1. USER INFORMATION
DANIËL ELKAN GROOTHUIS, as the Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5, on Data Protection and the Guarantee of Digital Rights (LOPDGDD), your personal data will be processed as described in this Privacy Policy.
In this Privacy Policy, we explain how we collect your personal data and why we do so, what we do with it, with whom we share it, how we protect it, and your rights regarding the processing of your personal data.
This Policy applies to the processing of your personal data collected by the company for the provision of its services. By accepting the terms of this Policy, you consent to the processing of your personal data as described herein.
2. CONTACT INFORMATION
Company name: DANIËL ELKAN GROOTHUIS
Trade name: Ember
Tax ID: Z0486617B
Address: CASTIELLO DE SELORIO 5, 33316 SELORIO, ASTURIAS
Email: [email protected]
3. KEY PRINCIPLES
We have always been committed to providing our services with the highest level of quality, which includes handling your data securely and transparently. Our core principles are:
- Legality: We only collect your personal data for specific, explicit, and legitimate purposes.
- Data Minimization: We collect only the personal data that is strictly necessary for the purposes for which it is collected.
- Purpose Limitation: We only collect your personal data for the declared purposes and only according to your wishes.
- Accuracy: We keep your personal data accurate and up to date.
- Data Security: We apply appropriate technical and organizational measures in line with the risks to ensure that your data is not subject to unauthorized disclosure or access, accidental or unlawful destruction, accidental loss or alteration, or any other unlawful processing.
- Access and Rectification: We provide you with the means to access or correct your data whenever you deem it necessary.
- Retention: We retain your personal data lawfully and appropriately and only for as long as necessary for the purposes for which it was collected.
- International Transfers: When your data is transferred outside the EU/EEA, it will be adequately protected.
- Third Parties: Access to and transfer of personal data to third parties is carried out in accordance with applicable laws and regulations and with the appropriate contractual guarantees.
- Direct Marketing and Cookies: We comply with applicable laws on advertising and cookie usage.
4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA
The types of personal data that may be requested and processed include:
- Identifying data.
We also automatically collect data about your visit to our website, as described in the cookie policy.
Whenever we request your personal data, we will clearly inform you of what personal data we collect and for what purpose. In general, we collect and process your personal data for the following purposes:
- To provide information, services, products, relevant news, and updates in the industry.
- To send communications.
5. LEGITIMACY
According to applicable data protection regulations, your personal data may be processed if:
- You have given us your consent for the specific purposes of the processing. You may withdraw your consent at any time.
- It is required by law.
- There is a legitimate interest that is not overridden by your privacy rights—for example, for sending commercial information if you are subscribed to our newsletter or are a client.
- It is necessary for the provision of one of our services through a contractual relationship between you and us.
6. DISCLOSURE OF PERSONAL DATA
Data may be shared with companies associated with DANIËL ELKAN GROOTHUIS for the provision of various services as Data Processors. The company will not transfer data to third parties unless legally obligated to do so.
7. YOUR RIGHTS
Regarding the collection and processing of your personal data, you may contact us at any time to:
- Access your personal data and any other information referred to in Article 15.1 of the GDPR.
- Rectify any inaccurate or incomplete personal data, in accordance with Article 16 of the GDPR.
- Erase your personal data, in accordance with Article 17 of the GDPR.
- Restrict the processing of your personal data, in accordance with Article 18 of the GDPR.
- Request the portability of your data, in accordance with Article 20 of the GDPR.
- Object to the processing of your personal data, in accordance with Article 21 of the GDPR.
If you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on the consent before its withdrawal.
You may exercise these rights by sending a written, justified, and verified request to: [email protected]
You also have the right to file a complaint with the competent supervisory authority (www.aepd.es) if you believe that the processing does not comply with applicable regulations.
8. LEGAL INFORMATION
The requirements of this Policy supplement, and do not replace, any other existing requirement under applicable data protection laws, which shall prevail in any case.
This Policy is subject to periodic review, and the company may modify it at any time. When this occurs, we will notify you accordingly.