Privacy and Data Protection Policies (RGPD)
In compliance with Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016 (hereinafter RGPD), Pinturas Angar (hereinafter Angar) highlights this Policy regarding the processing and protection of data personal.
Data of the person responsible for the treatment
(ANGAR PAINTINGS) LUIS GARCÍA LIESA
NIF: 17724163H
C/ Manuel Viola, num. 2, 4 D – 50014 Zaragoza
Email: Pinturasangar.es
Area of application
This Policy will apply:
- To those people who visit the ANGAR website, Pinturasangar.es
- To those who voluntarily contact ANGAR through email, chat or who complete any of the data collection forms published on the ANGAR website.
- To those who request information about ANGAR products and services or who request to participate in any of the ANGAR commercial actions.
- To those who formalize a contractual relationship with ANGAR by contracting its products and services.
- To those who use any other service present on the website that involves the communication of data to ANGAR or access to data by ANGAR for the provision of its services.
- To any others who, directly or indirectly, have given their express consent for their data to be processed by ANGAR for any of the purposes set out in this Policy.
The use of ANGAR products and services requires express acceptance of this Policy.
ANGAR warns that, except for the existence of a legally constituted representation, no user and/or client can use the identity of another person and communicate their personal data, so the data you provide to ANGAR must be personal data, corresponding to your own. identity, adequate, relevant, current, accurate and true. In this sense, the user and/or client will be solely responsible for any direct or indirect damage caused to third parties or to ANGAR due to the use of another person's data or their own data when they are false, erroneous, not current, inadequate. or not relevant. Likewise, the user and/or client who communicates the personal data of a third party will be responsible for having obtained the corresponding authorization from the interested party, as well as for its consequences if not.
Likewise, the user and/or client who communicates personal data to ANGAR declares to be of legal age, in accordance with the provisions of Spanish legislation, otherwise refraining from providing data to ANGAR. Any data provided about a minor will require the consent or prior authorization of their parents, guardians or legal representatives, who will be considered responsible for the data provided by the minors in their care.
This Policy will be of subsidiary application with respect to those other conditions on the protection of personal data that are established on a special basis and are communicated, without limitation, through the registration forms, contracts and/or conditions of the particular services, being for both this Policy is complementary to those mentioned in that which is not expressly provided for therein.
Purposes of the collection and processing of personal data
ANGAR, in its capacity as data controller, informs users of the existence of various treatments and files in which the personal data communicated to ANGAR is collected and stored.
The purposes of said collection and processing of personal data are the following:
- In relation to the “cookies” that ANGAR uses when browsing through its website ( https://www.pinturasangar.es ), they are stored on the user's terminal equipment (computer or mobile device) and collect information when visiting said web pages, with the purpose of improving their usability, knowing the browsing habits or needs of users in order to adapt to them, as well as obtaining information for statistical purposes. In the case of those users who are already ANGAR clients, the information collected with cookies will also serve to identify them when accessing the different tools that ANGAR makes available for the management of services. In any case, users can configure their browser so that the receipt of all or some of the cookies is disabled or blocked. The fact that you do not wish to receive these cookies does not constitute an impediment to accessing the information on the ANGAR websites, although the use of some services may be limited. If, once consent has been given to receive cookies, you wish to withdraw it, those stored on the user's computer must be deleted, through the options of the different browsers.
All information about the cookies used by ANGAR is published in its Cookies Policy, available for consultation at https://pinturasangar.es/es/content/politicas-de-privacidad-y-proteccion-de-datos
-
In the case of sending an email to ANGAR or communicating personal data through any other means, such as a contact form, the purpose of the collection and processing of said data by ANGAR is to provide of queries and requests for information that arise about ANGAR products and services
- In the case of ANGAR forms that interested parties complete to participate in any of ANGAR's commercial actions, the purpose will be to enable said participation, as well as the sending of commercial and advertising communications about ANGAR's services, unless the interested party expressly express your opposition at the time of collecting your data. Notwithstanding the foregoing, the interested party may modify his decision at any time, as many times as he wishes, through the means provided by ANGAR for this purpose.
- When contracting the services offered by ANGAR, those personal data that are necessary to establish the contractual relationship and enable the provision of the services and remuneration thereof by the clients will be collected, said data being collected and processed with the following purposes:
- The main purpose will consist of maintaining the contractual relationship established with the client, in accordance with the nature and characteristics of the contracted services, contacting ANGAR with the client through the e-mail address, telephone or other means indicated. for the latter.
- For the sending of documentation and information related to the contracted services, as well as for the sending of commercial and advertising communications about them or similar ones by ANGAR, through postal mail, e-mail, telephone, SMS or other means. indicated by the client, unless the client expressly expresses his opposition at the time of contracting. Regardless of whether or not the client has chosen to receive commercial information from ANGAR, the client may modify his decision at any time, as many times as he wishes, through the specific section available for this purpose in his Client Area.
- To maintain historical records of commercial relationships during the legally established periods, ANGAR must access and/or process personal data with respect to which the client has the status of responsible or in charge of the treatment, ANGAR will process said data as the person in charge of the treatment. in accordance with the provisions of article 28 of the RGPD and in accordance with what is indicated in the section called “ANGAR as data processor”, included in this Policy.
- In compliance with the provisions of Law 25/2007, of October 18, on the conservation of data related to electronic communications and public communications networks, ANGAR informs the user that it will proceed to retain and preserve certain traffic data generated during the development of communications, as well as, where appropriate, to communicate said data to the competent bodies whenever the legal circumstances provided for in said Law occur.
Conservation period for personal data
ANGAR will keep the personal data for the time strictly necessary to fulfill the purposes detailed above. ANGAR may keep said data duly blocked during the period in which responsibilities could arise from its relationship with the client.
In the case of data subject to conservation due to Law 25/2007, of October 18, on the conservation of data related to electronic communications and public communications networks, the conservation period will be as detailed. in said regulations.
Recipients of personal data
The recipients of the personal data collected by ANGAR will be the following:
- ANGAR's own employees in the performance of their duties.
- ANGAR suppliers involved in the provision of services, in the event that this is necessary for their provision.
- The companies that make up the Group of Companies of which ANGAR is a part, understood within the meaning of article 42 of the Commercial Code, whose activity is the marketing of services of an identical or analogous nature offered by ANGAR, such as Internet presence services, Managed hosting, Cloud computing or advanced technological infrastructure solutions.
- The judicial or administrative bodies, as well as the State Security Forces and Bodies, in the event that ANGAR is required in accordance with current legislation to provide information related to its clients and their services.
User rights and exercise thereof
Users may exercise the following rights recognized by the RGPD at any time:
- Right of access.
Users have the right to obtain information from ANGAR about whether personal data that concerns them is being processed, to access it and to obtain information about the processing carried out. - Right to obtain a copy of your personal data.
- Right to rectification.
Users have the right to have ANGAR rectify their personal data if it is inaccurate or incomplete. - Right of deletion.
Users have the right to have their data deleted when they are no longer necessary for the purpose for which they were provided or when the other legally provided circumstances occur. - Right to limit treatment.
Users have the right to request a limitation in the processing of their personal data, so that the processing operations that must correspond in each case are not applied to them, in those cases provided for in art. 18 of the GDPR. - Right to portability.
Users have the right to receive personal data that concerns them in a structured format, as long as said data concerns exclusively the user and has been provided by them.
Users may exercise these rights in the following ways:
- If they are ANGAR clients, users will be able to check their personal data at any time through the “Edit account details” section of the “Customer Area” tool, which can be accessed authenticated from https://www.pinturasangar. .es/es/my-account. They may also send a message through the “Support” section of said tool, indicating the right they wish to exercise.
- Whether they are clients of ANGAR or not, users may exercise their rights by sending a communication by e-mail to the address Pinturasangar.es or by sending a request accompanied by their ID or legally valid document. that proves your identity, addressed to PINTURA ANGAR, C/ Manuel Viola, num. 2, 4 D, 50014 Zaragoza, specifying the right they wish to exercise.
- If you wish to revoke your consent regarding the right to cookies, you can click on the following link to do so: https://pinturasangar.es/es/module/lgcookieslaw/disallow?token=f99f89aa0208ca3bb048a9c662176523
In cases of requests that are manifestly unfounded or excessive due to their repetitive nature, ANGAR reserves the right to charge a fee for the administrative costs that arise or the right to refuse to act on them, in accordance with the provisions of art. 12.5 GDPR.
Control authority
Users and/or clients may contact the corresponding local control authority if they consider that the processing carried out with respect to their personal data has not been carried out in accordance with current legislation.
The data protection control authority in Spain is the Spanish Data Protection Agency, whose contact information is available on its website, specifically at http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/contacteciudadano/ index-ides-idphp.php .
ANGAR as data processor
In accordance with article 28 of the GDPR and related provisions, ANGAR will process the personal data for which the client holds the status of data controller or processor, when this is necessary for the adequate provision of the contracted services. In this case, ANGAR will act as data processor, in accordance with the terms indicated below:
- ANGAR will only process the data in accordance with the instructions of the client responsible or in charge of the treatment, not using it for a purpose other than that stated in this Data Protection Policy and/or in the contractual conditions that apply.
- Once the provision of the services that motivate the processing of personal data has been completed, these will be destroyed, as will any support or documents containing any personal data or any type of information that has been generated during, for and/or for the provision of the services subject to the corresponding Conditions. Notwithstanding the foregoing, ANGAR may keep the aforementioned data duly blocked during the period in which responsibilities may arise from its relationship with the client.
- In the event that ANGAR uses the data for another purpose or communicates or uses it in breach of this Data Protection Policy and/or the corresponding Conditions of Service, it will also be considered responsible for the treatment.
- ANGAR is obliged, in accordance with article 28 of the RGPD, to maintain due professional secrecy with respect to the personal data that it must access and/or process in order to comply in each case with the purpose of the Terms of Service that are applicable to you, both during and after their termination, committing to use said information only for the intended purpose in each case and to demand the same level of commitment from any person within your organization who participates in any phase of the treatment. of personal data is the responsibility of the client.
- In accordance with the provisions of the RGPD, the following rules will apply in relation to the form and modalities of access to data for the provision of services:
- In the event that ANGAR must access the treatment resources located at the client's facilities, the latter will be responsible for establishing and implementing the security policy and measures, as well as communicating them to ANGAR, who undertakes to respect them and demand their compliance to the people in your organization who participate in the provision of services.
- When ANGAR remotely accesses data processing resources under the responsibility of the client, the latter must establish and implement the policy and security measures in its remote processing systems, with ANGAR being responsible for establishing and implementing the policy and security measures in its own local systems.
- When the service is provided by ANGAR in its own premises, ANGAR will record in its Activity Log the circumstances relating to the processing of data in the terms required by the RGPD, including the security measures corresponding to said processing.
- Access and/or processing of data by ANGAR, without prejudice to the specific legal or regulatory provisions in force that may be applicable in each case or those that ANGAR adopts on its own initiative, will be subject to the necessary security measures to:
- Ensure the ongoing confidentiality, integrity, availability and resilience of treatment systems and services.
- Restore availability and access to personal data quickly, in the event of a physical or technical incident.
- Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the security of the treatment.
- Pseudonymize and encrypt personal data, if applicable.
- The client authorizes ANGAR, in its capacity as data processor, to subcontract with third parties, in the name and on behalf of the client, the storage services, custody of data backup copies and security, and those that are necessary to enable the provision of the contracted services, respecting in all cases the obligations imposed by the RGPD and its implementing regulations. At any time, the client may contact ANGAR to find out the identity of the subcontracted entities for the provision of the indicated services, which will act in accordance with the terms provided in this document and after formalizing a data processing contract with ANGAR. according to art. 28.4 of the GDPR.
- The client authorizes ANGAR to carry out the actions indicated below, as long as they are necessary for the execution of the provision of services. Said authorization is limited to the action(s) necessary for the provision of each service and with a maximum duration linked to the validity of the applicable contractual conditions:
- To carry out the processing of personal data on portable devices only by the users or user profiles assigned to the provision of the services.
- To carry out the treatment outside the client's or ANGAR's premises, only by the users or user profiles assigned to the provision of the services.
- The entry and exit of media and documents containing personal data, including those included and/or attached to an email, outside the premises under the control of the client responsible for the treatment.
- The execution of the data recovery procedures that ANGAR is obliged to carry out.
- ANGAR is not responsible for non-compliance with the obligations derived from the RGPD or the corresponding regulations on data protection by the user and/or client in what corresponds to their activity and which is related to the execution of the contract. or commercial relationships that unite you with ANGAR. Each party must face the responsibility arising from its own failure to comply with contractual obligations and the regulations themselves.