1.1.- Who is responsible for the processing of your data?
Identidad: Mila García (from now on, the person in charge).
2.1.- What will the person in charge use my data for?
Sending of commercial communications related to the services offered by the person in charge.
- Send you commercial communications related to the activities and services that we offer in the Responsible Party and that fall within the reasonable expectation of you in relation to the services previously contracted. This treatment may cease in the event that you object to it.
- When you contact us, for example, through the contact form on the website, by telephone, fax, e-mail, messenger services, social networks, telephone or even in person, to ask us for information or consultation on any subject, make a suggestion, complaint or claim, we will treat your data in order to meet the request for information and / or consultation that we have made, with the management and scope that it requires. This operation may include the use of data received for the preparation of proposals for services and / or collaboration, if indeed that is the request.
- In the event that when you start visiting this website you have accepted to receive cookies, the cookies policy of the website will be applied to you. We recommend that you visit the aforementioned policy in which you will be able to find out, among other things, about the cookies used, their purpose and the configuration options that you can adopt in your page display devices, for example, to delete them.
2.2.- How long are you going to keep my data?
The conservation periods of the data you provide us with are intimately linked to the treatment in question.
In this regard, indicate what general character we will treat the data as long as the legal relationship that takes place or does not oppose the processing.
Once the period indicated above has ended, we will keep your data on the one hand, as long as the regulations impose it on us, and on the other hand, until the complete prescription of actions that may concur has been exhausted. These periods may be conditioned, among other factors, by the law applicable to the relationship between the parties.
Thus, in order to calculate the conservation period, it will be necessary to take as a starting point the period indicated in section 2.2.2 regarding the specific treatment and add the period that could affect you at the level of statute of limitations and prescription of actions.
2.2.1.- Time limits related to treatments:
- Treatments related to the sending of commercial communications directly related to the services provided by the Responsible.
- Treatment related to requests for information. We will treat your data during the time necessary to attend and manage your request for information.
- Cookies: according to the type of cookies, expressed in the corresponding policy.
2.2.2.- Time limits imposed by law and prescription of actions:
- Civil Code (article 1964): 5 years.
- Law 28 of Law 1/1973, of 1st of March, 3 or 10 years in general. Likewise, Law 39 of Law 1/1973, of 1 March, and the period contained therein of 30 years may also be applicable to the relationship between the parties.
- Code of Commerce: 6 years obligations of conservation of documentation imposed by Article 30.
3.- LEGITIMISATION OF PROCESSING
3.1.- Why can the person in charge treat my data? What legitimates him/her?
Depending on the relationship that is established and therefore the purpose of the processing, the legal basis for it may be different. Next, we expose the different situations that may occur and what legal basis is applicable depending on the treatment:
Purposes related to the sending of commercial communications
- Sending of commercial communications: In accordance with the regulations currently in force and having weighed our interests and your rights, we indicate that we have a legitimate interest in treating your data with the aim of sending you commercial communications related to the services contracted by you with us (without prejudice to your being able to oppose this treatment at any time).
Attention to requests for information
- Respond to requests for information: This processing is legitimised by the consent given by you at the time of sending your request for information and/or assistance.
- We are legitimized for this treatment by the consent given by you at the beginning of the navigation on our website.
3.2.- Consequences of the withdrawal of consent or opposition to the processing of your data. Mandatory and optional fields.
In the event that you are requested at any time to authorize the processing of a purpose that requires consent, its not granted (or its eventual withdrawal later) will not have consequences for you in any case. Neither will your opposition to the processing of your data for purposes based on legitimate interest (for example, the use of your data as a client for sending commercial communications) have any type of consequence.
In some data collection forms you will clearly see that some fields are marked as mandatory (with an asterisk) and the rest are absolutely voluntary. Therefore, not filling in voluntary fields will not have any consequence, and you can fill them in if you are interested in it.
4.1.- Will my data be passed on to third parties?
In general, except for legal obligation, your data will not be transferred to any third party without your express and affirmative consent.
4.2.- Proveedores de servicios relacionados con la página web.
Providers of services related to the website.
Hosting: the Responsible party’s website is hosted by the provider ACENS TECHNOLOGIES, S.L.U.
5.1.- What rights do I have regarding data protection? General information.
With respect to personal data collected for processing has the ability to exercise the rights of access, rectification, deletion and portability. Likewise, we inform you that in certain circumstances you will have the right to request the limitation or opposition to the processing of your data, in which case the Controller will cease processing and will only keep the same in the event that there is any regulatory obligation imposed or until the prescription of the actions that may concur.
If you would like more information on the aforementioned rights, we invite you to continue reading or visit the infographics prepared by the Spanish Data Protection Agency, which can be accessed via the following hyperlink.
5.2.- What do these rights consist of?
Right of access: This right allows the interested party to obtain confirmation from the Controller as to whether or not personal data concerning him or her is being processed and, in such a case, the right to access the personal data as well as the following additional information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients; d) the intended storage period or the criteria used to determine this period; e) the existence of the right to request from the data controller the rectification or deletion of personal data or the limitation of the processing of personal data relating to the data subject, or to oppose such processing; f) the right to lodge a complaint with a supervisory authority; g) available information on the origin of the data; h) the existence of automated decisions.
Right of rectification: This right entitles the data subject to request the Controller to rectify or complete inaccurate personal data without delay. It is important that the data contained in the databases are updated and in this sense we are at your disposal to rectify any error or inaccuracy that may exist in them.
Right to suppression: At any time you have the right to request that we suppress your personal data request that will be dealt with without delay unless there are any of the circumstances set out in the General Regulations on Data Protection, among which it is important to note that we must retain your data to comply with a legal obligation or to defend ourselves against a claim.
Right of portability: In the case of automated data processing based on consent, you may request that, in a structured format, of common use and mechanical reading, we send to another person responsible for processing the personal data about you that you have provided us.
Right of opposition: Through this right the interested party opposes the processing of their data by the responsible. This right is not absolute, which implies that the data controller may continue to process the data provided that he can prove legitimate reasons that prevail over the interests, rights of the interested party or for the formulation, exercise and defence of claims.
Right to limit processing: This right confers on you, under certain circumstances indicated below, the right to request the data controller to limit the processing of your personal data. In the event that this right is exercised, the data controller may only process the data with the consent of the data subject. The circumstances under which this right may be exercised are as follows:
- the data subject challenges the accuracy of the personal data, for a period of time that allows the data controller to verify the accuracy of the data;
- the processing carried out by the data controller is unlawful and the data subject opposes the deletion of personal data and requests instead the limitation of their use;
- the data controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the formulation, exercise or defence of claims;
- the data subject has objected to the processing, while verifying whether the legitimate reasons of the data controller prevail over those of the data subject.
5.3.- How and where can I exercise them?
We will be delighted to answer any queries or claims you may have regarding data protection. Likewise, you can direct your claim or exercise your rights through any of the contact channels indicated in the heading of this data protection policy.
In the same way, you can also contact the control authority that you consider appropriate to file your claim (for example, in the country where you have your habitual residence, place of work or in which you consider that the alleged infringement has taken place). To the appropriate effects, we inform you that in Spain the Control Authority is the Spanish Data Protection Agency, and you can exercise your rights through the forms that this entity has enabled for this purpose and which are available on its website.
5.4.- How long does it take to process my request to exercise rights?
The reference period is one month from receipt of your request. Notwithstanding the foregoing, this period may be extended by a further two months if necessary, taking into account the complexity and number of requests. The Controller will inform the interested party of any such extension within one month of receipt of the request, indicating the reasons for the delay.
5.5.- Will the exercise of these rights cost me anything?
The exercise of rights will not involve an expense, except in cases where manifestly unfounded or excessive requests are made, especially for repetitive, the Responsible may charge a fee that compensates the administrative costs of responding to the request or refusing to act (the fee may not imply an additional income for the responsible, but must correspond effectively with the actual cost of processing the request).
6.- PROCEDURE IN CASE OF ILLEGAL ACTIVITIES
In the event that any user or third party considers that there are facts or circumstances that reveal the unlawful nature of the use of any content and / or the performance of any activity on the web pages included or accessible through the website, must send a notification to Responsible duly identifying, specifying the alleged violations and expressly stating and under its responsibility that the information provided in the notification is accurate.
For all litigious matters concerning the Responsible party’s website, Spanish legislation shall apply, and the Courts and Tribunals of Pamplona shall be competent.