Privacy policy

This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of the European Union.

Council of 27 April 2016 on the protection of natural persons with regard to the protection of individuals with regard to the

processing of personal data and to the free movement of such data (RGPD), a Ley Orgánica 3/2018, de 5

of December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), as well as

insofar as it is not contrary to the aforementioned regulations, to Organic Law 15/1999, on Data Protection.

Personal Data Protection Act (LOPD) and its implementing regulations, and/or those that may replace or replace them.

update in the future.

Our organisation is committed to the privacy of your personal data. Personal data

are necessary to provide our services and are processed in a lawful, fair and lawful manner.

transparent, ensuring adequate security for them, including protection against

unauthorised or unlawful processing and against accidental loss, destruction or damage by the application of

of technical and organisational measures.

In this document we would like to provide you with all the information you need in a transparent and fair manner.

necessary in relation to the processing of your personal data by this organisation.

I.- DATA CONTROLLER.

IDENTITY: PATRICIA ORTOLÀ CASANOVA

C.I.F. / N.I.F.: 74008820H

ADDRESS: CPTDA. PARATELLA, 38 B, 03720 BENISSA (ALICANTE)

PHONE: 678651240

E-MAIL: patri@apassets.es

II.- RECIPIENTS OF PERSONAL DATA.

1.- The personal data provided shall not be transferred except as provided for in the terms of the

specific treatments.

2.- Optionally, for the contracting of cloud computing services and/or services for sending

In the case of e-mail, communication, as well as other related IT services, personal data may be:

- Assigned to IT service companies located within the European Economic Area (EEA) or,

- Transferred to IT services companies located outside the EEA under the EEA shield of

Privacy Shield protection and therefore have adequate safeguards in place to ensure the protection of the

security of personal data. You can obtain more information by visiting this link:

https://www.privacyshield.gov/welcome

3.- Optionally, to administrations and other bodies when they are required in compliance with

legal obligations.

III.- LEGAL BASIS LEGITIMISING THE PROCESSING OF PERSONAL DATA.

For each specific processing of personal data, we will inform you of the legal basis for such processing.

IV.- RIGHTS.

4.1.- RIGHT OF ACCESS.

This is the right to obtain confirmation from the controller as to whether or not they are processing data.

personal data concerning the data subject and, in such a case, the right of access to personal data and the right of access to information.

The following information: the purposes of the processing, the categories of personal data concerned, the

recipients or categories of recipients to whom the data have been or will be disclosed

the period of retention or the criteria used to determine the period of retention, the existence of the

right to request from the data controller the rectification or erasure of personal data or the restriction of the use of personal data

processing of personal data relating to the data subject, or to object to such processing, the right to

the Spanish Data Protection Agency (AEPD), the existence, in his or her opinion, of

automated decisions, including profiling, where data is transferred to

third countries the right to be informed of the appropriate safeguards applied.

4.2.- RIGHT OF RECTIFICATION.

It is the right to request the rectification of your personal data if it is inaccurate, including the right to

complete any incomplete data. Please note that when you provide us with your personal information

by any means, warrants that they are true and accurate and undertakes to notify us of any changes or additions to the information provided.

modification thereof. Therefore, any damage caused as a result of a communication from

erroneous, inaccurate or incomplete information in the forms on the website, will be the sole responsibility of the user.

interested.

4.3.- RIGHT OF DELETION.

It is the right to request the deletion of your personal data when, among other things, they are no longer

necessary for the purpose for which they were collected, or are otherwise being processed, or withdraw the

consent. It should be borne in mind that erasure shall not take place when the processing of personal data is necessary, inter alia, for the fulfilment of legal obligations or for the

formulation, exercise or defence of claims.

4.4.- RIGHT TO LIMITATION.

This is the right to request the restriction of the processing of your personal data, which means that in

in certain cases you can ask us to temporarily suspend the processing of your data

personal information or that we keep it for longer than necessary when you may need it.

4.5.- RIGHT TO WITHDRAW CONSENT.

It is the right to withdraw the consent that you have provided by signing in handwritten or digital form on

at any time and as specified in the relevant "Exercise of rights" section or in the

specific treatment of commercial communications or Newsletter. It should be noted that this

right shall have no effect if, inter alia, the processing of the personal data is necessary for the purposes of the

fulfilment of a legal obligation, the performance and maintenance of a contractual relationship, or for the purpose of

the formulation, exercise or defence of claims. Likewise, the withdrawal of consent shall not have

retroactive effect, i.e. it shall not affect the lawfulness of the processing based on prior consent to the processing.

its withdrawal.

4.6.- RIGHT TO PORTABILITY.

This is the right to receive personal data relating to you that you have provided to us, in a format

structured, commonly used and machine-readable, and to pass them on to another person in charge, provided that: the

processing is based on your consent and is carried out by automated or computerised means.

4.7.- RIGHT OF OBJECTION.

This is the right to object to the processing of your personal data on the basis of our legitimate interest. No

We will continue to process your personal data unless we can demonstrate compelling legitimate grounds.

for processing which override their interests, rights and freedoms, or for the formulation,

the exercise or defence of claims.

4.8.- RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY.

If you believe that we are processing your personal data in an incorrect manner, you can contact us or

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

(AEPD):

https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

4.9.- EXERCISE OF RIGHTS.

You can exercise your rights by sending a letter to the above address or by writing to

of the e-mail patri@apassets.es, enclosing in both cases a copy of their NIF/NIE/Passport or document

analogous.

V.- PROCESSING OF PERSONAL DATA.5.1.- GENERIC PROVISIONS.

The personal data requested in each of the specific processing operations is adequate, relevant and

limited to what is necessary in relation to the purposes for which they are processed and therefore complies with the

data minimisation principle.

The personal data requested in each of the specific processing operations are strictly the same as those required for the processing of personal data.

If you refuse to provide them, we will not be able to provide the requested service.

The communications of personal data provided for in each of the specific processing operations in

In some cases they are necessary for the performance and maintenance of a contract and in other cases for the

compliance with a legal obligation applicable to the controller.

5.2.- BASIC TREATMENTS.

Billing.

Personal data will be processed for the purpose of issuing the corresponding invoice for services rendered.

borrowed.

The legal basis legitimising the processing of personal data is the fulfilment of an obligation

applicable law applicable to the person responsible.

In compliance with the legal obligations applicable to the data controller, personal data will be transferred to the

Tax Administration and other necessary official bodies, and as a necessary contractual requirement,

to third parties for the provision of services to the person responsible for consultancy/management, as well as and where appropriate, to

case, for the claiming of guarantees with respect to the products and/or services contracted.

Personal data shall be kept for as long as the relationship between the parties is maintained or for the years

necessary for the fulfilment of legal obligations.

E-mail.

Personal data will be processed for the purpose of channelling requests for information, suggestions and

customer or user complaints for their management and resolution.

The legal basis that legitimises the processing of personal data is the legitimate interest of the controller.

Personal data will be retained for a period of two years from the time they cease to be processed.

without prejudice to the exercise of his or her rights as a data subject.

Customer registration.

Personal data will be processed in order to manage the registration as a customer in the company, for the following purposes

administrative, for the implementation and maintenance of the provision of services, as well as for any

another legitimate and necessary purpose based on the relationship between the parties.

The legal basis that legitimises the processing of personal data is the express consent provided to the

sign the corresponding authorisation for the processing of personal data.

As a necessary contractual requirement, personal data may be disclosed to external partners; and

in fulfilment of legal obligations, to bodies, public officials, public registers, as well as

Personal data will be retained for as long as you do not withdraw your consent, unless they are to be kept for the purpose of the order.

for the maintenance of the relationship between the parties or for the years necessary for the performance of the contract.

of legal obligations.

Commercial Communications or Newletter Form

Personal data will be processed in order to manage the subscription to our Newsletter, including sending

of personalised or non-personalised information about our products or services through a variety of means

such as telephone, email, SMS, mobile device applications, as well as by any other means.

similar procedure. It should be borne in mind that this type of data processing may involve the

analysis of your user profile to determine what your preferences are in order to be able to deliver to you

information best suited to their interests.

You can unsubscribe from this type of processing, depending on the means used, as follows:

- E-mail: Via the link to this effect that you will find in each of the communications.

electronic or similar procedure specified in the commercial communication.

- WhatsApp (other apps): Requesting unsubscription.

- SMS: Requesting unsubscription.

The legal basis that legitimises the processing of personal data is the express consent provided: to the

check "I have read and accept the privacy policy" on the website, through a physical document or through

e-mail, on a case-by-case basis.

It should be noted that if WhatsApp is used, the personal data will be

transferred to WhatsApp Ireland Limited which is located within the EEA.

Personal data will be retained for as long as you do not withdraw your consent in the manner indicated in the

this paragraph.

Whatsapp.

Personal data will be processed for any management related to the activity of the company,

channelling requests for information, suggestions and complaints from clients or users for their

management and resolution.

The legal basis that legitimises the processing of personal data is the legitimate interest of the controller.

Personal data will be retained for a period of two years from the time they cease to be processed.

without prejudice to the exercise of his or her rights as a data subject.