The terms set out below and especially the duty of confidentiality will be mandatory for all internal or external staff who work or may work with us and have access to the data you provide, either while browsing our website, by using our forms or during the recruitment or provision of services.
We advise Users to review the present text each time they access our website to make sure of the purposes and uses we can make of their data.
The data controller of the data collected, processed and stored through this website and on the occasion of the services provided and contracted through the same, is SUECOS FOOTWEAR, S.L.U., (hereinafter SUECOS) registered in the Commercial Register of Barcelona, Volume 45316, Folio 176, sheet 483945 dated 15/04/2016, with NIF B66748377 and address at C/ Foronda, 6, 1º, C.P. 28034, Madrid (Madrid). Email: firstname.lastname@example.org and telephone 910 059 684.
The personal data requested in your case will consist of those that are essential to identify and meet the request of the owner of the data, resolve issues raised and provide the contracted services, such data being collected for specific purposes explicit and legitimate and not being treated such data in a manner incompatible with the purposes stated.
ORIGIN OF DATA.
First of all, it is important for Users to be aware that when personal information is provided online (for example, through e-mail or through the Internet), it can be collected and used by others. That is why SUECOS is not responsible that such information may be collected, stored and / or processed by an unauthorized third party, as it has taken security measures within its power to prevent this from happening.
The origin of the data that we process and store in SUECOS can come from different places:
Through our website we collect personal data from those Users who voluntarily decide to fill in the fields that we have incorporated in each of the forms on our website.
With these forms, users may make a query or provide a suggestion, request a product offered on our website or receive, if expressly authorized advertising and newsletters SUECOS. Through these forms, users provide us with their data and consent to the processing thereof in accordance with the purposes stated at the time of completing the form.
Users are responsible for the accuracy and authenticity of the data provided to us through our forms, being their obligation to keep them updated at all times to avoid errors on our part. Any false or inaccurate statement that occurs as a result of the information and data provided through these forms, will be the responsibility of the User.
Information may also come through the emails we receive at email@example.com so we inform Users that to manage our email in SWEDEN we use the Office365 tool, which is developed and managed by MICROSOFT IRELAND OPERATIONS LIMITED with registered office at One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For more information on how Microsoft may process your information
Since we make available to our users an online store to provide our services, and we store in it the information of purchase, sale, access and administrative management, we inform users that the domain www.suecos.es, uses the services of AWS (Amazon Web Services) tool which owns Amazon Web Services Inc. which complies with security measures and compliance with the RGPD as can be verified.
Through our website, you may be able to access third party websites, such as the Click & Sell tool of Banco Sabadell, for the payment of products ordered with debit and credit cards or to make payment through this company. However, SUECOS, will never access the bank details provided by the customer to these third parties.
It should inform users that, if the user, customer or potential customer wishes, may establish a meeting to be developed via telephone. The User must provide his/her name and telephone number.
Finally, we also give users the opportunity to make comments on the blog SUECOS. The participation will be done through the form Leave a message via comment available at the bottom of each news or entry in our Blog section of the website. It is essential to read the web policies of this page before proceeding to comment.
LEGITIMACY FOR DATA PROCESSING.
The legal basis for the processing of Users' data will depend on the time at which the personal data of the User, Customer or Potential Customer is collected or processed:
The legal basis for the processing of data collected through the contact us form is the express consent of the data subject (Article 6.1 a) RGPD). These requests do not imply any contractual relationship.
PURPOSES OF DATA PROCESSING AND DATA RETENTION PERIODS.
The purposes for which each of the treatments will be carried out by SUECOS, are set out in the various informative clauses incorporated in each of the ways of data collection - web forms, etc. -.
Notwithstanding the foregoing, we detail them in full below, along with the period of data retention, carried out by SUECOS:
"Contact Us" form: to be able to contact the User to resolve the query, doubt or suggestion.
These data will be stored on the server of the email provider without period of deletion and while the affected does not express its opposition. However, in the event that the e-mails retained relate to the provision of services, they will be retained for as long as obligations may arise from the contractual relationship. (5 years - article 1964 of the Civil Code).
Form "Exchanges and Returns": These data will be used by SUECOS to effectively manage the request for exchange or return of a product that a customer has made through the website.
These data will be kept on the server for the period for which obligations may arise from the contractual relationship (5 years according to Article 1964 of the Civil Code).
Registration Form: These data will be used by SUECOS for the contractual purpose of selling the products purchased by you and for internal management of the organization, accounting, tax and administrative. These data will be kept for as long as any liability may arise from the application of pre-contractual/contractual measures requested by the interested party (5 years - article 1964 of the Civil Code) or will be kept for a period of 6 years (art. 30 Commercial Code).
Form for sending "Newsletters, News and Updates": These data will be used by SUECOS, to provide information and contact you in relation to the interest expressed in receiving newsletters and commercial advertising about our products.
These data will be kept on the server of the email provider without any period of deletion and as long as the person concerned does not express his opposition. However, if the e-mails retained relate to the provision of services, they will be retained for as long as obligations may arise from the contractual relationship. (5 years - article 1964 of the Civil Code).
Data collected through the form "Leave your message" of the Blog: The data are collected in order to increase the veracity of the comments posted, preventing the publication of anonymous comments, as well as possessing the traceability of the same, for the purpose of demanding responsibilities in the case of being required.
These data will be kept without a deletion period, as long as the user does not express his opposition. In any case, such data may be retained for the period necessary to justify the origin of certain comments in response to the responsibility of the owner of the website on them (STS 297/2016, of May 5, 2016).
Private area "My account": The User may access their private area with username and password and may modify or rectify their data whenever they wish, and may exercise their opposition to the treatment in their case or deletion, in our system by contacting us at firstname.lastname@example.org. These data will be kept by SUECOS for as long as any liability may arise from the performance of the contract and the provision of services (5 years - Article 1964 of the Civil Code).
OBLIGATION TO PROVIDE THE REQUESTED DATA.
In order to optimally execute the services, Users must provide us with the information and personal data requested in our forms. Failure to provide all the information requested and marked as mandatory, SUECOS can not offer their services / products or send, where appropriate, the information requested and therefore can not purchase the products in which the User is interested.
In SUECOS, we scrupulously comply with the requirements stipulated in the RGPD and the LOPDGDDD on data protection of minors, so we do not collect, intentionally, any information from children under 14 years of age.
In addition, we inform Users that this website and the request and purchase of our products are intended only for persons over 18 years of age.
HOW WE PROTECT THE INFORMATION OF USERS, CUSTOMERS OR POTENTIAL CUSTOMERS.
SUECOS implements physical, technical and organizational measures to maintain the security of personal data and try to minimize the possibility of accidental or unlawful destruction, accidental loss, unauthorized use, alteration, unauthorized modification, disclosure and/or access, as well as any other unlawful form of processing of your data, in accordance with the provisions of Article 32 of the GDPR.
In this regard, and taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the probability and severity risks that may affect the rights and freedoms of natural persons, appropriate measures have been put in place to ensure the level of security appropriate to the existing risk.
In any case, SUECOS has implemented sufficient mechanisms to:
Ensure the permanent confidentiality, integrity, availability and resilience of processing systems and services.
Restore the availability and access to personal data quickly, in case of physical or technical incident.
Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
Pseudonymize and encrypt personal data, if necessary.
Notwithstanding the foregoing, as User acknowledges and accepts that Internet security measures are not impregnable and that the networks used on the Internet are not 100% secure, so that any communication sent by this means, can be intercepted and / or modified by unauthorized persons, so as a User must also take extreme caution.
NOTICE OF VIOLATION OF PERSONAL DATA OR SECURITY BREACHES.
In SUECOS we have a regulated procedure for the treatment of incidents related to possible data breaches or security breaches.
As established by the GDPR the breach of security of personal data of a data subject by third parties, may involve a breach of security of the information systems of SUECOS that causes or may cause the destruction, alteration, loss, unauthorized disclosure or access, accidental or otherwise, to personal data transmitted, stored or processed in connection with the provision of our services.
In the event that the personal data we store and/or process at SUECOS is compromised in any way, we will proceed to notify those concerned in a timely manner, and in accordance with the provisions of Article 33 of the GDPR.
COMMUNICATION OF DATA TO THIRD PARTIES.
The personal data that users or potential customers may have provided us through our website, or during the provision of services, will not be sold, transferred and / or exchanged with unauthorized third parties, except by legal obligation, or in the cases set out below in relation to international transfers of data that we make from SUECOS.
On the other hand, Clients' data may be transferred to the Tax Administration and other Public Administration Bodies, in case of being required to do so.
INTERNATIONAL DATA TRANSFERS.
In SUECOS, we use . This tool is owned by The Rocket Science Group LLC, a company with registered office in the United States. Therefore, we inform the user that in case you provide your consent to subscribe to newsletters or Newsletter SUECOS, the email address provided will be communicated to the service provider in the management and administration of mailing lists, resulting in an international transfer of data to the U.S..
However, we hereby inform our Users that MailChimp is a member of the Privacy Shield agreement (Privacy Shield) and states in this document that it complies with the aforementioned protection framework of the European Union and the United States.
For complaints or claims regarding data protection we provide the following information:
The Rocket Science Group LLC
675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308
Phone: (404) 806-5843
DATA PROTECTION RIGHTS.
Any person may exercise the rights of access, rectification, deletion, limitation of treatment, the right to portability, not to be subject to automated processing, including profiling and the right to opposition of personal data contained in any of the files that is responsible SUECOS, requesting it by any means that leaves evidence of sending and receiving, clearly expressing their desire and accompanying a photocopy of your ID and any documents necessary to prove their identity.
It should not be forgotten to indicate the reasons justifying the exercise of the right. To do this, you can send a letter either to the email address email@example.com or to the address Calle Balmes 129 Bis 1º , 1ºB 08008 Barcelona Spain
We have at the disposal of the Users forms for the exercise of these rights, they can request them in our mail firstname.lastname@example.org.
What exactly can you request?
Right of rectification: You may request the rectification of the data, in case they are incorrect, as well as their deletion.
Right of cancellation: You may request the cancellation of the data; and in case there is any limitation, it will keep the data duly blocked, only for the exercise or defense of claims.
Right of opposition: You may request that we stop processing the data in the manner stated, unless for legitimate reasons we must continue to process them, a circumstance that we will expressly state.
Right to request limitation of processing: You may request at any time that we limit the processing of your data in any of the following cases:
When you contest the accuracy of the data processed and for a period that allows SUECOS to verify the accuracy of the data.
When the processing of the data is unlawful under current legislation and the data subject opts for the restriction of its use rather than its deletion.
When the data subject requires their data for the establishment, exercise or defense of legal claims.
Right to data portability: So that, in the event that the data are processed in an automated way, the same are returned or transferred to another company indicated by the User in a structured, automated and commonly used format.
Right of deletion: You may request the deletion of your personal data and SUECOS shall delete them without undue delay when:
The data is no longer necessary in relation to the purposes for which it was collected or processed.
The data subject withdraws the consent on which the data processing is based, and there is no other legal basis for doing so.
The data subject objects to the processing because the processing is for the purpose of direct marketing of The data have been processed unlawfully.
The data must be erased in order to comply with a legal obligation at the EU level and/or
In addition, Users have other rights, namely:
Right to withdraw the consent given: The User, may withdraw the consent given for the processing of personal data for any specific purpose, when he/she wishes to do so, just contact us exercising this right.
Right to complain to the Control Authority: Any User may contact the Control Authority in the event that he/she considers that his/her data is being processed in an erroneous manner. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency, located at C/ Jorge Juan, 6, 28001-Madrid and contact telephone numbers: 901 100 099 / 91 266 35 17.
Our website has a Blog section in which Users are allowed to post comments. Users may also share our articles through the social networks where we are present, so Users should be cautious and read the Conditions and Privacy Policies of those social networks beforehand
Notwithstanding the foregoing, through the profiles, SUECOS does not share or communicate any personal information of Users, "followers" of Twitter, Facebook, etc..
The treatment that SUECOS perform within social networks, will be at most, the social network allows corporate profiles. So you can inform, when the law does not prohibit it, to his followers, and by any means permitted by the social network, about their activities, contests, competitions, contests, services, etc.. as well as provide personalized customer service through the social network.
Any User may exercise their data protection rights by contacting the address and email address indicated in the section corresponding to them.
In no case will extract data from social networks without the express consent of the user to do so.
We strongly recommend Users to read the Privacy Policies and Terms and Conditions of the social networks where we are present.
RECEIPT OF CURRICULUM VITAE.
SUECOS admits the receipt of Curriculum Vitae through the email provided on this website, nor if it is sent by users through the forms available on the page, not having any open selection process. Accordingly, any Resume received by e-mail, or by filling in any form, will be eliminated and deleted. However, the contact e-mail address may be used to inform the interested party of the deletion of the Curriculum Vitae.
We strongly recommend Users to visit also the sections Purchase Conditions, Legal Notice and Cookies Policy that regulate, among many other aspects, the use, disclaimers and limitations of liability that govern this website.