Privacy Policy
1. INFORMATION TO THE USER
Who is responsible for processing your personal data?
Arturo Gradolí is the CONTROLLER of the USER’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).
Where do the personal data we process come from?
• Data provided directly by the user
• Data collected through cookies
• Data collected through social media
• Data obtained from public sources
Why do we process your personal data?
To maintain a commercial relationship with the user. The processing operations planned are:
• Sending commercial advertising communications by email, fax, SMS, MMS, social media or any other present or future electronic or physical means that enables commercial communications. These communications will be carried out by the CONTROLLER and will be related to its products and services, or those of its collaborators or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
• Conducting market research and statistical analysis.
• Processing orders, requests, responding to inquiries or any type of request made by the USER through any of the contact methods available on the CONTROLLER’s website.
• Sending the online newsletter regarding news, offers and promotions related to our activity.
On what legal basis can we process your personal data?
Because the processing is legitimized under Article 6 of the GDPR as follows:
• With the USER’s consent: – sending commercial communications and the newsletter.
• Based on the CONTROLLER’s legitimate interest: – carrying out market research, statistical analysis, etc. – processing orders, requests, etc. at the USER’s request.
• Based on the CONTROLLER’s legitimate interest and pursuant to Article 21.2 of Law 34/2002 – contacting the USER by electronic means, following a prior contractual relationship, to offer products or services of interest. The possibility to object to this processing will be offered in a simple manner within the electronic communication itself.
How long will we keep your personal data?
They will be kept for no longer than necessary to maintain the purpose of processing or while there are legal obligations requiring their retention. When no longer necessary, they will be deleted with appropriate security measures to ensure anonymization or total destruction.
If the USER exercises their right to object, the data will be deleted without delay, except when necessary to comply with legal obligations of the Controller, or for the exercise and defense of legal or contractual claims. In this case, the data will remain duly blocked and will not be used until the time necessary for the exercise of the Controller’s legitimate rights has elapsed. They will then be permanently deleted.
To whom do we disclose your personal data?
No disclosure of personal data to third parties is foreseen except to:
– Entities collaborating with the Controller, when necessary for the development and execution of the purposes of processing.
– Providers of communication, marketing, and advertising services.
The CONTROLLER verifies that its collaborators apply the same level of protection to personal data and has signed confidentiality and data processing agreements with all of them, as required by current privacy regulations.
What are your rights?
The USER has the following rights:
• Right to withdraw consent at any time.
• Right of access, rectification, portability and erasure of data, and limitation or objection to its processing.
• Right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.
Contact details to exercise your rights:
Arturo Gradolí
2. INFORMATION PROVIDED BY THE USER THROUGH WEBSITE FORMS
By checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or download forms, USERS expressly, freely and unequivocally accept that their data are necessary to process their request by the provider. The inclusion of data in the remaining fields, not marked with an asterisk, is voluntary.
The USER guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for communicating any changes thereto.
The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary to provide an optimal service to the USER. If all data are not provided, it cannot be guaranteed that the information and services provided will fully meet your needs.
3. SECURITY MEASURES
In accordance with current data protection regulations, the CONTROLLER complies with all provisions of the GDPR and LOPDGDD regarding the processing of personal data under its responsibility, and expressly with the principles described in Article 5 of the GDPR, whereby data are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and LOPDGDD in order to protect the rights and freedoms of USERS and has provided them with appropriate information so that they may exercise them.
For more information regarding privacy guarantees, you may contact the CONTROLLER: Arturo Gradolí or through the contact form.