Privacy policy

IDENTIFICATION DATA OF THE RESPONSIBLE FOR THE TREATMENT
Responsible for the treatment VIÑEDOS SAMPEDRO Y ALONSO, S.L.
CIF: B24720385
Social address: Calle Los Pinares, 224530 Villadecanes León, España
Phone: +34 619 740 699 / 679 399 640
Email: hola@sampedroyalonso.com

INFORMATION TO USERS OF THE WEBSITE AND CONSENT
In accordance with the provisions of the European Data Protection Regulation (EU) 2016/679 and with Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights, in the event of acceptance of the This privacy policy due to the sending of any of the web contact forms that may be enabled on the page, the user of the web expresses with said acceptance his express, free, informed and unequivocal consent for the personal data that he may provide are incorporated into the files and archives of the company. The person responsible for the treatment informs the interested parties that, as the current applicable regulations establish, the corresponding technical and organizational security measures have been applied to the activities of personal data processing, which have been implemented after having carried out the relevant risk analysis.

WHAT IS THE PURPOSE WITH WHICH WE PROCESS THE PERSONAL DATA COLLECTED?
The personal data collected by the person in charge of the treatment through the web and those that could be collected from the interested party by any other means at a later time will be processed solely for the purpose of developing and managing the company's own work, services and activities. , manage orders, inquiries or requests made by web users, send newsletters or information documents related to company services, and generally comply with legally established obligations. Commercial communications will only be made to those users who have previously expressly authorized it, and they can withdraw their consent at any time to receive commercial communications from the data controller.

FOR HOW LONG WILL WE KEEP THE PERSONAL DATA COLLECTED?
The personal data provided by web users to the data controller will be kept as long as the service provision relationship is maintained and the data is needed for the development of the company's activities, and as long as the request is not requested. deletion of the same or the consent of the interested parties revoked, in which case the data will remain blocked during the statutory limitation periods that are applicable in each specific case, with a generic term of 5 years. After the statute of limitations the blocked data will be deleted.

WHAT IS THE BASIS OF LEGITIMATION THAT ALLOWS US TO TREAT THE DATA COLLECTED?
The legal basis of legitimation that allows us to carry out the processing of personal data collected through the web is based on the express and informed consent of the interested party or his representative, obtained and granted in accordance with the conditions indicated in art. 7 of the European Data Protection Regulation, according to which the interested parties will have the right to withdraw the previously granted consent at any time, without such withdrawal affecting the legality of the treatments based on the consent that had previously been granted. The person responsible informs that the data requested through the forms will be strictly necessary for the development of the requested services or to attend to the specific query or request made by the interested party through the website, so that if it is not facilitated by the interested parties, it may not be possible to attend to the query or request or to proceed with the development of the requested services.

TO WHICH RECIPIENTS COULD THE PERSONAL DATA COLLECTED BE COMMUNICATED?
The personal data provided by the users of the web will only be processed by the person in charge of the company and by the authorized personnel who may have been hired, no international data transfers or transfers of data to third parties being foreseen, except for those that are to be carried out by legal obligation to Public Authorities and Administrations, or those made to the contracted treatment managers and that were necessary for the development of the company's activities or for the provision of the services contracted to them, and always within the framework provided for in the treatment manager contract formalized between the controller and the contracted managers. The person responsible for the treatment undertakes in any case to inform the interested parties about the need to make extraordinary transfers of data to third parties to manage the provision of services so that the interested parties can express their consent to the transfer of data as a requirement for let this take place.

WHAT ARE THE RIGHTS THAT CAN EXERCISE WHO PROVIDES US WITH THEIR DATA?
Those interested will have the right of access to their data to ask us what data they have collected and stored. They will have the right to rectify their data so that they can be modified when they are inaccurate or incomplete. They will have the right of deletion to request the deletion of their personal data. They will also have the right to exercise their right of opposition so that their personal data is not processed. They will have the right to limit the processing of their data while the challenge to the accuracy of the data is being resolved, or when the processing of the data turns out to be unlawful but despite this the interested party opposes the deletion of the data, or when the company does not need to process the data but the interested party does require it for the exercise or defense of claims, or when the interested party has opposed the processing of their data and the existence of a fulfillment of missions of public interest has been raised or satisfaction of a legitimate interest and while verifying if the alleged legitimate reasons prevail over yours. Those interested will have the right to the portability of their data to receive in electronic format the data they have provided us with and those that would have been obtained as a result of the relationship with the company, as well as the data being transmitted to another entity if it were possible. They will also have the right not to be subject to decisions based solely on automated data processing. They will also have the right to withdraw the consent initially granted and without such withdrawal affecting the legality of the treatments based on that consent that had previously been granted.

Para el ejercicio de los derechos antes indicados los interesados podrán dirigirse a las direcciones de contacto arriba indicadas para solicitar el formulario dispuesto por el responsable a tal efecto en cumplimiento de sus obligaciones legales, formulario que el interesado deberá acompañar cuando sea presentado o enviado de una copia de su DNI o documento equivalente acreditativo de su identidad. El ejercicio de estos derechos será gratuito, y el responsable mantendrá en todo momento a disposición de los interesados los formularios necesarios para facilitar el ejercicio de los derechos referidos, pudiendo ser entregada la solicitud en mano al personal de la empresa una vez cubierta, o enviada por correo postal o por correo electrónico a las direcciones de contacto indicadas. El responsable informa a los interesados que ha establecido e implantado protocolos y medidas específicos para el cumplimiento de la normativa de protección de datos del Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo (Reglamento General de Protección de Datos) y de la Ley Orgánica 3/2018 de Protección de Datos Personales y Garantía de los Derechos Digitales.

If the interested parties consider that we have not processed their personal data in accordance with the indicated reference regulations, they may submit a claim for their rights to the Spanish Agency for Data Protection as a national control authority at the address of the organization in Calle Jorge Juan, 6 - 28001 - Madrid or through the contact channels indicated on the institution's website (www.aepd.es), including the electronic office.

Last update of the privacy policy: May 15, 2020