Introduction:
We are committed at lapontezuela.com to ensure that your personal information is protected and is not used improperly.
This Privacy Policy explains who is responsible for data handling, what purpose personal information will be used, the legitimacy of processing, how it is collected, why it is collected, how it is used, your rights, and the systems we have put in place to safeguard your privacy.
We understand that by providing us with your personal information and by using our website, you have read and understood the terms related to personal data protection.
lapontezuela.com assumes the responsibility to comply with current protection of personal data legislation, both national and European, with the aim to process personal data in a lawful, trustworthy and transparent manner.
Area of application
This document applies to lapontezuela.com for the product sales activity on the website www.lapontezuela.com
Who is responsible for the treatment?
The definition of Data Controller is described in Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data, and is the following:
“Responsible for the treatment: the natural or legal person, public authority, service or other body that, alone or together with others, determines the purposes and means of treatment.”
The person responsible for the processing of your personal data is:
- Company name: LA PONTEZUELA SLU (hereinafter “LA PONTEZUELA”).
- Address: c / Conde de Peñalver, nº 45 – 28006 Madrid
- E-mail: protecciondedatos@lapontezuela.com
- Telephone: (+34) 91 078 23 59
- NIF: B-78084001.
- Registered in the Madrid Mercantile Registry: Volume 659, Page 118, Section 8, Page M-13726.
- Website: lapontezuela.com (hereinafter the “Website” or “Webpage”)
For what purpose do we collect your personal information?
The main reason why we collect your personal information is to facilitate and improve expected customer service.
We collect your personal information to manage purchases, orders or requests that made through our website.
Below, we include primary purposes:
- Contract management of LA PONTEZUELA products and services (ex: oleo-tourism visits), including distance sales and management of shipments and returns.
- Create and manage a personal account with a single registration to be used in the acquisition of products and/or products offered on our website.
- Handling and solving requests for information, suggestions and customer complaints.
- Surveys to improve our services.
- Market research and commercial prospecting, reports on consumption habits, statistical data and market trends to offer products and services of interest.
- Keep you informed about our latest products, offers, opportunities, etc. (correspondence, telephone, e-mail, SMS or any other electronic methods, including WhatsApp).
How do we collect information about you?
Information provided by you:
We collect personal information that you provide us through our website, email or telephone.
In any case, the person responsible will inform you when collecting data, the purpose of the treatment, the recipients of the information, as well as the way to exercise your rights granted by the current legislation on data protection.
Generally, the personal information that you provide us is: name and surname, address, email and contact telephone number.
In the event that, during the term of the commercial relationship, you provide personal data of third parties, you agree in any case to guarantee that you are legitimately empowered to provide said data and that you have informed the interested party of said data processing, providing for this purpose all the information required by current legislation. Otherwise, you are responsible for any infraction and sanction that may be imposed derived from your breach.
Information we collect from your visits to our website:
We collect and store limited personal information and anonymous global statistics of all those users who visit our website, either because you actively provide us with such information or are simply browsing our website. The information we collect includes the Internet Protocol (IP) address of the device you are using, the browser programme you use, your operating system, the date and time of access, the Internet address of the website from which you accessed our website and also information about how you use our website.
We use this information to know the loading time of our website, how it is used, the number of visits to the different sections and the type of information that most attracts visitors. It also helps to identify if the website is working correctly, and if we detect failures or errors in the operation, to solve them and improve the performance of our website. This helps us offer better service to all users.
This information is collected through cookies. For more information see the Cookie Policy on the website.
What is the reason for the processing personal information?
Your personal information is treated for the following motives:
- To fulfil the needs of a contract and/or commercial relationship for the management of contracted products and services.
- The user’s consent to send information about LA PONTEZUELA products and services.
- For the fulfilment of different legal obligations, where appropriate.
To whom may we communicate your personal information?
In some cases, it may be necessary for us to communicate the information you have provided to third parties in order to offer you with the requested service, for example logistics, transport and delivery services.
Likewise, there are companies that provide us with other types of services such as: information technology (information storage and processing), consulting services, etc.
These third parties only have access to the personal information they need to carry out those services. They are required to keep your personal information confidential and may not use it in any other way than what we have requested.
In all cases, LA PONTEZUELA assumes responsibility for the personal information you provide us, and we ask those companies with which we share your personal information to apply the same degree of information protection as we do.
Likewise, your personal information will be available to public administrations, judges and courts, in the case of possible responsibility liabilities that arise in its treatment.
International Data Transfers
The personal information we collect resides in Spain.
How long do we store your personal data?
We only store your personal information for the time needed in order to use it according to the purpose for which it was collected, and according to the legal basis for its treatment in accordance with applicable law.
We will keep your personal information as long as there is a contractual and/or commercial relationship with you, or as long as you do not exercise your right to delete and/or limit the processing of your data.
In these cases, we will keep the information duly blocked, without giving it any use, as long as it may be necessary for the exercise or defence of claims or some type of judicial, legal or contractual responsibility that may arise from its treatment, which must be attended and for which recovery is necessary.
What rights do you have and how can you exercise them?
The data protection regulations allow you to exercise your rights of access, rectification, opposition, deletion, limitation of treatment, portability and not to be the subject of individualized decisions before the person responsible for the treatment.
These rights are characterized by the following:
- Your exercise is free
- If the requests are manifestly unfounded or excessive (for example, repetitive character) the person in charge may:
-
- Charge a fee proportional to the administrative costs incurred.
- Refuse to act.
- Requests must be answered within one month, although, if the complexity and number of requests are taken into account, the period can be extended for another two months.
- The person in charge is obliged to inform you on the means to exercise these rights. These means must be accessible and this right cannot be denied for the sole reason that you choose another means.
- If the request is submitted electronically, the information will be provided by these means when possible, unless the interested party requests otherwise.
- If the person in charge does not act on the request, they will inform, within a month at the latest, the reasons for their non-action and the possibility of a Control Authority request.
- You can exercise the rights directly or through your legal representative.
- It is possible that the person one who tends to your request acts on behalf of the person in charge if both have established it in a contract or legal act that binds them.
Right of access: The right of access admits that you can contact the person responsible for data treatment to find out whether or not they are handling your personal data.
Right of rectification: The right of rectification admits that you can obtain the rectification of your personal data that are inaccurate without undue delay from the person responsible for the treatment.
Taking into account the purposes of the treatment, you have the right to complete incomplete personal data through an additional declaration.
In your request, you must indicate which data you refer to and the correction to be made. In addition, when necessary, you must accompany your request with documentation that justifies the inaccuracy or incompleteness of your data.
Right of opposition: The right of opposition means that you can oppose the person responsible for processing personal data in the following cases:
- When they are subject to treatment based on a mission of public interest or legitimate interest, including profiling.
- When the purpose of the treatment is direct marketing, including the aforementioned profiling.
Right of deletion: The right of deletion may be exercised before the person in charge requesting the removal of your personal data when any of the following circumstances concur:
- If your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- If the processing of your personal data has been based on the consent you gave to the person in charge, and you withdraw it, provided that the aforementioned treatment is not based on another legitimate cause.
- The treatment of the person in charge was based on the legitimate interest or the fulfilment of a mission of public interest, and no other reasons have prevailed to legitimize the processing of your data.
- To have your personal data subject to direct marketing, including the creation of profiles related to said marketing.
- If your personal data has been unlawfully processed.
However, this right is not unlimited, in such a way that it may be feasible not to proceed with the deletion when the treatment is necessary for the exercise of freedom of expression and information, for the fulfilment of a legal obligation, for the fulfilment of a mission carried out in the public interest or in the exercise of public powers conferred on the person in charge, for reasons of public interest, in the focus of public health, for archival purposes of public interest, scientific or historical research purposes or statistical purposes, or for the formulation, exercise or defence of claims.
The person responsible for the treatment will be obliged to block the data when it proceeds to its rectification or deletion.
The blocking of the data consists of the identification and reservation of the same, adopting technical and organizational measures, to prevent its treatment, including its visualization, except for making the data available to judges and courts, the Public Prosecutor’s Office or the competent public administrations (in particular data protection authorities) for the requirement of possible responsibilities derived from its treatment and only for its limitation period.
After this period, the data must be destroyed.
Right to the limitation of the treatment: You have the right to limit the treatment of your data carried out by the person in charge, although its exercise has two aspects:
You can request the suspension of the processing of your data:
- When you contest the accuracy of your personal data, for a period that allows verification by the person responsible.
- When you have opposed the processing of your personal data that the person in charge carries out based on the legitimate interest or mission of public interest, while these reasons prevail over yours are verified.
Request the data controller to keep your data:
- When the treatment is illegal and you have opposed the deletion of your data and instead request the limitation of its use.
- When the person in charge no longer needs the personal data for the purposes of the treatment, but the interested party needs them for the preparation, exercise or defence of claims.
Where can you exercise your rights?
LA PONTEZUELA makes the following means available to you so that you may exercise your rights:
- By means of a written and signed request addressed to LA PONTEZUELA SLU, c / Conde de Peñalver, nº 45 – 28006 Madrid, attaching a photocopy of DNI (Spanish ID Card) or other document that proves applicant’s identity.
- By e-mail to: protecciondedatos@lapontezuela.com, attaching a scanned copy of the DNI (Spanish ID Card) or document that proves the applicant’s identity.
You may file a claim with the Spanish Agency for Data Protection, especially when you are not satisfied with the response to exercise your rights, for more details you can consult the website www.agpd.es
Copyright © LA PONTEZUELA SLU All rights reserved, 2020.
