Data Protection Policy
We indicate the information about our Data Protection policies applicable to the different treatments that we carry out on our website in the document below:
1. Web users
2. Mailing list (Newsletter)
1. Web users
Identification of the Responsible Agent. We inform you that the personal data that you provide us is incorporated into a personal data processing called WEB USERS whose responsible is ataLaia oinetakoak with NIF 72444030X and with postal address in CALLE ANGELES SORAZU, BAJO 1, 20750 ZUMAIA, GIPUZKOA (SPAIN). You can contact the Responsible Person, either by phone at the number 688608085 or by emailing to the address atalaiaoinetakoak@gmail.com.
Data Protection Officer. There is no Data Protection Officer in this entity.
Purpose. We process the information provided by interested persons in order to manage orders and, in general, carry out the commercial and administrative management of the sales contract.
Conservation term. The period of conservation of your personal data will be the following: The data will be kept for the duration of the commercial relationship, as long as its deletion is not requested by the interested party. and in any case, while the legal obligation to keep them lasts.
Automated decisions and profiling. We inform you that there are no automated decisions including profiling.
Legal basis of the treatment. The treatment is based on the preparation and execution of the business relationship.
Assignment recipients. The transfer or communication of data to third parties is not foreseen.
We inform you that there are companies that provide services to us and can access your data for legitimate and confidential reasons. The following will be considered in Charge of the Treatment of your data:
- Computer maintenance companies
- Tax, accounting and labor advice
- Transport companies
- Legal advice
International transfers. Our servers and offices are located in Spain, and no international data transfer is foreseen.
We use certain services (backups, office systems, email providers, ...) with companies located in the USA, these companies are under the Privacy Shield Agreement with which they have some levels of privacy protection considered adequate by the EU. However, from 07/16/2020 to the present, the Privacy Shield Agreement is invalidated, but the EU Model Contract Clauses (MCCs), also known as the Standard Contractual Clauses, enter into force. You have more information about this fact on the Google Cloud blog: https://cloud.google.com/blog/products/identity-security/google-clouds-commitment-to-eu-international-data-transfers-and-the -cjeu-ruling
Rights. Anyone has the right to obtain information about whether or not we are treating personal data that concerns them in our company. Interested persons have the right to access their personal data, as well as to request its rectification if it is inaccurate or, where appropriate, its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was provided. In certain circumstances, they may also request the limitation of their treatment, in which case we will only keep them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. In this case, this data will no longer be processed, except for legitimate reasons or for the defense of possible claims. In certain circumstances, the interested party may request the portability of the data and it will be delivered in electronic, structured and commonly used format so that it can be continued using it in another computer system or application.
In the event that consent has been granted for a specific purpose, you have the right to withdraw consent at any time.
To exercise these rights, you can use the forms that are available to you in our offices or use the models offered by the Spanish Data Protection Agency on its website: www.agpd.es, where you also have additional information about your rights. They must then send said request accompanied by a copy of their ID or passport to the address: CALLE ANGELES SORAZU, BAJO 1, 20750 ZUMAIA, GIPUZKOA (SPAIN), or to the email atalaiaoinetakoak@gmail.com.
2. Mailing list (Newsletter)
Identification of the Responsible Agent. We inform you that the personal data that you provide us is incorporated into a personal data treatment called MAILING LIST whose responsible is ataLaia oinetakoak with NIF 72444030X and with postal address in CALLE ANGELES SORAZU, BAJO 1, 20750 ZUMAIA, GIPUZKOA (SPAIN). You can contact the Responsible Person, either by phone at the number 688608085 or by email at the address atalaiaoinetakoak@gmail.com.
Data Protection Officer. There is no Data Protection Officer in this entity.
Purpose. At ataLaia oinetakoak we process the information of interested people with the following purpose: to offer the company's products and services in a personalized way.
Conservation term. The data will be kept as long as its deletion is not requested by the interested party. and in any case, while the legal obligation to keep them lasts.
Automated decisions and profiling. We inform you that there are no automated decisions including profiling.
Legal basis of the treatment. The treatment is based on consent.
Assignment recipients. We inform you that there are companies that provide services to us and can access your data, due to their work, legitimately and confidentially. The following will be considered Data Processors, in particular: email marketing service providers.
International transfers. Our email marketing service provider is a company located outside the EU, we have verified that it meets the requirements of the GDPR and the corresponding privacy agreements have been signed with them.
Rights. Anyone has the right to obtain information about whether or not we are treating personal data that concerns them in our company. Interested persons have the right to access their personal data, as well as to request its rectification if it is inaccurate or, where appropriate, its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was provided. . In certain circumstances, they may also request the limitation of their treatment, in which case we will only keep them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. In this case, this data will no longer be processed, except for legitimate reasons or for the defense of possible claims. In certain circumstances, the interested party may request the portability of the data and it will be delivered in electronic, structured and commonly used format so that it can be continued using it in another computer system or application.
In the event that consent has been granted for a specific purpose, you have the right to withdraw consent at any time. You can also cancel your subscription to the mailing list at any time by accessing the link that will be indicated in each shipment.
To exercise these rights you can use the forms that are available to you on our website or use the models offered by the Spanish Agency for Data Protection on its website: www.agpd.es, where you also have additional information about your rights. They must then send said request accompanied by a copy of their ID or passport to the address: CALLE ANGELES SORAZU, BAJO 1, 20750 ZUMAIA, GIPUZKOA (SPAIN), or to the email atalaiaoinetakoak@gmail.com.