DATA OF THE DATA CONTROLLER
COMPANY NAME: JORGE REVILLA S.L. (hereinafter, the “COMPANY” or the “CONTROLLER”).
TAX ID: B09323510
ADDRESS: C/ LA PALOMA, 29 - 09003 BURGOS (Burgos) SPAIN
PHONE: 947274040
EMAIL for communications regarding Data Protection: gloria@jorgerevilla.com
APPLICABLE REGULATIONS: our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
JORGE REVILLA S.L. may modify this Privacy Policy to adapt it to legislative, case law, or interpretative developments of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy and, where appropriate, the General Conditions that may be established for certain products or services, if such access implies any specific provisions regarding the protection of personal data.
PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA: At JORGE REVILLA S.L. we collect and process your personal information in general to manage the relationship we have with you, the main purposes being the following:
A. To respond to inquiries, requests for information, suggestions, professional contact, process orders, appointments, reservations, demonstrations, applications or any type of request made by the interested party through any of the contact methods made available by the Controller on this website or other means. - Manage our commercial relationship. - Send you communications regarding products similar to those you previously purchased, as well as updates about our products or services that may be of interest to you. - Conduct market research, statistical analysis, surveys or satisfaction evaluations. The legal basis is the legitimate interest of the Controller.
B. To send you updates about our entity, promotions, advertising, newsletters, updates to our product and service catalog by any electronic or physical means, present or future, that enables such commercial communications. - Moderate and publish on the website the user’s experiences, opinions, comments and suggestions. Create and manage your user account to provide you with personalized access and manage the data you provide. The legal basis is the consent of the data subject.
C. Manage your online purchase or order, process payment and proceed with shipment, based on the general contracting conditions, as well as manage, maintain, improve or develop our contractual or pre-contractual relationship with our clients, users, suppliers and other interested parties. The legal basis is the performance of a contract or pre-contract to which the data subject is a party, as well as compliance with legal obligations applicable to the Controller.
D. For billing and accounting of the products or services provided, the legal basis is compliance with legal obligations.
E. Management of the candidate’s application in the Controller’s selection processes in accordance with their professional profile that may arise within the Controller’s activities. The legal basis is the express consent granted through a positive and affirmative act at the time of providing us with your data.
F. Regarding the use of cookies for different purposes (Technical, analytical, etc.) by this website, as specified in the section on cookies which we invite you to consult. The legal basis will be the consent granted for cookies that require it.
DATA RETENTION PERIOD:
The personal data processed for purposes (A), (B), (C) and (D) will be kept no longer than necessary to maintain the purpose of the processing or while there are legal provisions requiring their retention, and when no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure data anonymization or total destruction.
The personal data obtained for purpose (E) will be kept for the time necessary for the purpose of the processing or for a maximum of 12 months; after this period they will be blocked or destroyed.
In relation to the cookies used (F), as specified in the section dedicated to cookies on this website.
In any case, and as a general rule, we will retain your personal information while there is a commercial, pre-contractual or contractual relationship linking us to you, in order to comply with legal obligations or until you exercise your right to erasure and/or restriction of processing. In such cases, the information may be blocked without being used beyond its retention, while it may be necessary for the exercise or defense of claims or if any type of liability may arise that must be addressed.
CATEGORIES OF DATA: We collect your personal information through different means and, in general, the personal information we process refers to the category of identification, contact and financial data, such as: name and surname, ID number, telephone, postal address, email address, contracted products or services, payment and billing data, as well as the IP address from which you access the data collection form.
The data processed within the framework of a contractual, pre-contractual, commercial or business relationship may include, in addition to those mentioned above: transaction data for goods and services, social circumstances, personal characteristics, commercial information, economic, financial and insurance data, legal representative, bank details, handwritten or electronic signature, professional or academic data or other categories necessary due to the nature of the products and services provided by the Controller.
JORGE REVILLA S.L. uses social networks and this is another way to reach you. The information collected through messages and communications you publish may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies explaining how they use and share your information, therefore JORGE REVILLA S.L. recommends that you consult them before using them to confirm that you agree with the way your information is collected, processed and shared.
The data collected for purpose (E) will be professional and contact data: name, surname, telephone, email, CV, cover letter and any other personal data associated with the Curriculum Vitae or professional profile.
INTERNATIONAL TRANSFERS: No international data transfers are foreseen. If for certain services technological providers with servers outside the European Economic Area are used, they guarantee an adequate level of data protection in accordance with the GDPR, through adequacy decisions or standard contractual clauses.
MANDATORY NATURE OF PROVIDING DATA: USERS, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to address their request by the provider, the inclusion of data in the remaining fields being voluntary. The USER guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for communicating any modification thereof. The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. If all data are not provided, it is not guaranteed that the information and services provided will be completely tailored to your needs.
DATA DISCLOSURE: as a general rule, no disclosures or international transfers of your data are foreseen. However, those authorized by tax, commercial or telecommunications legislation may be carried out, as well as those required by judicial authorities, state security forces and bodies, or public administrations in the exercise of their powers. Identification and financial data may be communicated to banking entities or payment platform managers, as well as insurance companies, transport companies or intermediaries, if necessary to achieve the purposes of the processing.
Data subjects are informed that for proper business management, sale or provision of services, JORGE REVILLA S.L. has contracted external service providers, such as specialized external advisors, auditors, legal advisors, hosting services, marketing, web development and email services, IT support and maintenance companies, document management, security companies or similar when necessary for the purposes of the processing or the occasional or recurring needs of JORGE REVILLA S.L. With these providers, the legally required contracts are signed under which compliance with their obligations as Data Processors is guaranteed.
In the event of transferring your data to third parties for any other purpose, the Data Controller will inform and previously obtain the consent of the data subject.
In the case of the use of third-party cookies, those provided in the section dedicated to information about "cookies" on this website.
USER RIGHTS: any person whose personal data are processed has the following rights:
- Right of access: allows you to know whether we process your personal data and obtain information on how and for what purpose we use them, as well as receive a copy of the processed data.
- Right to rectification: allows you to request the correction of inaccurate or incomplete personal data so that they are properly updated.
- Right to erasure: allows you to request the deletion of personal data when they are no longer necessary, consent has been withdrawn, the processing is unlawful or for other legally provided reasons, unless there is a legal obligation to retain them.
- Right to object: allows you to object to the processing of your personal data for reasons related to your particular situation. It may also be exercised at any time to prevent the use of data for direct marketing purposes, including profiling.
- Right to restriction of processing: allows you to request, in certain circumstances, that the processing of your data be limited to their retention or to specific purposes, such as the exercise or defense of claims, the protection of third parties or for reasons of public interest.
- Right to data portability: allows you to receive the personal data provided, in digital format, and transmit them to another controller, when the processing is based on consent or on a contract and is carried out by automated means.
- Right not to be subject to automated decisions (including profiling): allows you not to be subject to decisions based solely on automated processing of data that produce legal effects or significantly affect you, except in cases permitted by regulations or where explicit consent exists.
- Right to withdraw consent: allows you to revoke the consent given at any time, without affecting the lawfulness of processing carried out previously.
Likewise, and especially if you consider that you have not obtained full satisfaction in the exercise of your rights, we inform you that you may file a complaint with the national supervisory authority by contacting the Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid. (www.aepd.es).
To facilitate processing, it is recommended to clearly indicate in the subject line of the email or in the heading of the letter: “EXERCISE OF PERSONAL DATA RIGHTS”
The Data Controller has model forms available to facilitate the exercise of your rights, which may be requested through the enabled means (email or postal mail) or by telephone, indicating an address for their delivery. The use of these forms is voluntary.
Likewise, the data subject may use, if desired, the forms prepared by the Spanish Data Protection Agency, available on its website:
https://www.aepd.es/reglamento/derechos/index.html
Contact details to exercise your rights: JORGE REVILLA S.L. B09323510 | C/ LA PALOMA, 29 - 09003 BURGOS (Burgos) SPAIN | 947274040 | gloria@jorgerevilla.com |
HOW DO WE PROTECT YOUR INFORMATION?: At JORGE REVILLA S.L. we are committed to protecting your personal information. We use reasonably reliable and effective physical, organizational and technological measures, controls and procedures aimed at preserving the integrity and security of your data and ensuring your privacy. In addition, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of your personal data.
In the contracts we sign with our providers, we include clauses requiring them to maintain confidentiality regarding the personal data to which they have had access by virtue of the assignment carried out, as well as to implement the necessary technical and organizational security measures to ensure the ongoing confidentiality, integrity, availability and resilience of personal data processing systems and services.
All these security measures are reviewed periodically to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed and no security system is impenetrable, therefore, in the event that any information subject to processing and under our control is compromised as a result of a security breach, we will take appropriate measures to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected so that they may take appropriate measures.
USER RESPONSIBILITY: by providing us with your data, the user guarantees that the data provided to the Controller are true, accurate, complete and up to date. For these purposes, the user confirms that they are responsible for the accuracy of the data communicated and that they will keep such information properly updated so that it reflects their real situation, being responsible for false or inaccurate data they may provide, as well as for direct or indirect damages that may arise.
```