We take privacy and the protection of our users' personal data very seriously. Our commitment begins by explaining the following:
- Data is collected to improve the user experience, taking your interests and needs into account.
- We are transparent about the data we obtain about users and why we do so. Our aim is to offer the best possible experience. For this reason, whenever personal information is to be used, we will always do so in compliance with the regulations and, where necessary, we will ask for consent.
- Our priority is to guarantee user security and to process data in accordance with European regulations. Below we explain how we collect data and how we process it. 1. Data controller details
Company name: ARTIPISTILOS SL
Tax ID (CIF): B13118575
Registered address: AVENIDA COMUNIDAD DE GALICIA, 68 , 13610, CAMPO DE CRIPTANA (CIUDAD REAL) Telephone: 926561647
Email: [email protected]
DPO: None appointed
Activity: MANUFACTURE OF MATERIALS FOR FASCINATORS, WIDE-BRIMMED HATS, HATS AND ACCESSORIES Website: www.artipistilos.com
- Applicable legislation
This Privacy Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE or LSSI).
- Principles Applied To Personal Information
The following principles apply to the processing of personal data:
Principle of lawfulness, fairness and transparency: for the personal data submitted to be lawful, consent will be required, or the processing must be necessary to comply with a legal obligation. Information will be provided in a clear and accessible way.
Principle of data minimisation: personal data will be adequate, relevant and limited to what is necessary for the purpose for which it was collected.
Principle of storage limitation: personal data will be deleted once it is no longer useful for the purpose for which it was collected.
Principle of integrity and confidentiality: personal data will be processed in a way that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
- Purpose of processing personal data
We process personal data for the following purposes:
To respond to your request and provide you with information about the services offered by ARTIPISTILOS SL, specifically regarding the MANUFACTURE OF MATERIALS FOR FASCINATORS, WIDE-BRIMMED HATS, HATS AND ACCESSORIES. The website has the following forms that collect personal data:
-Contact form: its purpose is to deal with requests and enquiries from customers and potential customers. It collects the following personal data: email address.
-Registration form and shopping basket: their purpose is to speed up and handle the sales process and the subsequent shipping of products. They collect the following personal data: email, password, ID number (DNI), first name, surname(s), address, postcode, town/city, province and telephone number.
To send commercial communications (newsletters, promotions and special offers) and to manage the subscription list provided by the user.
- If you start the process of contracting or buying any of our products or services, further consent will be requested for the corresponding purpose.
- Legal basis for processing personal data
The legal basis for processing your data is consent. By filling in the relevant forms, ticking the
box “I accept the privacy policy” and clicking to send the data, or by sending emails to ARTIPISTILOS SL through the accounts provided for this purpose, the user confirms that they have read and expressly accepted this privacy policy, giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms set out here.
You may withdraw the consent given for the processing of your personal data at any time. Such withdrawal will not have retroactive effect.
Where there is a legitimate interest in processing the user's data, the grounds and the balance of interests will be assessed.
Data may also be processed to comply with legal obligations relating to fraud prevention, communication with public authorities and third-party claims.
- Categories of personal data processed
The categories of data that will be processed for the purposes indicated are as follows: - Identification data: first name and surname(s), email address and telephone number.
- Other non-identifying data obtained through certain cookies that are downloaded to the user's computer when browsing the website.
Mandatory data will be indicated as such on the data collection forms. If you decide not to provide any of the data considered mandatory, we will not be able to fulfil the intended purpose, and the data will not be processed nor the corresponding service provided.
You guarantee that the Personal Data you provide to us is true and accurate, and you will be responsible for informing us of any changes to it.
- PROCESSING OF MINORS' DATA
In principle, our services are not specifically aimed at minors. However, should any of them be aimed at children under fourteen, in accordance with Article 8 of the GDPR and Article 7 of Organic Law LO3/2018 of 5 December (LOPDGDD), ARTIPISTILOS SL will require valid, free, unequivocal, specific and informed consent from their legal guardians in order to process the minors' personal data.
In this case, the ID card (DNI) or other form of identification of the person giving consent will be required. For young people over fourteen, their data may be processed with the user's own consent, except in cases where the law requires the assistance of those holding parental authority or guardianship.
- Security measures applied
When processing users' personal data, ARTIPISTILOS SL undertakes to respect its confidentiality and to use it only for the purpose for which it was collected.
As part of our commitment to guaranteeing the security and confidentiality of your personal data, we inform you that the necessary technical and organisational measures have been adopted to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed. Notwithstanding the above, users should be aware that security measures on the Internet are not impregnable.
ARTIPISTILOS SL is not liable for any possible damage or loss that may arise from interference, omissions, interruptions, computer viruses, telephone faults or disconnections in the operation of this electronic system, delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads at the Data Processing Centre, on the Internet or in other electronic systems, nor for damage that may be caused by third parties through unlawful interference beyond the control of ARTIPISTILOS SL.
Regarding the confidentiality of processing, we will ensure that anyone authorised to process the data (staff, collaborators and providers) is under an appropriate obligation of confidentiality.
You can obtain further information about the security measures we apply by contacting us using the details given in section one of this privacy policy.
- Data retention period
Personal data will be kept for as long as necessary to fulfil the purpose or, in general, for as long as the business relationship lasts or for the time required to comply with legal obligations.
- Recipients to whom data is disclosed
The user knows and accepts that their personal data may be provided to third parties when necessary to fulfil the purposes of the processing, always respecting the security measures required by current personal data protection legislation.
The external service providers we work with may use the data to provide the corresponding services, but they will not use this information for their own purposes or pass it on to third parties.
We endeavour to guarantee the security of personal data when it is sent outside the data controller's premises, and we ensure that third parties respect its confidentiality and implement appropriate measures to protect personal data in accordance with data protection regulations. In all cases, the corresponding data processing agreement will be signed.
In some cases, the law may require personal data to be disclosed to public bodies or other parties; only what is strictly necessary to comply with such legal obligations will be disclosed.
- User rights
The User has the following rights regarding the processing of their personal data:
- Right of access to personal data. You can request information about the data processed and obtain a copy of it.
- Right to rectification of inaccurate data.
- Right to erasure of data that is no longer necessary for the purposes for which it was collected. - Right to restriction of processing, which means limiting how the data is processed.
- Right to data portability: in some cases, you can request a copy of your personal data in a structured, commonly used and machine-readable format so that it can be transmitted to another controller
- Right to object to the processing of personal data: you can withdraw your consent to the processing of your data, objecting to its further processing.
- Right not to be subject to individual decisions: the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect the data subject.
- Right to lodge a complaint with the Spanish Data Protection Agency (the competent data protection supervisory authority), especially if you have not obtained satisfaction when exercising your rights (WWW.AEPD.ES)
You may exercise your rights by sending a request together with a copy of your ID card (DNI) to the address given in section 1 or to the email address [email protected].
- Changes to the privacy policy
ARTIPISTILOS SL may amend this privacy policy to adapt it to new legislation, case law or interpretations by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, the Cookie Policy and any General Terms and Conditions that may apply to certain products or services, where such access involves any specific data protection considerations.