PRIVACY AND DATA PROTECTION POLICY

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter RGPD), Law 34/2002 of 11 July, on information society services and electronic commerce (hereinafter LSSI-CE) and Organic Law 3/2018, on the Protection of Personal Data and guarantee of digital rights PORE PORE S. L guarantees the protection and confidentiality of personal data of any kind provided by our customers, in accordance with the provisions of the General Regulation on the Protection of Personal Data.

PORE PORE S.L.'s Data Protection Policy is based on the principle of proactive responsibility, according to which the Data Controller is responsible for compliance with the regulatory and jurisprudential framework, being able to demonstrate it to the relevant supervisory authorities.

The data provided will be treated in the terms established in the RGPD, in this sense PORE PORE S.L has adopted the levels of protection legally required, and has installed all the technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access by third parties, exposed below. However, the user must be aware that Internet security measures are not invulnerable.

Responsible for processing: Who are we?

Purpose of processing: What will we use your data for?

All data provided by our customers and / or visitors on the website of PORE PORE or its staff, will be included in the register of processing activities of personal data, created and maintained under the responsibility of PORE PORE, essential to provide the services requested by users, or to resolve questions or issues raised by our visitors. Our policy is not to elaborate profiles on the users of our services.

Legitimacy of the processing: Why do we need your data?

a) Contractual relationship: It is the one that applies when you purchase one of our products or contract one of our services.

b) Legitimate interest: To attend to the queries and claims that you raise with us and to manage the collection of the amounts owed.

c) Your consent: If you are a user of our website, by checking the box on the contact form, you authorize us to send you the necessary communications to respond to the query or request for information raised.

Recipients: Who do we share your data with?

No cedemos sus datos personales a nadie, a excepción de aquellas entidades públicas o privadas a las cuales estemos obligados a facilitar sus datos personales con motivo del cumplimiento de alguna ley. Por poner un ejemplo, la Ley Tributaria obliga a facilitar a la Agencia Tributaria determinada información sobre operaciones económicas que superen una determinada cantidad.

In the event that, apart from the aforementioned cases, we need to disclose your personal information to other entities, we will request your prior permission through clear options that will allow you to decide in this regard.

Communication: Where could we send your data?

We will not make international transfers of your personal data for any of the above purposes.

Retention: How long will we keep your data?

We will only retain your personal information for as long as is necessary to achieve the purposes for which it was collected. In determining the appropriate retention period, we consider the risks involved in the processing, as well as our contractual, legal and regulatory obligations, internal data retention policies and our legitimate business interests as described in this Privacy Notice and Cookie Policy.

In this sense, PORE PORE will keep the personal data once the relationship with you has ended, duly blocked, during the period of prescription of the actions that could derive from the relationship maintained with the interested party.

Once blocked, your data will be inaccessible to PORE PORE, and will not be processed except to make them available to the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the treatments, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.

Security: How will we protect your data?

We use all reasonable efforts to maintain the confidentiality of personal information processed on our systems. We maintain strict levels of security to protect the personal data we process against accidental loss and against unauthorized access, processing or disclosure, taking into account the state of technology, nature and risks to which the data is exposed. However, we cannot be held responsible for your use of the data (including username and password) you use on our website. Our staff follows strict privacy standards and where we engage third parties to provide support services, we require them to abide by the same standards and allow us to audit them for compliance.

Your rights: What rights can you exercise as a concerned person?

We inform you that you may exercise the following rights:

• Right of access to your personal data, to know which are being processed and the processing operations carried out with them.
• Right to rectification of any inaccurate personal data.
• Right to erasure of your personal data, where this is possible (e.g., by law).
• Right of limitation of the processing of your personal data when the accuracy, lawfulness or necessity of the data processing is in doubt, in which case, we may retain them for the exercise or defense of claims.
• Right of opposition to the processing of your personal data, when the legal basis that enables us to process them is our legitimate interest. PORE PORE will stop processing your data unless it has a legitimate interest or it is necessary for the defense of claims.
• Right to portability of your data, when the legal basis that enables us to process it is the existence of a contractual relationship or your consent.
• Right to revoke consent given to PORE PORE.

To exercise your rights, you may do so free of charge and at any time by contacting us at C/ Balmes, 65, 2º, 1ª, 08007, Barcelona, attaching a copy of your ID card.

Guardianship of rights: Where can you file a claim?

In case you understand that your rights have been disregarded by our entity, you can file a complaint with the Spanish Data Protection Agency, through any of the following means:

• Electronic headquarters: https://www.aepd.es
• Postal mail: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid
• Telephone: 901.100.099 and 912.663.517

Filing a complaint with the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or solicitor is not required.

Updates: What changes may be made to this Privacy Policy?

PORE PORE reserves the right to modify this policy to adapt it to new legislation or jurisprudence that may affect compliance with it.

In order to ensure compliance with the regulations on the protection of personal data, PORE PORE has received consulting and advisory services from ClickDatos.