This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Council of 27 April 2016 on the protection of individuals with regard to the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of 5 April 2018 of the European Parliament and of the Council processing of personal data and the free movement of such data (GDPR), to Organic Law 3/2018 of 5 December 2018 on the Protection of Personal Data (Ley Orgánica 3/2018, de 5
December, on the Protection of Personal Data and guarantee of digital rights LOPDGDD), as well as, insofar as it is not contrary to the aforementioned regulations, to Organic Law 15/1999, on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that may replace or update them in the future.
update them in the future.
Our organisation is committed to the privacy of your personal data. The personal data
are necessary to provide our services and are treated in a lawful, loyal and transparent manner, guaranteeing adequate transparent manner, ensuring appropriate security of your personal data, including protection against unauthorised or unlawful unauthorised or unlawful processing and against accidental loss, destruction or damage by implementing technical and organisational measures of technical and organisational measures.
We would like to provide you with all necessary information about the processing of your personal data in a transparent and fair manner necessary information regarding the processing of your personal data by this organisation.
IDENTITY: CARDONA BAÑON, S.L.
C.I.F. / N.I.F.: B53010955
ADDRESS: CTRA. CABO LA NAO – PLA, 54, 03730 JAVEA (ALICANTE)
TELEPHONE: 965792971
E-MAIL: cristaleriacardonab@gmail.com
II.- RECIPIENTS OF PERSONAL DATA
1.- The personal data provided will not be the object of any transfer of data except as provided for in the specific specific processing.
2.- Optionally, for the contracting of cloud computing services and/or services for the sending of e-mails, communication, as well as the communication services, as well as other related IT services, the personal data may be: (i) transferred to a third party, or (ii) transferred to a third party for the purpose of may be:
– Transferred to IT service companies located within the European Economic Area (EEA) or, – Transferred to IT service companies located outside the EEA that are covered by the Privacy Shield, and Privacy Shield and therefore have adequate protection measures in place to ensure the security of personal data. security of personal data. You can obtain more information by visiting this link:
https://www.privacyshield.gov/welcome
3.- Optionally, to administrations and other bodies when they are required to do so in compliance with legal obligations.
III.- LEGAL BASIS THAT LEGITIMISES THE PROCESSING OF PERSONAL DATA
For each specific processing of personal data, we will inform you of the legal basis that legitimises it.
IV.- RIGHTS
RIGHT OF ACCESS
This is the right to obtain confirmation from the data controller as to whether or not personal data concerning the data subject are being processed and whether or not they are being processed.
personal data concerning the data subject and, if so, the right of access to the personal data and to the following information: the purpose of the the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients recipients or categories of recipients to whom the personal data have been or will be disclosed, the period of the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the storage period or the criteria used to determine this period the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data relating to the data subject or the the data subject or to object to such processing, the right to lodge a complaint before the Spanish Data Protection to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where applicable, of automated decisions
automated decisions, including profiling, where applicable, where data are transferred to third countries, the right to be informed of the third countries the right to be informed of the appropriate safeguards applied.
RIGHT OF RECTIFICATION
This is the right to request the rectification of your personal data if they are inaccurate, including the right to
to complete incomplete data. It should be noted that by providing us with personal data
by any means, you guarantee that they are true and accurate and undertake to notify us of any changes or modifications to them modification of the same. Therefore, any damage caused as a result of the communication of erroneous, inaccurate or incomplete erroneous, inaccurate or incomplete information in the forms on the website, will be the sole responsibility of the interested party.
RIGHT OF DELETION
This is the right to request the deletion of your personal data when, among other things, they are no longer necessary for the purpose for which they were collected, or they are being processed in another way or you withdraw your consent.
consent. It should be noted that erasure shall not take place when the processing of personal data is necessary, inter alia, in the following cases necessary, inter alia, for compliance with legal obligations or for the formulation, exercise or defence of claims.
formulation, exercise or defence of claims.
RIGHT TO LIMITATION
This is the right to request the restriction of the processing of your personal data, which means that in certain cases you can ask us to stop processing your personal data.
in certain cases, you can ask us to temporarily suspend the processing of your personal data or to keep it beyond the time limit personal data or to keep it for longer than necessary when you may need it.
RIGHT TO RESTRICTION
This is the right to request the restriction of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data.
In certain cases you may ask us to temporarily stop processing your personal data or to keep it for longer than necessary when you may need it.
Personal data or to keep it for longer than necessary when you may need it.
RIGHT TO WITHDRAW CONSENT
This is the right to withdraw the consent you have provided by ticking “I have read and accept the privacy policy” at any time and as provided for in this privacy policy.
privacy policy” at any time and as specified in the relevant section “Exercising your rights” or in the specific processing of your personal data.
rights” or in the specific processing of commercial communications or Newsletter. It should be noted Please note that this right will not be effective if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the performance and maintenance of a contractual relationship, or for the contractual relationship, or for the formulation, exercise or defence of claims. Likewise, the withdrawal of consent shall not have retroactive effect, i.e. it shall not affect the lawfulness of the processing based on the consent prior to its withdrawal. Consent prior to its withdrawal.
RIGHT TO PORTABILITY
This is the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and readable format.
structured, commonly used and machine-readable format, and to transfer it to another controller, provided that: the processing is based on your consent and the
processing is based on your consent and is carried out by automated or computerised means.
RIGHT TO OBJECT
This is the right to object to the processing of your personal data on the basis of our legitimate interest. No We will not continue to process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override
for the processing which override your interests, rights and freedoms, or for the making, exercise or defence of claims, exercise or defence of claims.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe that we are processing your personal data in an incorrect manner, you may contact us, or you also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos
(AEPD): https://www.agpd.es/portalwebAGPD/index-ides-idphp.php
EXERCISE OF RIGHTS
You may exercise your rights by sending a letter to the above postal address or by sending an e-mail to cristaleriacardonab@gmail.com, attaching in both cases a copy of your NIF/NIE/Passport or similar document similar document.
V.- PROCESSING OF PERSONAL DATA.
GENERIC PROVISIONS
The personal data requested in each of the specific processing operations are adequate, relevant and limited to what is necessary in relation to the limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimisation. principle of data minimisation is complied with.
The personal data requested in each of the specific processing operations are strictly necessary. necessary, refusal to provide them would mean that the requested service could not be provided. The communications of personal data foreseen in each of the specific processing operations are, in some cases, necessary for the some cases are necessary for the performance and maintenance of a contract and in other cases for the fulfilment of a legal obligation applicable to the data controller. compliance with a legal obligation applicable to the data controller.
CONTACT FORM
Personal data will be processed to channel requests for information, suggestions and complaints from users or customers.
The legal basis that legitimizes the processing of personal data is the express consent by marking “I have read and accept the privacy policy”.
Personal data will be kept for a period of two years from the moment they cease to be processed, without prejudice to the without prejudice to the exercise of your rights as a data subject.