This Privacy Policy has been developed taking into account the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD), as well as Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free circulation of such data, hereinafter the GDPR.
The purpose of this Privacy Policy is to inform the owners of personal data about whom information is being collected of the specific aspects related to the processing of their data, including, among other things, the purposes of the processing, contact information for exercising their rights, data retention periods, and security measures.
1. Data Controller
In terms of data protection, Iván Marcos Peláez (hereinafter the HOLDER) shall be considered the Data Controller for the files/processing identified in this policy, specifically in the Data Processing section.
2. Data Processing
The personal data requested, if applicable, will consist only of those strictly necessary to identify and respond to the request made by the data subject. Furthermore, personal data will be collected for specific, explicit and legitimate purposes and will not be further processed in a manner incompatible with those purposes.
The data collected from each data subject will be adequate, relevant, and not excessive in relation to the corresponding purposes for each case, and will be updated whenever necessary.
The data subject will be informed, prior to the collection of their data, of the general details of this policy so that they can provide express, precise, and unequivocal consent for the processing of their data, in accordance with the following aspects.
3. Purposes of the Processing
The explicit purposes for which each processing is carried out are set forth in the information clauses incorporated into each of the data collection methods (web contact or registration forms, newsletter subscriptions, electronic correspondence, etc.).
However, the data subject’s personal data will be processed for the sole purpose of providing an effective response and responding to the user’s requests, as specified in the option, service, form, or data collection system used by the data subject.
4. Legitimacy
As a general rule, prior to processing personal data, the HOLDER obtains the data subject’s express and unequivocal consent by incorporating informed consent clauses into the various data collection systems.
However, if the data subject’s consent is not required, the legitimate basis for processing relied upon by the HOLDER is the existence of a specific law or regulation that authorizes or requires the processing of the data subject’s data.
5. Recipients
As a general rule, the HOLDER does not transfer or communicate data to third parties, except as required by law. However, if necessary, the data subject is informed of such transfers or communications through informed consent clauses contained in the various personal data collection methods.
6. Browsing Data
Regarding the browsing data that may be processed through the website, if data subject to the regulations is collected, we recommend consulting the Cookie Policy published on this website.
7. Rights of Data Subjects
Data protection regulations grant a series of rights to data subjects or owners of the data, website users, or users of the HOLDER’s social media profiles. These rights are as follows:
- Right of access: the right to obtain information about whether their own data is being processed, the purpose of the processing, the categories of data involved, the recipients or categories of recipients, the retention period, and the origin of said data.
- Right to rectification: the right to obtain the rectification of inaccurate or incomplete personal data.
- Right to erasure: the right to obtain the erasure of data in the following cases.
- Right to object: the right to object to certain processing based on the data subject’s consent.
Right to restriction: the right to obtain restriction of data processing when any of the following situations apply: - Right to portability: the right to obtain data in a structured, commonly used, and machine-readable format and to transmit it to another data controller
- The right to lodge a complaint with the competent supervisory authority.
Interested parties may exercise the aforementioned rights by writing to the HOLDER at the following address: imarcospelaez@gmail.com, indicating the right they wish to exercise in the subject line.
In this regard, the HOLDER will respond to your request as quickly as possible, taking into account the deadlines established in data protection regulations.