“Dadyva” is deeply committed to compliance with Spanish and European regulations for the protection of personal data, and guarantees full compliance with the obligations provided, as well as the implementation of security measures provided in art. 9 of Law 15/1999, on the Protection of Personal Data (LOPD) and its Development Regulations, as well as for compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. In accordance with these regulations, we inform you that the use of our website may require that certain personal data be provided through registration or contact forms, or by sending emails, and that these will be processed by “Dadyva” , Responsible for the treatment, whose data are:
-Social name: Francisco Ruiz Olmedo
-CIF / NIF / NIE: 31334641Q
-Social address: C / Charco del Sultán, goleta – 11149 – Conil de la Frontera – Cádiz – Spain
-Phone: +34 666 55 88 70
-eMail: [email protected]
DATA COLLECTION AND TREATMENT
“Dadyva”, as Responsible for the Treatment, has the duty to inform the users of its website about the collection of personal data that can be carried out, either by sending email or when filling out the forms included in the website. Only the precise data will be obtained to be able to perform the contracted service, or to be able to respond adequately to the request for information made by the User.
Contact / email forms
Purpose: To respond to your request for information made through our contact form (s).
Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by Webempresa Networks, which will be considered as the Data Controller. In addition, our email service provider, through which communications will be made, is Google, LLC, through Google Suite.
Registration forms in the mailing list (newsletter)
Purpose: Sending commercial communications of interest to the User. As established by the LSSICE, “Dadyva” undertakes not to send commercial communications without identifying them as such. For this purpose, the information sent to customers for the maintenance of the existing contractual relationship will not be considered as commercial communication.
Legitimation: The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time.
Data transfer: Personal data will be processed through servers managed by Active Campaign, which will be considered as the Data Controller.
Customer registration / registration forms
Purposes:
Manage your User registration on our website.
Manage purchases made on our website.
Provide information about the processing and the status of purchases.
Historical record of purchases made on our website.
Sending communications via email and / or telephone, in order to inform the User of possible incidents, errors, problems and / or order status.
Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.
Data transfer: “Dadyva” will not transfer or communicate your data to any third party, except in the cases provided by law or when the provision of a service implies the need for a contractual relationship with a Treatment Manager. Thus, the User accepts that some of the personal data collected will be provided to these Processors (payment platforms, agency, intermediaries, etc.), when necessary for the effective performance of the contracted service. The user also accepts that some of the services may be, totally or partially, subcontracted to other persons or companies, which will be considered as Treatment Managers, with whom the corresponding confidentiality contract has been agreed, or adhered to their policies of privacy, established in their respective web pages. The user may refuse to transfer your data to the Processors, by written request, by any of the means previously referenced.
In addition, in those cases where necessary, the data of Clients may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banks, Labor Inspection, etc.
SECURITY MEASURES
Users are informed that, in “Dadyva”, technical and organizational measures have been adopted in accordance with the provisions of the data protection regulations. The personal data that are collected in the forms are subject to treatment, only, by the staff of “Dadyva” or the Treatment Managers established here.
The appropriate security measures have been adopted to the data provided and, in addition, all the technical means and measures at their disposal have been installed to prevent the loss, misuse, alteration, unauthorized access and theft of the data that we receive.
facilitate
The “Dadyva” Website also has SSL encryption, which allows the User to send their personal data securely through the contact forms on the website.
TRUTH OF DATA
The User declares that all the information provided by him is true and correct and undertakes to keep them updated. The user will be responsible for the veracity of their data and will be solely responsible for any conflicts or disputes that may result from their falsity. It is important that, so that we can keep the personal data updated, the user informs “Dadyva” whenever there has been any modification in them.
EXERCISE OF RIGHTS
The LOPD and the GDPR grant the interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do this, the user must go, providing documentation proving their identity (ID or passport), by email to [email protected], or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: name and surname of the User, the request request, the address and the supporting information.
The exercise of rights must be performed by the User himself. However, they may be executed by a person authorized as the legal representative of the User, providing documentation proving said representation.
The user may request the exercise of the following rights:
- Right to request access to personal data.
- Right to request rectification (if they are incorrect) or deletion.
- Right to request the limitation of their treatment, in which case they will only be kept by “Dadyva” for the exercise or defense of claims.
- Right to object to the processing: “Dadyva” will stop processing your data, unless for legitimate reasons or the exercise or defense of possible claims must continue to be processed.
- Right to data portability: in case you want your data to be processed by another company, “Dadyva” will facilitate the portability of your data in exportable format.
In the event that consent has been granted for any specific purpose, the user has the right to withdraw consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.
If a user considers that there is a problem with the way “Dadyva” is handling their data, they can direct their claims to the Responsible for Security or to the corresponding data protection authority, the Spanish Agency for Data Protection being the one indicated in the case of Spain.
CONSERVATION OF DATA
The personal data of the Users who use the contact form or register in the newsletter will be treated for the time strictly necessary to meet the request for information, or until the consent granted is revoked.
On the other hand, the personal data of the Client will be treated until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, and can be maintained until:
- 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding membership, registration, cancellation, contributions, payment of salaries …); Arts. 66 et seq. General Tax Law (accounting books …)
- 5 years: Art. 1964 Civil Code (personal actions without special term)
- 6 years: Art. 30 Commercial Code (accounting books, invoices …)
- 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
- No deadline: disaggregated and anonymized data.
In the event that candidate data (C.V.) is processed, “Dadyva” may keep his / her curriculum stored for a maximum of two years to incorporate it into future calls, unless the candidate states otherwise.
INTERNATIONAL DATA TRANSFERS
“Dadyva” uses the mailing services of https://www.activecampaign.com/. The user expressly and unequivocally accepts his consent for the processing of his data and for the international transfer of the same to this company / s providing services.
CONFIDENTIALITY
The information provided by the client will, in any case, be considered confidential, without it being used for purposes other than those described here. “Dadyva” undertakes not to disclose or disclose information about the User’s claims, the reasons for the advice requested or the duration of his relationship with him.
VALIDITY
This privacy and data protection policy has been drafted by EXPERTOS LOPD®, RGPD company, as of February 14, 2019, and may vary depending on the changes in regulations and jurisprudence that are occurring, being the responsibility of the owner of the data the reading of the updated document, in order to know their rights and obligations in this regard at all times.