Additional Information on Data Protection
Additional Information on Data Protection
Who is Responsible for processing your data?
Identity: Andrea Ramos García, DNI 71281242X
Postal address: Calle Sanz Pastor 7, 5C, 09003-Burgos (Burgos)
For what purpose do we process your personal data and your legitimacy of processing?
- Contact form: to send information about the consultation made (name, surname and e-mail), obtaining the corresponding legitimacy through the pre-contractual relationship of the parties;
- Subscription form: to send newsletters, as well as commercial communications of promotions andor publicity of the Website (name and email), obtaining the corresponding legitimacy through the consent of the owner of the data;
- Services and/or products: to maintain the contractual relationship, as well as the management, administration, information, provision and improvement of the service offered, obtaining the corresponding legitimacy through the contractual relationship between the parties;
What principles do we apply to the processing of your data?
(i) Principle of lawfulness, loyalty and transparency: we will require your consent for the processing of your personal data for one or more specific purposes of which we will inform you in advance with absolute transparency.
(ii) Data minimization principle: we will only request the data strictly necessary in relation to the purposes for which they are required.
(iii) Principle of limitation of the conservation period: the data will be kept for the time necessary for the purposes of the processing, depending on the purpose, we will inform you of the corresponding conservation period
(iv) Principle of integrity and confidentiality: data shall be processed in a way that ensures adequate security of personal data and guarantees confidentiality. All possible measures are taken to prevent unauthorized access or improper use of user data by third parties.
By entering the data, you give your express and unequivocal consent, declaring that you have been informed of the conditions regarding the protection of personal data, accepting and consenting to the automated processing of such data, so that we may proceed with the processing of the data provided for the aforementioned purposes.
Express mention is made of children under 14 years of age, in relation to the processing of their personal data. The aforementioned minors will not be able to access this website without the consent of their parents or guardians.
How long will we keep your data?
The personal data provided will be kept for the duration of the business relationship and as long as their deletion is not requested by the person concerned. Likewise, once the relationship has ended, if you do not remain subscribed to the news, the data will be kept for the legally required periods of time.
The data will be kept for a minimum of 5 years. Contact data without subscription consent will be kept for 6 months.
To which recipients will your data be communicated?
The data will not be passed on to third parties except where there is a legal obligation to do so.
In any case, in the event of being transferred to a third party, prior information will be provided requesting the express consent for such a transfer.
The entities involved in any phase of the processing are obliged to observe professional secrecy and to adopt the levels of protection and the necessary technical and organisational measures within their reach to guarantee the security of personal data.
As data processors in the web service, we have, among others, contracted the following service providers, who have committed themselves to complying with the applicable regulatory provisions on data protection, at the time of their contracting:
Google participates in and has certified its compliance with the Privacy Shield framework agreement between the United States and the European Union and has committed to subjecting all personal information received from European Union member countries to the principles derived from the Privacy Shield:
Mailchimp participates in and has certified its compliance with the Privacy Shield framework agreement between the United States and the European Union and has committed to subjecting all personal information received from European Union member countries to the principles derived from the Privacy Shield:
What are your rights when you provide us with your data?
Anyone is entitled to obtain confirmation as to whether or not we are processing personal data concerning them.
The persons concerned have the right to access their personal data, as well as the right to request the rectification of inaccurate data or, where appropriate, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, data subjects may request that the processing of their data be limited, in which case we will only keep them for the exercise or defence of their claims.
In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data. In such a case, we will stop processing your data, except for legitimate reasons, or in the exercise of possible claims.
It also has the right to claim the portability of the data.
The aforementioned rights can be exercised by means of notification at the address of this company located at 09005-Burgos (Burgos) Avenida del Cid 66, 4F by means of a letter with acknowledgement of receipt, or at the e-mail address email@example.com
Likewise, and in case you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the Control Authority (Spanish Data Protection Agency) in the field of Data Protection.