In accordance with Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDyGDD); and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the Protection of Individuals with regard to the Processing of Personal Data and on the Free Movement of such Data and repealing Directive 95/46/EC (General Data Protection Regulation), we inform you of the following aspects:

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Identity: Fco Javier Madroñal Miranda.
NIF: 53278862y
Postal Address: C/ Cervantes 106, Mairena del Alcor (Sevilla)
Contact: Fco Javier Madroñal Miranda.
E- mail: info@gestialcor.com

Fco Javier Madroñal Miranda (hereinafter, the company) with registered address in Mairena del Alcor (Seville), C/ Cervantes 106, is responsible for the processing of personal data collected in the ordinary course of its business and in particular through this website. You can consult the information relating to the company by visiting the Legal Notice that appears at the bottom of the main page of the website www.gestialcor.com.

The purpose of this document is to disclose the privacy policy (hereinafter, the “Privacy Policy”) and the company’s treatment of personal data, and to provide data subjects with information about their rights under the General Data Protection Regulation (“GDPR”).

This Privacy Policy applies to all personal data under the company’s responsibility, regardless of the format that the information may take, the phase of its life cycle and its origin. When necessary, the company will request, prior to the provision of personal data, the express consent of its owner to the Privacy Policy and any other aspect that requires the prior authorisation of the same.

In this Privacy Policy the User will find information on:

The purposes of the processing of personal data.

The legal bases that allow the processing of data by the company.

The possible communication of data to third parties, as well as the reason for such communication.

The period of conservation of the data provided.

DATA PROTECTION PRINCIPLES

In the processing of personal data, the company shall respect the following principles:

  • Principle of lawfulness: personal data shall be processed insofar as at least one of the conditions foreseen for lawful processing is established: (i) where the data subject has given his consent; where the processing is necessary for (ii) the performance of the business-customer relationship or the performance and management of a contract, (iii) the fulfilment of a legal obligation, or (iv) the pursuit of a legitimate interest of the company or of third parties.
  • Principle of good faith and purpose limitation: personal data will be collected and processed for specific purposes communicated to the data subject and, under no circumstances, for other purposes.
  • Principle of minimisation and limitation of storage: only personal data that are adequate, relevant and not excessive will be processed, and only for the time strictly necessary for their respective purposes.
  • Principle of transparency: data subjects shall be clearly informed about the main characteristics and measures for the protection of their personal data, in particular about the respective purposes of processing and possible transmission to third parties.
  • Principle of necessity of access: access to personal data processed by the company shall be granted only to employees and collaborators whose functions so require.

PERSONAL DATA PROCESSED BY THE COMPANY. NECESSARY INFORMATION.

The company only collects and processes the personal data necessary for the fulfilment of the corporate purposes or the provision of the services requested. This data may be of different categories:

  • Personal identification data: name, surname, first name, DNI/NIF or passport and your own image provided expressly or contained in an identification document.
  • Contact data: address, telephone numbers or e-mail address.
  • Bank details: current account number and depository bank.
  • Other details: Locality, province, postcode, date of birth, sex or marital status.

The company may collect personal data through third parties. This may happen, for example, in cases where such data are provided by a family member or representative for the management of certain specific procedures.

All fields that are marked with an asterisk (*) or are indicated on the website by text that is required on the forms must be completed; the owner knows and accepts that failure to complete certain personal data will prevent the company from providing those services linked to such data.

By providing them, the holder of the personal data provided guarantees that they are true and accurate, and so that the information is always up to date and does not contain errors, undertakes to notify any changes or modifications to them. The loss or damage caused to the company through the communication of erroneous, inaccurate or incomplete information in the registration forms will be the sole responsibility of the owner of the data.

Likewise, by signing or “clicking” on the “Send” button (or equivalent) incorporated in the different forms, you declare that the information and data provided therein are accurate and truthful, thus accepting the privacy policy set out herein.

PURPOSES AND LEGITIMACY OF DATA PROCESSING

María Belén Jiménez Sánchez processes personal data for the following purposes:

4.1. FOR COMPLIANCE WITH LEGAL OBLIGATIONS TO WHICH THE COMPANY IS SUBJECT.

The company is subject to numerous legal and regulatory obligations, for the fulfilment of which the processing of personal data may be necessary, such as:

  • Fulfilment of communication obligations, concerning payments or subscriptions.
  • Compliance with legal obligations relating to information or response to authorities.
  • Security and protection of personal data.
  • Carrying out the commercial actions that the company deems appropriate to inform its users by physical or electronic means.
  • Responding to possible queries and providing information requested by the user.
  • The use of contact details to request, by physical or electronic means, your opinion or assessment of the service provided.
  • To notify you of important changes to the legal notice, privacy policy and cookie policy of this website.
  • The data of users and/or suppliers will be processed within the framework of the existing contractual relationship with the responsible party, in compliance with the administrative, fiscal, accounting and labour obligations that are necessary in accordance with current legislation.
  • To provide the service contracted by the user.

4.2. FOR THE LEGITIMATE INTEREST OF THE COMPANY

The company uses your personal data to carry out its purposes, to improve risk management and to defend its legal rights and interests.

4.3. TO RESPOND TO YOUR CONSENTS.

The company also processes your personal data in cases where you have given your express consent, as expressed by your signature or by ticking the box on the relevant form.

There may be purposes that are permitted under other legal bases; in which case, we will make every effort to identify the legal basis in question and communicate it as soon as possible after the company becomes aware of its existence.

RECIPIENTS OF THE DATA.

Personal data will not be transferred to third parties; however, in order for the company to carry out its function, it may be necessary to communicate your personal data to other entities, such as suppliers providing services as Data Processors, web analytics managers, public bodies in compliance with the legal obligations formalised for this purpose or other institutions.

HOW DID WE OBTAIN YOUR DATA?

The personal data that we process comes from the form on our website and/or from the data that you yourself have provided to us by various means of communication (paper forms, telephone calls, e-mail, surveys, personal interviews, etc.), or from other companies in the group, or have been handed in by you yourself.

The categories of data processed are:

Identification data.
Postal or e-mail addresses.
Financial data.

Location data.

According to Article 4.2 of the GDPR, location data means any data processed in an electronic communications network indicating the geographical position of the terminal equipment of a user of a publicly available electronic communications service.

DATA RETENTION PERIOD

The company will keep the holder’s personal data for as long as he/she maintains the status of client/user and in any case for the time necessary to fulfil the purpose for which they were collected. Once this relationship has ended, for the period of limitation established by the applicable regulations.

For purposes based on the consent granted, personal data shall be kept until the appropriate right of cancellation is exercised.

If the data are used for several purposes with different time periods, the longest retention period applies.

RIGHTS OF DATA SUBJECTS

The data subject shall have the right to:

  • Obtain from the controller confirmation as to whether or not personal data concerning him/her are being processed and, if so, the right of access to the personal data, by means of a copy thereof if requested.
  • To obtain without undue delay from the controller the rectification of inaccurate personal data concerning him or her as well as the completion of incomplete personal data, including by means of an additional statement.
  • To obtain without undue delay from the controller the erasure of personal data concerning him or her, where possible.
  • Request the restriction of the processing of their personal data if the accuracy, lawfulness or necessity of the data processing is in doubt.
  • Object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, where the lawful basis for doing so is legitimate interest. The company will stop processing your data unless it has a compelling legitimate interest or for the formulation, exercise or defence of claims.
  • The portability of your data, where the legal basis for processing is the existence of a contractual relationship or your consent and for this purpose to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used and machine-readable format.
  • To withdraw his or her consent at any time.
  • These rights may be exercised by the holder free of charge by means of a written and signed request to the company at the postal address C/Cervantes 106, Mairena del Alcor (Seville), or by e-mail to info@gestialcor.com indicating the reference: Personal Data and must include the following data: name and surname of the data holder, address for notification purposes, photocopy of the National Identity Document or Passport, and the request in which the request is made. In the case of representation, this must be proven by means of a reliable document.
  • The company reminds the data subject that he/she has the right to lodge a complaint with the relevant supervisory authority.

SECURITY

Fco Javier Madroñal Miranda is fully aware of the importance and privacy of personal data and has the necessary means to mitigate the possibility of privacy risks materialising, preventing them from occurring in advance, guaranteeing the levels of security required by the RGPD for their protection, taking into account the current state of technology.

Although it is not possible to guarantee absolute protection against intrusions in data transmissions over the Internet or from a website, the company makes every effort to maintain the physical, electronic and procedural protection measures with which to guarantee the privacy of your data in accordance with the legal requirements applicable in this area. However, all information provided by the User is sent at the User’s own risk.

MINORS

Minors under fourteen years of age may not transfer their personal data to the company or use the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the Website by the minors in their care, including the completion of the forms with the personal data of said minors and the ticking, where appropriate, of the boxes that accompany them. In this regard, and to the extent that the company does not have the capacity to control whether or not the users of the website are minors, parents and guardians should enable the necessary mechanisms to prevent minors from accessing the Website and/or providing personal data without their supervision, and the company accepts no liability in this regard.

UPDATES.

It is the company’s commitment that any change in the Privacy Policy of this Website will be immediately notified, through this portal, so that the owner is informed of the changes made in the processing of their personal data and, in the event that the applicable regulations so require, may grant their consent.

APPLICABLE LEGISLATION AND COMPETENT COURTS.

The terms and conditions that govern this Website, as well as the relationships that may arise from it, are protected by and subject to Spanish legislation.

For the resolution of any type of controversy, litigation or discrepancy that may arise between the User and Fco Javier Madroñal, due to the use of this Website, it is agreed to submit the same to the Courts and Tribunals of SEVILLE, (Spain), expressly waiving their own jurisdiction, if any.