Important: This English translation is provided for information purposes only. In the event of any discrepancy or difference in interpretation, the Spanish version shall prevail.
Who is responsible for processing your data?
The data controller for the processing activities connected with the management of users, customers and suppliers is Belmalyn del Carmen Rodriguez Castillo, C/ Mayor 57, 26259 Belorado (Burgos), Spain, NIF 71832157Y.
For matters relating to this policy, you may call +34 947 580 726 or write to casawaslala@gmail.com.
What personal data do we process and how did we obtain it?
The categories of personal data processed in relation to customers and suppliers are:
- Identification data
- Professional information, such as job title and skills
- Postal or email addresses
- Commercial information
- Financial and transaction data
We do not process special categories of personal data.
We obtain the above information directly from you when you submit a contact form, commercial offer or contractual proposal, or from your organisation when it provides the identification and other information necessary for the relationship between the parties. You or your organisation must notify us when this information changes.
For what purposes do we process your data?
Personal data concerning individuals connected with prospective customers, customers and suppliers and collected through contact forms or other information channels will be retained until the data subject requests its deletion. Information supplied by customers and suppliers will be retained for as long as the commercial relationship continues and, in all cases, for the minimum statutory retention periods that apply.
We may also retain personal data for as long as reasonably necessary to answer questions, resolve problems, make improvements, activate services and comply with applicable law. Data may therefore be kept for a reasonable period after you stop using our services or this website. At the end of that period, it will be deleted from our systems, subject to any legal obligation to retain it.
What is the legal basis for processing?
The legal bases depend on the processing activity:
- Accounting management: invoicing customers and suppliers. Legal basis: performance, maintenance and control of the contractual relationship.
- Tax management: application of withholding taxes, allowances and other tax measures. Legal basis: performance and control of the contractual relationship and compliance with legal obligations.
- Administrative management: financial control and organisation of resources. Legal basis: performance, maintenance and control of the contractual relationship.
- Marketing: commercial communications about our products or services to customers and people who previously requested information, including satisfaction surveys and news about services and products. Legal basis: the freely given and unambiguous consent of the data subject, where required, and the company’s legitimate interest in promoting services similar to those previously obtained or requested. Withdrawal of consent does not affect the performance of an existing contract.
Where personal data are required for a contract or to comply with legal or public-authority obligations, failure to provide them may prevent us from entering into or performing the contract or meeting those obligations.
Who will receive your data?
We will not share your personal data with a third party wishing to use them for direct marketing unless you have expressly authorised us to do so.
Personal data may be provided to public authorities and competent bodies where required by law or where, acting in good faith, we reasonably consider disclosure necessary to comply with legal proceedings, respond to a legal claim, or protect the rights of the company, its customers or the public.
Except in those circumstances, your data will not be transferred or disclosed to third parties, and the company remains responsible for their processing and custody.
What rights do you have?
You have the right to obtain confirmation as to whether personal data concerning you are being processed.
You may request access to your personal data and, where processing is carried out electronically, receive them in a commonly used, machine-readable format where the right to data portability applies.
You may request the rectification of inaccurate data or its erasure when, among other grounds, it is no longer necessary for the purposes for which it was collected.
In the circumstances established by law, you may request restriction of processing or object to processing for reasons relating to your particular situation. We will then cease processing unless compelling legitimate grounds apply or processing is required for the establishment, exercise or defence of legal claims or under another statutory exception.
You may withdraw any consent you have given at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
You can exercise these rights in writing using the contact details given under “Who is responsible for processing your data?”, enclosing a copy of your identity document where necessary. You may also lodge a complaint with the Spanish Data Protection Agency, particularly if you believe that your rights have not been respected:
Agencia Española de Protección de Datos
C/ Jorge Juan, 6
28001 Madrid, Spain
Telephone: 901 100 099 / 912 663 517
Data protection for website users
In accordance with Regulation (EU) 2016/679, personal data submitted by website users will be processed for the activity described in each data-collection form. Where processing is based on consent, clicking the “SEND” button signifies consent to that processing.
Unless there is a legal obligation or you have expressly consented, the company will not disclose your data to third parties.
Website users may exercise the rights of access, rectification, erasure and the other rights recognised in this policy and in Regulation (EU) 2016/679 by notifying the owner.
Under Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, the company will not send advertising by email without first obtaining the recipient’s express authorisation. Users can object to advertising by selecting the relevant option.
Other information about this privacy policy
Security measures
The company applies the levels of security required by current European and Spanish data-protection law, taking account of the state of the art, implementation costs, the nature, scope, context and purposes of the processing, and the varying likelihood and severity of risks to individual rights and freedoms.
Children’s data
Under Regulation (EU) 2016/679 and the legislation applicable in Spain, minors over the legally established age may consent to certain information-society services, such as submitting a contact form. Reasonable steps may be taken to verify the age stated by the minor.
Where parental or guardian consent is required for the processing of a child’s data, the information will be collected only with that express consent.
Changes to this privacy policy
The company may occasionally amend or correct this privacy policy for users, prospective customers, customers and suppliers. Please review this section periodically to learn about changes and how they may affect you.
Why must you accept this privacy policy?
This policy provides accessible information about the types of data held, the purposes of processing, the rights granted to you by data-protection law and how to exercise those rights. By deliberately submitting personal data through our contact channels or entering into a commercial relationship with the company, you acknowledge the processing described here. Personal data will be used only for the purposes for which it was supplied or where national or regional law otherwise permits processing.
If you have questions about this policy, please contact the company using the details in the first section, “Who is responsible for processing your data?”.
Applicable law
This policy is governed at all times by Spanish and European legislation concerning personal-data protection and privacy.
