Stratgranat, S.L., a Spanish company, with VAT number B-86907953, and registered office at Gran Vía, 6, Ibercenter, 28013 Madrid, Spain (hereinafter, “the Company”, “we” or “us”), hereby informs you about how we collect, use and disclose personal data from and about you, through this website (the “Website”).
Address: Gran Vía, 6, Ibercenter, 28013 Madrid, Spain
SCOPE OF APPLICATION AND RESPONSIBILITY
TYPE OF DATA COLLECTED BY THE COMPANY
USE OF DATA COLLECTED BY THE COMPANY
PURPOSE OF DATA PROCESSING AND LEGAL BASIS
RETENTION PERIODS FOR PERSONAL DATA
TYPE OF DATA PROCESSING
ACCESS TO YOUR PERSONAL DATA AND INTERNATIONAL DATA TRANSFERS
ELIGIBILITY FOR REGISTRATION AND ACCOUNT SECURITY
RIGHTS OF DATA SUBJECTS
1. SCOPE OF APPLICATION AND RESPONSIBILITY
The Company is the data controller of the personal data (e.g. information that identifies a specific person, such as full name or e-mail address) we collect from and about you through our services.
2. TYPE OF PERSONAL DATA COLLECTED BY THE COMPANY
The Company collects the following types of data from and about you:
b) Information submitted to the Company through a contact form. There is a contact form on the Website for inquiries, suggestions and/or professional matters. If you contact us through this online form, we will use your e-mail address to reply you and send you the information requested by you, as the case may be.
3. USE OF DATA COLLECTED BY THE COMPANY
We use the personal data we collect from and about you to:
a) Provide the Company services and features to you;
b) Provide you with customer support and to respond to inquiries;
c) Comply with the law or legal process or respond to requests from public and government authorities;
d) Measure and improve those Company services and features;
e) Protect the rights of the Company and others, such as Company affiliates or their employees, agents, contractors, licensors and suppliers; users of the Company services or members of the public; and Company suppliers;
f) Complete a corporate transaction (e.g. merger, sale, joint venture, assignment, transfer of all or any portion of business, assets or stock regarding the Company, including in connection with any bankruptcy or similar proceedings, among others). If the Company is involved in a merger or transfer of all or a material part of its business, the Company may transfer your information to entity or entities involved in the transaction as part of said transaction;
g) Upon your prior consent send you via e-mail offers, promotions and other marketing communications regarding the Company’s services and products; and,
h) Take note of your interest to join the Company as an expert.
We may use anonymized personal data or information that does no longer identify you personally, even indirectly (e.g. statistics) for additional purposes or share it with third parties.
4. PURPOSE OF DATA PROCESSING AND LEGAL BASIS
Your data is collected and processed by the Company for the following purposes:
5. RETENTION PERIODS FOR PERSONAL DATA
Data collected for the purpose as per Section 3, letters j) is retained a period of 5 years.
At the end of the retention period your personal data will be either cancelled, anonymized or aggregated.
6. TYPE OF DATA PROCESSING
The data is processed through both electronic and manual means, and is protected through adequate security measures, considering the state of art, the costs of implementation and the nature, scope, context and purpose of processing.
In this regard, the Company uses appropriate administrative, technical, personnel and physical measures to safeguard personal data in its possession against loss, theft and unauthorized use, disclosure or modification.
7. ACCESS TO YOUR PERSONAL DATA AND INTERNATIONAL DATA TRANSFERS
The Company may share your personal data to the following categories of recipients in compliance with the applicable legislation:
Companies resulting from corporate transactions possible mergers, demergers, or other transformations.
Competent national authorities for the purpose of complying with applicable laws.
Your personal data may be transferred to countries within and outside the European Economic Area (“EEA”). Some non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards. The full list of these countries is available at http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm. For transfers from the EEA to countries not considered adequate by the European Commission, we have put in place appropriate and suitable safeguards designed to protect your personal data and the transfer of your personal data in compliance with applicable data protection laws, such as standard contractual clauses adopted by the European Commission as per Articles 45 and 46 of the GDPR.
8. ELIGIBILITY FOR REGISTRATION AND ACCOUNT SECURITY
The registration on the Website is limited to users aged eighteen (18) years and above. An authentication mechanism does not allow the registration of those who do not expressly accept though a checkbox their majority of age. By registering yourself on the Website, you warrant that you are of legal age.
You are responsible for maintaining the confidentiality of your password and are responsible for any use of your account. It is therefore critical that you do not share your password with anyone. You agree not to use the account, username, e-mail address or password of another member or subscriber at any time. You agree to notify the Company immediately if you suspect any unauthorized use of, or access to, your account or password.
9. RIGHTS OF DATA SUBJECTS
According to the GDPR, you have the right, free of charge, in any given time, to:
Revoke the consents granted.
Obtain confirmation about whether the Company is processing personal data concerning the data subject.
Access to your personal data.
Rectify inaccurate or incomplete personal data.
Request the erasure of your data when, among other reasons, the data is no longer necessary for the purposes that was collected
Obtain the restriction of data processing when any of the conditions provided in the data protection regulations are met.
Object to the data processing. In such case, the Company will cease the data processing, except for compelling legitimate reasons, or the exercise or defence of possible claims.
Request the portability of personal data.
To exercise the above-mentioned rights, you may send your request by e-mail at firstname.lastname@example.org or by written communication addressed to Stratgranat, S.L., Gran Vía, 6, Ibercenter, 28013 Madrid, Spain. Please attach a copy of your identity document for the purpose of proving you are the owner of the data.
If you consider that the Company has infringed, or may have infringed, your rights under the applicable data protection regulations, you may lodge a complaint with the relevant Control Authority. In Spain, the Control Authority is the Spanish Data Protection Agency (www.aepd.es), which is located at Calle Jorge Juan, 6, 28001 Madrid (Spain).
11. CONTACT US
Address: Gran Vía, 6, Ibercenter, 28013 Madrid, Spain