This website is owned by PIRITAS DE NAVAJÚN S.L., hereinafter referred to as PIRITAS DE NAVAJÚN S.L. For any queries or to contact us, you may reach us via email at info@piritasdenavajun.com.
1. DATA CONTROLLER
PIRITAS DE NAVAJÚN S.L., with tax identification number (NIF) B26264705 and registered address at Calle Abajo, s/n, 26533 Navajún – La Rioja, Spain, hereinafter PIRITAS DE NAVAJÚN S.L., guarantees the protection of any personal data voluntarily provided by users when communicating with PIRITAS DE NAVAJÚN S.L. through any means, particularly via the website www.piritasdenavajun.com, by completing data collection forms, entering into contractual relationships, or using any service that involves the communication or access to personal data. Such data will be processed in accordance with the European General Data Protection Regulation 679/2016 of 27 April (GDPR) and Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
PIRITAS DE NAVAJÚN S.L. publishes this policy in compliance with the principles of proactive responsibility and transparency, and to demonstrate the data subject’s unequivocal consent.
Any information regarding this matter will be provided via email at info@piritasdenavajun.com.
2. PURPOSE OF PROCESSING
Personal data collected and processed by PIRITAS DE NAVAJÚN S.L. through this website, trade fairs, contracts, events, newsletters, prize draws or any other channels will be appropriate, relevant, and limited to what is necessary in relation to the purposes for which they are processed. These purposes include, but are not limited to:
- For website data collection forms and other voluntary data submissions: The purpose is to respond to specific requests, including queries, newsletter subscriptions, commercial contact, event registration, and the sending of documentation or information related to our services, as well as commercial and/or promotional communications.
- For service provision or contracting: The purpose is to establish and maintain the contractual relationship, in accordance with the nature and characteristics of the contracted service; to maintain historical records; and to conduct research and development activities in this field.
In all cases, personal data will be kept in a manner that allows the identification of data subjects only for as long as necessary to fulfil the purposes for which it was collected. Retention periods may be extended solely for scientific, historical, or statistical research purposes.
3. LEGITIMACY
The legal basis for the processing of personal data by PIRITAS DE NAVAJÚN S.L. varies depending on the specific processing activity, the type of data subject, and the purpose, and includes:
- Consent: This applies to individuals who contact PIRITAS DE NAVAJÚN S.L. to request information, submit queries, subscribe to newsletters, or request training, and who voluntarily provide their personal data. Consent is also the legal basis for purchasing products or services through the website.
- Legitimate interest of the controller or third parties: This applies when contact data is collected through means not listed in the purpose section (e.g., receiving business cards, email enquiries).
The data processed by PIRITAS DE NAVAJÚN S.L. will be those collected through the relevant documentation, provided by the data subject.
If the data has not been obtained directly from the data subject, PIRITAS DE NAVAJÚN S.L. will inform the individual in accordance with the GDPR, including the data source and categories processed.
The data subject is responsible for the accuracy of the information provided. PIRITAS DE NAVAJÚN S.L. reserves the right to exclude any false or unlawful data, without prejudice to other legal actions that may apply.
PIRITAS DE NAVAJÚN S.L. warns that, unless there is a legally established representation, no one may use another person’s identity or provide their personal data. Therefore, users must always provide their own accurate, current, and relevant personal data.
The data subject shall be solely responsible for any direct or indirect harm caused to third parties or to PIRITAS DE NAVAJÚN S.L. by providing data that is false, inaccurate, outdated, inappropriate, or irrelevant. Those who provide third-party data must inform said third party in accordance with the GDPR and will be liable for any consequences of failing to do so.
Services provided by PIRITAS DE NAVAJÚN S.L. are intended for individuals of legal age. Use of the services by minors requires prior authorisation from their parents, guardians, or legal representatives, who shall be responsible for the minor’s actions.
4. DISCLOSURES AND TRANSFERS
Disclosures: PIRITAS DE NAVAJÚN S.L. only shares personal data with third parties when necessary to meet contractual or legal obligations related to the service, with providers or public/private entities essential for the development of the contracted activity, service, or product, such as insurance or transport companies. The data subject consents to these disclosures and may obtain further information about them by exercising their rights.
International Transfers: In the course of its operations, PIRITAS DE NAVAJÚN S.L. uses service providers located outside the European Economic Area (EEA), resulting in the international transfer of data.
Data protection laws in such countries may differ from those in the EEA and may not guarantee the same rights or have a supervisory authority.
The legal basis for such international transfers is the data subject’s consent and/or the controller’s legitimate interest in ensuring the proper provision of services and operations.
The providers used by this organisation and their privacy policies include Google and Microsoft.
5. USER RIGHTS AND COMPLAINT PROCEDURE
Users may exercise their rights regarding their personal data at any time and may withdraw their consent for the purposes described above by sending a written request to PIRITAS DE NAVAJÚN S.L.’s postal address or electronically via email to info@piritasdenavajun.com. In both cases, a copy of an identity document (e.g., ID card or similar) must be included. The main rights recognised are:
- Right of access: To request confirmation of whether PIRITAS DE NAVAJÚN S.L. is processing their data.
- Right to rectification: To request correction of inaccurate data.
- Right to erasure: To request deletion of data in legally applicable cases.
- Right to object: To object to processing, unless justified grounds exist.
- Right to restriction of processing: Data will only be kept for legal claims.
- Right to data portability: To request transfer of their data to a new controller.
For further details on exercising these rights, users may consult the Citizen’s Guide published by the Spanish Data Protection Agency (AEPD).
If a user believes their personal data is being processed unlawfully, they may lodge a complaint:
- With the data controllers at PIRITAS DE NAVAJÚN S.L., or
- With the Spanish Data Protection Agency, at: C/ Jorge Juan, 6, 28001 Madrid, Spain.
6. SECURITY MEASURE
Personal data provided or collected from data subjects under the responsibility of PIRITAS DE NAVAJÚN S.L. is structured into files, whether automated or otherwise. PIRITAS DE NAVAJÚN S.L. maintains a record of processing activities in accordance with current legislation.
For each data processing activity, PIRITAS DE NAVAJÚN S.L. implements appropriate technical and organisational measures to ensure the confidentiality, integrity, availability, and resilience of data. These measures are essential to guarantee data security and to protect against unauthorised or unlawful processing, accidental loss, destruction, or damage.