Privacy policy

I. PRIVACY AND DATA PROTECTION POLICY

Respecting the provisions of current legislation, Alejandro Vega Beuvrin (hereinafter, also the Website) undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.

Laws incorporated into this privacy policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it complies with the following rules:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of December 21, approving the Regulations for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the person responsible for processing personal data

The controller responsible for the processing of personal data collected at Alejandro Vega Beuvrin is: Alejandro Vega Beuvrin, with NIF: Y0045328D (hereinafter, Data Controller). The contact details are as follows:

Personal Data Registry

In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by Alejandro Vega Beuvrin through the forms on its pages will be incorporated and processed in our file in order to facilitate, expedite, and fulfill the commitments established between Alejandro Vega Beuvrin and the User, or to maintain the relationship established in the forms filled out, or to respond to a request or inquiry. Furthermore, in accordance with the GDPR and the LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying the processing activities carried out and other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data shall be subject to the following principles set forth in Article 5 of the GDPR and in Article 4 and following of Organic Law 3/2018:

  • Principle of lawfulness, fairness, and transparency: The User’s consent will be required at all times after providing completely transparent information on the purposes for which the personal data are collected.
  • Principle of purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
  • Principle of data minimization: The personal data collected will be only what is strictly necessary in relation to the purposes for which they are processed.
  • Principle of accuracy: Personal data must be accurate and always kept up to date.
  • Principle of limitation of the storage period: Personal data will only be kept in a way that allows the identification of the User for the time necessary for the purposes of its processing.
  • Principle of integrity and confidentiality: Personal data will be processed in a way that guarantees its security and confidentiality.
  • Principle of proactive responsibility: The Data Controller shall be responsible for ensuring that the above principles are met.

Categories of personal data

The categories of data processed by Alejandro Vega Beuvrin are strictly identifying data. Under no circumstances are special categories of personal data (as defined in Article 9 of the GDPR) processed.

Legal basis for the processing of personal data

The legal basis for processing personal data is consent. Alejandro Vega Beuvrin undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes. The User shall have the right to withdraw their consent at any time. It shall be as easy to withdraw consent as it is to give it. As a general rule, the withdrawal of consent will not condition the use of the Website.

Purposes of the processing of personal data

Personal data are collected and managed by Alejandro Vega Beuvrin to facilitate and fulfill the commitments established between the Website and the User, or to maintain the relationship established in the forms, or to address a request or inquiry.

Additionally, the data may be used for commercial personalization, operational, and statistical purposes, as well as for marketing studies to adapt the Content offered to the User and improve the quality, operation, and navigation of the Website.

Retention periods for personal data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, only for the following period: 18 months, or until the User requests its deletion.

Recipients of personal data

The User’s personal data will not be shared with third parties. In any case, at the time the personal data are obtained, the User will be informed about the recipients or categories of recipients of the personal data.

Personal data of minors

Respecting the provisions of the GDPR and Organic Law 3/2018, only those over 14 years of age may give their consent for the lawful processing of their personal data by Alejandro Vega Beuvrin. If the user is under 14, the consent of parents or guardians is required, and processing will only be considered lawful to the extent that they have authorized it.

Security and secrecy of personal data

Alejandro Vega Beuvrin undertakes to adopt the necessary technical and organizational measures to guarantee the security of personal data and prevent its accidental or unlawful destruction, loss, or alteration. However, since the infallibility of the internet cannot be guaranteed, the Data Controller undertakes to notify the User without undue delay in the event of a security breach likely to entail a high risk to the rights and freedoms of individuals.

Rights derived from the processing of personal data

The User may exercise the following rights against the Data Controller:

  • Right of access: Right to confirm if their data is being processed and obtain specific information about it.
  • Right of rectification: Right to modify inaccurate or incomplete data.
  • Right of erasure (“the right to be forgotten”): Right to obtain the deletion of data when it is no longer necessary or the consent is withdrawn.
  • Right to restriction of processing: Right to limit the use of the data under certain legal circumstances.
  • Right to data portability: Right to receive data in a structured format and transmit it to another controller.
  • Right to object: Right to prevent or stop the processing of their personal data.
  • Right not to be subject to automated decision-making: Right not to be the subject of a decision based solely on automated processing, including profiling.

To exercise these rights, the User must send a written communication to the Data Controller with the reference “GDPR-www.vegabeuvrin.com”, specifying their request, name, and a copy of their ID, to:

Links to third-party websites

The Website may include hyperlinks or links to third-party websites not operated by Alejandro Vega Beuvrin. The owners of such websites will have their own data protection policies, being responsible for their own files and privacy practices.

Complaints to the supervisory authority

If the User considers that there is an infringement of current regulations, they have the right to file a claim before a supervisory authority, specifically the Spanish Data Protection Agency (AEPD) at www.aepd.es.

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary for the User to have read and agreed to the conditions contained in this Privacy Policy. Use of the Website implies acceptance of this policy. Alejandro Vega Beuvrin reserves the right to modify this policy according to its own criteria or legislative changes. Users are recommended to consult this page periodically.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPD-GDD).