Respecting the current legislation, www.bypauladelgado.com (from now on also referred to as the website) commits to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected.
Laws included in this privacy policy
This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it respects the following rules:
- (EU) Regulation 2016/679 of the European Parliament and of the 27th of April 2016 Council, regarding the protection of physical persons with regard to the processing of personal data and the free circulation of this data (RGPD)
- 5th December Organic Law, 3/2018, on the protection of personal data and guarantee of digital rights (LOPD-GDD).
- 11th July, Law 34/2002, on services of the Societal Services of the information and Electronic Commerce (LSSI-CE).
Information of person responsible:
- Full Name: Paula Sofie Delgado Ray
- Commercial Name: Paula Delgado
- NIF/CIF: 45351573-C
- Address: C/Aragón, nr.12, 35210 Telde, Gran Canaria
- E-mail Address: paula@bypauladelgado.com
- Activity: Commerce
Personal Data Records
In compliance with the RGPD and the LOPD-GDD, we inform you that personal data collected by www.bypauladelgado.com through the forms submitted on its pages will be incorporated and will be kept in our files in order to facilitate, expedite and fulfil the commitments established between www.bypauladelgado.com and the user or the level of relationship established in the forms that are filled out or to attend to a particular request or query of said individual.
Likewise, respecting the RGPD and the LOPD-GDD, unless the exception in section 30.5 of the RGPD applies, an activity record is kept that specifies, according to their purposes, activities carried out and other information established in the RGPD.
Principles applicable to the process of Personal data
The use of the user’s personal data will be subject to the following principles stated in section 5 of the RGPD and in section 4 as well as the 5th December Organic Law 3/2018, on the Protection of Personal Data and guarantee of digital rights:
- Legality, loyalty and transparency principle: the consent of the user will be required at all times, prior complete transparency regarding the purposes for which the personal data is collected.
- Purpose limitation principle: Personal data will be collected for specific, explicit and legitimate purposes.
- Data minimization principle: The personal data collected will only be those strictly necessary in relation to the purposes for which they are used.
- Accuracy principle: Personal data must always be accurate and up-to-date.
- Limitation of the conservation period principal: Personal data will only be kept in a way that allows to identify the user for the time necessary for use purposes.
- Integrity and Confidentiality principle: Personal data will be treated in a way that guarantees its security and confidentiality.
- Proactive responsibility principle: The individual managing the data will be responsible for ensuring that the above principles are met.
Personal Data Categories
The data categories that are managed in www.bypauladelgado.com are only identifying data. Special categories of personal data processed in relation to section 9 of the RGPD are not managed under any circumstances.
Legal basis for processing Personal Data
The legal basis for processing personal data is consent. www.bypauladelgado.com commits to obtain specific and verifiable consent of the user in order to process their personal data for one or more specific purpose.
The Users will have the right to withdraw their consent at any time. It will be as easy to withdraw consent as it is to give it. As a general rule, the withdrawal of consent will not condition the use of the website.
On the occasions in which the user must or may provide their data through forms to make inquiries, request information or for reasons related to the content of the website, they will be informed in the event that the completion of any of them is mandatory due to being essential for the correct development of the operation carried out.
What type of data does www.bypauladelgado.com collect from its customers and Users of the website ?
www.bypauladelgado.com collects the following personal information:
- Contact Form:
Purpose: To provide you with a means by which you can contact us and answer your requests for information.
Legitimation: The Users consent when requesting information from us through our contact form and by checking the acceptance box.
Conservation: Your request will be kept until your query made through our form or e-mail has been answered and solved.
- Online Shop:
Purpose: To process orders made via our website.
Legitimation: User’s consent when providing their info in the purchase order
Conservation: The info will be kept for the time necessary by legal prescription.
- Curriculum vitae via e-mail:
Purpose: To have your resume in our employee selection process.
Legitimation: The consent of the Users when sending us their personal information and CV for our employee selection process.
Conservation: During the period of time the employee selection is open and up to a maximum of 2 years for future positions.
Obligation to provide us with your personal information and consequences of not doing so.
The personal info requested is necessary to manage your requests and/or provide the services you ask for, therefore if you do not provide them, we will not be able to serve you correctly or to provide the services which you have requested from us.
Recipients of personal data
The Users personal info will not be shared with any other entity:
Should the person responsible of the data protection intend to share User’s personal data with third countries or international organizations, this will be notified to the Users at the time of receiving the data. The User will be informed about the third country or international organization the data will be shared with, as well as the existence or absence of an adequacy decision of the Commission.
Minors Personal Data
Respecting what it is established in section 8 of the RGPD and 7 of Organic Law 3/2018 of December 5th regarding the protection of personal data and guarantee of digital rights, only those over 14 years of age may give their consent to share personal data lawfully with www.bypauladelgado.com.
If the individual is under 14 years old, consent from parents or a tutor will be necessary, and this will only be considered lawful to the extent that they have authorized it.
Discretion and security of personal data
www.bypauladelgado.com commits to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, so as to guarantee the security of personal data to avoid destruction, loss or accidental or illegal alternation of personal data shared, stored or used in any other way, or unauthorized access to said data.
However, because www.bypauladelgado.com cannot guarantee the impregnability of the internet or the total absence of hackers or others who fraudulently access personal data, the individual managing the data commits to notify the User without delay when a personal data security breach occurs that is likely to pose a high risk to the rights and freedom of a physical person.
Following what is stated in section 4 of the RGPD, a violation of the security of personal data is considered to be any breach of security that causes the destruction, loss, accidental or illegal alteration of personal data shared, stored or used in any other way, or the unauthorized access to said data.
The personal data will be treated as confidential by the individual responsible for managing it, who commits to guarantee, through a legal or contractual obligation, that said confidentiality is respected by employees, associates, and any individual to whom the information is accessible to.
Rights derived from managing personal data
The User may exercise the following rights against the person responsible of the data, which are recognized in the RGPD and in the 5th December Organic Law 3/2018, on the Protection of Personal Data and guarantee of digital rights
- Right of access: It is the Users right to obtain confirmation of whether or not www.bypauladelgado.com is using their personal data and, if so, obtain information about their specific personal data and how www.bypauladelgado.com uses said data, as well as, among other things, the information available on the origin of said data and the actions made and/or planned.
- Right to rectify: It is the Users right to modify inaccurate or incomplete personal data.
- Right of deletion (“the right to be forgotten”): It is the Users right , provided that current legislation does not establish otherwise, to remove their personal data when they are no longer necessary for the purposes for which they were collected or used; The User has withdrawn their consent to its use and this does not have another legal basis; The User opposes to its use and there is no other legitimate reason to keep it; the personal data has been unlawfully used; personal data must be deleted in compliance with a legal obligation; or the personal data has been obtained by Society Information Services from a minor under the age of 14.
In addition to deleting the data, the individual responsible for managing the data, taking into account the available technology and the cost of its use, must implement reasonable measures to inform those responsible of using personal data of the interested party’s request to delete any link to said personal data.
- Right to limit the use: It is the Users right to limit the use of their personal data. The User has the right to be granted the limitation of use when personal data is inaccurate; the use is unlawful; the individual responsible for its use no longer needs the personal data but the User needs it to make claims; and when the User has opposed to its use.
- Right to transfer the data: In the event that the data is used by automated means, the User will have the right to receive their personal data from the individual responsible in a structured format, of common use and mechanical reading, and to send them to another individual responsible. Whenever it is technically possible, the data controller will directly transfer the data to that other controller.
- Right of objection: It is the Users right not have their personal data used or to stop its use by www.bypauladelgado.com .
- Right to not be the subject of a decision based solely on automated processing, including profiling: It is the Users right not to be subject to an individualized decision based solely on automated processing of their personal data, including the preparation of profiles, unless current legislation establishes otherwise.
Thus, the Users may exercise their rights, via written communication addressed to the Individual responsible of the data, with the reference “RGPD-bypauladelgado.com” specifying:
- Name, Surname of the user and a copy of their ID or alternative identity card. In the cases where representation is admitted, it will be necessary to carry out the same process by the person representing the User, as well as the document proving the representation. The photocopy of the ID or alternative identity card may be replaced by any other legally valid means that proves identity.
- Request with the specific reasons for the request or information to which you want to access.
- Address for notification purposes.
- Date and signature of the applicant.
- Any document that proves the request you make.
This request and any other attached document may be sent to the following address and/or e-mail:
Postal address: Paula Sofie Delgado Ray, C/Aragón 12, 35210 Telde, Gran Canaria
E-mail: paula@bypauladelgado.com
Links to third party websites
The website may include hyperlinks or links that allow access to web pages of third parties other that www.bypauladelgado.com, and that therefore are not operated by www.bypauladelgado.com . The owners of these websites will have their own data protection policies, being responsible for their own files and their own privacy practices.
Claims before the supervisory authority
In the event that the User considers that there is a problem or violation of the current regulations in the way their personal data has been used, they will have the right to effective judicial protection and to file a claim with the authority under control, in particular, in the state in which you have your usual place of residence, place of work or place of alleged offense. If it takes place in Spain, the authority under control is the Spanish Data Protection Agency (http://www.aepd.es).
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
It is necessary for the User to read and agree with the conditions on the protection of personal data contained in this Privacy and Cookies Policy, as well as accepting the processing of their personal data so that the individual responsible of its use can proceed, during the deadlines and for the purposes indicated. The use of the website will imply the acceptance of the Privacy and Cookies Policy.
www.bypauladelgado.com reserves the right to modify its Privacy and Cookies Policy, according to its own criteria, or motivated by a legislative, jurisprudential or doctrinal change of the Spanish Agency of Data Protection. Changes or updates to this Privacy and Cookies Policy will not be explicitly notified to the user. The user is recommended to consult the page periodically to be aware of the latest changes or updates.
This Privacy and Cookies Policy was updated on 10th January, 2020 to adapt to the (EU) Regulation 2016/679 of the European Parliament and of the Council, of 27th April 2016, regarding the use of personal data and the free circulation of this data (RGPD) and 5th December 3/2018 Organic Law, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD).
