limited, as we only process the data necessary for the provision of our services and the management of our activity.

Do we use cookies?

We use cookies during navigation on our website with the informed consent of the user. The user can configure their browser to notify them of the use of cookies and to prevent their use. For more information, please visit our  cookie policy.

What security measures do we apply?

We apply the security measures established in Article 32 of the GDPR, therefore we have adopted the necessary security measures to guarantee an adequate level of security for the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability, and permanent resilience of the processing systems and services.

Some of these measures are:

• Information on data processing policies for staff.
• Regular backup copies.
• Access control to data.
• Regular verification, evaluation, and assessment processes.