This Privacy Policy aims to provide users of the website [Website Name] with information about how [Company Name] will process the personal data collected through it, as well as the rights granted to users under the General Data Protection Regulation (GDPR) and the Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
If you have any questions regarding the processing of your personal data, please contact [Company Name] at the following address: [Email Address] or by postal mail at: [Postal Address].
The data controller responsible for processing the personal data of users of the website is [Company Name], whose contact details are:
Name: [Company Name]
Tax Identification Number (NIF): [NIF]
Postal Address: [Postal Address]
Phone Number: [Phone Number]
Email Address: [Email Address]
Personal data may be collected through the forms provided on the website or through the use of the website itself.
All fields marked with an asterisk (*) in the website forms are mandatory; failure to complete any of them may result in the inability to provide the requested services or information.
The forms include a checkbox to accept this Privacy Policy. By checking this box before submitting the form, the user consents to the processing of their data as outlined herein.
Additionally, data may be collected via email and/or phone calls from users, in which case, the data will be processed to manage and address their communications and requests, and through browsing for analytical purposes.
Users must provide truthful information. To ensure that the information provided is always up-to-date and accurate, users should promptly notify [Company Name] of any changes or corrections to their personal data via email at [Email Address].
By clicking the “Accept” (or equivalent) button in the aforementioned forms, users declare that the information and data provided are accurate and truthful.
If a user does not wish for their personal data to be processed, they should refrain from completing the forms on the website and/or submitting their data requesting information.
This Privacy Policy includes a table identifying, for each of the different data processing activities carried out by [Company Name] through its website, the following information:
a) Purposes of Data Processing: The reasons why [Company Name] processes users’ personal data.
b) Legal Bases for Processing: The legal grounds that allow [Company Name] to process users’ personal data for each of the purposes indicated.
c) Possible Data Sharing with Third Parties: Whether users’ data will be shared with third parties, and the reasons for such sharing.
d) Data Retention Period: The duration for which users’ personal data will be retained.
e) Users’ Rights: Information about users’ rights regarding their personal data, including the right to access, rectify, delete, or object to the processing of their data.
| Processing | Purpose | Legal Basis | Recipients | Retention |
|---|---|---|---|---|
| Contact Form | Handling inquiries or requests. | Legitimate interest of __________ in responding to user inquiries and requests (Art. 6.1(f) GDPR) | Data will not be shared with third parties, except when required by law. However, technology service providers may have access to them. Relevant Data Processing Agreements have been signed with these providers. | Data will be retained for as long as necessary to fulfill the purposes and to determine responsibilities. |
__________ informs the user that they may exercise the following rights:
I. The right of access to their data, to know which data is being processed and the processing operations carried out;
II. The right to rectify any inaccurate personal data;
III. The right to delete their personal data;
IV. When the legal basis for processing is consent, the right to withdraw such consent at any time;
V. The right to receive the personal data provided to __________ in a structured, commonly used, and machine-readable format, and to transmit the data to another data controller when processing is carried out by automated means and the legal basis is the data subject’s explicit consent, the execution of a contract, or, in the case of health-related data, if processing is necessary to fulfill labor obligations or risk prevention;
VI. The right to object to the processing of personal data, which may be exercised at any time for reasons related to their personal situation, when the processing is based on the legitimate interests of __________.
Users may exercise their rights at any time and free of charge via the following email: __________ or by postal mail: __________. Requests must be duly signed, include the full name and address of the requester, indicate the rights they wish to exercise, and be accompanied by a copy of their DNI or NIE.
Additionally, users have the right to file a complaint with the Spanish Data Protection Agency if they believe there has been a violation of data protection legislation concerning the processing of their personal data.
__________ will only use data storage and retrieval devices (“Cookies”) when the user has given prior consent, as indicated in the browser pop-up when accessing the website for the first time, and under the terms specified in the __________ Cookies Policy, which all users should review.
__________ warns users that, except in the presence of a legally constituted representative, they may not use another person’s identity or communicate their personal data. Users must ensure that any personal data included via email corresponds to their own identity and is adequate, relevant, current, accurate, and truthful. Users will be solely responsible for any direct or indirect damages caused to third parties or to __________ by using another person’s personal data, or their own personal data when it is false, inaccurate, outdated, inadequate, or irrelevant.
Minors or incapacitated persons may not use the services available through the website without prior authorization from their parents, guardians, or legal representatives, who will be solely responsible for all actions performed through the website on behalf of such minors, including completing forms with their personal data and marking any accompanying checkboxes.
__________ implements security levels required by the GDPR appropriate to the nature of the data being processed at any given time. Nonetheless, technical security on the Internet is not infallible, and malicious actions by third parties may occur. __________ makes every effort to prevent such actions.