In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter, GDPR), Law 34/2002 of 11 July on information society services and electronic commerce (hereinafter, LSSI-CE), and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, SERENDÍPOLIS guarantees the protection and confidentiality of all personal data provided by our clients, in accordance with the provisions of the General Data Protection Regulation.
The SERENDÍPOLIS Data Protection Policy is based on the principle of proactive accountability, according to which the Data Controller is responsible for compliance with the framework. regulatory and jurisprudential, being able to demonstrate it before the corresponding control authorities.
The data provided will be treated in the terms established in the GDPR, in this sense SERENDÍPOLIS has adopted the levels of protection that are legally required, and has installed all the technical measures at its disposal to avoid loss, misuse, alteration, unauthorized access by third parties, set out below.
However, the user must be aware that Internet security measures are not impregnable.
DATA CONTROLLER. WHO ARE WE?
. Name: Ana España Torrejón (Hereinafter SERENDÍPOLIS)
. Address: Camino de Perales, 126, 28041 Madrid – SPAIN
. C.I.F.: 05308366N
. Contact telephone: +34 650 278 297
. Email: info@serendipolismadrid.com
PURPOSE OF THE PROCESSING. WHAT WILL WE USE YOUR DATA FOR?
All data provided by our customers and/or visitors to the SERENDÍPOLIS website or to its staff will be included in a record of personal data processing activities, created and maintained under the responsibility of SERENDÍPOLIS, which is essential to provide the services requested by users or to resolve any queries or questions raised by our visitors. Our policy is not to create profiles about the users of our services.
LEGITIMACY OF THE PROCESSING. WHY DO WE NEED YOUR DATA?
. Contractual relationship: This is the one that applies when you purchase one of our products or contract one of our services.
. Legitimate interest: To respond to any queries or complaints you may submit to us and to manage the collection of amounts owed.
Your consent: If you are a user of our website, by checking the box on our contact form (“I accept the privacy policy”), you authorize us to send you the necessary communications to respond to your query or request for information.
RECIPIENTS. WHO DO WE SHARE YOUR DATA WITH?
We do not share your personal data with anyone, except for those public or private entities to which we are required to provide your personal data in order to comply with any law. For example, the Tax Law requires you to provide the Tax Agency with certain information on financial transactions exceeding a certain amount.
If, apart from the aforementioned situations, we need to share your personal information with other entities, we will request your consent in advance, providing you with clear options that will allow you to decide whether or not to accept it.
COMMUNICATION. WHERE COULD WE SEND YOUR DATA?
We will not transfer your personal data internationally for any of the purposes indicated.
STORAGE. HOW LONG WILL WE KEEP YOUR DATA?
We will only retain your personal data for as long as necessary to achieve the purposes for which it was collected.
When determining the appropriate retention period, we examine the risks involved in processing, as well as our contractual, legal, and regulatory obligations, internal data retention policies, and our legitimate business interests described in this Privacy Notice and Cookie Policy.
In this sense, SERENDÍPOLIS will retain personal data once its relationship with you has ended, duly blocked, for the duration of the statute of limitations for any actions that may arise from the relationship maintained with the interested party.
Once blocked, your data will be inaccessible to SERENDÍPOLIS and will not be processed except to make it available to public authorities, judges, and courts to address any potential liabilities arising from your use of the data. processing, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.
SECURITY. HOW WILL WE PROTECT YOUR DATA?
We make every reasonable effort to maintain the confidentiality of the personal information processed on our systems.
We maintain strict security levels to protect the personal data we process against accidental loss and unauthorized access, processing, or disclosure, taking into account the state of technology and the nature and risks to which the data is exposed. However, we cannot be held responsible for your use of the data (including username and password) that you use on our website.
Our staff follows strict privacy standards, and if we hire third parties to provide support services, we require them to abide by the same standards and allow us to audit them to verify compliance.
RIGHTS. WHAT RIGHTS CAN YOU EXERCISE AS A DATA SUBJECT?
We inform you that you may exercise the following rights:
- Right to access your personal data, to know which are being processed and the processing operations carried out with them;
- Right to rectification of any inaccurate personal data;
- Right to erasure your personal data, when this is possible (for example, by legal imperative);
- Right to restriction of the processing of your personal data when the accuracy, legality, or necessity of the processing of the data is doubtful, in which case, we may retain them for the exercise or defense of legal claims.
- Right to object to the processing of your personal data, when the legal basis that enables us to do so Your processing of the data indicated is in our legitimate interest. SERENDÍPOLIS will stop processing your data unless it has a legitimate interest or it is necessary for the defense of claims.
- Right to data portability, when the legal basis that enables us to process your data is the existence of a contractual relationship or your consent.
- Right to revoke the consent granted to SERENDÍPOLIS.
To exercise your rights, you can do so free of charge and at any time by contacting us at Calle Portillo 9, 3ºB, Valdemoro 28343, Madrid – SPAIN, attaching a copy of your ID.
PROTECTION OF RIGHTS. WHERE CAN YOU FILE A COMPLAINT?
If you believe that your rights have been violated by our organization, you can file a complaint with the Spanish Data Protection Agency through any of the following means:
Online: https://www.aepd.es
Postal address: Spanish Data Protection Agency, C/ Jorge Juan, 6, 28001, Madrid
Telephone: 901 100 099 and 91 266 35 17
Filing a complaint with the Spanish Data Protection Agency is free of charge, and the assistance of a lawyer or solicitor is not required.
UPDATES. CAN THERE BE CHANGES TO THIS PRIVACY POLICY?
Yes, SERENDÍPOLIS reserves the right to modify this policy to adapt it to new legislation or jurisprudence that may affect compliance with it.