Privacy Policy

PRIVACY POLICY

The protection of personal data is one of the most important concerns for this organization.

In our daily work we strive to protect the privacy of the data you provide us and to comply with the current regulations on the protection of personal data.

The purpose of this policy is to inform data subjects about the various processing carried out by this organization and affecting their personal data in accordance with the provisions of the Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and Guarantee of Digital Rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

1. IDENTIFICATION AND CONTACT DETAILS OF THE PERSON IN CHARGE

The organization FAMILIA MARTÍNEZ BUJANDA, S.L., domiciled at DIPUTACIÓN S/N (01320 OYÓN, ÁLAVA with N.I.F.: B01486778, contact telephone: 941450876 and e-mail: lopd@bujanda.com.

2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

2.1. BROWSERS OF THE WEBSITE OF THE RESPONSIBLE PARTY.

We will process your personal data provided through our web forms to:

Respond to requests, complaints and incidents transferred through our contact channels or web forms incorporated in the website.

  • Conduct quality surveys.
  • Computer control of the website to prevent any breach of data security that could lead to access to personal data of web surfers.
  • To protect our rights or respond to claims of any kind.

2.2. CUSTOMERS AND SUPPLIERS.

  • The execution of pre-contractual measures to which you are a party in the event that you purchase or contract our goods or services.
  • To correctly and adequately manage and provide the service contracted through this website.
  • To take all the necessary steps to ensure the reception of the product purchased through this website.
  • The administrative, accounting and fiscal management of the relationship established with our clients when they have contracted us.
  • To understand user behavior within the website in order to detect possible computer attacks on our website.
  • Conduct quality surveys.
  • Respond to inquiries and respond to requests, complaints or incidents transferred through the web forms “contact”; “for more information“ incorporated in this page.
  • Sending commercial communications related to the goods or services that make up the activity of the responsible.
  • Computer monitoring of the website to prevent any breach of data security.
  • We will process your personal data in order to comply with the legal obligations that are directly applicable to us and regulate our activity.
  • It will be necessary to process your data to verify your identity, or the information you provide to us for the provision of the service subscribed or purchased.
  • To manage your data and provide it, if necessary, to external suppliers for the proper functioning of our business.
  • To improve our services and your browsing experience and use of the website.
  • To protect our rights or respond to claims of any kind.

3. LEGITIMACY OF THE TREATMENT

The data subject’s consent to:

  • To answer any doubts, complaints or incidences expressed by the interested party through the means made available by the organization for this purpose.
  • The sending of communications related to the goods and/or services offered by the organization.
  • The sending of commercial and advertising information.
  • For marketing and events.
  • When applicable, to participate in sweepstakes.
  • To incorporate your candidacy to the personnel selection process carried out in the company.

The refusal to provide your personal data will result in the impossibility to process your data for the above mentioned purposes.

CUSTOMERS AND SUPPLIERS.

The basis for the processing of personal data by the organization is based on:

  • The execution of a contract to which it is a party or the application of pre-contractual measures.

The legal basis for the processing of personal data is the fulfillment of a contract to which the customer or supplier is a party or for the implementation of pre-contractual measures at their request.

The refusal to provide your personal data may result in the impossibility of providing the requested service or manage the purchase of the product you wish to purchase.

The data subject’s consent to:

    • To answer any doubts, complaints or incidences expressed by the interested party through the means made available by the organization for this purpose.
    • Sending communications related to the services, activities or events offered and/or developed by the organization.
    • The sending of commercial and advertising information.
    • For marketing and events.
  • Legal obligation applicable to the data controller.

The organization must process your data in order to comply with a legal obligation imposed on us by the legal system. For example, the obligation to provide tax information to the AEAT.

In this case, the data subject may not refuse the processing of personal data.

  • Legitimate interest of the data controller.

In certain cases, it will be necessary to process your data to satisfy legitimate interests pursued by the Data Controller, provided that such interests prevail over the interests or fundamental rights and freedoms of the data subject that require the protection of personal data. The processing that we will carry out based on the legitimate interest of the organization are the following:

    • Computer monitoring of the website to prevent any breach of data security.
    • Verify your identity, or the information you provide to us for the provision of the subscribed service or purchased good.
    • To manage your data and provide it, if necessary, to external suppliers for the proper functioning of our business.
    • To improve our services and your browsing experience and use of the website.
    • To protect our rights or respond to claims of any kind.

4. TIME LIMITS OR CRITERIA FOR DATA RETENTION

The personal data provided will be retained in accordance with the following criteria:

  • The time necessary to fulfill the purposes for which they were initially collected.
  • Once the data are no longer necessary for the processing in question, they will be kept duly blocked, to be made available to the competent Public Administrations, Judges and Courts or the Public Prosecutor’s Office during the statute of limitations period for actions that may arise from the relationship maintained with the client and/or the conservation periods provided for by law.

In relation to the terms of conservation of personal data, depending on the case, it is necessary to follow the provisions of the following regulations:

  • The Civil Code, in case of contractual obligations, we will keep your data between 5 or 15 years depending on the case in accordance with the provisions of article 1964.2 of the aforementioned legal body.
  • Article 30 of the Commercial Code, for commercial purposes, establishes the obligation to keep the information (invoices issued and received, receipts, corrective invoices, bank documents, etc.) for a period of 6 years.
  • The General Tax Law, in relation to tax obligations, establishes in Articles 66 to 70 the obligation to keep any document with tax implications for a period of 4 years.
  • All other laws that may be applicable in each Autonomous Community according to the autonomous competencies assigned or concurrent with those recognized at the state level.

5. AUTOMATED DECISIONS AND PROFILING

  • Automated decisions, profiling and applied logic:

The organization does NOT make automated decisions based on applied logic or profiling.

6. TARGET

For the duration of the processing of your personal data, the organization may transfer your data to third parties in the following cases:

  1. Public Bodies, Judges and Courts, State Security Forces and Corps, and in general, competent authorities, when the responsible has the legal obligation to provide personal data.
  2. Banks and Financial Institutions, in case you hire us.
  3. In the event of such a transfer, the organization undertakes to inform you of these aspects and to obtain your express consent, except in the case of an obligation legally imposed on the data controller.

The company does not make any International Data Transfer.

7. RIGHTS

The interested parties who are subject to any processing carried out by the organization, may exercise at any time and completely free of charge:

We also inform you that at any time you may exercise, if you wish, the rights of access, rectification and deletion, as well as to request that the processing of their personal data be limited, to oppose the processing, to request the portability of their personal data (whenever technically possible) or to withdraw the consent given, and if applicable, when appropriatenot to be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the company, or send a letter to the postal address or e-mail address of the organization indicated above.

The brief should contain at least:

  • Photocopy of your ID card or equivalent document in order to prove your identity.
  • The object of your request, i.e., the right you are going to exercise.

In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority. (Spanish Data Protection Agency), through its website: www.agpd.es.

8. VERACITY OF THE DATA

The interested party guarantees that the data provided are true, accurate, complete and up to date; and undertakes to inform of any change regarding the data provided, through the channels provided for this purpose and indicated in point one of this policy. It shall be liable for any damage or harm, both direct and indirect, that it may cause as a consequence of the breach of this obligation.

In the event that the user provides data of third parties, he/she declares that he/she has the consent of the interested parties and undertakes to provide them with the information contained in this clause, exempting the organization from any liability arising from failure to comply with this obligation.