Privacy Policy

Privacy Policy

This Privacy Policy is applicable to the processing of personal data by CASTAÑUELAS DEL SUR S.L.(hereinafter the “Company”) on its websites, app, and by any other electronic medium or digital platform that the company uses to process personal data.

1.- Data controller:

Castañuelas del Sur S.L., with TIN B41279787, Address: C/ ORNITORRINCO 10. 41019, Seville, and email: castanuelas@castanuelasdelsur.com is the data controller for the data provided. We hereby inform you that your data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, dated 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018, dated December 5, on the Protection of Personal Data and Guarantees of Digital Rights.

2.- Legal grounds for data processing:

The legal grounds for data processing is consent acquired from the user. By marking the corresponding box, users expressly, freely, and unequivocally accept that their data are necessary for the provider to answer their request. The user guarantees that the personal data provided is true and the user is responsible for communicating any modifications.

All of the data requested through the web service is mandatory, as it is necessary for service provision and in the event that all the data is not provided, it is not guaranteed that the information and the services provided will align completely with your needs.

The legal grounds for data processing in European Regulation 2016/679 of the European Parliament and of the Council;

.- Art 6.1 a) the subject

has given consent to the processing of their personal data for one or more

specific purposes;

.- Receipt of commercial communications for having checked the box for this purpose or

.- Art 6.1 a) the subject has given consent to the

processing of their personal data for one or more specific purposes;

.- Execution of a contract between the client and the Data Controller for the sale of

.- Art 6.1 b) processing is necessary for the performance of a

contract to which the subject is party or for the implementation of

pre-contractual measures at the request of the subject;

.- Art 6.1 c) processing

is necessary for compliance with a legal obligation to which the controller is subject.

 

3.- Purpose of Processing:

The purpose of processing is to maintain a commercial relationship with the user of the website, app, and any other electronic means or digital platform belonging to the company. To carry out processing, the planned operations are:

.- To process orders, requests, or any type of question that is asked by the user through any of the contact forms that are made available.

.- Sending commercial communications advertising documents related to our products and services by any electronic or physical means, present or future, that enables commercial correspondence provided the user has given their consent to do so.

.- In the event that you provide us with your work history or send us your CV, we will use your data for the management of your contact information and any selection processes that we carry out.

4.- Data retention:

Your data will be kept for as long as there is mutual interest in keeping up the purposes for the processing. When your data is no longer necessary for this purpose, it shall be deleted with appropriate security measures to ensure its total destruction. The personal data provided by the subject will be maintained even if the subject requests its deletion, limiting the data processing only for the fulfilment of legal obligations and/or the exercise or defence of claims.

5.- What are your rights when you provide us with your data:

Users have the following rights:

.- Right to Access, Article 15 GDPR.

.- Right to Rectification, Article 16 GDPR

.- Right to Erasure (Right to be Forgotten), Article 17 GDPR.

.- Right to Restriction of Processing, Article 18 GDPR.

.- Right to Data Portability, Article 20 GDPR

.- Right to Opposition, Article 21 GDPR.

These rights are:

.- Knowing if we are processing your data or not.

.- Accessing the personal data that we have about you.

.- The right to rectify your data that is not correct.

.- The right to request the deletion of your data or withdraw the consent granted.

.- The right to request the limitation of your data’s processing, in which case said data will only be kept to comply

with current regulations.

.- The right to request data portability, in which case your data will be provided in a structured format that is commonly used. We can also

send your data to a new controller indicated by you. This right is only valid for certain cases.

You also have the right to file a complaint with the supervisory authority, www.aepd.es, if you consider that our processing does not comply with current regulations.

To exercise their rights, users must send a photocopy of their ID or passport to:

Castañuelas del Sur S.L., with TIN B41279787, Address: C/ ORNITORRINCO 10. 41019, Seville, and email: castanuelas@castanuelasdelsur.com

6.- To what recipients will your data be disclosed:

The company hereby expressly informs and guarantees users that their personal data will not be transferred under any circumstances to third parties, except in cases where there is a legal obligation to do so, or if this is necessary for the undertaking and execution of the purposes of processing.

For any data that is provided to our service providers (accountants, etc.), it is carried out by the signing of the Data Processor contract as required by current regulations on Data Protection.

If any type of transfer of personal data is made, the express, informed, and unequivocal consent of users will be requested previously.

7.- Minors:

If you are a minor user, you must have the prior consent of your parents or guardians before proceeding to include your personal data on our website. The Company disclaims any liability for failure to comply with this requirement.

8.- Security Measures:

In accordance with the provisions of current regulations on personal data protection, the provider complies with all the provisions of the regulations for personal data processing and the with the principles described in Article 5 of the GDPR.

It is hereby guaranteed that appropriate technical and organisational measures have been taken to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of users, and that said users have been informed with the appropriate information so that they can exercise their rights.

9.- International Data Transfers:

The data that we collect is stored within the European Economic Area. In the event that said data may be transferred and processed in a country outside the European Economic Area, an adequate level of protection for personal data is guaranteed.