DATA PROTECTION POLICY

THE HOLDER is committed to protecting the privacy of users accessing this website and/or any of its services. The use of the website and/or any of the services offered by THE HOLDER implies the user’s acceptance of the provisions contained in this Privacy Policy and the processing of their personal data as stipulated therein. Please note that even though there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organizations to which the website may be redirected. THE HOLDER does not control the content of third-party websites, nor does it accept any responsibility for the content or privacy policies of these websites.

Basic information on data processing (Regulation (EU) 2016/679 and Organic Law 3/2018)

• Data Controller: THE HOLDER. Our details are listed in the legal notice of this website.
• Purpose of processing: Providing and managing our products and/or services.
• Legal basis: Consent obtained from the data subject. Execution of the service contract.
• Recipients: Data will not be disclosed to third parties unless required by law or necessary to fulfill the purpose of processing.
• Rights of individuals: Data subjects have the right to exercise their rights of access, rectification, restriction of processing, erasure, data portability, and objection by sending their request to our address.
• Data retention period: As long as the commercial relationship is maintained or for the years necessary to fulfill legal obligations.
• Complaint: Data subjects can address the Spanish Data Protection Agency (AEPD) to file the appropriate complaint.
• Additional information: You can find additional and detailed information below in the “Privacy Questions” section.

PRIVACY QUESTIONS

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), and Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), we provide you with the following information regarding the processing of your personal data:

Who is the data controller of your data?

THE HOLDER.
Our details are listed in the legal notice of this website.

For what purpose do we process your personal data?

• We process the information provided to us to provide and invoice our services and products.
• If you give us your consent, we may also process your data to send you information about our activities, services, and products.
• If you participate in any of our draws and/or contests, we will publish your name, surname, and image on various platforms and media, including social networks, to promote our activities, services, and products.

The personal data provided will be kept as long as you are a user of our services or wish to receive information, and if you participate in a promotion while it is active, and then for the periods established to fulfill our legal obligations.

What is the legal basis for the processing of your data?

The legal basis for the processing of your data is the consents you provide.

Regarding information sent by minors under 16 years of age, it will be understood that it has been done with the consent of their legal representatives. If not, the legal representative of the minor must inform us as soon as they become aware.

Who will your data be communicated to?

Data will not be disclosed to third parties unless required by law or necessary to fulfill the purpose of processing.

• Anyone has the right to obtain confirmation of whether we are processing their personal data or not.
• Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• In certain circumstances, data subjects may request the restriction of the processing of their data; in this case, we will only retain them for the exercise or defense of claims.
• Also, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data.
• Data subjects also have the right to data portability.
• Finally, data subjects have the right to lodge a complaint with the competent supervisory authority.

How can you exercise your rights?

By sending a written request along with a copy of an identifying document to our physical or electronic address.

The personal data we process comes from the data subject. The data subject guarantees that the provided personal data are accurate and is responsible for communicating any modifications to them. Data marked with an asterisk (*) are mandatory in order to provide the requested service.

What data do we process?

The categories of data that we may process in the provision of our services are:

• Identifying information
• Postal or electronic addresses
• Other data requested in our forms

The data is limited, as we only process the necessary data for the provision of our services and the management of our activity.

Do we use cookies?

We use cookies during navigation on our website with the informed consent of the user. The user can configure their browser to be notified about the use of cookies and to prevent their use. For more information, please visit our cookie policy.

What security measures do we apply?

We apply the security measures established in Article 32 of the GDPR; therefore, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability, and permanent resilience of the systems and processing services.

Some of these measures are:

• Providing data processing policies to personnel.
• Regular backup of data.
• Access control to data.
• Regular verification, assessment, and evaluation processes.