" explains the privacy practices concerning processing private data of the users and clients, which could be collected in the process of navigating through the website, acquiring products or contracting services on the website. "DEVERMARIP
" guarantees the compliance with the current legislation on personal data protection, the Organic Law 3/2018 of 5 December (LOPDGDD) on the protection of personal data and the guarantee of the digital rights, and General Data Protection Regulation (GDPR) (EU) 2016/679.
That in accordance with the provisions of the current regulations on the protection of personal data "DEVERMARIP
", guarantees that all appropriate technical and organisational policies have been implemented to apply the security measures established by the GDPR and LOPDGDD. The personal data introduced in the forms are processed uniquely by "DEVERMARIP
" personnel or here established data processing managers. All appropriate security measures have been adopted to the provided data. All available technical measures have been installed in order to prevent loss, misuse, alteration, unauthorized access or theft of the data that have been provided.
The client or user affirms that all of the provided data are true and accurate, and commits to keeping it updated, informing "DEVERMARIP
", of any modifications. The user guarantees the authenticity of the provided data and will be held responsible for any conflict or litigation derived from incorrect or false data input. In order to keep the personal data up to date, it is essential that the user inform "DEVERMARIP
" of any modification. Failing to comply with this policy will exempt "DEVERMARIP
" from the responsibility as to the authenticity.
EXERCISE OF RIGHTS
In accordance with LOPD and GDPR, both parties are entitled to exercise a series of rights related to personal data processing. The user whose data are subject of processing by "DEVERMARIP
", has the right to exercise them by means of email firstname.lastname@example.org
, or written correspondence to the address stated in the legal notice, always providing means of identification (national ID or passport). The communication should include name, surname, the request, address and the means of identification.
The rights shall be exercised by the users personally, however, they may be exercised by another authorised individual, such as a legal representative of the user, in which case a document confirming this representation should be provided.
The user can request to exercise the following rights:
- The right to access their personal data.
- The right to rectification (of the data (in case they are incorrect) or erasure.
- The right to limitation to the processing, in which case they will solely be preserved by "DEVERMARIP" for defense in possible future claims.
- The right to objection to the processing: "DEVERMARIP" will cease to process the data, with the exception of legitimate reason, or defense in possible future legal disputes, for which reasons they will continue to be processed.
- The right to portability of the data: If the user prefers their data to be processed by another company, "DEVERMARIP" will facilitate the portability of the data to the new controller.
If data was provided for a specific purpose, the user has the right to withdraw their consent at any time, without this affecting the legality of the data processing prior to the withdrawal, based on the previous consent.
If a user considers there has been an issue related to the data management by "DEVERMARIP
" they can address their claims to the Security Manager or to the corresponding data protection authority, being it Agencia Española de Protección de Datos, which is the ruling body in Spanish territory.
The disaggregated data will be preserved without a deletion period. Regarding the client data, the personal data retention period may differ depending on the type of service contracted by the user. In any case, it will be the necessary minimum, being:
- 4 years: under Social order Infractions and sanctions Act (partnership obligations, work contracts, social security, salary payment, etc); Article 66 and the following of the General Taxation Act (accounting books, etc).
- 5 years: under Article 1964 of the Civil Code (personal actions with no particular time limit).
- 6 years: under Article 30 of Commerce Code (accounting books, invoices).
- 10 years: under Article 25 of Money Laundering Prevention and Terrorist Financing Act.
Data of users obtained by e-mail and uploaded by "DEVERMARIP
" to pages and profiles in social networks will be retained until he withdraws the consent.
The recruitment data from CVs.
, in case they exist and the person has not been selected, will be retained by, "DEVERMARIP
" for a period of up to two years with the aim of using them for future recruitment processes, unless the candidate manifestly refuses to such practice.
DATA INPUT AND PROCESSING
" has the obligation to inform the users of its website about collecting of the personal data which may be entered in the contact forms on the websites or by the means of e-mail. In such case, "DEVERMARIP
" will be considered the Controller of the data collected by the aforementioned means.
" informs the users that the purpose of data collection and processing derives from users own requests, or adding to contact lists, providing goods or services, or the commercial relationship management. The operations, actions and technical procedures, whether made automatically or not, bear the same consideration as to the data processing.
" makes available to the users a series of IT tools to collect and process the personal data for the previously set purposes. The personal data provided online either via email, website contact forms, or online contracting will be used in the commercial and administrative management of the clients or users of the company. These data will be processed through the servers managed by Gupo5.com
, which is also the provider company of email services, and it will be considered as the Data Treatment Managers.
In accordance with LSSICE, "DEVERMARIP
" is committed not to send commercial emails that have not been identified as such. By these means, the information sent to clients in order to maintain the existing contractual relationship will be not regarded as commercial communication.
In any case, only the strictly essential data will be collected, necessary to respond adequately to the user's request for service or information.
On some occasions personal data will be provided through links from third-party websites. In such cases, at no time will the "DEVERMARIP" staff have access to the personal data that the client provided to the third party.
" has profiles in some of the main social networks of the Internet and takes responsibility of the processing of the followers, fans, subscribers, comments and other profile user data (hereinafter followers) managed by "DEVERMARIP
". The treatment that "DEVERMARIP
" will carry out with the data within each of the aforementioned networks will be, at most, the one that the social network allows to the corporate profiles.
" will be able to inform, when the law does not prohibit it, its followers by any means that the social network allows about its activities, presentations, offers, as well as providing personalized customer service. In no case will "DEVERMARIP
" extract data from social networks, unless the user’s consent is expressly obtained for it (for example, in order to participate in a contest).
" will not disclose or communicate any data from the user to third parties, except for the cases legally justified, or when necessary for the development and execution of the requested service of a contractual nature with a data processing body, and always in agreement with the general conditions accepted by the user beforehand. Therefore, by contracting our services, the user accepts that some of these services could be, totally or partially, outsourced to third-party individuals or companies, which will have the consideration of Data Treatment Managers, with whom a confidentiality contract, adherent to privacy policies, established in their corresponding web pages has been agreed. The user also accepts that some of the collected personal data will be provided to these Data Treatment Managers, whenever necessary to effectively carry out the requested services. The user has the right to object to data transfer to the Data Treatment Manager by written request using any of the aforementioned means.
All the information provided will bear, in any case, the consideration of confidentiality, and will not be used for other purposes unrelated to requested services or acquired products from "DEVERMARIP
" is committed to not reveal or disclose any information of the user's intentions, the motive of advice requested, or the length of the relation.