The data controller is VROSS DESIGN S.L., with tax identification number (CIF) B99548505. The contact details of VROSS DESIGN S.L. are as follows:
– Postal address: Calle San Miguel 45, 5ºA, Saragossa, Spain
– Registration details: Companies Register of Saragossa, Volume 4407, Book 0, Folio 148, Section 8, Sheet Z 65561, entry 1, Year Pre. 2019
– Telephone: +34 629207222
– E-mail: firstname.lastname@example.org
The data subject is hereby informed that VROSS DESIGN S.L. has appointed a Privacy Officer to whom he or she may refer any question relating to the processing of his or her personal data. The data subject may contact the Privacy Officer through the following contact details: email@example.com Calle San Miguel 45, 5ºA Saragossa, Spain.
TYPE OF INFORMATION COLLECTED
VROSS DESIGN S.L. may collect the following personal information from users of the VROSS DESIGN S.L. website and/or the mobile application of VROSS DESIGN S.L. (“WEBSITE”) through the corresponding forms: name, e-mail address, postal address, telephone number and credit card (PAN+CVV2) in compliance with PCI DSS standards when the user visits the WEBSITE, registers, places an online order, contacts VROSS DESIGN S.L. or participates in promotions or surveys of VROSS DESIGN S.L. or subscribes to our newsletter.
PURPOSE OF PERSONAL DATA PROCESSING
The data subject’s personal data shall be processed for the following purposes as applicable:
Managing and executing queries and requests made through the website.
Respond to the exercise of ARCO rights, as well as to queries and claims.
Prepare budgets by means of the queries raised through the online form.
Keep all users of the website informed of commercial news, product offers if they have provided us with their e-mail address.
Manage and implement online shopping. We use the customer’s personal information to process and deliver orders, send information by email or SMS of the status of orders.
Receive our newsletter with all our promotions or news.
Management and issuance of sales documents: digital tickets, sales invoices.
DATA STORAGE PERIOD
VROSS DESIGN S.L. will store personal data only for the period of time that is reasonably necessary to answer questions or solve problems, make improvements, activate its services and meet the requirements of applicable law. This means that it may store personal data for a reasonable period of time even after the data subject has ceased using the services of VROSS DESIGN S.L. or has ceased using the WEBSITE. After this period, the personal data will be blocked from all systems of VROSS DESIGN S.L.
LEGITIMATE BASES FOR PROCESSING DATA
VROSS DESIGN S.L. has the following legitimate bases for processing personal data:
Performance of the contract
The legal basis for the processing of the data subject’s personal data being collected is the performance of the sales contract. Accordingly, the data subject is bound to provide the data necessary for such performance. If these data is not provided, it will not be possible to carry out the sale.
The management and issuance of the sales invoice is based on the legal obligation of VROSS DESIGN S.L. in its relationship with customers.
In relation to the following purposes, the legal basis for the processing of the personal data of the data subject shall be the consent of the data subject, if it has been given:
– Management of contacts through the WEBSITE.
– Response to the exercise of ARCO rights, queries and claims by the data subject.
In relation to the following purposes, the legal basis for the processing of the personal data of the data subject shall be the legitimate interest of VROSS DESIGN S.L.:
Our legitimate interest is to be able to ensure that our WEBSITE remains secure.
RECIPIENTS OF DATA
The data subject’s personal data may be transferred/disclosed to the following recipients:
– Public administrations bodies when so required by tax, labor, Social Security or any other applicable regulations.
– Companies in charge of data processing, such as suppliers providing services to VROSS DESIGN S.L.
PROTECTION OF DATA BY VROSS DESIGN S.L.
The WEBSITE uses information technology security techniques such as firewalls, access control procedures and encryption mechanisms with the aim of preventing unauthorized access to data and ensuring their confidentiality. To achieve these purposes, the user accepts that VROSS DESIGN S.L. will collect data for the purposes of the corresponding authentication of access controls.
RIGHTS OF DATA SUBJECTS
Data subjects have the following rights that can be exercised at the e-mail address firstname.lastname@example.org
Right of access
You have the right to obtain confirmation as to whether or not VROSS DESIGN S.L. is processing personal data concerning you, and to access to the personal data that VROSS DESIGN S.L. holds about you.
Right to rectification
You have the right to request that VROSS DESIGN S.L. rectify the personal data when they are inaccurate or that they are completed if they are incomplete. If you are registered on our WEBSITE, it may be easier for you to correct them directly by modifying your profile.
Right to erasure/right to be forgotten
You may request that personal data be deleted when, among other reasons, the data is no longer needed for the purposes for which it was collected.
Right of restriction
You also have the right to request a restriction on the processing of your data, in which case we will only retain your data for the purpose of exercising or defense against claims.
Right of portability
You have the right to receive the personal data in a structured, commonly used and machine-readable format, and to transmit them to another data controller when the processing is based on consent or on a contract, and is carried out by automated means.
Right to object
You may object to the processing of personal data based on the public or legitimate interest pursued by VROSS DESIGN S.L., including profiling. In such a case, VROSS DESIGN S.L. will cease processing the data, except for compelling legitimate reasons, or for the exercise or defense against any claims.
Likewise, if it is considered that the processing of your personal data violates regulations or your privacy rights, the affected person may lodge a claim:
Before the competent supervisory authority.