The purpose of this policy is to inform data subjects about the different processing activities carried out by this organization through the website that affect their personal data, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights.
1. IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER
DALBER SL, with registered office at C/ EL CONTRAFUENTE H3 POL. INDUSTRIAL FINCA LACY (03600 ELDA) ALICANTE, with Tax ID B03324258, contact telephone number 965561315 and email address [email protected]
2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA • USERS/BROWSERS OF THE DATA CONTROLLER’S WEBSITE
We will process the personal data provided in order to:
- Handle requests, complaints, and incidents submitted through our contact channels integrated into the website.
- Understand browser behavior on the website in order to detect possible cyberattacks on our site.
- Comply with legal obligations that are directly applicable to us and that govern our activity.
- Protect and exercise our rights or respond to claims of any kind.
- Where applicable, send commercial communications related to the goods or services that constitute our activity and/or news or newsletters related to our sector. Refusal to grant authorization will make it impossible for the entity to send you information.
- Where applicable, manage your participation in contests and promotions carried out by the entity. Refusal to grant authorization will make participation impossible.
- Where applicable, send satisfaction and/or quality surveys. Refusal to grant authorization will make it impossible to evaluate the service provided.
- Manage your registration on the entity’s web platform and generate a username and password. Refusal to grant authorization will make registration on the platform impossible.
- Manage and send you the requested quotation.
• CUSTOMERS
In addition to the purposes indicated in the section “users/browsers of the website,” we will process the personal data provided in order to:
- Manage the commercial relationship.
- Manage the provision of the services you have contracted.
- Carry out procedures related to the shipment and receipt of the purchased product.
- Carry out administrative, accounting, and tax procedures.
3. LEGAL BASIS FOR PROCESSING • USERS/BROWSERS OF THE DATA CONTROLLER’S WEBSITE
- On the basis of the consent you have granted us to process your data for the indicated purposes. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
- To comply with legal obligations applicable to us. In this case, the data subject may not object to the processing of personal data.
- On the basis of our legitimate interest in protecting our image, business, and track record, preventing attacks on our website. In this case, the data subject may not object to the processing of personal data, although they may exercise, where applicable, the rights recognized in the “rights” section of this policy.
• CUSTOMERS
- Performance of a contract to which the data subject is a party or application of pre-contractual measures. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
- On the basis of the consent you have granted us to process your data for purposes unrelated to the development or performance of the existing contract. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
- To comply with legal obligations applicable to us. In this case, the data subject may not object to the processing of personal data.
- On the basis of our legitimate interest in protecting our image, business, and track record, preventing attacks on our website. In this case, the data subject may not object to the processing of personal data, although they may exercise, where applicable, the rights recognized in the “rights” section of this policy.
4. WEBSITE ADD-ONS AND TOOLS
- WhatsApp Pop-up
The website has a WhatsApp channel in order to enable communication with customer service. However, please note that our provider applies its own privacy policy, so we recommend that you review your settings in the service and carefully read its privacy policy. You can access it by clicking here.
- Google reCAPTCHA
We use the Google reCAPTCHA service to detect, on the basis of legitimate interest, whether the website is being used by bots, in order to protect the site and prevent abusive and fraudulent practices such as spam.
You can access our provider’s privacy policy by clicking here.
- Stripe
As part of our services, we use the Stripe payment platform to process financial transactions and ensure that your payments are carried out securely and efficiently. We recommend that you first review Stripe’s privacy policy to understand how your personal information is processed by clicking here.
- Redsys
As part of our services, we use the Redsys payment platform to process financial transactions and ensure that your payments are carried out securely and efficiently. We recommend that you first review Redsys’ privacy policy to understand how your personal information is processed by clicking here.
5. DATA RETENTION PERIODS OR CRITERIA
The personal data provided will be retained for the time necessary to fulfill the purposes for which they were initially collected.
Once the data are no longer necessary for the relevant processing, they will be duly blocked so that, where applicable, they may be made available to the competent Public Administrations and Bodies, Judges and Courts, or the Public Prosecutor, during the statute of limitations period for actions that may arise from the relationship maintained with the customer and/or during the legally established retention periods.
Data blocking period:
- CIVIL CODE: between 1 and 5 years, depending on the case, in accordance with Articles 1964.2 and 1968.2 of the aforementioned legal body.
- COMMERCIAL CODE: for 6 years, in accordance with Article 30 of the aforementioned legal body. Applicable to commercial information related to (issued and received invoices, receipts, corrective invoices, bank documents, etc.).
- GENERAL TAX LAW: for 4 years, in accordance with Articles 66 to 70 of the aforementioned legal body. Applicable to information related to tax obligations.
- LAW 10/2010, OF 28 APRIL, ON THE PREVENTION OF MONEY LAUNDERING AND TERRORIST FINANCING: for 10 years, in accordance with Article 25 of the aforementioned law.
Information on data protection regarding compliance with due diligence obligations:
In accordance with Article 32 bis of the LPBCyFT in relation to Articles 13 and 14 of the GDPR, DALBER SL informs that your personal data will be processed in order to comply with the due diligence obligation regarding the prevention of money laundering and terrorist financing. In this context, your data may be communicated to the competent authorities and bodies when required as a result of the application of the aforementioned regulations.
6. AUTOMATED DECISIONS AND PROFILING
The website does not make automated decisions or carry out profiling.
7. RECIPIENTS
During the period in which your personal data are processed, the organization may communicate your data to the following recipients:
- Judges and Courts.
- State Security Forces and Bodies.
- Other competent public authorities or bodies, where the data controller is legally obliged to provide the personal data.
- Banks and Financial Institutions.
- Courier/transport companies for the shipment of the purchased product.
8. INTERNATIONAL DATA TRANSFERS
The organization does not carry out International Data Transfers. Should it subsequently be necessary to carry out international data transfers, the level of protection of the destination country will be verified and the safeguards required by the regulations will be adopted.
9. SOCIAL NETWORKS
In order to involve you in our activity and keep you informed of our news, we inform you that DALBER SL has created a profile on Social Networks.
All users have the opportunity to join our social networks or groups. However, please note that unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid means), your data will belong to the corresponding Social Network; therefore, we recommend that you carefully read their terms of use and privacy policies and ensure that you configure your preferences regarding data processing.
Below, we provide links to the privacy policies of the different Social Networks where we are present, so that you can access them at any time and configure your profile to ensure your privacy:
- Facebook: https://es-es.facebook.com/privacy/policy/?entry_point=facebook_page_footer
- X: https://twitter.com/es/privacy
- Instagram: https://privacycenter.instagram.com/
10. RIGHTS
Data subjects may request further information about the processing of their personal data, as well as exercise, at any time and free of charge, the rights of access, rectification, and erasure, as well as request the restriction of processing of their personal data, object to such processing, request data portability (where technically possible), or withdraw the consent given and, where applicable, not be subject to a decision based solely on automated processing, including profiling.
For this purpose, you may use the forms provided by the organization or send a written request to the postal address or email address indicated in the header. For these purposes, we inform you that a copy of your ID (national identity document) or another similar document may be requested in order to verify your identity, where this cannot be done by other less intrusive means.
If you consider that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may lodge a complaint with the competent Supervisory Authority for Data Protection (Spanish Data Protection Agency) through its website www.aepd.es
In compliance with Article 21 of Law 34/2002 on information society services and electronic commerce, if you do not wish to receive further information about our services, you may unsubscribe by sending an email to [email protected] with the subject “UNSUBSCRIBE”.
11. ACCURACY OF DATA
The data subject guarantees that the data provided are truthful, accurate, complete, and up to date, and undertakes to notify any changes to the data provided through the channels enabled for this purpose and indicated in section one of this policy. They shall be responsible for any direct or indirect damages that may arise as a result of failure to comply with this obligation.
In the event that the user provides data of third parties, they declare that they have the consent of the data subjects and undertake to convey to them the information contained in this clause, releasing the organization from any liability arising from failure to comply with this obligation.
12. MODIFICATIONS AND UPDATES
This privacy policy may be modified/updated in accordance with established legal requirements or in order to adapt this policy to the instructions issued by the Spanish Data Protection Agency, or as a result of changes to our website. For this reason, we advise users to periodically review our Privacy Policy.
If you have any questions about this policy, you may contact DALBER SL through the forms provided by the organization or send a written request to the postal address or email address indicated in the header.