Privacy policy

1. Identification.

1.1 Tapizados Doñana is the owner of the website located at the Internet address https://www.tapizadosdonana.es and its accounts on social networks (hereinafter, this Website).

1.2. Tapizados Doñana is the owner of the following accounts on social networks:

Facebook. LinkedIn. Google+. Youtube.

1.3. The person accessing this Website (hereinafter, the User), ensures that it has the legal minimum age established by the General Data Protection Regulation (16 years) or by the national regulations that apply to grant the consent in relation to the services of the information society.

1.4. By accessing this Website, the User expressly accepts all the clauses of their legal information, this privacy policy and their cookies policy, as well as all those particular conditions collected for the use of certain services. In case of not accepting any of the aforementioned clauses, the User must refrain from accessing this Website.

2. Treatments of personal data as responsible

2.1. Next, the information regarding the different treatments carried out by Tapizados Doñana as responsible is expanded.

Data provided through the “Contact” section
Who is responsible for the processing of your data?	Tapizados Doñana (more information in point 1.1).
For what purpose do we treat your personal data?	We will treat the information you provide, or authorize access, in order to manage what is indicated in your communication.
How long will we keep your data?	The personal data that you provide us will be kept while your communication is being managed, as long as you maintain the contractual relationship, or during the time necessary to comply with the legal obligations.
What is the legitimacy for the treatment of your data?	The legal basis for the treatment of your data is your freely granted consent.
To which recipients will your data be communicated?	No data will be transferred to third parties, except legal obligation or prior authorization.
What are your rights when you provide us with your data?	You have the right to request access to your personal data, and its rectification or suppression, or the limitation of your treatment, or to oppose the processing, as well as the right to the portability of the data, the right to withdraw the consent at any time, or the right to file a claim with a supervisory authority (more information in point 6).
What data should you necessarily contribute?	You are required to provide the data marked with an asterisk (*), if you do not provide us with such information, you will not be allowed to contact Tapizados Doñana.

Data provided through the section “Work with us” or through the email address [email protected]
Who is responsible for the processing of your data?	Tapizados Doñana (more information in point 1.1).
For what purpose do we treat your personal data?	We will treatthe information you provide, or authorize access, for the purpose of managing candidates to apply for our job offers.
How long will we keep your data?	The personal data you provide will be kept while the request is being handled, as long as the contractual or pre-contractual relationship is maintained, or during the time necessary to comply with the legal obligations.
What is the legitimacy for the treatment of your data?	The legal basis for the treatment of your data is your freely granted consent.
To which recipients will your data be communicated?	No data will be transferred to third parties, except legal obligation or prior authorization.
What are your rights when you provide us with your data?	You have the right to request access to your personal data, and its rectification or suppression, or the limitation of your treatment, or to oppose the processing, as well as the right to the portability of the data, the right to withdraw the consent at any time, or the right to file a claim with a supervisory authority (more information in point 6).
What data should you necessarily provide?	You are obliged to provide the data marked with an asterisk (*), if you do not provide us with such information, you will not be allowed to be part of the list of contacts for the management of candidacies.

Contact through social networks
Who is responsible for the processing of your data?	Tapizados Doñana (more information in point 1.1).
For what purpose do we treat your personal data?	We will treat the information you provide, or authorize access, for the purpose of managing contacts in social networks.
How long will we keep your data?	The personal data that you provide us will be kept while your communication is being managed, as long as you maintain the commercial relationship or during the years necessary to comply with the legal obligations.
What is the legitimacy for the treatment of your data?	The legal basis for the treatment of your data is your freely granted consent.
To which recipients will your data be communicated?	No data will be transferred to third parties, except legal obligation or prior authorization.
What are your rights when you provide us with your data?	You have the right to request the data controller to access the personal data relating to the User, and rectify or suppress it, or limit its treatment, or oppose the processing, as well as the right to the portability of the data, the right to withdraw consent at any time, or the right to submit a claim to a supervisory authority (more information in point 6).
What data should you necessarily provide?	You are not required to provide any information to contact Tapizados Doñana through your social media accounts.

Data provided through the section “We collaborate”
Who is responsible for the processing of your data?	Tapizados Doñana (more information in point 1.1).
For what purpose do we treat your personal data?	We will treatthe information you provide, or authorize access, for the purpose of collaboration managing.
How long will we keep your data?	The personal data that you provide us will be kept while your request is being handled, as long as the contractual or pre-contractual relationship is maintained, or during the time necessary to comply with the legal obligations.
What is the legitimacy for the treatment of your data?	The legal basis for the treatment of your data is your freely granted consent.
To which recipients will your data be communicated?	No data will be transferred to third parties, except legal obligation or prior authorization.
What are your rights when you provide us with your data?	You have the right to request access to your personal data, and its rectification or suppression, or the limitation of your treatment, or to oppose the processing, as well as the right to the portability of the data, the right to withdraw the consent at any time, or the right to file a claim with a supervisory authority (more information in point 6).
What data should you necessarily provide?	You are required to provide the data marked with an asterisk (*), if you do not provide us with such data, the sending will not be allowed.

3. Personal data processing as manager

3.1. The User who signs a contract to provide services with Tapizados Doñana as the person in charge of processing authorizes to process the personal data necessary to provide the requested service.

3.2. For the execution of the benefits derived from the fulfillment of the object of this assignment, those responsible for the treatment will make available to Tapizados Doñana, the personal data necessary to provide the requested service.

3.3. This agreement will last as long as the contractual relationship is maintained. Once the contractual relationship ends, Tapizados Doñana must return the person in charge or transmit to another manager who designates the person responsible for the personal data, and delete any copy that is in their possession. However, TD can keep the data blocked to address possible administrative or jurisdictional responsibilities.

3.4. The person in charge of the treatment and all his staff is obliged to:

Use personal data subject to treatment, or those collected for inclusion, only for the purpose of this assignment. In no case may he use the data for his own purposes.
Treat the data according to the instructions of the controller.
Keep, in writing, a record of all the categories of treatment activities carried out on behalf of the person in charge, which contains:
- The name and contact information of the person in charge or those in charge and of each person responsible for which the person in charge acts.
- The treatment categories carried out by each responsible person.
- A general description of the appropriate technical and organizational safety measures that he is applying.
- Not communicate the data to third parties, unless he has the express authorization of the controller, in the legally admissible cases. If the manager wants to outsource, he has to inform the person in charge and request his prior authorization.
Maintain the duty of secrecy regarding the personal data to which he has had access under this order, even after the contract ends.
Guarantee that the persons authorized to process personal data commit themselves, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be informed accordingly.
Maintain at the disposition of the responsible party the documentation proving compliance with the obligation established in the previous section.
Guarantee the necessary training in terms of protection of personal data of the persons authorized to process personal data.
When the affected persons exercise the rights of access, rectification, deletion and opposition, limitation of the processing and portability of data before the agency, this must be communicated by email to the address of the person responsible. The communication must be made immediately and in no case beyond the working day following the reception of the request, together with, where appropriate, other information that may be relevant to resolve the request.
Notification of data security breaches: Tapizados Doñana will notify the data controller, without undue delay and through his email address, of the security breaches of the personal data in his charge of which he has knowledge, together with all the relevant information for the documentation and communication of the incident. At least the following information will be provided:
- Description of the nature of the violation of the security of personal data, including, when possible, the categories and the approximate number of interested parties affected, and the categories and approximate number of personal data records affected.
- Contact person data to obtain more information.
- Description of the possible consequences of the violation of the security of personal data.
- Description of the measures adopted or proposed to remedy the violation of the security of personal data, including, if applicable, the measures adopted to mitigate the possible negative effects. If it is not possible to provide the information simultaneously, and to the extent that it is not, the information will be provided gradually without undue delay.
Tapizados Doñana, at the request of the responsible person, will communicate in the shortest time possible those violations of data security to the interested parties, when it is likely that the violation poses a high risk to the rights and freedoms of natural persons. The communication must be done in a clear and simple language and must include the elements indicated in each case by the person responsible, at least:
- The nature of the data breach.
- Data of the point of contact of the person in charge or the manager where more information can be obtained.
- Describe the possible consequences of the violation of the security of personal data.
- Describe the measures adopted or proposed by the data controller to remedy the violation of the security of personal data, including, if applicable, the measures adopted to mitigate the possible negative effects.
Provide the responsible party with all the necessary information to demonstrate compliance with their obligations, as well as for the performance of audits or inspections carried out by the person in charge or by another auditor authorized by him.
Implement the necessary technical and organizational security measures to guarantee the confidentiality, integrity, availability and permanent resilience of the treatment systems and services.
Return to the person responsible for the processing the personal data and, if applicable, the media where they are recorded, once the service has been completed.
The return must involve the total erasure of the existing data in the computer equipment used by Tapizados Doñana. However, Tapizados Doñana can keep a copy, with the data duly blocked, as long as responsibilities for the execution of the service can be derived.

3.5. It is the duty of the person Responsible for the treatment:

Deliver to the manager the necessary data so that he can provide the service.
Ensure, prior and throughout the treatment, compliance with the General Data Protection Regulations by Tapizados Doñana.
To supervise the treatment.

4. Social Networks

4.1. When the User accesses the accounts of Tapizados Doñana on social networks, he / she accepts the processing of their personal data by them according to their privacy policies.

Facebook privacy policy. LinkedIn privacy policy. Google+ privacy policy. Youtube privacy policy.

5. Warranty

5.1. The User guarantees that the information provided is true, accurate, complete and up-to-date, and is responsible for any direct or indirect damage or loss that may be caused as a consequence of the breach of such obligation.

5.2. In the event that the data provided belonged to a third party, the User guarantees that he has informed said third party and obtained his authorization to provide his personal data to Tapizados Doñana.

6. Rights

6.1. Right of access: The User shall have the right to obtain from Tapizados Doñana confirmation of whether or not personal data concerning him or her are being processed and, in such case, right of access to personal data.

6.2. Right of rectification: The User shall have the right to obtain, without undue delay, Tapizados Doñana, the rectification of inaccurate personal data concerning him. Taking into account the purposes of the treatment, the User shall have the right to complete incomplete personal data, including by means of an additional declaration.

6.3. Right of withdrawal: The User shall have the right to obtain without undue delay Tapizados Doñana the deletion of personal data concerning him, which shall be obliged to remove without undue delay the personal data.

6.4. Right to the limitation of the treatment: The User shall have the right to obtain from Tapizados Doñana the limitation of the processing of the data.

6.5. Right to data portability: The User shall have the right to receive the personal data that is incumbent on him, that he has provided to Tapizados Doñana, in a structured format, of common use and mechanical reading, and to transmit them to another person responsible for the treatment without prevent the person responsible to those who have provided them.

6.6. Right of opposition: The User shall have the right to object at any time, for reasons related to their particular situation, to the fact that personal data concerning him or her are subject to processing. Tapizados Doñana will stop treating personal data, unless it proves legitimate compelling reasons for the treatment that prevail over the interests, rights and freedoms of the User, or for the formulation, exercise or defense of claims.

6.7. Automated individual decisions, including the preparation of profiles: The User shall have the right not to be the subject of a decision based solely on automated processing, including the preparation of profiles, which produces legal effects on him or which significantly affects him in a similar way.

6.8. Right to withdraw consent: The User shall have the right to withdraw his consent at any time. The withdrawal of consent will not affect the legality of the treatment based on the consent prior to its withdrawal. It will be as easy to withdraw the consent as it is to give it.

6.9. The User can exercise their rights before Tapizados Doñana by writing to Tapizados Doñana through the email address [email protected]

6.10. More information about these rights here.

7. Languages

7.1. In the case of difficulty of understanding or disagreement between the parties by reason of any of these clauses, the interpretation of the Spanish version shall prevail.