This privacy policy (hereinafter, the “Privacy Policy”) applies to all personal data that the User provides to ORSÚ through its website:
xxx
For the purposes of our Privacy Policy, the “User” is any natural person interested in the products and services that ORSÚ offers through its website.
The purpose of this ORSÚ Privacy Policy is to provide transparency in the processing of your data and to protect it.
I.- WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
Name of the Data Controller: ORSÚ
Address: ………………………….
Email address: ……………………
II.- WHAT IS THE PURPOSE OF PROCESSING YOUR PERSONAL DATA?
The purposes of processing the personal data that you provide as a User during the purchase process of any of the ORSÚ products are as follows:
• A. Manage the purchase process of the products offered by ORSÚ through its website.
• B. Inform the User by any means, including sending commercial communications to the email address that the User, if applicable, provides ORSÚ products and services.
• C. Carry out promotional activities, including sending commercial communications to the email address provided by the User by ORSÚ, regarding ORSÚ products or services. third-party collaborating companies of ORSÚ from the following sectors: beauty, personal care, hygiene, leisure, etc. All these communications will be made with the prior consent of the User.
III.- WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR PERSONAL DATA?
• The legal basis for data processing for purpose (a) is the formalization of the purchase contract for the corresponding products.
• The legal basis for data processing for purpose (b) it will be both the consent of the User, in case it has been requested and granted, as well as the legitimate interest of ORSÚ in making its products known.
• The legal basis for the treatment of data for the purpose(c) It is the consent that could have been requested from the User, without in any case the withdrawal of the same conditions the execution of the contract of sale.
ORSÚ, at the time of carrying out the sale of its products, will collect and process the personal data essential for its formalization.
Among the data that we request are, name, surnames, DNI, email, postal address, card with which the purchase is made, address, etc..
In the event that you decide to have an account with us, you can choose a personal password that will facilitate access to your personal area.
The User knows and accepts that the non-completion of certain personal data will prevent ORSÚ from providing all those services linked to such data. In no case will ORSÚ transfer, exploit this data or use it for a use other than that expressly indicated here. During the registration process, the User will be informed of the non-mandatory nature of the collection of some of the data for the provision of Ecoeko services.
IV.- HOW LONG DO WE KEEP YOUR PERSONAL DATA?
ORSÚ will keep the data of its clients for the duration of their contractual relationship and after that, the data will be kept for promotional actions for a period of two years. (unless the treatment is based on the User’s consent and the User revokes it, in which case they will be kept until such revocation is received) therefore, the data will not be kept longer than necessary for the purposes described above, without prejudice to the conservation that is necessary for the formulation, exercise or defense of potential claims and/or whenever permitted/required by applicable law.
V.- WHO HAS ACCESS TO YOUR PERSONAL DATA?
The provision of the service by ORSÚ through its website may require that other third-party providers of ORSÚ services access the User’s personal data as data processors. By accepting this Privacy Policy, the User understands that some of the aforementioned service providers are located in countries outside the European Economic Area or that they do not offer a level of security equivalent to Spanish. In these cases, the transfers are based on the authorization of the Directorate of the Spanish Control Authority, on standard model clauses approved by the Commission or, where appropriate, on the Privacy Shield. To obtain more information about the previous guarantees or the fact that they have been provided, you can contact ORSÚ.
ORSÚ may make assignments or communications of personal data to meet its obligations with the Public Administrations in the cases that are required in accordance with the current legislation at any time and, where appropriate, also to other bodies such as Forces and Corps of State Security and the Spanish Courts and Tribunals.
VI.- WHAT ARE YOUR RIGHTS AS A USER?
ORSÚ informs the User about the possibility of exercising the rights of access, rectification, opposition, deletion, portability and limitation of the treatment as well as rejecting the automated treatment of the personal data collected by ORSÚ.
These rights may be exercised free of charge by the User, and if applicable, whoever represents him, by means of a written and signed request addressed to the address: ………………….. .
This request must contain the reference “Data protection/[ ORSÚ ]” in the subject line and must include the following data:
• name and surname of the User,
• address for the purposes of notifications/email address,
• photocopy of the National Identity Document or Passport,
• and request specifying the request .
In the case of representation, it must be proven by means of a reliable document.
Likewise, the User may exercise the aforementioned rights via email ……………………. .
In addition to the above rights, the User will have the right to withdraw the consent granted at any time through the procedure described above, without said withdrawal of consent affecting the legality of the treatment prior to its withdrawal. Ecoeko may continue to process the User’s data to the extent permitted by applicable law.
Likewise, when the processing of the User’s personal data for purpose (b) is based on legitimate interest, the User may oppose it.
ORSÚ reminds the User that they have the right to file a claim with the Control Authority regarding data protection.
VII.- UNSUBSCRIBE FROM THE SERVICE OF SENDING COMMERCIAL COMMUNICATIONS.
The User has the right to revoke at any time the consent given for the sending of commercial communications with the simple notification to ORSÚ by which he informs that he does not wish to continue receiving commercial communications. To do this, the User may either revoke his consent in the manner described in the previous section or click on the link included in each commercial communication, thus canceling the sending of electronic commercial communications.
VIII.- FROM WHAT AGE CAN THE USER ACCESS OUR PRODUCTS AND SERVICES?
The ORSÚ website is not directed at people under 18 years of age. By accepting this Privacy Policy, the User declares and guarantees that they are over 18 years of age.
IX.- WHAT SECURITY MEASURES HAVE WE IMPLEMENTED TO ENSURE THE CONFIDENTIALITY OF DATA?
ORSÚ undertakes to comply with its obligation to secrecy of personal data and its duty to store it, and will adopt the necessary measures to prevent its alteration, loss, treatment or unauthorized access.authorized, in accordance with the provisions of applicable regulations.
ORSÚ has implemented the necessary technical and organizational security measures to guarantee the security of your personal data and prevent its alteration, loss and treatment and/or unauthorized access, taking into account the state of technology, the nature of the stored data and the risks to which they are exposed, whether they come from human action or from the physical or natural environment, in accordance with the provisions of the applicable regulations.
ORSÚ entity concerned about privacy, in order to reinforce the confidentiality and integrity of information in its organization, continuously maintains the supervision, control and evaluation of its processes to ensure respect for privacy and information security.< /p>
X.- MODIFICATION OF THE PRIVACY POLICY
ORSÚ may modify its Privacy Policy in accordance with the applicable legislation at any time. In any case, any modification of the Privacy Policy will be duly notified to the User so that he is informed of the changes made in the processing of his personal data and, in the event that the applicable regulations so require, the User may be duly informed.
