PRIVACY AND DATA PROTECTION POLICY
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, repealing Directive 95/46/EC (the GDPR), Spanish Law 34/2002 of 11 July on information society services and electronic commerce (the LSSI-CE), and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (the LOPDGDD), the website guarantees the protection and confidentiality of all personal data provided by our clients, in accordance with the GDPR.
The data provided will be processed under the terms established by the GDPR. The website has adopted the legally required levels of protection and implemented all technical measures available to prevent loss, misuse, alteration and unauthorised access by third parties. Users should nevertheless be aware that Internet security measures are not infallible.
Data controller
Owner: LA NOVA ESQUERRA MAR S.L.U
Registered office: C/Aragó, 69 Local 2 – 08015 Barcelona
Tax identification number: B67116863
Telephone: +34 644 749 119
Email: info@onurbegrup.com
Purpose of processing
All data provided by clients and/or visitors through the website or to its staff will be included in a record of personal-data processing activities created and maintained under the responsibility of the website. The data are necessary to provide the services requested by users or answer visitors’ queries. Our policy is not to create profiles of users of our services.
Lawful basis for processing
- Contractual relationship: when you purchase one of our products or contract one of our services.
- Legitimate interest: to respond to your queries and complaints and manage the collection of amounts due.
- Your consent: if you use our website, by ticking the box on the contact form you authorise us to send the communications required to respond to your query or request for information.
Recipients
We do not disclose your personal data to third parties, except public or private bodies to which we are legally required to provide them. For example, tax legislation requires certain information about transactions above a specified amount to be supplied to the Spanish Tax Agency.
If we need to disclose your personal information to other entities outside these circumstances, we will first request your permission through clear options allowing you to decide.
International transfers
We will not transfer your personal data internationally for any of the purposes stated.
(INTERNAL NOTE: THE CONTROLLER MUST AMEND THIS PARAGRAPH IF INTERNATIONAL TRANSFERS ACTUALLY TAKE PLACE. SEEK ADVICE IF YOU DO NOT KNOW HOW TO DESCRIBE THEM CORRECTLY IN COMPLIANCE WITH THE LAW.)
Retention
We will retain your personal data only for as long as necessary to fulfil the purposes for which they were collected. When determining the appropriate retention period, we consider processing risks, contractual and legal obligations, internal data-retention policies and our legitimate business interests described in this Privacy Notice and Cookie Policy.
Once our relationship with you has ended, the website will retain the personal data in blocked form for the limitation period applicable to any claims arising from that relationship.
Once blocked, the data will be inaccessible to the website and will be processed only to make them available to public authorities, judges and courts, address liabilities arising from the processing, and bring or defend claims before the Spanish Data Protection Agency.
Security
We make every reasonable effort to maintain the confidentiality of personal information processed in our systems. We apply strict security standards to protect personal data from accidental loss and unauthorised access, processing or disclosure, taking account of available technology, the nature of the data and the risks involved. We cannot, however, be responsible for your use of credentials, including usernames and passwords, on our website. Our staff follow strict privacy rules. Where third parties provide support services, we require them to follow the same rules and permit us to audit their compliance.
Your rights
You may exercise the following rights:
- Access your personal data and obtain information about the processing operations carried out;
- Rectify inaccurate personal data;
- Erase your personal data where legally possible;
- Restrict processing where the accuracy, lawfulness or necessity of the processing is disputed; in such cases, we may retain the data for the establishment, exercise or defence of legal claims;
- Object to processing based on our legitimate interests. The website will cease processing unless compelling legitimate grounds apply or processing is required to defend legal claims;
- Receive and transfer your data where processing is based on a contractual relationship or your consent;
- Withdraw consent granted to the website.
You may exercise these rights free of charge at any time by contacting us at C/ Camí Ral, 552-554 – Mataró and enclosing a copy of your identity document.
Protection of rights
If you believe that our organisation has failed to respect your rights, you may submit a complaint to the Spanish Data Protection Agency through any of the following channels:
- Online office: https://www.aepd.es
- Post: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid
- Telephone: 901.100.099 and 912.663.517
Submitting a complaint to the Spanish Data Protection Agency is free of charge and does not require a lawyer or court representative.
Updates
The website reserves the right to amend this policy to reflect legislative or case-law developments that may affect compliance.