PRIVACY AND DATA PROTECTION POLICY:
The company is deeply committed to complying with Spanish legislation on the protection of personal data and therefore strictly complies with the guidelines of Organic Law 15/1999 of 13 December on the Protection of Personal Data, and with Royal Decree 1720/2007 of 21 December, which approves the Regulations for the development of the Organic Law and other regulations in force at any given time, and ensures the correct use and processing of personal data. 1720/2007 of 21 December, which approves the Regulation of development of the Organic Law and other regulations in force at all times, and ensures the correct use and treatment of the user’s personal data. To this end, together with each form for the collection of personal data, this company will inform the user of the existence and acceptance of the specific conditions for the processing of their data in each case, informing them of the responsibility of the file created, the address of the party responsible, the possibility of exercising their rights of access, rectification, cancellation or opposition and the purpose of the processing. The protection of your data is one of the most important principles of Ediciones Jardín de monos. With this data protection declaration we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us. We would also like to inform you of your rights.
Contact information
Name of the responsible company address: Protezza, S.L. Address: Calle Dehesilla, 2 18193 (Granada), SPAIN. You can contact us through the contact form at the following link: https://uroflex.es/contacto/ Collection, processing and storage of data.
3. a) Contract data. We collect, process and store the data that you provide to us when you place an order. In addition, we store and process data about the order and the payment process.
b) Data that you store on our servers. We collect, process and store data that you store yourself when you use our services. This includes the production of backup copies on our backup systems.
c) Log data. When you visit our website or use our services, the device with which you access the website automatically transmits log data (connection data) to our servers. This applies in particular when you place an order or when you log in. The log information includes the IP address of the device you use to access the website or service, the type of browser you use, the website you previously visited, your system settings and the date and time. We only store IP addresses to the extent necessary to provide our services. Otherwise, IP addresses will be deleted or anonymised. We inform you at this point that in the process of purchasing UROFLEX©, your personal data will be incorporated into the files of this company that are duly registered in the General Register of the Spanish Agency for Data Protection and whose purpose is the management, processing and billing of sales and purchases, as well as customer contact details. The personal data will be treated with the appropriate degree of protection, taking the legally necessary security measures to prevent their loss, deterioration and supply and access to unauthorised third parties. We also inform you that you may exercise your rights (ARCO) of access, rectification, cancellation and opposition of personal data to the files in accordance with the provisions of the Organic Law on Protection of Personal Data (L.O. 15/1999) and RD. 1720/2007, by sending a written request, along with a copy of the DNI to the following address: pedidos@uroflex.es – Data provided by third parties. In the event that personal data is included in the request by persons who are not the owners of such data, the user must, prior to its inclusion, inform such persons of the points contained in the previous paragraphs. This company is exempt from any liability for failure to comply with this requirement. – Data of minors. It is not authorised to provide data of persons under fourteen years of age through this Website. This company disclaims any liability for failure to comply with this requirement. – Commercial communications by electronic means. The communications made by e-mail or by any other electronic means will be those necessary to process your request. However, they will be those that have been expressly consented to or authorised by the recipients in accordance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, except for the provisions of article 21.2 of the same Law, in the wording given by the First Final Provision of the new General Telecommunications Law. – Security measures. The party responsible for the file has adopted the legally required levels of security for the protection of Personal Data, and has installed all the technical means and measures available according to the state of technology to prevent the loss, misuse, alteration, unauthorised access and theft of the Personal Data provided. – Duty of secrecy. The user counts on the confidentiality and duty of secrecy of all those who process the data in the name and on behalf of the user.
d) Cookies We use cookies and pixels at various points on our website. Cookies are small identifiers that a server stores on the end device with which you access our website or services. They contain information that can be retrieved at the time of accessing our services and thus enable a more efficient and better use of our offers. We use permanent cookies and so-called session cookies. Session cookies are deleted when you close your web browser. Persistent cookies remain on your terminal until they are no longer needed for their purpose and are deleted. Cookies serve to improve our services and the use of certain features. For example, the ordering process on our website is only possible with the help of cookies, which are also used to collect statistical data on our website, e.g. on the number of visitors. You can prevent the activation of cookies at any time by making the appropriate settings in your Internet browser and thus permanently oppose the activation of cookies. In addition, cookies that have already been enabled can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the cookie settings in the Internet browser used, not all functions of our website may be fully usable. We use the following tracking and analysis tools:
Google Analytics: The Google Analytics component is operated by Google Inc. The purpose is to analyse the flow of visitors to our website. Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us. Google Analytics enables a cookie in your browser. By activating the cookie, Google can analyse the use of our website. Each time you visit a website on which a Google Analytics component has been integrated, your Internet browser is automatically asked to transmit data to Google. No personal data is transmitted to Google. The IP address we collect is only forwarded to Google once it has been anonymised. It is possible to object to the collection and processing of this data by Google. To do this, you must download and install a browser plug-in from the link https://tools.google.com/dlpage/gaoptout?hl=es. Further information and Google’s current privacy policy can be found at https://policies.google.com/privacy?hl=es&gl=de and http://www.google.com/analytics/terms/gb.html Google Analytics will be explained in more detail at this link https://www.google.com/intl/es/analytics/. Google Adwords: The operator of the Google AdWords services is Google Inc. If you access our website via a Google ad, Google stores a conversion cookie in your browser. A conversion cookie loses its validity after thirty days and is not used for identification. If the cookie has not yet expired, the conversion cookie is used to determine whether certain subpages, such as the shopping basket of an online shop system, have been accessed via our website. The conversion cookie enables us and Google to track whether our visitors have reached our website via an AdWords advertisement and generated revenue. The data and information collected through the use of the conversion cookie is therefore used to determine the success or failure of the respective AdWords ads and to optimise our AdWords ads for the future. Neither we nor other Google AdWords advertisers receive any information from Google that can identify visitors to our website. No personal data is transmitted to Google. The IP address we collect is only forwarded to Google once it has been anonymised. You have the opportunity to object to interest-based advertising by Google. To do so, you must access the following link https://support.google.com/ads/answer/2662922?hl%20DIFUNDE%20LA%20PALABRA-&hl=es and make the necessary settings. Further information and Google’s current privacy policy can be found at https://policies.google.com/privacy?hl=es&gl=de. Google Remarketing: Google Remarketing is a feature of Google AdWords. The integration of Google Remarketing allows a company to create user-related advertisements and to display advertisements relevant to the interests of the Internet user. The operator of Google Remarketing services is Google Inc. Google Remarketing sets a cookie in your Internet browser. By enabling the cookie, Google will be able to recognise the visitor to our website when he or she visits websites that are also members of the Google advertising network. Each time you visit a website on which the Google Remarketing service has been integrated, your Internet browser is automatically identified with Google. No personal data is transmitted to Google. The IP address we collect is only forwarded to Google once it has been anonymised. You have the opportunity to object to interest-based advertising by Google. To do so, you must access the following link https://support.google.com/ads/answer/2662922?hl=es and make the necessary settings. Further information and Google’s current privacy policy can be found at https://policies.google.com/privacy?hl=es&gl=de.
2. Legal basis for processing
We process and use your information to perform the contract and provide our services, to improve and tailor our services and our websites to your needs, to provide updates and upgrades, to send you service notifications, and to carry out our settlements and collections. Art. 6 I letter a of the GDPR serves as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract, the processing is based on Art. 6 I letter b GDPR. The same applies to processing operations necessary to carry out pre-contractual measures, e.g. in cases of enquiries about our products or services. If we are subject to a legal obligation whereby a processing of personal data becomes necessary, e.g. for the fulfilment of tax obligations, the processing is based on Art. 6 I letter c of the GDPR. Ultimately, the processing operations could be based on Art. 6 I letter f of the GDPR. Processing operations which are not covered by any of the aforementioned legal bases are based on that legal basis if the processing is necessary to protect our legitimate interests or those of a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. These processing procedures are permitted to us in particular because they have been specifically mentioned by the European legislator. As a rule, a legitimate interest is deemed to exist if the data subject is a customer of the responsible person. If the processing of personal data is based on Article 6 I letter f of the GDPR, it is in our legitimate interest to carry out our business activities. We process the data of applicants in accordance with § 88 GDPR in conjunction with § 26 of the German Data Protection Act (BDSG, latest version).
3. Categories of recipients Customers:
All those who access our website to make a purchase or inquire about available products. Payment service provider: These providers offer us product collection services. Data processors: We pass on various personal data to our data processors as the parties responsible for processing order data. We have ensured the security of your data by concluding agreements on the processing of order data. Our data processors can be grouped into the following category: Provision of services: This includes sending newsletters, printing and sending invoices, payment service providers, shipping service providers. We only disclose data to authorities and third parties in accordance with legal regulations or legal title. Information to authorities may be provided on the basis of a legal regulation on the prevention of danger or criminal prosecution. Third parties will only receive information if required by law. This may be the case, for example, in the case of copyright infringements.
4. Transfer of data to third countries
Not applicable.
5. Duration of storage
We process and store personal data only for as long as necessary to achieve the purposes of the processing or as required by law. As a rule, the purpose of the processing is achieved at the end of the contract. You can change and delete the data stored in our services yourself. After termination of the contract we delete the data stored in the services. Backups in our backup systems are automatically deleted with a time delay. In the case of contractual data, processing is limited after termination of the contract and deleted after expiry of the statutory storage period. Data that you enter during the application process will be stored for a maximum of six months.
6. Your rights
a) Right of access and confirmation. You have the right to receive free information from us at any time and confirmation of the personal data stored about you, as well as a copy of this information.
b) Right of correction. You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.
c) Right to erasure. You have the right to have your personal data erased immediately, provided that one of the following conditions is met and provided that the processing is not necessary: The personal data have been collected or otherwise processed for purposes for which they are no longer necessary. You withdraw the consent on which the processing was based and there is no other legal basis for the processing. You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no legitimate grounds for the processing or you object to the processing pursuant to Art. 21 para. 2 GDPR. The personal data have been processed unlawfully. The deletion of personal data is necessary in order to comply with a legal obligation under Union law or the law of the Member States to which we are subject. The personal data were collected in connection with the information society services offered in accordance with Art. 8 para. 1 GDPR.
d) Right to restriction of processing You have the right to request a restriction of processing if one of the following conditions is met: You dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of your personal data. The processing is unlawful, you refuse to erase the personal data and instead demand a restriction on the use of the personal data. We no longer need the personal data for processing purposes, but you need it to assert, exercise or defend legal claims. You have submitted an objection to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether our justified reasons prevail over yours.
e) Rights to object to processing You have the right to object at any time to the processing of personal data concerning you pursuant to Art. 6 para. 1 letters e and f GDPR.we will not process the personal data in the event of an objection, unless we can demonstrate compelling reasons for the processing which are worthy of protection and are contrary to your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. You have the right to object at any time to the processing of your personal data for direct marketing purposes.
f) Right to data portability You have the right to receive the personal data provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another responsible person without our intervention, provided that the processing is based on the consent provided for in Art. 6 para. 1(a) of the GDPR or Art. 9(2)(a) of the GDPR or on the basis of a contract pursuant to Art. 6(1)(b) of the GDPR, and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the general interest. In addition, when exercising your right to transfer data pursuant to Art. 20 para. 1 GDPR, you have the right to request that personal data be transferred directly by one controller to another controller, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected thereby. g) Right to revoke consent under data protection law You have the right to revoke your consent to the processing of personal data at any time.
h) Right of recourse to the supervisory authority You have the right to contact a supervisory authority in the Member State in which you reside or work or in which you suspect that the processing of personal data concerning you is in breach of the EU Data Protection Regulation at any time.
8. Legal or contractual provisions
Legal or contractual provisions for the provision of personal data, necessity for the conclusion of the contract, obligation to provide personal data, possible consequences of failure to provide personal data The provision of personal data may be required in part by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information about the contracting party). In order to conclude a contract, it may sometimes be necessary for you to provide us with personal data, which we subsequently have to process. For example, you are obliged to provide us with personal data when we conclude a contract with you. If this personal data is not provided, the contract cannot be concluded.
9. Existence of automated decision-making/profiling
We do not make automated decisions and we do not engage in profiling. This privacy policy was last revised on 1 March 2021.