1. DETAILS OF THE DATA CONTROLLER
Company Name: INTERNACIONAL PELUCAS CABELLO R, S.L. (hereinafter, the “Company” or the “Responsible”).
VAT NO: B81719460
Address: C/ MAGDALENA, MADRID36,28012,
Email for data protection communications: email@example.com
1.1. Applicable regulations
2.- PRINCIPLES UNDER THE EUROPEAN DATA PROTECTION REGULATION
We undertake to process the personal data (hereinafter the “data”) provided in accordance with the following principles set out in the General Data Protection Regulation (GDPR):
3. PURPOSE OF THE PROCESSING OF PERSONAL DATA
We process your personal data for the following purposes:
– To provide you with information related to services offered by our company and detailed on this website.
-To process your order in accordance with the Terms and Conditions of the Site, which you must always accept before completing any such order.
3.1. Retention period of your data
We will retain your personal data from the time you give us your consent until you revoke it or request the restriction of processing. In such cases, we will keep your data blocked for the legally required periods.
4. LEGITIMACY AND DATA COLLECTED
The legitimacy for the processing of your data is the express consent given by a positive and affirmative act (filling in the corresponding form and ticking the acceptance box of this policy) at the time of providing us with your personal data.
4.1. Consent to process your data
4.2. Data categories
The data collected refers to the category of identifying data, such as: Name and Surname, Telephone, Postal Address, E-mail, as well as the IP address from which you access the data collection form.
5. SECURITY MEASURES
As part of our commitment to guarantee the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organisational measures to guarantee the security of your personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed, in accordance with Art. 32 of the RGPD EU 679/2016.
6. TRANSFER OF DATA
No data transfers or international transfers of the data collected through this website are foreseen, with the exception of those authorised by tax, commercial and telecommunications legislation and in those cases in which a judicial authority requires us to do so.
7. USER RIGHTS
Any data subject has the right to obtain confirmation as to whether or not we are processing personal data concerning him or her. Data subjects have the right to access their personal data, as well as the right to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request that we restrict the processing of their data, in which case we will only retain the data for the purpose of exercising or defending claims. For reasons relating to their particular situation, data subjects may object to the processing of their data. The Data Controller will stop processing the data, except for compelling legitimate reasons, or the exercise or defence of possible claims.
We also remind you that, if you are a customer, you may revoke your consent or object to the sending of commercial communications by any means and at any time, by sending an e- mail to the address firstname.lastname@example.org.
If you consider that your request has not been dealt with correctly or that your data is not being processed appropriately, you may address your complaints to the Spanish Data Protection Agency , the supervisory body for this matter in Spain. Below, we provide you with further information on the aforementioned rights, with direct access to their exercise using the links of the Spanish Data Protection Agency:
Article 15 of the General Data Protection Regulation recognises the right of the data subject to know whether or not his or her personal data are being processed and the purposes of the processing, the categories of data, the recipients, the origin of the data, the storage period and the criteria for determining the storage period. Thus, the data controller shall provide a copy of the personal data
undergoing processing in electronic form upon request.
They may also request the data controller: rectification, erasure or limitation of data and processing. In order to make it easier for the user to exercise this right, we provide you with the form to be filled in for your request via the following link: https://www.aepd.es/media/formularios/formulario-derecho-de-acceso.pdf
B)-RIGHT OF RECTIFICATION AND ERASURE
Articles 16 and 17 of the General Data Protection Regulation provide for the rectification and deletion of personal data, whereby the customer or user may request the rectification of their personal data on the grounds that it is inaccurate or that it is supplemented or deleted because it is no longer necessary for the purposes for which it was collected and processed.
In order to make it easier for the user to exercise this right, we provide the following link to the form to be filled in for your request: https://www.aepd.es/media/formularios/formulario-derecho-de-rectificacion.pdf https://www.aepd.es/media/formularios/formulario-derecho-de-supresion.pdf
C)- RIGHT TO RESTRICTION OF PROCESSING
The data subject shall have the right to obtain from the controller the restriction of the processing of the data insofar as he or she contests the accuracy of the personal data. That is to say, the data may only be processed, with the exception of their retention, with the consent of the data subject, for the purposes of the exercise or defence of claims, the protection of the rights of another natural or legal person or for reasons of public interest of the Union or of a specific Member State. Furthermore, the data subject shall be informed by the controller prior to the lifting of such restriction.
In order to make it easier for the user to exercise this right, we provide you with the form to be filled in for your request via the following link: https://www.aepd.es/media/formularios/formulario-derecho-de-limitacion.pdf
(D) -RIGHT TO DATA PORTABILITY
Article 20 of the General Data Protection Regulation recognises the right of the data subject to receive personal data relating to him or her, i.e. transmitted directly from controller to controller where technically feasible, in a structured, commonly used and machine-readable form without being prevented from doing so by the controller to whom he or she has provided it, where consent has been expressly externalised or by contract.
The personal data that may be collected will be treated with absolute confidentiality, and the Company undertakes to keep them secret and to guarantee the duty to store them by adopting all necessary measures to prevent their alteration, loss and unauthorised processing or access, in accordance with the provisions of the applicable legislation.
To this end, the Controller guarantees that it will keep the corresponding confidentiality commitments signed with any person involved in any phase of the processing of the personal data collected.