The terms of the PRIVACY POLICY set forth herein provide users of the Web site of(www.espartoysisaljgarcia.com) hereinafter “The Website” in a clear and extended manner, information about the processing of data collected from each user, and its protection under the legislative framework that the General Data Protection Regulation (GDPR) approved on May 25, 2018 and the Spanish data protection legislation provide.
Therefore, in accordance with legal requirements, the following Privacy Policy provides:
- The nature of the personal information processed;
- The purposes and means of processing personal information;
- The identity and contact details of the data controllers;
- The contact details of the Data Protection Officer (DPO);
- Any third party involved in the processing activities;
- The retention period of personal information;
- The security measures adopted to protect personal information;
- Users’ privacy rights.
EXERCISING YOUR RIGHTS RGPD
We inform you that you may exercise the following rights:
- Right of access to your personal data to know which are being processed and the processing operations carried out with them;
- Right to rectify any inaccurate personal data;
- Right of deletion of your personal data, when possible;
- The right to request the restriction of the processing of your personal data when the accuracy, lawfulness or necessity of the data processing is in doubt, in which case we may retain the data for the purpose of asserting or defending claims;
- The right to object to the processing of your personal data, when the legal basis that enables us to process your personal data from those indicated in the table above is legitimate interest. The Company will stop processing your data unless it has a compelling legitimate interest or it is necessary for the defense of claims.
- The right to limit the conservation and storage of your personal data for the time stipulated by law.
You may exercise your rights at any time and free of charge by sending an email to naturalfibers.g@gmail.com indicating the right you wish to exercise and your identification data.
This privacy policy applies exclusively to “the Web” and does not refer to any other website to which you may be redirected from this website.
Under no circumstances may users under sixteen years of age consent to the processing of personal information without parental consent.
1. CONTROLLER
The GDPR indicates in its legislation the need for control and supervision of data by a subject who, alone or jointly with others, determines the purposes and means of the processing of personal information.
Under the framework of the new legislation, the designated controllers for the processing and monitoring of “the Web” data are:
JESUS GARCÍA FERNÁNDEZ
At ESPARTO AND SISAL J. GARCÍA you can contact the Data Protection Officer designated to ensure that our website processes personal information in accordance with the GDPR, via the following email address: naturalfibers.g@gmail.com.
“Personal Information” means any information with users and that personally identifies them, either alone or in combination with other information.
The personal information is automatically collected by the web site of ESPARTO AND SISAL J. GARCÍA’S WEBSITE or received through multiple sources: forms, chat, email, applications, devices, social networks and other means.
Navigation data
The Site collects non-sensitive navigational data by automatic means to enable and enhance user navigation (e.g., IP address, date/time of visit and its length, any referring URLs, pages visited on the Site, device used and other information).
The processing of such information allows users to access the site and fully enjoy its functions and services. In addition, browsing data may be used to verify that the Site is functioning properly.
From time to time, browsing data is processed anonymously for statistical purposes.
It is unlikely that navigational data will allow identification of the relevant data subject. However, by their very nature, navigation data may allow the identification of users if they are associated with other information.
The navigation data described above is stored only temporarily in accordance with applicable law.
Ordering
At checkout, the Site requests users to provide personal information for the essential purpose of fulfilling their purchase orders and fulfilling contractual obligations (e.g., first and last name, e-mail address, delivery address, etc.).
Such personal information is also essential for Customer Service to assist customers with inquiries and any related needs, before or after the sale (e.g., regarding order delivery status or product returns).
Personal information related to orders will be stored for as long as necessary to comply with contractual obligations and applicable tax and financial reporting obligations.
The Site may also verify the payment instruments used by customers to purchase on the Site for the primary purpose of preventing fraudulent or criminal activity. Under no circumstances, ESPARTO AND SISAL J. GARCÍA nor its controllers, store information relative to the cards of our clients and the verification of the payment of the purchases made within “the Web” is entrusted to third parties.
Likewise, personal information as well as shipping address, is considered indispensable for the correct execution of the order, therefore the lack of it will prevent users from completing their order within the same.
In order to improve the user experience, “the Web” may send communications by e-mail, with product suggestions, discounts, requests for comments or other updates. Customers can always unsubscribe from such communications by e-mail (e.g., by clicking on the “unsubscribe link” at the bottom of each e-mail).
However, e-mails of a transactional nature, i.e. containing the confirmation of the payment of the order, as well as the details of the order or assistance for the payment of the same, can never be subject to the cancellation of subscription, since by their nature they are an indispensable part of the purchase contract.
Site registration
When users choose to register a personal account within the site of ESPARTO AND SISAL J. GARCIA’S SITE they are asked to submit personal information. The site clearly indicates what personal information is required (or not) to set up a site account.
Users are required to submit true and accurate personal information at the time of registration and are encouraged to keep their personal information up to date. In order to make any changes to them, you must log in to your personal account to make all relevant changes.
Users who choose to enable or log in to their site account through a social network should be aware that when they connect their site account to a social networking account, the site collects certain personal information that the user has already provided to those social networks (for example, email address and public profile on Facebook).
The Controllers do not monitor or control such social networking services or users’ profiles on these services, and do not establish privacy settings or rules about how personal information from such services will be used. Users are strongly encouraged to read all applicable social networking services policies and information to learn more about how they process personal information.
Newsletter and marketing communications
On the Site, users may opt-in to receive newsletters and commercial communications.
www.espartoysisaljgarcia.com always collects explicit, free and unequivocal consent from users before sending informative newsletters and marketing communications to any user.
In such cases, users may be invited to submit personal information in addition to their e-mail address in order to have informational newsletters and marketing communications tailored to the user’s profile.
At any time, users can always withdraw their consent to receive newsletters and commercial communications through their account settings by clicking on the “unsubscribe” link in any such email or by simply sending an email to that effect.
With the user’s explicit consent, informational newsletters and marketing communications may be tailored to the user’s “profile” based on the personal information and navigational data that the site collects or receives about the user in question.
The main objective of ESPARTO AND SISAL J. GARCÍA is to propose products, services and initiatives that better respond to the tastes, buying habits and interests of users and customers.
Personal information may also be used for remarketing, retargeting or profiling purposes, including through third parties (e.g., social networks, etc.).
2. COOKIE POLICY
Cookies are used to save the preferences and settings of the user’s browser in order to make navigation more efficient and faster getting speed up the loading processes of the web on a future visit. They are a small text file with information that is stored in the browser of the user’s device (computer/tablet/Smartphone) when visiting a particular website. Cookies are also used to track users throughout a website. This makes it possible to recognize whether the user is registered, which products the user visits or how long it takes for the user to visit us again.
Our web site www.espartoysisaljgarcia.com uses two types of cookies:
1. Analytical Cookies: If a user browses our website through cookies we collect analytical information in the form of data (completely anonymously) about the user’s browsing and interaction with the different products offered by ESPARTO AND SISAL J. GARCÍA .
2. Advertising Cookies: The function of advertising cookies is to collect user information to create an advertising profile (completely anonymous) to offer the most interesting ads possible based on their patterns of behavior and interaction with our website.
List of companies that use the cookies we collect at www.espartoysisaljgarcia.com for analysis or advertising purposes:
Acceptance of cookies:
If you expressly accept our cookies policy or if you decide to continue browsing our website, we will understand that you accept the use of cookies for the analytical and advertising purposes described above.
If you prefer not to accept them or block the installation of cookies, we inform you that it is possible that you may not be able to access certain services offered by our website or that browsing may be slowed down.
Disable cookies:
If you decide to block or disable cookies you must do so through your browser settings on your computer, smartphone or tablet. In the following list you can find a link where you will find instructions on how to disable cookies in each browser:
3. MANAGEMENT AND USE OF PERSONAL INFORMATION
Within the use that the personal data that users provide to “the Web”, it may be necessary to ESPARTO GRASS AND SISAL J. GARCÍA the use of external digital marketing tools, such as email marketing tools for example, to which relevant information will be transferred for the aforementioned use, and only and exclusively for direct use in relevant actions for ESPARTO GRASS AND SISAL J. GARCÍA in no case shall they be used for the benefit of third parties.
To this end, the Controllers may transfer personal customer information to third party vendors, acting as “data processors” (the “Processors”), for the purpose of conducting business transactions.
It is the responsibility of the controllers of ESPARTO AND SISAL J. GARCIA to ensure and guarantee that all the Processors apply their best practices to protect the personal information and that they will not use the personal information for any other purpose than the one agreed with the Controllers.
Users may request an updated list of processors involved in the processing of personal information relevant to the site’s activities by writing an email to: naturalfibers.g@gmail.com.
The Controllers of ESPARTO AND SISAL J. GARCIA always reserve the right to disclose personal information about users as required by law (e.g., in response to law enforcement requests), and when necessary to protect the rights of the Controllers or their affiliates or third parties. In any other case, the exchange of personal information will be conditional upon the user’s explicit and preliminary consent, unless processing is permitted under an alternative legal basis. The Controllers will not transfer any personal information outside the European Economic Area (EEA), unless the user has explicitly authorized such transfer or the transfer of personal information outside the EEA is permitted by the GDPR on another legal basis.
4. PROCESSING METHODS AND SECURITY MEASURES
The Controllers process users’ personal information with computerized, automatic and electronic tools and, in limited cases, through the use of documentary means. In accordance with the GDPR, specific security measures have been implemented to prevent data loss, illegal or improper use and unauthorized access.
Only authorized employees of the Controllers and authorized employees of third party vendors acting as Processors on behalf of the Controllers have access to personal information related to Site activities. Data processing agreements are in place with processors to ensure that they always comply with the level of security required by the GDPR while processing personal information related to site activities.
While the Site adopts primary security measures to prevent the loss, destruction or dissemination of personal information, at the same time it cannot exclude the security risks that are naturally involved in the transmission of data online. The user accepts the inherent risks of providing personal information over the Internet and shall not hold the Site liable for any breach of security, unless such breach is due to the negligence or willful default of the Site.
5. STORAGE OF PERSONAL INFORMATION
The Controllers will store personal information for as long as necessary to provide users and customers with the required services or to comply with legal or tax obligations or for the minimum period prescribed by law.
In order to determine the appropriate storage period for personal information, the Controllers will take into account multiple factors to ensure that personal information is not stored for longer than is necessary or appropriate. Such criteria shall also include:
- The purpose for which the Site contains personal information; legal, tax and regulatory obligations in relation to that personal information.
- The type of ongoing relationship with the user or customer in question (how often the user logs into their account on the site, whether users continue to receive marketing communications, how often they browse or shop on the site, etc.).
- Any specific user request regarding the deletion of personal information.
- Legitimate business interests.
The site will promptly delete or anonymize personal information that is no longer needed or retained in accordance with the law.
6. CONNECTION TO THIRD PARTY WEBSITES OR PLATFORMS
The site may contain banners, advertising messages and other links to third party websites or platforms. The Controllers cannot control or be responsible for the conduct of such third party websites or platforms with respect to privacy law. Users are encouraged to read their privacy policies to verify how they collect and process personal information.
7. USERS’ RIGHTS
Users have the right to receive confirmation if the Controllers contain personal information about them. In that case, users may, under the GDPR:
- Be informed about the collection and use of your personal information;
- Access your personal information at no cost;
- Rectify or complete inaccurate personal information (when incomplete);
- Delete personal information (“the right to be forgotten”);
- Under certain conditions, obtain the restriction or deletion of your personal information;
- Obtain and reuse your personal information for its own purpose in different services where the processing is based on a contract or consent, and the processing is carried out by automatic means (“the right to data portability”);
- Under specific conditions, object to the processing of your personal information;
- Object at any time to the use of personal information for “profiling” or “automated decision-making” purposes;
- The right to submit complaints regarding the collection and processing of personal information to the competent supervisory authority;
- The right to withdraw consent to the processing of personal information at any time.
Users may contact the site for any inquiries and to exercise their privacy rights at the following email address: naturalfibers.g@gmail.com .
8. CHANGES TO THIS PRIVACY POLICY
Any future changes to this Privacy Policy will be posted on the Site and, where appropriate, users will be notified by e-mail. Users are encouraged to read this Privacy Policy frequently to check for updates or changes.