Privacy Policy

Introduction

This document sets out information regarding the privacy policy that applies to all users who access or visit this website via any device. This document supplements the legal notice and any other legal policy documents that may be available on this website. You can view all the legal documents on this website from this page.

THE CONTROLLER undertakes to protect the privacy of users who access this website and/or any of its services. Use of the website and/or any of the services offered by THE CONTROLLER implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated herein. Please note that although there may be links on our website to other websites or social media platforms, this Privacy Policy does not apply to the websites of other companies or organizations to which the website redirects. THE OWNER does not control the content of third-party websites, nor does it accept any responsibility for the content or privacy policies of such websites.

Basic information on data processing (Regulation (EU) 2016/679 and Organic Law 3/2018)

  • Data controller: THE DATA CONTROLLER. Our details are set out in the legal notice on this website.
  • Purpose of processing: To offer and manage our products and/or services.
  • Legal basis: Consent obtained from the data subject. Performance of the service contract.
  • Recipients: The data will not be disclosed to third parties, unless required by law or necessary to fulfil the purpose of the processing.
  • Data subjects’ rights: Data subjects have the right to exercise their rights of access, rectification, restriction of processing, erasure, data portability and objection by sending their request to our address.
  • Data retention period: For as long as the commercial relationship is maintained or for the number of years necessary to comply with legal obligations.
  • Complaints: Data subjects may contact the AEPD to lodge any complaint they deem appropriate.
  • Further information: You can find further detailed information below in the ‘Privacy FAQs’.

Questions about privacy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we provide you with the following information regarding the processing of your personal data:

Who is the data controller?

THE DATA CONTROLLER. Our details are set out in the legal notice on this website.

Why do we process your personal data?

  • We process the information you provide to us in order to supply and invoice our services and products.
  • If you give us your consent, we may also process your data to send you information about our activities, services and products.
  • If you take part in any of our prize draws and/or competitions, we will publish your first name and surname, and your image, across the various platforms and media channels we use, including social media, in order to promote our activities, services and products.

How long will we retain your data?

The personal data you provide will be retained for as long as you are a user of our services or wish to receive information, and if you take part in a promotion whilst it is active, and thereafter for the periods required to comply with our legal obligations.

What is the legal basis for processing your data?

The legal basis for processing your data is the consent you give us.

With regard to information sent to us by children under the age of 14, it will be assumed that this has been done with the consent of their legal guardians. If this is not the case, the child’s legal guardian must notify us as soon as they become aware of this.

To whom will your data be disclosed?

Your data will not be disclosed to third parties, unless required by law or necessary to fulfil the purpose of the processing.

What are your rights when you provide us with your data?

  • Everyone has the right to obtain confirmation as to whether or not we are processing their personal data.
  • Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, to request its erasure when, amongst other reasons, the data is no longer necessary for the purposes for which it was collected.
  • In certain circumstances, data subjects may request the restriction of the processing of their data; in this case, we will only retain it for the purpose of exercising or defending legal claims.
  • Furthermore, in certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data.
  • Data subjects also have the right to data portability.
  • Finally, data subjects have the right to lodge a complaint with the competent supervisory authority.

  • How can you exercise your rights?

By sending a written request, enclosing a copy of a document proving your identity, to our postal or email address.

How did we obtain your data?

The personal data we process is provided by the data subject themselves. The data subject guarantees that the personal data provided is accurate and is responsible for notifying us of any changes to it. Fields marked with an asterisk are mandatory in order for us to provide the requested service.

What data do we process?

The categories of data that we may process in the provision of our services are:

  • Identifying data
  • Postcodes or email addresses
  • Other data requested on our forms

The data is limited, as we only process the data necessary for the provision of our services and the management of our business.

Do we use cookies?

We use cookies whilst you browse our website, subject to your informed consent. You can configure your browser to be notified of the use of cookies and to prevent their use. For further information, please visit our cookies policy.

What security measures do we implement?

We implement the security measures set out in Article 32 of the GDPR; consequently, we have adopted the necessary security measures to ensure a level of security appropriate to the risk associated with the data processing we carry out, with mechanisms that enable us to guarantee the confidentiality, integrity, availability and ongoing resilience of our data processing systems and services.

Some of these measures are:

  • Informing staff about data processing policies.
  • Carrying out regular backups.
  • Controlling access to data.
  • Regular verification, evaluation and assessment processes.