Logotype carpas alandalus
CONTACT
Logo Carpas Al-Ándalus without background
CONTACT

Privacy policy

PRIVACITY AND DATA PROTECTION POLICY

In accordance with the legislation in force, Carpas Al-Ándalus (hereinafter also Web site) undertakes to take the necessary technical and organizational measures, depending on the level of security appropriate to the risk of the data collected.

Laws that incorporate this privacy policy

This privacy policy is adapted to existing Spanish and European legislation on the protection of personal data on the Internet. In particular, it respects the following rules:

  • Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (RGPD).

  • Organic Law 3 / 2018 of 5 December, on the protection of personal data and the guarantee of digital rights (LOPD-GDD).

  • Royal Decree 1720 / 2007 of 21 December, approving the Regulations for the Development of Organic Law 15 / 1999 of 13 December, on the Protection of Personal Data (RDLOPD).

  • Act No. 34 / 2002 of 11 July 2002 on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the person responsible for processing personal data

The responsible for the processing of personal data collected in Carpas Al-Ándalus is: Ismael López Ruiz, with NIF: 75140311R (hereinafter responsible for the treatment). Your contact details are as follows:

Address: Avda. Rodríguez Acosta Nº6, 2º4, CP 18327, Láchar (Granada), Spain

Contact phone: 640331906

Contact email: info @ carpasalandalus.com

Personal Data Register

In compliance with the provisions of the RGPD and the LOPD-GDD, we inform you that the personal data collected by Carpas Al-Ándalus, by means of the forms extended on your pages will be incorporated and will be treated in our file in order to be able to facilitate, speed up and meet the commitments established between Carpas Al-Ándalus and the User or to maintain the relationship that is established in the forms that it completes, or to meet a request or consultation of the same. In addition, in accordance with the provisions of the RGPD and the LOPD-GDD, unless the derogation provided for in Article 30.5 of the RGPD applies, a record of treatment activities is kept, specifying, in accordance with its purposes, the treatment activities carried out and the other circumstances set out in the RGPD.

Principles applicable to the processing of personal data

The processing of the user's personal data shall be subject to the following principles as set out in Article 5 of the RGPD and Article 4 et seq. of Organic Law 3 / 2018 of 5 December 2018 on the protection of personal data and the guarantee of digital rights:

  • The principle of legality, loyalty and transparency: the consent of the User shall be required at all times after fully transparent information on the purposes for which the personal data are collected.

  • Principle of purpose limitation: personal data shall be collected for specific, explicit and legitimate purposes.

  • Data minimization principle: the personal data collected shall be only those strictly necessary for the purposes for which they are treated.

  • Principle of accuracy: personal data must be accurate and always updated.

  • The principle of limitation of the storage time: personal data shall only be maintained in such a way as to allow the user to be identified for the time necessary for the purpose of processing.

  • The principle of integrity and confidentiality: personal data shall be treated in such a way as to ensure their security and confidentiality.

  • The principle of proactive responsibility: the controller shall be responsible for ensuring that the above principles are met.

Categories of personal data

The data categories that are treated in Carpas Al-Ándalus are only identifying data. In no case are there special categories of personal data within the meaning of Article 9 of the RGPD.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is consent. Carpas Al-Ándalus undertakes to seek the express and verifiable consent of the User for the processing of your personal data for one or more specific purposes.

The User shall have the right to withdraw his consent at any time. It will be as easy to withdraw the consent as giving it. As a general rule, withdrawal of consent will not condition the use of the Website.

In cases where the User must or may provide his or her data by means of forms to consult, request information or for reasons related to the content of the Website, he or she shall be informed if the completion of any of them is mandatory because they are essential for the proper conduct of the operation.

The purpose of the processing to which the personal data are intended

The personal data are collected and managed by Carpas Al-Ándalus in order to be able to facilitate, speed up and meet the commitments established between the Website and the User or to maintain the relationship established in the forms that the latter completes or to meet a request or consultation.

The data may also be used for a commercial purpose of customization, operational and statistical, and activities specific to the social object of Carpas Al-Ándalus, as well as for the extraction, storage of data and marketing studies to adapt the Content offered to the User, as well as to improve the quality, operation and navigation of the Website.

When the personal data are obtained, the User shall be informed of the specific purpose (s) of the processing to which the personal data will be intended, i.e. the use (s) to be given to the information collected.

Personal data retention periods

The personal data shall be retained only for the minimum time necessary for the purposes of processing and, in any case, only for the following period: 18 months, or until the User requests its deletion.

When the personal data are obtained, the User shall be informed of the period during which the personal data will be kept or, where this is not possible, of the criteria used to determine this period.

Addressees of personal data

The personal data of the User shall not be shared with third parties.

In any case, at the time the personal data are obtained, the User shall be informed of the addressees or categories of addressees of the personal data.

Personal data of minors

In accordance with articles 8 of the RGPD and 7 of the Organic Law 3 / 2018 of 5 December, on the protection of personal data and the guarantee of digital rights, only those over 14 years of age may grant their consent to the processing of their personal data in a lawful manner by Carpas Al- Ándalus. In the case of a person under 14 years of age, the consent of the parents or guardians shall be necessary for treatment, and the treatment shall be considered lawful only to the extent that they have authorized it.

Secret and security of personal data

Carpas Al-Ándalus undertakes to take the necessary technical and organizational measures, depending on the level of security appropriate to the risk of the data collected, to ensure the security of personal data and to avoid the destruction, loss or accidental or unlawful alteration of personal data transmitted, preserved or otherwise processed, or the unauthorized communication or access to such data.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted safely and confidentially, as it is the transmission of data between the server and the User, and in feedback, fully encrypted or encrypted.

However, because Carpas Al-Ándalus cannot guarantee the inexpugability of the Internet or the total absence of hackers or others who fraudulently access personal data, the controller undertakes to communicate to the User without undue delay when there is a violation of the security of personal data that is likely to pose a high risk to the rights and freedoms of natural persons. In accordance with Article 4 of the RGPD, a violation of the security of personal data means any violation of the security that causes the destruction, loss or accidental or unlawful alteration of personal data transmitted, preserved or otherwise processed, or the unauthorized communication or access to such data.

Personal data shall be treated as confidential by the controller, who undertakes to inform and to ensure through a legal or contractual obligation that such confidentiality is respected by his or her employees, associates, and any person to whom the information is made accessible.

Rights arising from the processing of personal data

The User has over Carpas Al-Ándalus and can therefore exercise in front of the controller the following rights recognized in the RGPD and Organic Law 3 / 2018, of 5 December, on the protection of personal data and the guarantee of digital rights:

  • Right of access:It is the right of the User to obtain confirmation of whether or not Carpas Al-Ándalus is processing his or her personal data and, if so, to obtain information about his or her specific personal data and the treatment that Carpas Al-Ándalus has carried out or carried out, and, inter alia, the information available on the origin of such data and the addressees of the communications made or planned for them.
  • Right of rectification:It is the right of the User to change his personal data that are inaccurate or, taking into account the purposes of the treatment, incomplete.

  • Right of deletion («the right to be forgotten»):It is the right of the User, provided that the existing legislation does not establish otherwise, to obtain the deletion of his personal data where they are no longer necessary for the purposes for which they were collected or processed; the User has withdrawn his consent to the processing and the processing has no other legal basis; the User opposes the processing and there is no other legitimate reason to continue with it; the personal data have been illicitly processed; the personal data must be deleted in compliance with a legal obligation; or the personal data have been obtained from a direct offer of information society services to a person under 14 years of age. In addition to deleting the data, the controller, taking into account the available technology and the cost of its application, shall take reasonable measures to inform those responsible that they are processing the personal data of the request for the removal of any link to such personal data.

  • Right to limitation of treatment: It is the User's right to limit the processing of his personal data. The User has the right to obtain treatment limitation when challenging the accuracy of his personal data; the treatment is illegal; the controller no longer needs personal data, but the User needs it to make complaints; and when the User has opposed the treatment.

  • Right to portability of data: If the processing is carried out by automated means, the User shall have the right to receive from the controller his personal data in a structured, common-use and mechanical-reading format and to transmit them to another controller. Where technically possible, the controller shall transmit the data directly to that other controller.

  • Right of opposition: It is the right of the User not to treat his personal data or to stop processing them by Carpas Al-Ándalus.

  • The right not to be the subject of a decision based solely on automated treatment, including profiling:It is the right of the User not to be the subject of an individual decision based solely on the automated processing of his personal data, including profiling, existing unless the existing legislation provides otherwise.

The User may therefore exercise his rights by means of written communication addressed to the controller of the treatment with the reference «RGPD-carpasalandalus.com», specifying:

  • Name of the user and copy of the ID. In cases where representation is admitted, the identification by the same means of the person representing the User, as well as the document of the representation, shall also be necessary. The photocopy of the IID may be replaced by any other means valid in law that attests to the identity.

  • Request with the specific reasons for the request or information to which it is intended.

  • Domicile for notification purposes.

  • Date and signature of the applicant.

  • Any document that proves your request.

This request and any other attached document may be sent to the following address and / or e-mail:

Postal address: Avda. Rodríguez Acosta Nº6, 2º4, CP 18327, Láchar (Granada), Spain

E-mail: info @ carpasalandalus.com

Links to third-party websites

The Website may include hyperlinks or links that allow access to third-party websites other than Carpas Al-Ándalus, and are therefore not operated by Carpas Al-Ándalus. The holders of such websites shall have their own data protection policies, being themselves, in each case, responsible for their own files and their own privacy practices.

Claims to the supervisory authority

If the User considers that there is a problem or a violation of the rules in force in the manner in which his personal data are being processed, he shall have the right to effective judicial protection and to file a complaint with a supervisory authority, in particular in the State in which he or she has his or her habitual residence, place of work or place of the alleged offence. In the case of Spain, the control authority is the Spanish Data Protection Agency (http: / / www.agpd.es).

ACCEPTATION AND CHANGES IN THIS PRIVACITY POLICY

It is necessary that the User has read and is in accordance with the conditions on the protection of personal data contained in this Privacy Policy, and that he / she accepts the processing of his / her personal data so that the controller can proceed to it in the form, during the time limits and for the purposes indicated. The use of the Website will involve acceptance of its Privacy Policy.

Carpas Al-Ándalus reserves the right to change its Privacy Policy, according to its own criteria, or motivated by a legislative, case-law or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User consult this page regularly to be aware of the latest changes or updates.

This Privacy Policy was updated to comply with Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (RGPD) and with Organic Law 3 / 2018 of 5 December 2018 on the protection of personal data and the guarantee of digital rights.

EnglishenEnglishEnglish
SpanishesSpanishEspañolEnglishenEnglishEnglish