1. USER INFORMATION

Who is responsible for the processing of your personal data?

NOLWENN GUILBERT is the DATA CONTROLLER responsible for processing the USER’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR), and Organic Law 3/2018, of December 5 (LOPDGDD).

Why do we process your personal data? To maintain a commercial relationship with the user. The operations intended for data processing are:

• Sending advertising communications by e-mail, fax, SMS, MMS, social networks, or any other current or future electronic or physical medium that enables commercial communications. These communications will be made by the DATA CONTROLLER and will be related to their products and services, or those of their collaborators or suppliers with whom they have reached a promotional agreement. In this case, third parties will never have access to the personal data.
• Conducting market studies and statistical analysis.
• Processing orders, requests, providing responses to queries, or any other type of request made by the USER through any of the contact methods available on the DATA CONTROLLER’s website.
• Sending online newsletters about news, offers, and promotions related to our activities.

What is the legal basis for processing your personal data? The processing is legitimized by Article 6 of the GDPR in the following ways:

• With the USER’s consent: sending commercial communications and newsletters, managing communications by e-mail with interested parties, managing the commercial relationship that the USER has entered into and contracted with us.
• By the legitimate interest of the DATA CONTROLLER: conducting market studies, statistical analysis, etc., and processing orders, requests, etc., at the USER’s request.
• For contractual execution and/or pre-contractual relationship: preparing a budget tailored to the USER’s needs, managing the commercial relationship that the USER has subscribed to and contracted with us.

How long will we keep your personal data? It will be kept no longer than necessary to fulfill the purpose of the processing or as required by legal prescriptions for its custody. When no longer necessary, the data will be deleted with appropriate security measures to ensure data anonymization or total destruction.

To whom do we disclose your personal data? No communication of personal data to third parties is planned, except if necessary for the development and execution of the processing purposes, to our service providers related to communications, with whom the DATA CONTROLLER has signed confidentiality and data processing agreements as required by current privacy regulations.

What are your rights?

In accordance with Articles 13 of the GDPR and 11.2.c) of the LOPDGDD, the USER can exercise any of the following rights by communicating them to the postal address C/ Lopez de Hoyos, 323, 2B 28043 MADRID or by e-mail to info@nolwennguilbert.com. In any case, under the current regulations, the USER has the following rights as outlined in Articles 15 to 22 of the GDPR and Articles 12 to 18 of the LOPDGDD:

• Right to withdraw consent at any time.
• Right of access, rectification, portability, and deletion of your data, as well as the right to limit or object to its processing.
• Right to file a complaint with the supervisory authority (www.aepd.es) if you believe that the processing does not comply with the applicable regulations.

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

By ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, the USER expressly and freely accepts that their data is necessary to address their request by the service provider. The inclusion of data in other fields is voluntary. The USER guarantees that the personal data provided to the DATA CONTROLLER is truthful and is responsible for communicating any changes to them.

The DATA CONTROLLER informs that all data requested through the website is mandatory, as it is necessary to provide an optimal service to the USER. If all required data is not provided, it cannot be guaranteed that the information and services provided will fully meet the USER’s needs.

3. SECURITY MEASURES

In accordance with the provisions of the applicable regulations on the protection of personal data, the DATA CONTROLLER is complying with all provisions of the GDPR and LOPDGDD regarding the processing of personal data under its responsibility, and specifically with the principles outlined in Article 5 of the GDPR. These principles ensure that data is processed lawfully, fairly, and transparently in relation to the data subject, and is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

The DATA CONTROLLER guarantees that appropriate technical and organizational measures have been implemented to apply the security measures established by the GDPR and LOPDGDD to protect the rights and freedoms of USERS and has communicated the relevant information to allow USERS to exercise those rights.