Política de privacidad - SPANISH LUXURY STUDIO

WEBSITE PRIVACY POLICY

Home

Respecting the rules in current legislation, Spanish Luxury Studio (hereafter also Website) undertakes to adopt the technical and organisational measures necessary, according to the level of security appropriate to the risks affecting the data collected.

Laws incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European regulations in matters of personal data protection in internet. Specifically, it respects the following standards:

Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
Organic Act 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
Royal Decree 1720/2007, of 21 December approving the Implementing Regulation of Organic Act 15/1999, of 13 December, on Personal Data Protection (RDLOPD).
Act 34/2002, of 11 July, on Services to the Information Society and Electronic Commerce (LSSI-CE).

Identity of the personal data processing controller

The controller of the processing of personal data collected by Spanish Luxury Studio is: Spanish Luxury Studio, S.L., with Taxpayer Id. no.: B09914904 and entered in Barcelona Mercantile Registry with the following registry details: T48253 F134 S8 H B 577582, whose representative is: Spanish Luxury Studio (hereafter the Processing Controller). The contact details are as follows:

Address: Passeig Joan de Borbó 103, R02

Telephone for contact: 651305979

Email for contact: interiors@luxurystudio.es

In compliance with GDPR and LOPD-GDD, we advise you that the personal data collected by Spanish Luxury Studio, through the use of the forms included in these pages, will be incorporated into and processed in our files for the purpose of being able to facilitate, speed up and comply with commitments established between Spanish Luxury Studio and the User or to maintain the relations established in the forms filled in by the User, or to attend to requests or consultations from clients. Also, in accordance with GDPR and LOPD-GDD, save where the exception defined in article 30.5 of GDPR applies, a record of processing activities will be kept which specifies, according to their purpose, the processing activities carried out and other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles defined in article 5 of GDPR and article 4 et seq. of Organic Act 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights.:

Principle of legality, loyalty and transparency: the User’s consent is required at all times, following totally transparent information on the purposes for which personal data are collected.
Principle of limitation of purpose: the personal data will be collected for determined, explicit and lawful ends.
Principle of minimisation of data: the personal data collected will be only those strictly necessary in relation with the purpose for which they are processed.
Principle of exactness: the personal data must be exact and always kept updated.
Principle of limitation of storage: the personal data will only be kept in a form that allows identification of the User for the time necessary for the purposes of the processing.
Principle of integrity and confidentiality: the personal data will be processed in such a way as to guarantee their security and confidentiality.
Principle of proactive responsibility: the processing Controller will be responsible for ensuring that the above principles are complied with.

Categories of personal data

The categories of data processed in Spanish Luxury Studio comprise only identification data. In no case will processing take place for special categories of data in the sense of article 9 of the GDPR.

Legal basis for the processing of personal data

The legal basis for personal data processing is consent. Spanish Luxury Studio undertakes to obtain the Users’ express verifiable consent for the processing of their personal data for one or several specific purposes.

The User will have the right to withdraw consent at any time. It will be as easy to withdraw consent as to give it. As a general rule, the withdrawal of consent will not affect the use of the Website.

On occasions the User must or can provide data when using a form to make enquiries, ask for information or for reasons connected with the content of the Website. The User will be informed in the case that completing any of these forms is obligatory since they are essential for the correct development of the operation carried out.

Purposes of the processing applied to the personal data

The personal data are collected and managed by Spanish Luxury Studio for the purpose of being able to provide, speed up and comply with the commitments established between the Website and the User or for maintenance of the relations established in the forms that the User fills in or to attend to a request or enquiry.

The data can also be used for trading purposes of personalisation, operations and statistics, as well as activities proper to Spanish Luxury Studio’s corporate purpose and for extraction, data storage and marketing studies to adapt the web content offered to the User, and to improve quality, functioning and browsing on the Website.

At the time when the personal data are obtained, the User will be informed of the specific purpose or purposes of the processing to which the personal data will be subject; that is to say, the use or uses to which the information compiled will be put.

Periods of storage of the personal data

The personal data will only be kept for the minimum time necessary for the purposes of the processing and, in any case, only for the following period: 24 months, or until the User asks for their erasure.

At the time when the personal data are obtained, the User will be informed of the period for which the personal data will be stored or, when that is not possible, the criteria used to determine the time.

Recipients of personal data

The User’s personal data will not be shared with third parties.

En cualquier caso, en el momento en que se obtengan los datos personales, se informará al Usuario acerca de los destinatarios o las categorías de destinatarios de los datos personales.

Personal data of children

Under the terms of articles 8 of the GDPR and 7 of the Organic Act 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights, only those aged over 14 years will be able to give their consent for the processing of their personal data in lawful form by Spanish Luxury Studio. If someone less than 14 years old is involved, the consent of their parents or guardians will be necessary for the processing, and this will only be considered lawful to the degree that it has been authorised.

Secrecy and security of personal data

Spanish Luxury Studio undertakes to adopt the technical and organisational measures necessary, according to the level of security suited to the risks affecting the data collected, so that the security of the personal data can be guaranteed, avoiding the destruction, loss or any accidental or illicit alteration of the personal data transmitted, stored or processed in any other way, or any unauthorised access to or communication of those data.

However, since Spanish Luxury Studio cannot guarantee the impregnability of the Internet or the total absence of hackers or anyone else who can fraudulently access the personal data, the processing Controller undertakes to communicate to the User without undue delay when a breach of data security occurs which probably involves a high risk to the rights and freedoms of natural persons. Under article 4 of GDPR, a personal data breach means a breach of security leading to the accidental or unlawful destruction, loss or alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

The personal data will be processed as confidential by the processing Controller, which undertakes to make known and guarantee by means of a legal or contractual obligation that this confidentiality will be respected by its employees, associates and anyone to whom the information is made accessible.

Rights arising from the processing of personal data

The User has regarding Spanish Luxury Studio and can, therefore, exercise against the processing Controller, the following rights recognised in the GDPR and the Organic Act 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights:

Right of access: This is the User’s right to obtain confirmation as to whether or not Spanish Luxury Studio is processing his personal data and, if so, to obtain information on which personal data specifically and on the processing that Spanish Luxury Studio has done or is doing and, among others, the information available regarding the origin of those data and the recipients of communications of them that are taking place or are planned to take place.
Right of rectification: this is the User’s right to have his personal data altered when they are inaccurate or, taking into account the purposes of the processing, incomplete.
Right of erasure (“the right to be forgotten”): This is the User’s right, provided that current legislation does not dictate otherwise, to obtain the erasure of his personal data when they are no longer needed for the purposes for which they were collected or processed; the User has withdrawn his consent to the processing and there is no other legal basis for it; the User is opposed to the processing and there is no other legitimate reason to continue it; the personal data have been unlawfully processed; the personal data must be erased in compliance with a legal obligation; or the personal data have been obtained as the product of a direct offer of Information Society services to someone under the age of 14 years. As well as erasing the data, the Processing Controller, taking into account the technology available and the cost of its application, must adopt reasonable measures to inform those responsible who are processing the personal data of the request by the interested party for the erasure of any link to those personal data.
Right to the limitation of processing: This is the User’s right to limit the processing of his personal data. The User has the right to obtain the limitation of processing when it impeaches the accuracy of his personal data; the processing is unlawful; the processing Controller no longer needs the personal data, but the User needs the data to make claims; and when the User is opposed to the processing.
Right to the portability of data: In the case that the processing is done by automated means, the User will have the right to receive his personal data from the processing Controller in a structured format, in common use and for mechanical reading, and to transmit them to another processing controller. Provided that it is technically possible, the processing Controller will transmit the data directly to that other controller.
Right of objection: This is the User’s right to object to the processing of his personal data and to the cessation of their processing by Spanish Luxury Studio.
Right not to be subject to a decision based solely on automated processing, including profiling: This is the User’s right not to be subject to an individualised decision based solely on automated processing of his personal data, including profiling, except where current legislation establishes otherwise.

Thus, the User can exercise his rights by a written communication sent to the processing Controller with the reference “GDPR-https://luxurystudio.es”, specifying:

The User’s name, surnames and a copy of his Nat. Id. Doc. In cases where representation is admitted, the same identification will also be required for the person representing the User, as well as a document authorising the representation. The Nat. Id. Doc. photocopy can be replaced by any other means valid in law to evidence identity.
A petition giving the specific grounds of the request or the information which it is wished to access.
Address for the purpose of notifications.
Date and signature of applicant.
All the documents that support the request made.

This request and any other document attached can be sent to the following address and/or email address:

Postal address: Passeig Joan de Borbo 103, R02

E-mail: interiors@luxurystudio.es

Links to third party websites

The Website can include hyperlinks or links that permit access to third party websites other than that of Spanish Luxury Studio, which therefore are not operated by Spanish Luxury Studio. The proprietors of those websites will have their own policies on data protection and they themselves, in each case, are responsible for their own files and their own privacy practices.

Claims to a controlling authority

In the case that the User considers that there is a problem or a breach of the regulations in force in the form in which their personal data are being processed, the User will have the right to effective legal protection and to file a claim with a controlling authority, in particular, in the State of his normal residence, workplace or the place of the supposed infringement. In the case of Spain, the controlling authority is the Spanish Data Protection Agency (http://www.agpd.es).

ACCEPTANCE AND CHANGES IN THIS PRIVACY POLICY

It is important that the User reads and agrees with the conditions on personal data protection contained in this Privacy Policy, and that he accepts the processing of his personal data so that the processing Controller can proceed to it in the form, for the time and for the purposes indicated. The use of the Website implies the User’s acceptance of the Privacy Policy.

Spanish Luxury Studio reserves the right to amend its Privacy Policy, in accordance with its own criteria, or due to a legislative, jurisprudential or doctrinal change by the Spanish Data Protection Agency. The changes or updating of this Privacy Policy will not be notified explicitly to the User. It is recommended that the User consults this page regularly to keep up to date with any recent changes or updating.

This Privacy Policy has been updated to adapt it to Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR) and Organic Act 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights.