Privacy policy
The purpose of this policy is to inform data subjects about the different types of processing carried out by this organization through its website that involve their personal data in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and the provisions of Organic Law 3/2018 of December 5, 2018 about the Protection of Personal Data and guarantee of digital rights.
1. IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER The company GRUPO MUNRECO S.L., with registered office at C/ ANABEL SEGURA 7, PLTA. 1-D (28108 ALCOBENDAS) MADRID and identification number B28557064, telephone 914848018 and email adress gdpr@munreco.com
DATA PROTECTION OFFICER SEGURIDAD Y PRIVACIDAD DE DATOS S.L., telephone 963 122 868 and email adress infodpo@forlopd.es
2. PURPOSE OF THE PROCESSING OF YOUR PERSONAL DATA USERS/WEBSITE VISITORS We will process your personal data provided through our web forms to:
-
To respond to requests, complaints and incidents transferred through our contact channels incorporated in the website.
-
Understand user behavior on the website, in order to detect possible cyber-attacks on our website.
-
Comply with legal obligations that are directly applicable to us and regulate our activity.
-
To protect and exercise our rights or to respond to claims of any kind.
-
Where applicable, sending commercial communications regarding the goods or services that make up our activity and / or news or newsletters related to our sector. If you do not provide your consent, we will be unable to sending you information from the entity.
-
If applicable, to manage your participation in contests and special offers that the entity carries out. Your refusal to provide us with authorization will make it impossible for you to participate.
-
If applicable, to send satisfaction and/or quality surveys. Your refusal to provide us with the authorization will imply the impossibility to evaluate the service provided.
-
Manage your registration on the entity's web platform and generate a username and password. Your refusal to provide us with authorization will make it impossible for us to register you on the platform.
CLIENTS
In addition to the purposes indicated in the section "users/users of the website", we will process the personal data provided for the following purposes:
-
Manage the commercial relationship.
-
Carry out all necessary steps related to the shipment and receipt of the purchased product through this website.
-
Administrative, accounting and tax management.
CANDIDATES AND JOB APPLICANTS.
In addition to the purposes indicated in the section "users/users of the website", we will process your personal data provided for the following purposes:
-
Manage your application and communicate with you to keep you informed about the status of the selection process and your application.
3. LEGAL BASIS FOR PROCESSING USERS/NAVIGATORS OF THE WEBSITE OF THE RESPONSIBLE PARTY
-
In the consent you have given us to process your data for the purposes indicated. If you do not provide your personal data, we will be unable to processing your data for the aforementioned purposes.
-
To comply with the legal obligations that apply to us. In this case, the data subject cannot object to the processing.
-
In our legitimate interest to protect our image, business and history by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although the data subject may exercise, where appropriate, the rights recognised in the "rights" section of this policy.
CLIENTS
-
Performance of a contract to which you are a party or application of pre-contractual measures. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
-
In the consent that you have given us to process your data for purposes other than the development or execution of the existing contract. The refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
-
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
-
In our legitimate interest to protect our image, business and history by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although the data subject may exercise, where appropriate, the rights recognised in the "rights" section of this policy.
CANDIDATES AND JOB APPLICANTS.
-
The consent you have given us to process your data for the aforementioned purposes. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
-
To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
-
In our legitimate interest to protect our image, business and history by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although the data subject may exercise, where appropriate, the rights recognised in the "rights" section of this policy.
4. WEBSITE TOOLS AND INTEGRATIONS Chat bot
The website has a chat bot channel to communicate with customer service. To initiate a conversation, we require your prior consent. However, please note that our provider applies its own privacy policy, so we recommend that you review your settings on the service and carefully read the privacy policy. You can access it by clicking here.
Push notifications
With your consent, we may send you notifications to inform you about the organisation's activity or to keep you up to date with the latest news.
Google reCAPTCHA
We use the Google reCAPTCHA service to detect, on the basis of legitimate interest, to determine whether the website is being used by bots, in order to protect the portal and prevent abusive and fraudulent practices, such as sending spam. You can access our supplier's privacy policy by clicking here.
Stripe
As part of our services, we use the Stripe payment gateway to process financial transactions and ensure that your payments are made securely and efficiently. We recommend that you first review Stripe's privacy policy to understand how they handle your personal information by clicking here.
Klarna
As part of our services, we use the Klarna payment gateway that offers financing services to process financial transactions and make sure that your payments are made safely and efficiently. We recommend that you review Klarna's privacy policy beforehand to understand how they handle your personal information by clicking here.
Apple Pay
As part of our services, we use the Apple Pay payment gateway that offers financing services to process financial transactions and make sure that your payments are made safely and efficiently. We encourage you to review Apple Pay's privacy policy beforehand to understand how they handle your personal information by clicking here.
Google pay
As part of our services, we use the Google pay payment gateway that offers financing services to process financial transactions and make sure that your payments are made safely and efficiently. We recommend that you review Google pay's privacy policy beforehand to understand how they handle your personal information by clicking here.
Shop Pay
As part of our services, we use the Shop Pay payment gateway which is the payment method provided by Shopify to process financial transactions and make sure that your payments are made securely and efficiently. We encourage you to review Shopify's privacy policy beforehand to understand how they handle your personal information by clicking here.
5. DATA RETENTION PERIOD
The personal data provided will be kept for as long as necessary to fulfill the purposes for which they were initially collected.
Once the data are no longer necessary for the processing in question, they will be properly blocked to, where appropriate, make them available to the competent Public Administrations and Agencies, Judges and Courts or the Public Prosecutor's Office, during the limitation period for actions that may arise from the relationship with the client and/or the legally prescribed retention periods.
In the event that you have provided us with your resume, we will keep your data for the maximum period of two years from its receipt by the entity, and at that time we will proceed to its erasure unless you have authorized us to keep your data for a period of conservation longer than indicated. For these purposes, we inform you that you may revoke your consent at any time.
Data blocking period:
Retention criteria:
-
THE CIVIL CODE. Between 1 and or 5 years depending on the case, according to the provisions of articles 1964.2 and 1968.2 of the aforementioned legal body.
-
THE COMMERCE CODE. For 6 years, according to the provisions of article 30 of the aforementioned legal body. It applies regarding commercial information related to (invoices issued and received, tickets, corrective invoices, bank documents, etc.)
-
THE GENERAL TAX LAW. For 4 years attending to the provisions of articles 66 to 70 of the aforementioned legal body. It applies to information related to tax obligations
6. AUTOMATED DECISIONS AND PROFILING
The website does not make automated decisions or carry out profiling.
7. RECIPIENTS
During the duration of the processing of your personal data, organization may transfer your data to the following recipients:
-
Courts and the public Prosecutor's office
-
State Security Forces and Bodies (Police)
-
Other competent public authorities or bodies, when the data controller has a legal obligation to provide the personal data.
-
If applicable, to those Data Processors that provide services to us.
-
Banks and Financial Institutions.
-
Courier companies for the delivery of the purchased product.
8. INTERNATIONAL DATA TRANSFERS
The organisation does not carry out any international transfer of data. In the event that it is later necessary to carry out international data transfers, the degree of protection of the destination country will be verified and the guarantees required by the regulations will be adopted.
9. SOCIAL NETWORKS
In order to let you participate in our activity, and so that you can be aware of our news, we inform you that GRUPO MUNRECO S.L. Has created profiles on Social Networks.
All users have the opportunity to join our social networks or groups. However, you should be aware that, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid way), your data will belong to the corresponding Social Network, so we recommend that you carefully read its terms of use and privacy policies, as well as, make sure to configure your preferences regarding the processing of data.
Below, we detail the link to the privacy policy to the various Social Networks in which we have presence, so you can access at all times to privacy policies and configure your profile to ensure your privacy:
-
Facebook: https://es-es.facebook.com/privacy/policy/?entry_point=facebook_page_footer
-
YouTube: https://www.youtube.com/intl/ALL_es/howyoutubeworks/our-commitments/protecting-user-data/
-
Instagram: https://privacycenter.instagram.com/
-
TikTok: https://www.tiktok.com/legal/page/eea/new-privacy-policy/es
10. RIGHTS
Data subjects may request information and exercise at any time and completely free of charge, the rights of access, rectification and erasure, as well as to request that the processing of their personal data be restricted, to object to the processing, to request the portability of their personal data (whenever technically possible) or to withdraw the consent given, and if applicable, not to be subject to a decision based solely on automated processing, including profiling.
To do so, you may use the forms provided by the organization, or send a letter to the postal address or e-mail address indicated above. However, you may be asked to provide your ID card or any other similar document in order to prove your identity, provided that this cannot be done by other less intrusive means.
If you feel your rights have been violated with regard to the protection of your personal data, especially when you have not obtained satisfaction in the exercise of your rights, you can file a claim with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency), through its website: www.aepd.es).
In compliance with the provisions of Article 21 of Law 34/2002 of services of the information society and electronic commerce, if you do not wish to receive more information about our services, you can unsubscribe. If you do not wish to receive these emails, you can unsubscribe by sending an email to the following address gdpr@munreco.com with subject “UNSUBSCRIBE”.
11. ACCURACY OF DATA
The data subject guarantees that the data provided are true, accurate, complete and up-to-date; committing to report any changes by the channels enabled for this purpose and indicated in this policy. You will be liable for any damages, both direct and indirect, that you may cause as a result of the breach of this obligation.
If the user provides third-party data, they must declare that they have obtained the consent of those parties, the user must declare that the consent of the interested parties has been obtained, committing to transfer the information contained in this clause exempting the organisation from any liability arising from failure to comply with this obligation
12. MODIFICATIONS AND UPDATE
This privacy policy may be modified or updated in accordance with applicable legal requirements established or in order to adapt this policy to the instructions issued by the Data Protection Supervisory Authority (Spanish Data Protection Agency), or changes to our website. For this reason, we advise users to periodically visit our Privacy Policy.
