PRIVACY POLICY

“Marlascanteras” is deeply committed to complying with Spanish and European regulations on the protection of personal data and guarantees full compliance with the obligations set out, as well as the implementation of the security measures outlined in the General Data Protection Regulation (GDPR) (EU) 2016/679, of April 27, and in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (LOPD and GDD, hereinafter LOPD).

In accordance with these regulations, we inform you that using our website may require the provision of certain personal data through contact forms or by sending emails, and that these will be processed by “Marlascanteras,” the data controller, whose details are:

• Corporate Name: De Santi Martí Insular S.L
• Tax ID (CIF/NIF): B35520279
• Registered Office: C/ General Mas de Gaminde, 7 · Ground floor, right door · 35006 · Las Palmas de Gran Canaria
• Phone: +34 630 010 667
• Email: hola@marlascanteras.com

Collection and Processing of Personal Data

A personal data is any information related to a person: name, email, address, phone number, ID number (NIF/NIE)… Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their internet service provider.

As the Data Controller, “Marlascanteras” is obliged to inform Users of its website about the collection of personal data that may occur, either through sending emails or by filling out forms included on the website.

Only the necessary data will be obtained to provide the contracted service or to appropriately respond to the request for information made by the User. The collected data is identifiable and corresponds to a reasonable minimum to carry out the performed activity. In particular, no specially protected data is collected at any time. In no case will a use different from the purpose for which they were collected be made.

Contact Forms/Email

• Purpose: To respond to your request for information made through our contact form(s).
• Legal Basis: The legal basis that legitimizes this processing is the User’s consent, which can be revoked at any time.
• Data Transfer: Personal data will be processed through servers managed by Wpmudev, which will be considered as the Data Processor.

Minors

Only persons over 14 years old can provide personal data on this website. According to the LOPD and GDD, for minors under 14 years of age, the consent of their parents or guardians will be a mandatory requirement for us to process their personal data.

Additionally, only persons over 18 years old can contract our services. For minors under 18 years old, the consent of their parents or legal guardians will be a mandatory requirement for us to provide the offered services, unless the minor is emancipated.

Security Measures

Users of the “Marlascanteras” website are informed that technical and organizational security measures have been adopted within our reach to prevent the loss, misuse, alteration, unauthorized access, and theft of data, ensuring the confidentiality, integrity, and quality of the information contained therein, in accordance with current regulations on data protection. Personal data collected in the forms is processed solely by “Marlascanteras” personnel or designated Data Processors.

The “Marlascanteras” website also has SSL encryption, which allows the User to securely send their personal data through the contact or registration forms on the website.

Accuracy of Data

The User states that all data provided by them is true and correct and agrees to keep it updated. The User will be responsible for the accuracy of their data and will be the only one responsible for any conflicts or disputes that may arise from the falsity of these data. It is important that the User informs “Marlascanteras” whenever there has been any modification to their personal data to keep it updated.

Data Transfer

“Marlascanteras” will not transfer or communicate your data to any third party, except in cases legally provided for or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:

• Technological or IT service providers
• Payment service providers
• Courier and parcel companies
• Third parties or intermediaries, as service providers, acting on our behalf (accounting firm, consultancy, etc.)

Data transfers will occur respecting the strictest confidentiality, using necessary measures, such as signing confidentiality agreements or adhering to the privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors by written request, by any of the means previously referenced.

Additionally, in cases where necessary, Customer data may be transferred to certain organizations to comply with a legal obligation: Spanish Tax Agency, Labor Inspection, etc.

Exercise of User Rights

The LOPD and the GDPR grant data subjects the possibility of exercising a series of rights related to the processing of their personal data. To do so, the User must address, providing documentation that proves their identity (ID card or passport), by email to hola@marlascanteras, or through written communication to the address appearing in our Legal Notice. Such communication must reflect the following information: the User’s name and surname, the object of the request, address, and supporting data.

The exercise of rights must be carried out by the User. However, they may be executed by a person authorized as the User’s legal representative, providing the documentation that accredits such representation.

The User may request the exercise of the following rights:

• Right to request access to personal data: the right to obtain information about whether their own personal data is being processed, the purpose of the processing that, if any, is being carried out, as well as the available information about the origin of such data and the communications made or planned for them.
• Right to request rectification if the personal data is incorrect or inaccurate, or deletion of data that proves to be inadequate or excessive.
• Right to request the limitation of their processing, in which case “Marlascanteras” will only keep the data strictly necessary for the exercise or defense of claims.
• Right to object to the processing: this refers to the right of the data subject to not have their personal data processed or to cease processing it in cases where their consent is not necessary for the processing, that they are commercial prospecting files, or that they have the purpose of adopting decisions related to the data subject and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims, the processing must continue.
• Right to data portability: if you want your data to be processed by another company, “Marlascanteras” will facilitate the portability of your data in an exportable format.

In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time, without affecting the legality of the processing based on the consent prior to its withdrawal.

We commit to execute all these rights within the maximum legal term (1 month).

If a User believes there is a problem with how “Marlascanteras” is handling their data, they can direct their claims to the security officer or the corresponding data protection authority, the Spanish Data Protection Agency being the indicated one in the case of Spain.

Data Retention

Personal data of Users who use the contact form or send us an email requesting information will be processed for the strictly necessary time to attend to the request for information or until the given consent is revoked.

Personal data of Clients will be processed until the contractual relationship ends. The personal data retention period will be the minimum necessary, and it may be maintained up to:

• 4 years: Law on Offenses and Penalties in the Social Order (obligations in matters of affiliation, registrations, cancellations, contributions, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…)
• 5 years: Art. 1964 Civil Code (personal actions without special term)
• 6 years: Art. 30 Commercial Code (accounting books, invoices…)
• 10 years: Art. 25 Law on Prevention of Money Laundering and Financing of Terrorism.
• No term: disaggregated and anonymized data.

Social Media

“Marlascanteras” has profiles on some of the main social networks on the Internet (Facebook, Instagram, LinkedIn). The purpose of processing data by “Marlascanteras” will be to inform its followers about its activities, using the tools that the relevant social network allows, and to provide a personalized user support service. Users should take into account that the use of these social networks is subject to their respective terms of use and privacy policies of the platforms. “Marlascanteras” recommends that Users consult these terms and privacy policies before using the links or applications provided.

In no case will “Marlascanteras” extract data from social networks unless the User’s express consent is obtained. Additionally, “Marlascanteras” is not responsible for the privacy practices of these social networks or their applications, especially concerning confidentiality, processing of personal data, and content.

Confidentiality

The information provided by the User will, in any case, be considered confidential, and cannot be used for purposes other than those described here. “Marlascanteras” is obliged not to disclose or reveal information about the User’s intentions, the reasons for the requested advice, or the duration of their relationship with the User.

Validity

This privacy and data protection policy was drafted on August 29, 2024. It may vary based on changes in regulations and jurisprudence that may occur, being the responsibility of the data holder to read the updated document to know their rights and obligations at any given time.