THE https: //www.aiestankona.com WEBSITE IS AN ECOMMERCE SITE. BY ACCESING AND USING THIS WEBSITE, YOU CONSENT TO THE PERSONAL DATA PRACTICES DESCRIBED IN THIS STATEMENT.
AINHOA informs User about its Personal Data Protection Policy on the Internet, provides User with information on how the personal information User provides is handled and used to freely decide whether or not to provide AINHOA with the Personal Data that may be required to use this Website.
The term ‘Personal Data’ applies to any information that can be used to identify User personally (such as user ID, name, date of birth, email address and postal address).
Protecting Personal Data is AINHOA's priority. In accordance with Regulation (EU) 2016/679 of 27 April 2016, Personal Data must be processed lawfully, fairly and transparently.
The Privacy Policy of this Website regarding the ‘Protection of Personal Data on the Internet’ is in accordance with the provisions of current Spanish and European regulations:
- Regulation (EU) 2016/679, Protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR). / - Organic Law 15/1999 on the Protection of Personal Data (LOPD). / -El Real Decreto 1720/2007, approves the Regulation implementing Organic Law 15/1999 on the Protection of Personal Data (RDLOPD). / - Law 34/2002, on Information Society Services and Electronic Commerce (LSSI-CE). / -Ley Organica 3/2018, Data Protection and Digital Guarantees (LOPDGDD).
1. THE RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA
The person responsible for processing your Personal Data is AINHOA ESTANCONA ALDECOA-OTALORA.
The Personal Data collected through the data collection forms on the Website or by other means will be incorporated into a personal data file duly registered in the General Data Protection Register of the Spanish Data Protection Agency, for which the owner of the Website is responsible. AINHOA will treat the Data confidentially and exclusively for the purpose of offering the services requested, with all the legal and security guarantees imposed by Organic Law 15/1999, of 13 December, on the Protection of Personal Data, Royal Decree 1720/2007, of 21 December and Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce.
2. PRIVACY POLICY UPDATE
The privacy policy may change from time to time. AINHOA invites User to consult this section regularly.
3. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
3.1. The legal basis for the processing of Personal Data are:
a) Free, specific, informed and unequivocal consent, while AINHOA informs by making this Privacy Policy available, which after reading it, if satisfied, the User can accept by means of a statement or a clear affirmative action, such as marking a box provided for this purpose.
b) The request for information and/or the contracting of AINHOA services, the Terms and Conditions of which will be made available to Customer in any case, prior to a possible contracting.
3.2. By submitting Personal Data to this Website User agrees to AINHOA using User's Personal Data as described in these Terms Of Use, including (without limit) AINHOA sending User newsletters and other related information about AINHOA and any products, services, promotions or events that AINHOA thinks may be of interest to User. User agrees that AINHOA may contact User by email, phone or other electronic means for these purposes.
3.3. User will have the right to withdraw their consent to process their Data, at any time, without retroactive effect. It will be as easy to withdraw consent as it is to give it.
3.4. User guarantees the authenticity, timeliness, veracity and legality of all the Data that he communicates in the forms provided for access to certain content or services offered by the Website and undertakes to keep them updated, communicating any changes to AINHOA.
User is liable for the truthfulness of the Data provided, and AINHOA waives all liability for this.
User is solely responsible for any false or inaccurate statements made. User will respond to AINHOA or to third parties, and will have the right to claim compensation for any damages and losses arising from the breach of that obligation.
4. CATEGORIES OF PERSONAL DATA
The Personal Data processed in this Website are only identifying data.
In no case are they special categories of Personal Data within the meaning of article 9 of the RGPD.
5. CONFIDENTIALITY, SECURITY and COLLECTION OF PERSONAL DATA
5.1. AINHOA guarantees that the collection of User’s Personal Data is confidential, relevant, adequate, not excessive and strictly necessary for its activities.
5.2. AINHOA undertakes to protect Personal Data against any loss, destruction, alteration, access or unauthorized disclosure. To this end, AINHOA take appropriate measures to keep Personal Data secure against unlawful or unauthorized access or accidental loss, damage or destruction.
AINHOA has security measures in place to protect User’s information. The Website has an SSL (SECURE SOCKET LAYER) certificate, which ensures that Personal Data is transmitted in an encrypted way and therefore, in a secure and confidential way.
The security measures we apply will depend on the type of information collected.
5.3. However AINHOA can never 100% guarantee the security of Personal Data sent over the internet or other public communications networks against hacking or other external threats beyond our reasonable control. In case of fraudulent access to Personal Data, AINHOA will notify the User, without delay, about any violation in the security of Personal Data that could entail a high risk for the rights and freedoms of people.
5.4. AINHOA does not assume any responsibility for damages derived from alterations that third parties may cause in the user's computer systems, electronic documents or files.
6. WHEN IS THE DATA COLLECTED
6.1. AINHOA does not collect any Personal Data unless the User voluntarily provides it.
AINHOA undertakes to obtain the express and verifiable consent of the User for the processing of Personal Data for specific purposes.
6.2. AINHOA may collect Data when a User submits to this Website or through ‘cookies’ (Cookies Policy).
AINHOA hereby notifies the User that the fields on the registration form are voluntary; however, the User is hereby informed that certain information is essential in order to be able to benefit from the AINHOA services. Should the User decide not to complete them totally/partially, this shall make it impossible for AINHOA to provide the service requested.
a) Within the framework of User’s navigation and access to the services on this Website, www.aiestankona.com, AINHOA is likely to collect the following information: the browser and device User is using; User’s IP address; User’s location; the site from which User accessed; what for User has/has not use this Website; or the Website User access after visiting this. For additional information on how this information is collected, see AINHOA Cookie Policy.
b) When User communicate with AINHOA by phone, post or email, or through a contact form, AINHOA collects all the Personal Data that User send, such as name and surname, postal/email address, telephone number, etc., as well as well as any information that User can provide and, where appropriate, the content of the message, as well as any information that is subsequently communicated during User’s exchanges with AINHOA.
c) Within the framework of the contractual relations with Customers; During a transaction (for example, an online/remote purchase) AINHOA may collect the following Data: name and surname, post/email address, telephone number, bank account/credit card number.: date of birth, work and family name, age range, dates of family events, occupation, hobbies, purchases, use of specific social networks, nationality, gender, language, preferred product categories, details of products purchased, size, price, discount rate the customer is/has been receiving, statistics on spending rates, abandoned shopping carts, events attended, products selected for a purchase but not actually purchased (hereinafter the "Personal Data"). This list is subject to change.
d) Within the framework of the protection of goods and persons.
7. PURPOSES FOR THE PROCESSING OF YOUR DATA
7.1. Personal Data are processed within the framework of the services offered by AINHOA in order to meet the purposes listed below. AINHOA shall use Personal Data Information to, among other things, communicate with the User in relation to the services and/or products that he/she has requested:
a) As part of the execution of the contract subscribed between AINHOA and customers: sales and after-sales service management/ shipping management/ billing management/ promotional events’ management.
b) In order to send any instant messaging information about AINHOA creations, products, events, and similar initiatives organized by AINHOA; private sales: personal buyer services/ free assistance and courtesy services/post-email, or in which AINHOA participates, including possible invitations to events.
c) By means of statistical analysis and profiling, for customer prospecting purposes and through services provided by trusted third-party providers selected by AINHOA, always after obtaining their consent. These are carried out using anonymized Data that enable AINHOA to improve the knowledge of AINHOA’s activities and customers. User may, in any case, object to it.
7.2. In this context, the legal basis of the processing operations is the legitimate interest of AINHOA.
7.3. POLICY WITH REGARD TO ELECTRONIC MAIL
AINHOA shall only send communications that User has requested to receive.
If User prefers not to receive these messages by electronic mail, User is offered the possibility of exercising the right to cancel and renounce receipt of these messages, in accordance with the provisions of Title III, article 22 of Law 34/2002 on Information Society Services and Electronic Commerce.
7.4. POLICY WITH REGARD TO COMMERCIAL COMMUNICATIONS.
In application of the LSSI, AINHOA shall not send advertising or promotional communications by electronic mail or any other equivalent means of electronic communication that have not been previously requested or expressly authorized by the recipients thereof.
In the case of Customers with whom there is a prior contractual relationship, AINHOA is authorized to send commercial communications referring to products or services from www.aiestankona.com that are similar to those initially contracted with the Client.
In any case, Customer, after proving his or her identity, may request that no further commercial information be sent to him or her.
8. RETENTION PERIODS OF PERSONAL DATA
By virtue of the provisions of Law 34/2002 of 11 July 2002 on Information Society Services and Electronic Commerce (LSSI), AINHOA shall retain Personal Data for the time necessary to achieve the purposes for which they are processed and, in any case, for a maximum period of 12 months.
The retention of this Data does not affect the secrecy of communications.
The aforementioned information will be safely deleted when it is no longer necessary for the above purposes, in accordance with the policies of AINHOA.
9. DATA RECIPIENTS
Users' Personal Data shall be treated as confidential and are intended for the exclusive use of AINHOA and are accessible only by employees authorized to manage it, in accordance with the purposes of the collection and within the limits of their respective attributions.
In order to prevent unauthorized access, destruction, accidental or illicit loss or alteration of the Data transmitted, stored or processed, AINHOA undertakes to guarantee, by means of a legal or contractual obligation, that this confidentiality is respected by its employees, associates and any other person to whom the information is made accessible.
10. DISCLOSURE TO THIRD PARTIES
AINHOA undertakes not to transfer, sell, share, rent o or lease the Data with third parties without User’s our express approval.
As an exception, AINHOA will disclose User’s personal information to third parties:
a) with trusted partners to help perform statistical analysis, send User email/postal mail, provide customer support, arrange for deliveries, process Data, when necessary, to support AINHOA’S business operations such as IT service or Website hosting provider or a mail management provider. These service providers are only authorized to process User’s Personal Data to the extent necessary to perform services on AINHOA’s behalf or to comply with legal requirements. All such third parties are required to maintain the confidentiality of User information.
b) Government agencies or other authorized bodies If AINHOA is under a duty to disclose or share User’s Personal Data in order to comply with any legal obligation or to protect AINHOA against illegal activity.
c) If AINHOA or its assets are acquired by a third party, in which case Personal Data held by AINHOA may be one of the transferred assets.
Under no circumstances will your Personal Data be communicated to commercial partners of AINHOA without your consent.
11. DATA SUBJECT'S RIGHTS
In accordance with the laws and regulations relating to the protection of Personal Data in force, the User has the following rights over the Personal Data that concern him:
RIGHT OF ACCESS. Right to obtain confirmation from AINHOA that your data are or are not being processed and to obtain a copy of such data.
RIGHT OF RECTIFICATION. Right to obtain, as soon as possible, the rectification of the Data which are inaccurate.
RIGHT TO BE FORGOTTEN. Right to obtain from AINHOA the erasure, as soon as possible, of your Data when one of the reasons referred to in Article 17 of the GDPR applies
THE LIMITATION OF THE PROCESSING. Right to obtain from AINHOA no longer to process his Personal Data -for the fixed period of time according to the reason in Article 18 of the RGPD-.
R. DATA PORTABILITY. Right to receive the Personal Data concerning him that have been provided to AINHOA, in a structured, commonly used and machine-readable format, as well as the right to transmit these data to another data controller.
RIGHT OF OPPOSITION. Right to request that AINHOA no longer process his Personal Data.
R. NOT TO BE THE SUBJECT OF AN AUTOMATED INDIVIDUAL DECISION. Right not to be the subject of a decision based exclusively on automated processing, including profiling, producing legal effects concerning or significantly affecting user.
RIGHT OF WITHDRAWAL OF USER'S CONSENT to the processing of his Personal Data by AINHOA at any time.
Where there is reasonable doubt as to the identity of the applicant, proof of identity may be requested where appropriate.
To exercise any of the above rights or if you have any queries or questions, please contact AINHOA at the following e-mail address: contact@aiestankona.com. AINHOA will be happy to assist you.
12. EXTERNAL DATA STORAGE SITES
AINHOA may store User’s Personal Data on servers provided by third party hosting vendors with whom AINHOA have contracted.