Privacy Policy
This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RGPD), to Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), as well as, insofar as it is not contrary to the aforementioned regulations, to Organic Law 15/1999, on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that may replace or update them in the future.
Our organisation is committed to the privacy of your personal data. The personal data provided are necessary to provide our services and are processed in a lawful, fair and transparent manner, ensuring adequate security of the same, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage through the application of technical and organisational measures.
We hereby wish to provide you, in a transparent and fair manner, with all the necessary information regarding the processing of your personal data by this organisation.
I.- DATA CONTROLLER
IDENTITY: SIGNES HATS, S.L.
C.I.F. / N.I.F.: B54895495
ADDRESS: C/ Lepanto, 30, 03740 GATA DE GORGOS (ALICANTE)
TELEPHONE: 965757481
E-MAIL: signes@signeshats.com
II.- RECIPIENTS OF PERSONAL DATA
1.- The personal data provided will not be transferred except as provided for in the specific processing.
2.- Optionally, for the contracting of cloud computing services and/or services for the sending of e-mails, communication, as well as other related IT services, the personal data may be:
- Transferred to IT service companies located within the European Economic Area (EEA) or,
- Transferred to IT service companies located outside the EEA that are covered by the Privacy Shield and therefore have adequate safeguards in place to ensure the security of personal data. You can obtain more information by visiting this link:
3.- Optionally, to administrations and other bodies when required to do so in compliance with legal obligations.
III.- LEGAL BASIS THAT LEGITIMISES THE PROCESSING OF PERSONAL DATA
For each specific processing of personal data, we will inform you of the legal basis that legitimises it.
IV.- RIGHTS
RIGHT OF ACCESS
This is the right to obtain from the data controller confirmation as to whether or not personal data concerning the data subject are being processed and, if so, the right of access to the personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the storage period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data or the restriction or objection to the processing of personal data relating to the data subject, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where applicable, of automated decisions, including profiling, where data are transferred to third countries the right to be informed of the appropriate safeguards applied.
RIGHT OF RECTIFICATION
This is the right to request the rectification of your personal data if they are inaccurate, including the right to complete incomplete data. Please note that by providing us with personal data by any means, you warrant that it is true and accurate and undertake to notify us of any changes or modifications to it. Therefore, any damage caused as a result of the communication of erroneous, inaccurate or incomplete information in the forms on the website shall be the sole responsibility of the interested party.
RIGHT OF DELETION
This is the right to request the deletion of your personal data when, among other cases, they are no longer necessary for the purpose for which they were collected, or they are being processed in another way or you withdraw your consent. It should be noted that erasure will not take place when the processing of personal data is necessary, inter alia, for compliance with legal obligations or for the formulation, exercise or defence of claims.
RIGHT TO LIMITATION
This is the right to request the restriction of the processing of your personal data, which means that in certain cases you may ask us to temporarily suspend the processing of your personal data or to keep it for longer than necessary when you may need it.
RIGHT TO WITHDRAW CONSENT
This is the right to withdraw the consent you have provided by ticking “I have read and accept the privacy policy” at any time and as specified in the relevant section “Exercise of rights” or in the specific processing of commercial communications or Newsletter. It should be noted that this right will not be effective if, among other cases, the processing of personal data is necessary for the fulfilment of a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or defence of claims. Furthermore, the withdrawal of consent shall not have retroactive effects, i.e. it shall not affect the lawfulness of the processing based on the consent prior to its withdrawal.
RIGHT TO PORTABILITY
This is the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transfer it to another controller, provided that: the processing is based on your consent and is carried out by automated or computerised means.
RIGHT TO OBJECT
This is the right to object to the processing of your personal data on the basis of our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of claims.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe that we are processing your personal data improperly, you may contact us or you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):
EXERCISE OF RIGHTS
You may exercise your rights by sending a letter to the postal address indicated above or by e-mail to signes@signeshats.com, enclosing in both cases a copy of your NIF/NIE/Passport or similar document.
V.- PROCESSING OF PERSONAL DATA
GENERIC PROVISIONS
The personal data requested in each of the specific processing operations are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimisation.
The personal data requested in each of the specific processing operations are strictly necessary; refusal to provide them would mean that the requested service could not be provided.
The communications of personal data foreseen in each of the specific processing operations are in some cases necessary for the execution and maintenance of a contract and in other cases for the fulfilment of a legal obligation applicable to the data controller.
DIGITAL ASSISTANT – “CHATBOT” or “CHAT ONLINE”
In the event that this website uses online chat software, provided as a self-service to provide users with an adequate and quick response to common questions and to improve customer services for the benefit of users visiting the website, the following data will be processed during the conversation with the chat bot: the IP address and other personal data entered in the chat bot conversation function.
The data collected will not be used to personally identify the website visitor and will not be merged with personal data about the bearer of the pseudonym, unless the personal data is provided voluntarily when using the online chat.
The legal basis for this processing is set out in Article 6(1)(f) of the GDPR.
CONTACT FORM
Personal data will be processed for the purpose of channelling requests for information, suggestions and complaints from users or customers.
The legal basis that legitimises the processing of personal data is the express consent by ticking “I have read and accept the privacy policy”.
Personal data will be kept for a period of two years from the time they cease to be processed, without prejudice to the exercise of your rights as a data subject.
E-COMMERCE FORM
Personal data will be processed to manage your online purchases by processing your orders and returns through our online services, send you notifications on the status of delivery or in case of problems with the shipment of items, manage your payments, manage any complaints or questions about the warranty of products or services, identify you and validate your legal age to contract, as well as for and where appropriate, the formulation, exercise or defence of claims.
The legal basis that legitimizes the processing of personal data is the express consent by marking “I have read and accept the privacy policy”.
The personal data will be transferred to the transport company in order to deliver the order to your address as well as to payment service providers.
Personal data will be kept for as long as you do not withdraw your consent, unless they must be kept for the maintenance of the relationship between the parties or for the years necessary to comply with legal obligations.
COMMERCIAL COMMUNICATIONS OR NEWSLETTER FORM
Personal data will be processed to manage the subscription to our Newsletter, including the sending of personalised or non-personalised information about our products or services by various means such as telephone, e-mail, SMS, applications for mobile devices, as well as by any similar procedure. It should be noted that this type of data processing may involve the analysis of your user profile to determine what your preferences are and thus be able to send you information more suited to your interests.
You can unsubscribe from this type of processing, depending on the means used, as follows:
Email: Through the link to this effect that you will find in each of the electronic communications or through a similar procedure specified in the commercial communication.
WhatsApp (other apps): By requesting unsubscription.
SMS: Requesting unsubscription.
The legal basis that legitimises the processing of personal data is the express consent given: by marking “I have read and accept the privacy policy” on the website, by means of a physical document or by e-mail, depending on each case.
Please note that if WhatsApp is used, personal data will be transferred to WhatsApp Ireland Limited, which is located in the EEA.
Personal data will be retained for as long as you do not withdraw your consent in the manner set out in this section.
