PASTIOLOT is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by PASTIOLOT implies the acceptance by the user of the provisions contained in this Privacy Policy and that their personal data will be treated as stipulated therein. Please note that although there may be links from our website to other websites or social networks, this Privacy Policy does not apply to the websites of other companies or organisations to which the website redirects. PASTIOLOT does not control the content of third party websites, nor does it accept any responsibility for the content or privacy policies of these websites.

Basic information on data processing (Regulation (EU) 2016/679 and LO 3/2018)

• Data controller: PASTIOLOT. Our data can be found in the legal notice of this website.

• Purpose of processing: To offer and manage our products and/or services.

• Legal standing: Consent obtained from the data subject. Execution of the service contract.

• Beneficiaries: The data will not be communicated to third parties, unless required by law or necessary to fulfil the purpose of the processing.

• Rights of individuals: Data subjects are entitled to exercise their rights of access, rectification, limitation of processing, erasure, portability and objection by sending their request to our address.

• Data retention period: For as long as the business relationship continues or for as many years as necessary to comply with legal obligations.

• Complaints: Data subjects may contact the AEPD to file any complaint they deem appropriate.

• Additional information Additional detailed information can be found below in the “Privacy Questions”.

PRIVACY QUESTIONS

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) we provide you with the following information on the processing of your personal data:

Who is responsible for the processing of your data?

PASTIOLOT.
Our data can be found in the legal notice of this website.

For what purposes do we process your personal data?

• We process the information provided to us in order to provide and invoice our services and products.

• If you give us your consent, we may also process your data to send you information about our activities, services and products.

• If you participate in any of our draws and/or competitions, we will publish your name and surname, and your image, in the different spaces and means of communication and dissemination that we use, including social networks, in order to promote our activities, services and products.

How long will we keep your data?

The personal data provided will be retained for as long as you are a user of our services or wish to receive information, and if you participate in a promotion for as long as it is active, and then for as long as necessary to comply with our legal obligations.

What is the legal basis for the processing of your data?

The legal basis for the processing of your data is the consent you give us.

With regard to information sent to us by minors under 16 years of age, it will be understood that it has been sent with the consent of their legal representatives. If this is not the case, the legal representative of the minor must inform us as soon as they become aware of it.

To whom will your data be communicated?

The data will not be communicated to third parties, unless required by law or necessary to fulfil the purpose of the processing.

What are your rights when you provide us with your data?

• Any person has the right to obtain confirmation as to whether or not we are processing their personal data.

• Data subjects have the right to access their personal data, as well as to request the correction of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

• In certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims.

• Also, in certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data.

• Data subjects also have the right to data portability.

• Finally, data subjects have the right to lodge a complaint with the competent supervisory authority.

How can you exercise your rights?

By sending a letter with a copy of a document that identifies you to our physical or e-mail address.

How did we obtain your data?

The personal data that we process comes from the data subject. The data subject guarantees that the personal data provided are true and is responsible for communicating any changes to them. The data marked with an asterisk are obligatory in order to be able to provide the requested service.

What data do we process?

The categories of data that we may process in the provision of our services are:

• Identifying data

• Postal or e-mail addresses

• Other data requested in our forms

The data is limited, as we only process the data necessary for the provision of our services and the management of our business.

Do we use cookies?

We use cookies while browsing our website with the user’s informed consent. The user can configure their browser to be notified of the use of cookies and to prevent their use. For more information visit our cookie policy.

What security measures do we apply?

We apply the security measures established in article 32 of the GDPR, therefore, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability and permanent resilience of the processing systems and services.

Some of these measures include:

• Information on data processing policies to staff.

• Carrying out regular backups.

• Controlling access to data.

• Regular verification, evaluation and assessment processes.