Data Privacy Policy

PRIVACY POLICY

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) of 5 December 2018, we hereby inform you of the following:

DATA CONTROLLER

Identity: HUELLAS AMIGAS SL, Tax ID B19768506, hereinafter "the Controller"
Address: C/ Serrano Anguita, nº 10, local; 28004 – Madrid
Phone: 611 863 696
Contact email: nosotrashuellasamigas@gmail.com

PURPOSES OF DATA PROCESSING

The personal data provided by users is processed for the following purposes:

To handle and respond to contact requests, information enquiries, quotes, and any other queries received through the contact channels available on the website.

To manage a registered user account on the website, in order to facilitate and fulfil the commitments established between the Controller and the user, and to maintain the resulting relationship.

To process orders and purchases made through the website, including invoicing and the management of any related incidents.

To facilitate and fulfil any professional relationship established between the Controller and the user.

In accordance with the GDPR, a record of processing activities is maintained which specifies, by purpose, the processing activities carried out and all other relevant circumstances required under the GDPR.

Personal data will not be used for any purpose other than those related to the contracted services or purchased products. No automated decisions will be made based on user profiles.

LEGAL BASIS FOR PROCESSING

The legal basis for the processing carried out is:

The consent given by the user.

The user's provision of personal data in the context of a contractual or pre-contractual relationship, meaning processing is necessary to fulfil that relationship.

Legal obligations applicable to the Controller that require the processing of personal data in connection with the services provided, including tax-related matters.

The user may withdraw their consent to the processing of their personal data at any time. Withdrawal of consent will not affect the provision of services or the execution of any contracts with the Controller.

PERSONAL DATA PROCESSED AND ITS ORIGIN

The personal data we process is identification data provided directly by the user via email or through the functionalities available on the website.

Use of the contact sections, forms, and other website functionalities is voluntary. However, certain fields are required in order to correctly handle your request — if you choose not to provide this information, the Controller will be unable to process your enquiry.

The user guarantees that the data provided is accurate, complete, and up to date. Data will be cancelled, deleted, or blocked if found to be inaccurate, incomplete, or no longer necessary. If personal data relating to a third party is provided, the user confirms they have informed that person of this Privacy Policy and obtained their consent. The user is responsible for any damages arising from failure to meet this obligation.

LINKS POLICY

The website may include links to third-party sites, such as social media platforms on which the Controller has a presence. These third-party websites have not been reviewed or monitored by the Controller, who cannot be held responsible for their content, privacy measures, or data processing practices. Users are advised to read the terms of use and privacy policies of any linked sites. Any party wishing to link to this website must notify the Controller and obtain express consent to do so. The Controller reserves the right to object to the activation of any link to this website.

DATA RETENTION PERIODS

Personal data provided by the user will be retained for as long as the service relationship remains active, for as long as the business relationship is maintained, until the user requests its deletion, or for the legally established period — whichever applies. Data may also be retained where necessary to comply with a legal obligation or for the establishment, exercise, or defence of legal claims.

If the user withdraws consent or exercises their right of objection or erasure, their data will be retained in a blocked state and made available to the justice system for the legally established periods in order to address any potential liability arising from the processing. This will not affect the provision of services or the execution of any contracts with the Controller.

CONFIDENTIALITY AND SECURITY

The Controller undertakes to implement the technical and organisational measures necessary to ensure an appropriate level of security for the data collected, preventing its accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Personal data will be treated as confidential by the Controller, who undertakes to ensure — through legal or contractual obligation — that this confidentiality is respected by its employees, associates, and any other party to whom the information is made accessible.

DATA TRANSFERS AND RECIPIENTS

Personal data will only be disclosed in cases provided for by law, where necessary to fulfil the processing purposes stated above, or to provide services strictly necessary for the development of the Controller's activity.

USER RIGHTS

Users have the right to obtain confirmation as to whether their personal data is being processed. They also have the right to access their data, request rectification of inaccurate data, or request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, users may request the restriction of processing, in which case the data will only be retained for the establishment, exercise, or defence of legal claims. Users may also object to processing on grounds relating to their particular situation, in which case the Controller will cease processing unless there are compelling legitimate grounds or it is necessary for legal claims. Where legally applicable, users have the right to data portability.

Rights of access, rectification, objection, erasure, restriction, portability, and the right not to be subject to automated individual decision-making may be exercised by sending a written request to nosotrashuellasamigas@gmail.com, including a copy of your ID document and the reference "Derechos RGPD."

You may also lodge a complaint with the Spanish Data Protection Authority at www.agpd.es.