Data Protection Officer
The owner is responsible for the personal data that is collected by browsing and using this website in accordance with the requirements established by REGULATION (EU) 2016/679 on the protection of personal data as well as in accordance with Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).
By using this website we understand that you have read and understood the information provided regarding the processing of your personal data.
Data protection policy
The controller applies the principle of active responsibility in the processing of personal data, maintaining constant updating and promoting continuous improvement of the data protection system in accordance with the applicable legal requirements, guaranteeing in all cases:
-
respect for the freedoms and fundamental rights of natural persons
-
that the data is treated in a lawful, fair and transparent manner
-
that the data processed are accurate, adequate, relevant and limited in relation to the purposes for which they are collected
-
that the purposes for which they are collected are explicit and legitimate and that they are not processed in a manner incompatible with those purposes
The purpose of this document is to inform users about what we do with their personal data, how it is collected, what it is used for, their rights, and all necessary legal information established by current regulations.
Data collected, purpose and legality
The personal data processed are those provided by users through the forms available on this website and are the minimum required to be able to:
-
send you information about our products / services
-
answer queries
-
process orders, as well as be able to prepare the corresponding invoices, inform about the status of orders, deal with complaints and any other management derived from the provision of the service carried out through this website
These purposes are based on legal principles of data processing collected by current regulations: for the execution of a contract or the provision of a service to users, for compliance with legal obligations, for legitimate interest and with the consent of users.
Data collected, purpose and legality
The personal data collected through the web contact form are used to respond to any queries that the user may make through it.
The personal data collected in the order form are intended to process the data necessary for the correct management of your orders.
The processing of data is legitimised by the consent you give us by expressly accepting the processing conditions reported through this privacy policy.
Recipients of the data
Personal data obtained through web forms are recorded and stored on electronic media controlled and supervised by the data controller.
Your personal data will not be communicated to third parties, except when such data communication is covered by a legal obligation or when for the correct provision of the service or the execution of the contract it is necessary to communicate your data to third parties in order to make the payment (payment gateways), as well as to manage the deliveries of the products (carriers) covered by such transfer in the needs of the service. Payment through other payment gateways, we recommend that the user read the privacy policy to understand how it handles personal information, for example:
Redsys Servicios de Procesamiento, S.L. (“Redsys”), with registered office in Madrid, calle Francisco Sancha, number 12, and with CIF number B-85955367, which fully complies with current legislation on the protection of personal data and with the confidentiality commitments inherent to its activity. Redsys has adopted the necessary technical measures to maintain the required level of security. You can view its privacy policy through the following link to the privacy policy
PayPal (Europe) S.à.r.l. et Cie, S.C.A. (R.C.S. Luxembourg B 118 349), whose privacy policy establishes the appropriate security measures for the correct treatment of users' personal data. You can view their privacy policy through the following link to the privacy policy
In cases where the communication of data to third parties is not covered by the legal bases established in the previous section, the communication of data to other recipients will only be carried out if the user has given his or her express consent.
Strict criteria for selecting data processors are maintained, as is a contractual commitment with each of them to comply with and enforce the obligations established in terms of data protection.
Technical and organizational measures for data protection
The supports have the necessary technical and organizational measures that guarantee the confidentiality and conservation of the personal data obtained through the web.
Personal data collected from the website are processed using HTML protocol with a valid SSL certificate.
The personnel involved in data processing operations (access, editing, deletion, etc.) are qualified, trained and committed to this data protection policy.
Data retention
Personal data obtained through the contact form will be kept for the time necessary to respond to the request/query made.
Personal data obtained through the order form will be kept
As long as there is a contractual and/or commercial relationship with you or as long as you do not exercise your right to delete, cancel and/or limit the processing of your data. Once the contractual relationship has expired, we will keep the information duly blocked, without giving it any use, as long as it may be necessary for the exercise or defense of claims or any type of judicial, legal or contractual liability may arise from its processing, which must be addressed and for which its recovery is necessary.
If you have expressly agreed to receive commercial information, we will retain your contact information until you notify us of your decision to cancel such commercial communications.
Data Protection Officer
The data protection officer is NEW PROJECT SERVICIOS EMPRESARIALES SL. You can contact the officer at dpd@npservicios.com
The Data Protection Officer is responsible for ensuring compliance with data protection regulations, in order to resolve queries regarding the privacy policy and to provide advice on the processing of personal data. He/she must also be contacted to submit complaints regarding the processing of personal data as well as to exercise the rights granted to interested parties with respect to their personal data.
Information on the existence of automated decisions (including profiling)
We do not normally make automatic decisions, but when we do, we will make it clear that this type of decision is being made. However, YA EN CASA PROMO 2020, S.L. includes several sections dedicated to the personalization of services in order to show personalized advertising when entering its website and also to send personalized communications.
YA EN CASA PROMO 2020, S.L. acknowledges the possibility of creating profiles to improve its product offering or personalize the sending of commercial offers or provide more personalized treatment to the customer.
Opposition to data being processed for advertising purposes
If you have given your consent for your data to be used for advertising purposes and you no longer wish to receive advertising, you can revoke the consent given at any time by sending an email to the email address of the controller zanna@yaencasa.pro
Changes to the Privacy Policy
We may modify the information contained in this Privacy and Cookies Policy whenever we deem it appropriate. If we do so, we will notify you in different ways through the Platform (for example, through a banner, a pop-up or a push notification), or we will even communicate it to your email address when the change in question is significant for your privacy, so that you can review the changes, evaluate them and, if necessary, object to them or unsubscribe from any service or functionality. In any case, we suggest that you review this Privacy and Cookies Policy from time to time in case there are minor changes or we introduce any interactive improvements.