Privacy Policy

Further information about our privacy policy

Who is the data controller?

Name: Lourdes Elicegui Eceiza
ID number: 34100234C
Postal address: Plaza Eihera, 15, Ground Floor B, Postcode 20305 Irún, Guipúzcoa
Telephone: 943476005
Email: muxkilda@hotmail.com

Why do we process your personal data?

To comply with the duty to provide information and/or obtain the necessary consent required by the new European data protection regulations, or any other legally established obligation.
To manage enquiries, requests for information, quotes and applications, and to respond to them.
To manage the provision of services, orders or products related to our commercial and economic activities.
Should you send us your CV or apply for any of the job vacancies we may publish, we will process your data for the purpose of assessing and managing your job application and, where applicable, carrying out the necessary procedures for the selection and recruitment of staff, in order to offer positions that match your profile. Unless otherwise stated, the provision of the required data is necessary; therefore, failure to provide it will prevent the selection process from continuing.
Only if you have given your express prior consent will we also process your data to send you marketing communications regarding our products or services, unless you indicate your objection by any means. In any case, consent to process your data for this purpose is voluntary, and your refusal would simply mean that you would not receive marketing offers for our products or services.

How long will we keep your data?

The personal data you provide will be retained for as long as the contractual or commercial relationship remains in force, or for a period of four years from the date of the last business transaction, in accordance with tax regulations.

However, only if you have given us your consent for commercial communications will our organisation continue to retain your information for the purpose of sending such commercial communications that we consider to be of interest to you, provided that you do not request their deletion.

Subsequently, the data will be deleted in accordance with data protection regulations, which entails its blocking, with it being available only upon request from judges and courts, the Public Prosecutor’s Office or the competent public authorities during the limitation period for any actions that may arise, and, once this period has elapsed, its complete deletion.

You may always exercise the rights granted to you under current legislation by contacting us via the method that is most convenient for you.

Why do we process your data?

The legal basis for processing your personal data may vary depending on the purposes set out above, which include:

The implementation of pre-contractual measures, or the contractual relationship itself for the provision of the requested service, based on the performance of the service contract necessary for the completion of the business transaction.
Your express consent as the data subject, for example for potential marketing communications or for the collection and processing of CVs in the organisation’s recruitment processes.
The organisation’s legitimate interest in responding to requests for information, building customer loyalty, resolving enquiries and improving the quality of our products and services in order to provide you with a more personalised service.

Who will your data be shared with?

As a general rule, your data will not be disclosed to any third party, except where required by law. Should this policy change, you will be duly informed and your consent will be sought for such a transfer. Please note that no international transfers will take place either.

However, please note that in order to provide our services correctly (e.g. web hosting, support, email marketing, etc.), various service providers contracted by our organisation (data processors) may have access to the personal information necessary to perform their duties, solely for the purpose of ensuring the proper fulfilment of the contractual and/or commercial relationship and complying with the organisation’s legal obligations.

These services provided by third parties are necessary for the conduct of our business, and at all times, the processing of data carried out by them is governed by a contract binding the data processor to our organisation. Under no circumstances will they use the information for any other purpose, and they will process it in accordance with the guidelines set out by our organisation, in line with its privacy policy and current data protection legislation.

In line with our commitment to the User’s privacy and data protection, we will only select service providers that offer sufficient guarantees to implement appropriate technical and organisational measures, ensuring that data processing complies with applicable data protection legislation and safeguards the User’s rights.

What are your rights when you provide us with your personal data?

What are your rights when you provide us with your personal data? Anyone has the right to obtain confirmation as to whether or not we are processing personal data concerning them. In this regard, you have the right to request:

Right of access: the data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed, as well as detailed information regarding certain aspects of the processing being carried out.
Right to rectification: the data subject shall have the right to obtain the rectification of inaccurate personal data concerning them or to have incomplete data completed.
Erasure: the data subject shall have the right to request the erasure of their personal data; in all cases, erasure shall be subject to the limits established in the applicable legislation.
Restriction of processing: the data subject shall have the right to request the restriction of the processing of their personal data.
Objection to processing: in certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data. The organisation will cease processing the data, except for legitimate, compelling reasons, or for the exercise or defence of potential claims.
Right to data portability: that is, you have the right to receive the personal data concerning you, which you have provided to a data controller, in a structured, commonly used and machine-readable format, and to transmit it to another data controller.

You may exercise these rights by contacting the data controller. To do so, please use the contact details provided at the beginning of this document.

If you wish to obtain further information regarding the exercise of your rights, you may also contact the Spanish Data Protection Agency.

Furthermore, we inform you that, should you deem it appropriate, you have the right to withdraw, at any time, the consent granted for a specific purpose, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.

Should you consider that your rights have not been adequately addressed, you may lodge a complaint with the Spanish Data Protection Agency. C/ Jorge Juan, 6. 28001 – Madrid.
www.agpd.es