Privacy and Data Protection Policy

PRADAS SUCESORES SL , assumes the utmost responsibility and commitment to the establishment, implementation and maintenance of this Data Protection Policy, ensuring the continuous improvement of the processing with the aim of achieving excellence in relation to compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJEU L 119/1, 04-05-2016), and Spanish regulations on the protection of personal data (Organic Law, specific sectoral legislation and its implementing rules).

The Data Protection Policy of PRADAS SUCESORES SL is based on the principle of proactive responsibility, according to which the data controller is responsible for compliance with the regulatory and jurisprudential framework governing this policy, and is able to demonstrate it to the competent control authorities.

In this regard, the controller shall be governed by the following principles that should serve as a guide and frame of reference for the entire organization in the processing of personal data:

  1. Data protection by design: the controller shall implement, both at the time of determining the means of processing and at the time of the processing itself, appropriate technical and organizational measures, such as pseudonymization, designed to effectively implement data protection principles, such as data minimization, and to integrate the necessary safeguards into the processing.
  2. Data protection by default: the controller shall implement appropriate technical and organizational measures with a view to ensuring that, by default, only personal data that are necessary for each of the specific purposes of the processing are processed.
  3. Data protection in the life cycle of the information: the measures that guarantee the protection of personal data shall be applicable during the complete life cycle of the information.
  4. Lawfulness, fairness and transparency: personal data will be processed in a lawful, fair and transparent manner in relation to the data subject.
  5. Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes and will not be further processed in a manner incompatible with the purposes for which they were collected.
  6. Proportionality: personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  7. Accuracy: personal data shall be accurate and up to date; all reasonable steps shall be taken to ensure that personal data that are inaccurate with respect to the purposes for which they are processed are promptly deleted or rectified.
  8. Limitation of the retention period: personal data will be kept in a form that allows the identification of data subjects for no longer than is necessary for the purposes of the relevant processing.
  9. Integrity and confidentiality: personal data will be processed in such a way as to ensure its security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, through the implementation of appropriate technical or organizational measures.
  10. Information and training: one of the keys to guarantee the protection of personal data is the training and information provided to the personnel involved in the processing of personal data. During the life cycle of personal data, all personnel with access to the data shall be properly trained and informed about their obligations in relation to compliance with data protection regulations.

In the same way and in accordance with the provisions of the LOPDGDD 3/2018 of December 5, 2018, Organic Law on Data Protection and Guarantee of Digital Rights, in its Title X (Arts. 79 to 97), PRADAS SUCESORES SLcollects and publishes in its policy such rights and undertakes to comply with those that are legally enforceable.

  • Rights in the digital era
  • Right to Internet neutrality
  • Right to universal access to the Internet
  • Right to digital security
  • Right to digital education
  • Protection of minors on the Internet
  • Right of rectification on the Internet
  • Right to update information in the digital media
  • Right to privacy and use of digital devices in the workplace
  • Right to digital disconnection in the workplace
  • Right to privacy from the use of video surveillance and sound recording devices in the workplace.
  • Right to privacy in the use of geolocation systems in the labor field
  • Digital rights in collective bargaining
  • Data protection of minors on the Internet
  • Right to be forgotten in Internet searches
  • Right to be forgotten in social networking and equivalent services
  • Right of portability in social networking services and equivalent services
  • Right to a digital will
  • Policies to promote digital rights

Data Protection Policy PRADAS SUCCESSORS SL is communicated to all staff of the data controller and made available to all interested parties.

Consequently, this Data Protection Policy involves all the staff of the data controller, who must know and assume it, considering it as their own, each member being responsible for applying it and verifying the data protection rules applicable to their activity, as well as identifying and providing the opportunities for improvement that they consider appropriate with the aim of achieving excellence in relation to their compliance.

The company’s privacy policy must be known and complied with by the external Data Processors who access the Controller’s personal data.

This Policy will be reviewed by PRADAS SUCCESSORS SLas many times as deemed necessary, to adapt, at all times, to the provisions in force regarding the protection of personal data.

PRIVACY AND WEB RESPONSIBILITY

PRADAS SUCCESSORS SL is the owner of the web site and is responsible for the treatment of the personal data provided by the users through it.

PRADAS SUCCESSORS SL informs the users of this web site about its policy regarding the treatment and protection of personal data, in its organization and in particular, of the users and clients that may be collected by the navigation and use of this web site.

The purpose of this document is to inform the interested or affected parties about what we do with their personal data, how it is collected, what it is used for, the rights they have, as well as all the necessary information established by current legislation.

By using this website we understand that you have read and understood the information provided in relation to the processing of your personal data.

Our main objective is to process personal data in a lawful, fair and transparent manner.

Data collected, purpose and lawfulness

The personal data we process are those provided by interested parties and/or users through different means, in this case the contact forms available on the website, where the minimum data required to send information about our products or services, to place orders, as well as to prepare the corresponding invoices, report on the status of orders, handle complaints and any other management derived from the provision of the service performed through our management are requested.

These purposes are based on legal principles of processing of data collected by the current regulations; for the execution of a contract or for the provision of a service to users, for the fulfillment of legal obligations, for the legitimate interest and with the consent of the users.

Data collected for the request of information through the web form.

The personal data collected through the web form for requesting information is used to send commercial information about our products and services.

The processing of the data in this specific case is legitimized by the express consent that you give us by accepting the sending of the information provided through the form.

Operations carried out with personal data

Personal data are recorded through the website and stored on electronic media controlled and supervised by the data controller. The supports are equipped with the necessary technical and organizational measures that guarantee the due confidentiality in the treatment of the data.

The personnel involved in data processing operations: access, editing, deletion, etc… are trained and committed to our data protection policy.

Data retention

Personal data will be kept as long as necessary to meet the purpose / purposes for which they were collected.

Therefore, we will keep your personal information as long as there is a contractual and/or commercial relationship with you or as long as you do not exercise your right of deletion, cancellation and/or limitation of the processing of your data. In these cases, we will keep the information properly blocked, without giving it any use, while it may be necessary for the exercise or defense of claims or may derive some kind of legal or contractual liability of its treatment, which must be addressed and for which its recovery is necessary.

Protection of minors

This website is not intended for underage users. If you are a minor, please do not attempt to interact as a user. If we discover that we have mistakenly obtained personal information from a minor, we will delete such information as soon as possible.

Recipients of your personal data

We inform users that their personal data will not be communicated to third parties, with the exception that such communication of data is covered by a legal obligation or when for the proper provision of the service or the execution of the contract is necessary to communicate your data to other responsible such as other related companies and acting as processors.

For cases in which the communication of data to third parties is not covered by the legal bases established in the previous section, the communication of data to other recipients will only take place if the user has given his express consent.

PRADAS SUCESORES SL maintains strict criteria for the selection of data processors and is contractually committed with each one to comply and enforce the obligations established in terms of data protection.

You can obtain more information about the processing of personal data from our organization by sending an e-mail to: contabilidad@pradas.net.

Exercise of rights

In accordance with the rights conferred by current legislation on the protection of personal data, the user may exercise the rights of access, rectification, limitation, deletion, portability and opposition to the processing of personal data or withdraw the consent given in due course, by sending their request to the postal address indicated or to the e-mail contabilidad@pradas.net.

In order to exercise your rights, you must identify yourself by presenting your ID card.

To access additional information or to file a complaint, please contact the same email address indicated above. You may also contact the Spanish Data Protection Agency (Control Agency) at: www.agpd.es.