THE WEB SITE PRIVACY POLICY
https: / / 4olas.com
I. PRIVACITY AND DATA PROTECTION POLICY
In accordance with the legislation in force, 4 Waves (hereinafter also Web site) undertake to take the necessary technical and organizational measures, depending on the level of security appropriate to the risk of the data collected.
Laws that incorporate this privacy policy
This privacy policy is adapted to existing Spanish and European legislation on the protection of personal data on the Internet. In particular, it respects the following rules:
Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (RGPD).
Organic Law 3 / 2018 of 5 December, on the protection of personal data and the guarantee of digital rights (LOPD-GDD).
Royal Decree 1720 / 2007 of 21 December, approving the Regulations for the Development of Organic Law 15 / 1999 of 13 December, on the Protection of Personal Data (RDLOPD).
Act No. 34 / 2002 of 11 July 2002 on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the person responsible for processing personal data
The responsible for the processing of personal data collected in 4 Waves is Seria SC, with NIF: J19868124 (hereinafter responsible for the treatment). Your contact details are as follows:
Address: Buenevento, 40, 18002, Granada
Contact phone: 633 929 276
Contact email: lopd @ 4olas.es
Personal Data Register
In compliance with the provisions of the RGPD and the LOPD-GDD, we inform you that the personal data collected by 4 Waves, by means of the forms extended on your pages, will be incorporated and will be treated in our file in order to be able to facilitate, speed and meet the commitments established between 4 Waves and the User or the maintenance of the relationship established in the forms that it fills, or to meet a request or consultation of the user. In addition, in accordance with the provisions of the RGPD and the LOPD-GDD, unless the derogation provided for in Article 30.5 of the RGPD applies, a record of treatment activities is maintained, specifying, according to its purposes, the treatment activities carried out and the other circumstances set out in the RGPD.
Principles applicable to the processing of personal data
The processing of the user's personal data shall be subject to the following principles as set out in Article 5 of the RGPD and Article 4 et seq. of Organic Law 3 / 2018 of 5 December 2018 on the protection of personal data and the guarantee of digital rights:
The principle of legality, loyalty and transparency: the consent of the User shall be required at all times after fully transparent information on the purposes for which the personal data are collected.
Principle of purpose limitation: personal data shall be collected for specific, explicit and legitimate purposes.
Data minimization principle: the personal data collected shall be only those strictly necessary for the purposes for which they are treated.
Principle of accuracy: personal data must be accurate and always updated.
The principle of limitation of the storage time: personal data shall only be maintained in such a way as to allow the user to be identified for the time necessary for the purpose of processing.
The principle of integrity and confidentiality: personal data shall be treated in such a way as to ensure their security and confidentiality.
The principle of proactive responsibility: the controller shall be responsible for ensuring that the above principles are met.
Categories of personal data
The data categories treated in 4 Waves are only identifying data. In no case are there special categories of personal data within the meaning of Article 9 of the RGPD.
Legal basis for the processing of personal data
The legal basis for the processing of personal data is consent. 4 Waves undertakes to seek the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.
The User shall have the right to withdraw his consent at any time. It will be as easy to withdraw the consent as giving it. As a general rule, withdrawal of consent will not condition the use of the Website.
In cases where the User must or may provide his or her data by means of forms to consult, request information or for reasons related to the content of the Website, he or she shall be informed if the completion of any of them is mandatory because they are essential for the proper conduct of the operation.
The purpose of the processing to which the personal data are intended
The personal data are collected and managed by 4 Waves in order to be able to facilitate, speed up and meet the commitments established between the Website and the User or to maintain the relationship established in the forms that the latter completes or to meet a request or consultation.
The data may also be used for a commercial purpose of customization, operational and statistical, and activities specific to the social object of 4 Waves, as well as for the extraction, storage of data and marketing studies to adapt the Content offered to the User, as well as to improve the quality, operation and navigation of the Website.
When the personal data are obtained, the User shall be informed of the specific purpose (s) of the processing to which the personal data will be intended, i.e. the use (s) to be given to the information collected.
Personal data retention periods
The personal data shall be retained only for the minimum time necessary for the purposes of processing and, in any case, only for the following period: 2 years, or until the User requests its deletion.
When the personal data are obtained, the User shall be informed of the period during which the personal data will be kept or, where this is not possible, of the criteria used to determine this period.
Addressees of personal data
The personal data of the User shall not be shared with third parties.
In any case, at the time the personal data are obtained, the User shall be informed of the addressees or categories of addressees of the personal data.
Personal data of minors
In accordance with articles 8 of the RGPD and 7 of Organic Law 3 / 2018 of 5 December 2018 on the protection of personal data and the guarantee of digital rights, only those over 14 years of age may consent to the processing of their personal data in a lawful manner by 4 Waves. In the case of a person under 14 years of age, the consent of the parents or guardians shall be necessary for treatment, and the treatment shall be considered lawful only to the extent that they have authorized it.
Secret and security of personal data
4 Waves undertakes to take the necessary technical and organizational measures, depending on the level of security appropriate to the risk of the data collected, in a way that ensures the security of personal data and prevents the destruction, loss or accidental or unlawful alteration of personal data transmitted, preserved or otherwise processed, or the unauthorized communication or access to such data.
The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted safely and confidentially, as it is the transmission of data between the server and the User, and in feedback, fully encrypted or encrypted.
However, because 4 Waves cannot guarantee the inexpugnability of the Internet or the total absence of hackers or others who fraudulently access personal data, the controller undertakes to communicate to the User without undue delay when a personal data security violation is likely to pose a high risk to the rights and freedoms of natural persons. In accordance with Article 4 of the RGPD, a violation of the security of personal data means any violation of the security that causes the destruction, loss or accidental or unlawful alteration of personal data transmitted, preserved or otherwise processed, or the unauthorized communication or access to such data.
Personal data shall be treated as confidential by the controller, who undertakes to inform and to ensure through a legal or contractual obligation that such confidentiality is respected by his or her employees, associates, and any person to whom the information is made accessible.
Rights arising from the processing of personal data
The User has over 4 Waves and will therefore be able to exercise in front of the controller the following rights recognized in the RGPD and Organic Law 3 / 2018 of 5 December, on the protection of personal data and the guarantee of digital rights:
Right of access: It is the right of the User to obtain confirmation of whether 4 Waves are processing his or her personal data and, if so, to obtain information on his or her specific personal data and the processing that 4 Waves has carried out or carried out, as well as, inter alia, the information available on the origin of such data and the addressees of the communications made or planned for them.
Right to rectification: It is the right of the User to change his personal data that are inaccurate or, taking into account the purposes of the treatment, incomplete.
The right to be deleted ("the right to be forgotten"): It is the right of the user, provided that the current legislation does not otherwise establish, to obtain the deletion of his personal data where these are no longer necessary for the purposes for which they were collected or processed; the user has withdrawn his consent to the treatment and the user has no other legal basis; the user is opposed to the processing and there is no other legitimate reason to continue with it; the personal data have been unlawfully processed; the personal data must be deleted in compliance with a legal obligation; or the personal data have been obtained from a direct supply of the information of the company to 14 years. In addition to deleting the data, the controller, taking into account the available technology and the cost of its application, shall take reasonable measures to inform those responsible that they are processing the personal data of the request for the removal of any link to such personal data.
Right to limitation of treatment: It is the User's right to limit the processing of his personal data. The User has the right to obtain treatment limitation when challenging the accuracy of his personal data; the treatment is illegal; the controller no longer needs personal data, but the User needs it to make complaints; and when the User has opposed the treatment.
The right to portability of data: If the processing is carried out by automated means, the User shall have the right to receive from the controller his personal data in a structured, common use and mechanical reading format and to transmit them to another controller. Where technically possible, the controller shall transmit the data directly to that other controller.
Right of opposition: It is the right of the user not to process his personal data or to stop processing them by 4 Waves.
Right not to be the subject of a decision based solely on automated processing, including profiling: It is the right of the User not to be the subject of an individual decision based solely on the automated processing of his personal data, including profiling, existing unless the existing legislation provides otherwise.
The User may therefore exercise his rights by means of written communication addressed to the controller with the reference "RGPD-https: / / 4olas.com," specifying:
Name of the user and copy of the ID. In cases where representation is admitted, the identification by the same means of the person representing the User, as well as the document of the representation, shall also be necessary. The photocopy of the IID may be replaced by any other means valid in law that attests to the identity.
Request with the specific reasons for the request or information to which it is intended.
Domicile for notification purposes.
Date and signature of the applicant.
Any document that proves your request.
This request and any other attached document may be sent to the following address and / or e-mail:
Postal address: Buenevento, 40, 18002, Granada
E-mail: lopd @ 4olas.es
Links to third-party websites
The Website may include hyperlinks or links that allow access to third-party websites other than 4 Waves, and are therefore not operated by 4 Waves. The holders of such websites shall have their own data protection policies, being themselves, in each case, responsible for their own files and their own privacy practices.
Claims to the supervisory authority
In the event that the User considers that there is a problem or violation of the rules in force in the manner in which his personal data are being processed, he or she has the right to effective judicial protection and to file a complaint with a supervisory authority, in particular in the State in which he or she has his or her habitual residence, place of work or place of the alleged offence. In the case of Spain, the control authority is the Spanish Data Protection Agency (https: / / www.aepd.es /).
II. ACCEPTATION AND CHANGES IN THIS PRIVACITY POLICY
It is necessary that the User has read and is in accordance with the conditions on the protection of personal data contained in this Privacy Policy, and that he / she accepts the processing of his / her personal data so that the controller can proceed to it in the form, during the time limits and for the purposes indicated. The use of the Website will involve acceptance of its Privacy Policy.
4 Waves reserves the right to change their Privacy Policy, in accordance with their own criteria, or motivated by a legislative, case-law or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User consult this page regularly to be aware of the latest changes or updates.
This Privacy Policy was updated to comply with Regulation (EU) 2016 / 679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (RGPD) and with Organic Law 3 / 2018 of 5 December 2018 on the protection of personal data and the guarantee of digital rights.