In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR), of Organic Law 15/1999 of 13 December on the Protection of Personal Data (LOPD), and of Law 34/2002 of 11 July on the services of the information society and e-commerce, as well as of their implementing regulations, the User of the Website is informed of the following:
1 – That the entity respects the applicable laws on the protection of personal data, the privacy and confidentiality of users, as well as the confidentiality and security of personal data, in accordance with the provisions of the European Regulation (GDPR), Organic Law 15/1999 on the Protection of Personal Data, and Royal Decree 1720/2007 of 21 December, approving the Regulation that implements Organic Law 15/1999, on the Protection of Personal Data, to which end it has taken the technical and organisational measures needed to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided, consistent with the state of the technology, the nature of the data and the risks to which they are exposed.
2 – Users of the Website are informed that their personal data may only be obtained for processing when they are appropriate, relevant and not excessive with regard to the scope and the specific, explicit and legitimate purposes for which they have been obtained, and that they will be used rationally and responsibly. The data will not be transferred to any other entity unless expressly authorised by the holder or required by law. Moreover, the data provided will be deleted by the entity when they are no longer necessary or relevant for this purpose, or when requested by the data subject in the exercise of their right.
3 – Users guarantee and are responsible for the veracity, accuracy, validity, authenticity, relevance and appropriateness of the personal data provided, and undertake to keep them duly updated.
4 – CARTONAJES DE LA PLANA S.L. will only send commercial communications to those users who have expressly given their consent in the registration form, and only on the products offered by the company.
5 – In compliance with the provisions of the Regulation (GDPR), the entity undertakes to respect the principles of lawfulness, fairness and transparency by establishing layered information mechanisms, as broken down in the following sections: (“Controller”, “Purpose”, “Legitimacy”, “Recipients” and “Rights”). Controller: CARTONAJES DE LA PLANA S.L.
- Purpose: To manage the sending of the information requested and to offer users products and services in accordance with their interests. As well as to improve the user experience based on the information provided. No automated decision-making or profiling will be carried out. The personal data provided will be stored for as long as the business relationship remains in effect or until the data subject requests their deletion.
- Legitimacy: The legal basis for processing the user’s data is the consent requested from the user to offer the products and services shown on the website.
- Recipients: Any transfer to third parties of the personal data of users of this website shall be duly reported to the parties concerned, specifying the identity of the transferees and the purpose for which the transferred data are to be processed, which include internal administrative purposes and the provision of the service, including the processing of the customer’s personal data. Data will not be disclosed to third parties without the data subject’s consent.
- Rights: The personal data provided by the User or that may be provided in the future will be entered into an automated file managed by CARTONAJES DE LA PLANA S.L. With regard to the data collected, the User may exercise the rights recognised in the European Regulation (GDPR) and in Organic Law 15/1999, and in particular the rights of access, rectification, and erasure of data, objection to their processing, and portability, as relevant. The User may also revoke their consent to the transfer of their data or to any of the aforementioned uses. The rights referred to in the previous paragraph may be exercised by each