Privacy policy

DATA CONTROLLER:

GENERAL ESPAÑOLA DE ACCESORIOS, S.A. (GEDASA)

C/ Nápoles, 27-29 – Bajos, CP 08018 – BARCELONA

Tax ID (NIF): A-08977373

Telephone: (34) 93 309 75 22 – (34) 93 309 82 79

GEDASA, as the party responsible for the website, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, other current personal data protection legislation, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organisational security measures to guarantee and protect the confidentiality, integrity and availability of the data entered.

PURPOSE OF PROCESSING

Your personal data will only be used for the following purposes:

– To carry out the necessary commercial and administrative procedures with website users;

– To send commercial and advertising communications by e-mail, fax, SMS, MMS, social communities or any other electronic or physical means, where the User has expressly consented to receiving commercial communications by electronic means by subscribing to the NEWSLETTER;

– To answer queries and/or provide information requested by the User;

– To provide the services and/or products contracted or subscribed to by the User;

– To use your data to contact you, by electronic or non-electronic means, to obtain your opinion on the service provided; and

– To notify you of changes and important developments in the privacy policy, legal notice or cookie policy.

– Profile and usability analyses will be carried out.

– Customer and/or supplier data will be processed, within the contractual relationship that links them with the controller, in compliance with the administrative, tax, accounting and employment obligations required by current legislation.

You may withdraw your consent at any time by sending a written request with the subject “Unsubscribe” to info@gedasa.com

In accordance with the LSSICE, GEDASA does not engage in SPAM practices and therefore does not send commercial e-mails that have not been previously requested or authorised by the User. Consequently, in every communication received from the provider, the user has the possibility of withdrawing their express consent to receive our communications.

We will not process your personal data for any purpose other than those described, except where required by law or court order.

DATA RETENTION

Your data will be kept for as long as the commercial relationship with us lasts or until you exercise your right to erasure, objection or restriction of processing. However, we will keep certain identifying and traffic personal data for a maximum of 2 years in case it is required by the Courts and Tribunals or to bring internal actions arising from misuse of the website.

You will not be subject to decisions based on automated processing that produce effects on your data.

LEGAL BASIS FOR PROCESSING

The legal basis for processing the data is the consent you give to carry out the purposes described above, which will be requested when you tick the corresponding box at the time your data is collected.

Failure to provide the requested personal data or to accept this data protection policy makes it impossible to subscribe, register or receive information about the Provider's products and services.

Where there is a prior contractual relationship between the parties, the legal basis for carrying out the administrative, tax, accounting and employment obligations required by current legislation will be the prior existence of the commercial relationship established between the parties. Where there is a prior contractual relationship between the parties, the legal basis for carrying out the administrative, tax, accounting and employment obligations required by current legislation will be the prior existence of the commercial relationship established between the parties.

COMMUNICATIONS

Any communication sent will be incorporated into GEDASA's information systems. By accepting these terms, conditions and policies, the User expressly consents to GEDASA carrying out the following activities and/or actions, unless the User indicates otherwise:

• Sending commercial and/or promotional communications by any available means, informing Users of activities, services, promotions, advertising, news, offers and other information about the services and products related to the business.

• Where the User has expressly consented to receiving commercial communications by electronic means by subscribing to the NEWSLETTER, sending such communications by electronic means informing Users of activities, services, promotions, advertising, news, offers and other information about GEDASA services and products that are the same as or similar to those initially contracted or of interest to the User.

• Keeping the data for the periods provided for in the applicable provisions.

OFFICIAL MEANS OF COMMUNICATION

The user is informed that the means enabled by the company to communicate with customers and other data subjects are the corporate telephone, company mobile phones and corporate e-mail.

If you send personal information through a means of communication other than those indicated in this section, GEDASA will be exempt from liability in relation to the security measures of the means in question.

RECIPIENTS OF DISCLOSURES OR TRANSFERS

GEDASA does not disclose or communicate data unless there is a reasonable need to comply with legal proceedings, a legal obligation or with the user's prior consent.

Nor will international transfers of your personal data be made without your prior consent, notwithstanding the possibility of blocking or cancelling your account if there are signs that the user has committed an offence. The information provided will only be that held by the provider at that time.

GEDASA will not disclose the data collected to third parties unless there is a reasonable need to comply with legal proceedings, a legal obligation or with the user's prior consent.

The information you provide to us through this website or through the application will be hosted on GEDASA's servers contracted from the company XXXXXX with Tax ID XXXXXXXX. The processing of data by that entity is governed by a data processing agreement between the provider and that company. Under no circumstances will this data processor subcontract services involving any processing of data by third parties without our prior consent.

RIGHTS OF DATA SUBJECTS

As a user and data subject, you may request to exercise the following rights before GEDASA by submitting a written request to the postal address in the heading or by sending an e-mail to info@gedasa.com, with the subject “GDPR, EXERCISE OF RIGHTS”, and attaching a photocopy of your national ID card or any equivalent legal document, as required by law.

Rights:

• Right of access: allows the data subject to know and obtain information about their personal data being processed.

• Right to rectification or erasure: allows errors to be corrected and data that is inaccurate or incomplete to be modified.

• Right to cancellation: allows data that is inadequate or excessive to be deleted.

• Right to object: the data subject's right to have their personal data not processed, or to have its processing stopped.

• Restriction of processing: involves marking the personal data held in order to restrict its future processing.

• Data portability: providing the data being processed to the data subject so that they can transmit it to another controller without hindrance.

• Right not to be subject to automated individual decisions (including profiling): the right not to be subject to a decision based on automated processing that produces effects on you or significantly affects you.

As a user, you have the right to withdraw your consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with the supervisory authority if you consider that your rights in relation to the protection of your data may have been infringed (agpd.es).

ADDITIONAL INFORMATION

INFORMATION WE COLLECT:

The data collected by the controller is as follows:

– Data that users provide through the different services offered on the website

– Data included in the different forms provided on the website

– Data collected through “cookies” to improve the browsing experience, as explained in the cookie policy.

Refusal to provide the mandatory data will make it impossible to deal with the specific request concerned. You declare that the information and data you provide are accurate, current and true. Should they change, please let us know immediately so that the information being processed is always up to date and free of errors.

If you contract the service/buy the product through our website http://www.ag-group.es/ we will ask you to provide information about yourself, including your name, contact details and credit or debit card information.

Through this Privacy Policy we inform you that the photographs posted on the website are the property of GEDASA, including those of minors, for which the prior consent of parents, guardians or legal representatives has been obtained by signing the forms drawn up for this purpose by the centres the minors belong to. However, the parents, guardians or representatives of minors, as holders of the exercise of their rights, and always following a formal written request, may refuse the use of the minor's image; in this case, the image will be shown pixelated.

SOCIAL NETWORKS

We inform you that GEDASA may have a presence on social networks. The processing of data of people who become followers of the official GEDASA pages on social networks (and/or make any link or connection through social networks) will be governed by this section, as well as by the terms of use, privacy policies and access rules of the social network concerned in each case, previously accepted by the user.

GEDASA will process your data in order to properly manage its presence on the social network, inform you of the provider's activities, products or services, and for any other purpose permitted by the rules of the Social Networks.

The publication of the following content is prohibited:

– Content that is allegedly unlawful under national, EU or international law, or that carries out allegedly unlawful activities or contravenes the principles of good faith.

– Content that violates people's fundamental rights, breaches online courtesy, is offensive or may generate negative opinions among our users or third parties and, in general, any content that GEDASA considers inappropriate.

– And, in general, content that contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of privacy, consumer protection and intellectual and industrial property rights.

Likewise, GEDASA reserves the right to remove from the website or the corporate social network, without prior notice, any content considered inappropriate.

Communications sent through social networks will be incorporated into a file owned by GEDASA, which may send you information of interest to you.

In any case, if you send personal information through the social network, GEDASA will be exempt from liability in relation to the security measures applicable to that platform, and users who wish to know them should consult the specific terms of the network in question.

SECURITY MEASURES:

The data you provide will be treated confidentially. The Provider has adopted all the technical and organisational measures and all the levels of protection necessary to guarantee the security of data processing and prevent its alteration, loss, theft, processing or unauthorised access, in accordance with the state of the art and the nature of the data stored. It is also guaranteed that processing and recording in files, programs, systems or equipment, premises and centres comply with the integrity and security requirements and conditions established in current legislation.

LANGUAGE

The language applicable to this Privacy Policy is Spanish. Therefore, should there be any contradiction between any of the versions provided in other languages, the Spanish version shall prevail.

CHANGES TO THIS PRIVACY POLICY

GEDASA reserves the right to modify this policy to adapt it to new legislation or case law.

LEGISLATION

For all purposes, the relations between GEDASA and the Users of its online services on this website are subject to Spanish law and jurisdiction, to which the parties expressly submit, with the Courts and Tribunals of the city of Barcelona having jurisdiction to resolve any disputes arising from or related to their use.