“Rosace Europa” informs users of the website about its policy regarding the treatment and protection of personal data of users and customers that may be collected by browsing, purchasing products or contracting services through its site. Web. In this sense, “Rosace Europa” guarantees compliance with current regulations on the protection of personal data, reflected in Organic Law 15/1999 of December 13, Protection of Personal Data and in Royal Decree 1720 / 2007, of December 21, approving the Development Regulation of the LOPD, and the General Data Protection Regulation (RGPD) (EU) 2016/679.
In compliance with current legislation on data protection, users are informed that, at “Rosace Europa”, technical and organizational measures have been adopted in accordance with the provisions of the aforementioned regulations. The personal data collected in the forms are subject to treatment only by the personnel of “Rosace Europa” or the Treatment Managers established here. Adequate security measures have been adopted for the data provided and, in addition, all the means and technical measures at its disposal have been installed to prevent the loss, misuse, alteration, unauthorized access and theft of the data that we provide. facilitate.
The Client or User declares that all the data provided by him are true and correct and undertakes to keep them updated, communicating, to “Rosace Europa”, any modification thereof. The user will be liable for the veracity of their data and will be solely responsible for any conflicts or litigation that may result from their falsity. It is important that, so that we can keep the personal data updated, the user informs “Rosace Europa” whenever there has been any change in them. Otherwise, we cannot answer for its veracity.
EXERCISE OF RIGHTS
The LOPD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. As long as the user’s data is processed by “Rosace Europa”, they may exercise their rights. To do this, the user must go, providing documentation that proves their identity (ID or passport), by email to firstname.lastname@example.org , or by written communication to the address that appears in our legal notice. Said communication must reflect the following information: Name and surname of the user, the application request, the address and the supporting data.
The exercise of rights must be carried out by the user himself. However, they may be executed by an authorized person as the authorized representative’s legal representative. In this case, the documentation that proves this representation of the interested party must be provided.
The user may request the exercise of the following rights:
- Right to request access to personal data.
- Right to request their rectification (in case they are incorrect) or deletion.
- Right to request the limitation of their treatment, in which case they will only be kept by “Rosace Europa” for the exercise or defense of claims.
- Right to object to the treatment: “Rosace Europa” will stop processing your data, unless for legitimate reasons or the exercise or defense of possible claims they have to continue to be processed.
- Right to data portability: in case you want your data to be processed by another firm, “Rosace Europa” will facilitate the portability of your data to the new person in charge.
In the event that consent has been granted for a specific purpose, the user has the right to withdraw consent at any time , without affecting the legality of the treatment based on the consent prior to its withdrawal.
If a user considers that there is a problem with the way in which “Rosace Europa” is handling their data, they can direct their claims to the Security Manager or the corresponding data protection authority, being the Spanish Agency for Data Protection the one indicated in the case of Spain.
The disaggregated data will be kept without a deletion period. Regarding Customer data, the period of conservation of personal data will vary depending on the service that the Customer hires. In any case, it will be the minimum necessary, and can be maintained until:
- 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registration, cancellation, contributions, payment of salaries …); Arts. 66 and following General Tax Law (accounting books …)
- 5 years: Art. 1964 Civil Code (personal actions without special term)
- 6 years: Art. 30 Commercial Code (accounting books, invoices …)
- 10 years: Art. 25 Law for the Prevention of Money Laundering and Terrorism Financing.
Users of mailing lists or those uploaded by “Rosace Europa” to pages or profiles of RRSS, will be kept until the user withdraws consent.
Candidate data (CV), if any: In the event that the candidate is not selected, “Rosace Europa” may keep his resume stored for a maximum of two years to be included in future calls, unless the candidate states otherwise.
DATA COLLECTION AND PROCESSING
“Rosace Europa” has the duty to inform users of its website about the collection of personal data that can be carried out, either by sending email or by filling in the forms included on the website. In this sense, “Rosace Europa” will be considered as Responsible for the data collected through the means described above.
In turn “Rosace Europa” informs users that the purpose of processing the data collected includes the attention of requests made by users, the inclusion in the contact list, the provision of products or services and the management of the business relationship. The operations, procedures and technical procedures that are carried out in an automated or non-automated way and that make it possible to collect, store, modify, transfer and other actions on personal data, are considered Personal Data Processing.
The “Rosace Europa” Website has SSL encryption, which allows the User to securely send their personal data through the contact forms on the website.
“Rosace Europa” makes available to users a series of telematic mechanisms for the collection and processing of their personal data, for the purposes set out above. The personal data provided electronically, either through email, the contact forms on this website or online contracts will be used for the commercial and administrative management of the company’s clients and users. These data will be processed through servers managed by Sistemahost , which is also the company that provides email services, and, which will be considered the Treatment Manager.
For its part, the email and name data will be incorporated into a database to send commercial communications and manage the subscription to the services requested by the client or user, managed through the servers of https: // mailchimp. com , which will also be considered as Data Controller. You can unsubscribe at any time by clicking the link that you will find in our communications, or by directing a request to exercise your right to the company in charge of the treatment or to “Rosace Europa”.
As established by the LSSICE, “Rosace Europa” undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to clients for the maintenance of the existing contractual relationship will not be considered as commercial communication.
In any case, only the precise data will be obtained to be able to carry out the contracted service, or to be able to respond adequately to the request for information made by the user.
Sometimes personal data will be provided through links to third party websites. In this case, at no time will the “Rosace Europa” staff have access to the personal data that the Client provides to said third parties.
TREATMENT MANAGERS IN THE UNITED STATES
“Rosace Europa” uses the services of https://mailchimp.com, to send commercial information through its mailing lists.
The user expressly and unequivocally accepts their consent for the processing of their data and for the international transfer of the same to this service provider company.
COMMUNICATION OF INFORMATION TO THIRD PARTIES
“Rosace Europa” will not transfer or communicate your data to any third party, except in the cases provided by law or when the provision of a service implies the need for a contractual relationship with a data controller, and always in accordance with the general conditions approved by the user prior to hiring the same. Thus, when contracting our services, the user accepts that some of them may be, totally or partially, subcontracted to other people or companies, which will be considered Data Managers, with whom the corresponding confidentiality contract has been agreed, or adhered to their privacy policies, established in their respective web pages. You also accept that some of the personal data collected be provided to these Treatment Managers, when necessary for the effective performance of the contracted service. The user may refuse the transfer of your data to the Treatment Managers, by written request, by any of the aforementioned means.
The information provided by the client will, in any case, be considered confidential, without being able to be used for purposes other than those related to the contracted services or products purchased from “Rosace Europa”. “Rosace Europa” undertakes not to disclose or reveal information about the client’s claims, the reasons for the advice requested or the duration of its relationship with it.
This privacy and data protection policy has been drawn up by EXPERTOS LOPD®, a data protection company , as of October 15, 2018, and may vary depending on the changes in regulations and jurisprudence that occur, being the responsibility the owner of the data reading the updated document, in order to know their rights and obligations in this regard at all times.