PERSONAL DATA CONTROLLER
Business: CRISTINA LÓPEZ REGUEIRO (hereinafter “MADRID CON CRIS”)
Trade name: MADRID CON CRIS
Tax Identification No. (NIF): 11857626E
Address: Paseo de las Delicias 107, 1º Izquierda, 28045 Madrid, Spain
Email: info@madridconcris.com
Website: www.madridconcris.com (hereinafter “the portal or website”)
The website www.madridconcris.com, which is owned by MADRID CON CRIS (hereinafter “the portal or website”), complies with the applicable personal data protection legislation, Regulation (EU) 2016/679 of April 27, 2016 (RGPD), and Organic Law 3/2018 of December 5 on the protection of personal data and the guarantee of digital rights, protecting individuals with regard to the processing of personal data and the free movement of such data.
LEGAL GROUNDS FOR DATA PROCESSING
In the processing of your personal data, we will apply the following principles that comply with data protection regulations:
- Principle of lawfulness, fairness and transparency: We will always ask for your consent to process your personal data for one or several specific purposes that we will inform you of in advance with full transparency.
- Principle of data minimization: We will only request data that is strictly necessary for the purpose we require it for.
- Principle of storage limitation: Data will not be kept longer than necessary for processing, and based on the purpose, we will inform you of the corresponding storage period.
- Principle of integrity and confidentiality: Your data will be processed in a manner that ensures the security of personal data and guarantees confidentiality. We take the necessary precautions to prevent unauthorized access to or misuse of users’ data by third parties.
DATA REQUESTED AND PURPOSE OF PROCESSING
Users are solely responsible for the veracity of the data they submit to us directly or via the website, exempting us of all liability. The User must guarantee the accuracy and authenticity of the personal data submitted by entering complete and precise information in the data collection forms of this website.
To this effect, the data you submit is done voluntarily and it will be added to our information systems for the following purpose:
- Contact form: To send information about the query submitted (first and last names, email address), establishing the legal basis through the pre-contractual relationship between the parties;
- Subscription form: To send newsletters and marketing correspondence for special offers and/or website ads (name and email address), establishing the legal basis through the data subject’s consent;
- Blog comments form: To manage and post these comments publicly on the web portal (name and email address), establishing the legal basis through the data subject’s consent;
- Testimonials form: To manage and post these testimonials publicly on the web portal (name and email address), establishing the legal basis through the data subject’s consent;
- Registration form: To manage the User’s browsing (name and email address), establishing the legal basis through the data subject’s consent;
- Services and/or products form: To maintain the contractual relationship as well as to manage, report, provide and deliver the service offered, establishing the legal basis through the contractual relationship between the parties;
By entering the data, the User grants their express and unambiguous consent and states to have been informed of the terms and conditions with regard to personal data protection, agreeing and authorizing the automated processing of their personal data submitted for the purposes listed. It also entails consent for the international transfer of data solely because vendors or third parties that provide necessary services for the development of this website may be located in another country. Failure to provide the personal data requested or not agreeing to this data protection policy means that it will be impossible for you to subscribe, register or receive information about the products and services we offer.
Special mention is made of minors under the age of 14 with regard to processing their personal data. These minors may not visit this website without the consent of their parents or guardians.
The data processing carried out on the people who follow the official MADRID CON CRIS social media profiles will be governed by this section as well as by the terms of use, privacy policies and regulations on access for the corresponding social media platform in each instance and that have previously been accepted by the user. In this case, we will process the data to properly manage our presence in the corresponding social media platform, providing information about the activities, products and services available at MADRID CON CRIS, as well as for any other purpose permitted by the regulations of the social media platforms. We will never use the profiles of our social media followers to send ads on an individual level.
DATA PROCESSORS
MADRID CON CRIS will not disclose your personal data to third parties except when legally required. Nevertheless, if your personal data is disclosed to a third party, you will be notified in advance and your express consent will be requested for that disclosure. Entities involved at any stage of processing are required to comply with the duty of secrecy and to adopt the necessary protection levels and the technical and organizational measures needed to guarantee the security of personal data. As data processors, MADRID CON CRIS has contracts with the following service providers, which have agreed to comply with the applicable data protection measures:
· Tesys Internet S.L.U., B26309096, Circunde número 16, Polígono Industrial La Portalada, 26006 Logroño (La Rioja), Spain. Provides web hosting services. The privacy policy and other legal aspects of this company are available at the following link: https://www.piensasolutions.com/legal#politicas-condiciones
· Google LLC, with registered address at Gordon House, Barrow Street 4, D04 E5W5 Dublin, Ireland. Provides cloud computing, metrics and email services. The privacy policy and other legal aspects of this company are available at the following link: https://www.google.com/intl/es/policies/privacy/
• PayPal (Europe) S.à r.l. et Cie, S.C.A. Company that is used to manage credit card payment services on the website. Located at 22-24 Boulevard Royal L-2449, Luxembourg. The privacy policy and other legal aspects of this company are available at the following link: https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=es_ES
· Mailchimp (The Rocket Science Group LLC d/b/a MailChimp), with registered address at 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 U.S.A. Provides marketing campaign services. The privacy policy and other legal aspects of this company are available at the following link: https://mailchimp.com/legal/privacy/
Participates in and has certified its compliance with the Privacy Shield framework agreement between the U.S.A. and the European Union, and has agreed for all personal information received from European Union member nations to comply with Privacy Shield principles. Mailchimp’s participation in Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
RIGHTS OF DATA SUBJECTS
MADRID CON CRIS guarantees that the user may exercise their rights of access, rectification, erasure, information and restriction of processing as per the applicable legislation. The User can exercise their rights by sending a request to the address listed at the top and/or an email to info@madridconcris.com, specifying in the subject line “Derechos ARCO-POL” and attaching a photocopy of their ID card. The User has the right to withdraw their consent at any time. Withdrawal of consent will not affect the lawfulness of the processing carried out prior to the withdrawal of consent. The User also has the right to file a complaint with the corresponding supervisory authority if they believe their data protection rights have been violated. This can be done with Spain’s Data Protection Agency (AEPD) located on Calle Jorge Juan 6, 28001, Madrid (Spain), or via the AEPD online platform: https://sedeagpd.gob.es/sede-electronica-web/.
DURATION OF PROCESSING
The data submitted by the User will be retained for as long as there is mutual interest in continuing with the purpose of the processing and/or for the period during which a legal responsibility may arise for the services rendered. When the data is no longer needed for this purpose, it will be eliminated with adequate security measures to guarantee the data’s pseudonymization or its destruction. MADRID CON CRIS reserves the right to amend this policy according to legislative or case law changes.
For any matters related to this privacy policy, please contact MADRID CON CRIS at: info@madridconcris.com