The entity TASTY TREAT, S.L. with CIF B17748377 and registered office in Països Catalans Avenue 1, 3º A | 17820 Banyoles, telephone +34 972580908, email firstname.lastname@example.org informs you that we treat the personal data that you provide with the purposes indicated below. The data provided will be kept as long as the commercial relationship exists or during the years that are necessary to comply with legal obligations. The data will not be transferred to third parties except in cases where there is a legal obligation. You have the right to obtain confirmation about whether we are treating your personal data in our entity, therefore you have the right to access your personal data, inaccurate data or request its deletion when the data is no longer necessary.
1. GENERAL INFORMATION
This “Privacy and Data Protection Policy” aims to publicize the conditions that rule the collection and processing of your personal data by our entity or corporate group to ensure fundamental rights, your honor and freedoms, all of this in compliance with the regulations in force that regulate the protection of personal data according to the European Union and the Spanish Member State. According to these regulations, we need to have your authorization and consent for the collection and processing of your personal data, so below, we tell you all the details of your interest regarding how we carry out these processes, for what purposes, what other entities may have access to your data and what your rights are.
2.- RESPONSIBLE FOR THE TREATMENT
The Person Responsible for the Processing of Data is that natural or legal person, of a public or private nature, or administrative body, who alone or jointly with others determines the purposes and the processing of personal data; in case the purposes and the processing are determined by the Law of the European Union or the Spanish Member State.
In this case, our identifying data as Responsible for the Treatment are the following:
TASTY TREAT, S.L.
Barri la Sanitat, s/n
17406 Viladrau (Girona)
This is the same address where you can go to exercise your rights.
We have a person or entity specialized in data protection, which is responsible for ensuring the correct compliance in our entity of the current legislation and regulations. This person is called the Data Protection Delegate (DPO) or Data Protection Officer and, if you need it, you can contact him at the above address for the attention of the Data Protection Officer.
3.- SECURITY MEASURES
Our entity or corporate group adopts the necessary organizational and technical measures to guarantee the security and privacy of your data, avoid its alteration, loss, treatment or unauthorized access, depending on the state of the technology, the nature of the data stored and risks to which they are exposed.
Among others, the following measures stand out:
1. Ensure the permanent confidentiality, integrity, availability and resilience of treatment systems and services.
2. Restore availability and access to personal data quickly, in case of physical or technical incident.
3. Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the safety of the treatment.
4. Pseudonymize and encrypt personal data, in the case of sensitive data.
4.- PURPOSE OF TREATMENT
We need your authorization and consent to request and process your personal data, so below we detail the intended uses and purposes. Even so, we will only carry out those that you authorize through the “Authorization Formâ€ for the data processing consent.
Your data will be used exclusively until it fulfill the purposes indicated above.
– Commercial communications, news, incidents, informative.
– Compliance with commercial and fiscal obligations.
5.- LEGITIMATION OF THE TREATMENT
The collection and processing of your data is always legitimized by one or several legal bases.
6.- RECIPIENTS OF YOUR DATA
Sometimes, in order to comply with our legal obligations and our contractual commitment to you, we are faced with the obligation and need to transfer some of your data to certain categories of recipients, that are specified below:
Tax Agency – www.agenciatributaria.es
In the processing of your data performed by our entity, we need to hire external services, what imply that your data could be stored and / or processed by organizations that are established or operate from outside the European Union, that means we may transfer your data internationally. None of these transfers are planned.
7.- PROCEDURE AND TYPE OF DATA TREATED
The origin of the data belongs to the interested party or his legal agent.
The type of data that we have collected and processed are: Name and surname, postal address, email, NIF / NIE / Passport, Telephones, web and Bank details (if they have been provided).
8.- RIGHTS OF INTERESTED PARTIES
The current data protection regulation protect you in a series of rights in relation to the use we give to the data. Each and every one of your rights are unipersonal and non-transferable, that means, they can only be provided by the owner of the data, after checking their identity.
Here are the rights that assist you:
– Request ACCESS to your personal data
– Request the RECTIFICATION of your data
– Request the SUPPRESSION or removal of your data (right to “forgetfulness”)
– LIMIT or oppose to the use we give to your data
– Right to the PORTABILITY of your data for telecommunications or internet services.
– Right to WITHDRAW your consent at any time
– Right to submit a CLAIM on data protection to the Control Authority: Data Protection Agency
For the exercise of your rights of access, rectification, removal, limitation or opposition, portability and withdrawal of your consent, you can do it as follows:
By writing and copy of the DNI, indicating the GDPR reference addressed to:
TASTY TREAT, S.L.
Barri la Sanitat, s/n
17406 Viladrau (Girona)
In addition to the rights that assist you, if you believe that your data is not being collected or processed according to the current Data Protection regulations, you will be able to make a claim to the Control Authority: www.agpd.es