La negra Mayte & Co

In accordance with the provisions of current regulations regarding data protection, the European Regulation 2016/679 (GDPR) and the Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPD), we hereby inform you of the processing we carry out of your data:

Who is the controller of your data?

The identifying and contact information of the website owners ———————- are as follows:

Controller: La negra Mayte & Co Registered address: _____________ Telephone: +34 609 528 995 +34 679 498 411 Contact email address: lanegramayte@gmail.com

2. Purpose and Scope of Application

Purpose and Scope of Application

For what purpose do we process your data?

Your personal data will only be used for the following purposes and legitimations:

  • As a Website User (contact form / emails sent to the email addresses appearing on the page): Your data will be used to respond to your requests for information, comments, or suggestions, through the contact section or the email addresses appearing on our page, and to maintain communication with the interested party. Legitimation: Consent/request for pre-contractual measures (request for a quote or specific information about a product or service) in accordance with Articles 6.1.a) and 6.1.b) of the GDPR respectively.
  • As a Client: Your data will be used to manage the relationship as a client of our company, as well as the economic management derived from said relationship. Legitimation: Based on the contractual relationship Article 6.1.b) and compliance with legal obligations in the economic and fiscal field Article 6.1.c) of the GDPR.
  • As a Supplier: Your data will be used to manage the relationship as a supplier of our company, as well as the economic management derived from it. Legitimation: Based on the contractual relationship Article 6.1.b) and compliance with legal obligations in the economic and fiscal field Article 6.1.c) of the GDPR.
  • As a Social Media Follower: The data you have provided to the social network will be used to maintain mutual follow-up of our accounts and to be able to contact you always through the chosen social network. We will manage communications through them in accordance with the terms and conditions of each social network. The information will always be received through the social network in question and as long as you are a follower of the controller on it. Each of these social networks has its own terms and conditions and are entities separate from us. Legitimation: Processing carried out based on the consent of the interested party Article 6.1.a) of the GDPR.

For how long will we keep your personal data?

The personal data you provide us with will be kept as long as our contractual or commercial relationship is maintained. However, from the date of termination of our contractual or commercial relationship, your data will be kept:

  • For the duration of the requested relationship or until you revoke your consent, at which time we will proceed to keep them duly blocked to address possible liabilities arising from the processing of your personal data for a maximum of 3 years.
  • As a Website User: Kept until their purpose is fulfilled or until you revoke the consent given.
  • As a social media follower: They will be kept until you revoke the consent given or you stop following us or mark “I no longer like”.
  • As a client or supplier:
    • Four Years for tax purposes: Accounting books and other mandatory accounting records according to the applicable tax regulations (Personal Income Tax, VAT, Corporate Income Tax, etc.). Articles 66 to 70 of the General Tax Law.
    • Six years for commercial purposes: Books, correspondence, documentation and supporting documents for issued and received invoices, contracts, bank documents, etc.). Article 30 of the Commercial Code.

Is there an obligation to provide this personal data?

In the requested contact, it is necessary for you to provide us with some contact information in order to address you and provide you with the service you request.

What are the consequences of not doing so?

If you do not provide us with the minimum contact information, it will be impossible and unfeasible to assist you.

How have we obtained your personal data?

The data obtained has been provided directly by you.

To which recipients will your personal data be communicated?

No data transfers are planned, except for legal obligations.

What are your rights when you provide us with your personal data?

Any interested party may request the exercise of the following rights:

  • Right of access: The interested party shall have the right to obtain confirmation as to whether or not personal data concerning them are being processed.
  • Right to rectification: The interested party shall have the right to obtain the rectification of inaccurate personal data concerning them or incomplete personal data.
  • Right to erasure: The interested party shall have the right to obtain the erasure of personal data concerning them when the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • Right to restriction of processing: You may request the restriction of the processing of your personal data, in which case we will only keep them for the exercise or defense of claims.
  • Right to data portability: Therefore, you can request that your automated personal data be transferred or transferred to any other company you indicate in a structured, intelligible, and automated format.
  • Right to withdraw consent: You will have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing based on the consent before its withdrawal.
  • Right to object: The interested party shall have the right to object to the processing of their data.

HOW CAN YOU EXERCISE THESE RIGHTS?

We provide you with forms where you can exercise these rights if you request them. You can request the right you wish to exercise by emailing us at lanegramayte@gmail.com and we will send you the corresponding form. The exercise of rights can be carried out by sending a communication to the email address lanegramayte@gmail.com.

Who can exercise the rights?

The rights of interested parties are highly personal, therefore, they will be exercised by the data subject, duly accrediting their identity (for this purpose, their ID card or equivalent will be requested). It may also be exercised through legal representation, in which case, in addition to the ID card of the interested party or equivalent, the ID card and authentic document accrediting the representation of the third party must be provided.

What will be our obligation when you exercise any of the rights?

The data controller must respond to the request addressed to them in any case, regardless of whether or not personal data of the affected or interested party appear in their processing. If the request does not meet the specified requirements, the file manager must request their correction. The data controller will respond to requests within one month of receipt of the request. This period may be extended for another two months if necessary, taking into account the complexity and number of requests. The controller will inform the interested party of any such extensions within one month of receipt of the request, indicating the reasons for the delay.

Right to lodge a complaint with the supervisory authority

You may request the protection of rights that have not been duly addressed from the Spanish Data Protection Agency. Either through the electronic headquarters of its web portal (www.agpd.es), or by writing to its postal address (C/Jorge Juan, 6, 28001-Madrid).

Mandatory or optional nature of the information provided by the user

Users, by checking the corresponding boxes and entering data in the fields of the contact forms, or by sending an email requesting information, expressly and freely and unequivocally accept that their data is necessary to meet their request by the provider. The User guarantees that the personal data provided is true and is responsible for communicating any changes to it.

What information do we collect?

In general, you can use the Website without providing any personal information. There are channels on our website where you can contact us. When you request information, the user guarantees the authenticity, accuracy, and veracity of all the information you provide us, undertaking to keep the personal data you provide us updated so that it corresponds, at all times, to your real situation. The User will be solely responsible for false or inaccurate statements and the damages that they may cause.

What measures do we take to keep your information secure?

We apply reasonable technical and physical measures to protect the information we collect through the Website.

Modifications to this data protection information.

La negra Mayte & Co reserves the right to modify its Data Protection Policy in accordance with the applicable legislation at any time. Any modification of this policy will be published on the website.