PRIVACY POLICY

This is a translation. In case of doubt, the Spanish version will take precedence.

This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and

of the Council, of the 27th of April, 2016, concerning the protection of natural persons with regard

to the processing of personal data and free movement of these data (RGPD), to Organic Law

3/2018, of the 5th of December, Protection of Personal Data and digital rights guarantee

(LOPDGDD), as well as in what is not contrary to the regulations indicated, to the Law Organic

15/1999, Protection of Personal Data (LOPD) and its development regulations, and/or those that

could replace or update in the future.

Our organisation is committed to the privacy of your personal data. The personal data provided

are necessary to provide our services and are processed in a lawful, fair and transparent way,

ensuring adequate security of them, including protection against unauthorised or illegal

processing and against loss, destruction or accidental damage through the application of technical

and organisational measures.

In this document we want to offer you, in a transparent and loyal way, all the necessary

information related to the processing of your personal data that this organisation makes.

I.- RESPONSIBLE FOR THE PROCESSING-DATA CONTROLLER

IDENTITY: CASA BARRERA, S.L.

C.I.F./N.I.E./PASSPORT.: B03139763

ADDRESS: POL. IND. JUYARCO- PTDA. MADRIGUERES SUD 50-52, 03700 DENIA (ALICANTE)

TELEPHONE: 966426085

E-MAIL: facturacion@casabarrera.com

II.- RECIPIENTS OF THE PERSONAL DATA

1.- The personal data provided will not be subject to assignment unless so stated in each specific

processing.

2. Optionally, for the contracting of cloud computing services and/or services for sending emails,

communication, as well as other related IT services, personal data may be:

Transferred to IT service companies located within the European Economic Area (EEA) or,

En In the event that some of our suppliers or service providers are located outside the European

Economic Area (EEA), we guarantee that international data transfers will be carried out in accordance

with the applicable regulations. In particular, in the case of suppliers located in the United States,

s u c h t r a n s f e r s m a y b e c o v e r e d b y t h e E U - U S D a t a P r i v a c y F r a m e w o r k

(https://www.dataprivacyframework.gov), whose adequacy was recognised by the European

Commission on 10 July 2023, or in standard contractual clauses approved by the European

Commission.

3.- Optionally, to administrations and other bodies when required in compliance with legal

obligations.

III.- LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

For each specific processing of personal data, we will inform you of the legal for such processing.

IV.- RIGHTS

4.1. RIGHT TO ACCESS

It is the right to obtain from the controller confirmation as to whether or not personal data relating

to the data subject are being processed and, if so, the right to access to the personal data and the

following information: the purposes of the processing, the categories of the processing, the

recipients or the categories of recipients to whom the data have been or will be disclosed, the

storage period or the criteria used to determine this period, the existence of the right to request

from the controller the rectification or deletion of personal data or the restriction or objection to

the processing of personal data relating to the data subject, the right to lodge a complaint with the

Spanish Agency for Data Protection (AEPD), the existence, where applicable, of automated

decisions, including profiling, where data are transferred to third countries the right to be informed

of the appropriate safeguards applied.

4.2. RIGHT TO RECTIFICATION

You have the right to request the rectification of your personal data if these are innaccurate,

including the right to complete data that is incomplete. Please note that by providing personal

data by any means, you warrant that such data are true and accurate, and you undertake to notify

us of any changes or modifications to such data. Therefore, any damage caused as a result of the

communication of erroneous, inaccurate or incomplete information in the forms of the website, will

be the sole responsibility of the concerned party.

4.3. RIGHT TO SUPPRESSION/DELETION

It is the right to request the suppression of your personal data when, among other assumptions,

they are no longer necessary for the purpose for which they were gathered, or are otherwise being

processed or you withdraw your consent. It should be borne in mind that erasure will not be

applicable when the processing of personal data is necessary, among other cases, for teh

fulfilment of legal obligations or for the formulation, exercise or defense of claims.

4.4. RIGHT TO LIMITATION

It is the right to request that restrict the processing of your personal data, which means that in

certain cases you can ask us to temporarily stop the processing of your personal data or to store

your data for longer than necessary when you may need it.

4.5. RIGHT TO WITHDRAW CONSENT

It is the right to withdraw the consent you have provided by ticking "I have read and accept the

privacy policy" at any time and as specified in the relevant section "Exercise of rights" or in the

specific processing of commercial communications or Newsletter. Please note that this right will

not be applied if, inter alia, the processing of personal data is necessary for the compliance with a

legal obligation, the performance and maintenance of a contractual relationship, or for the

formulation, exercise or the defense of claims. Likewise, the withdrawal of consent will not have

retroactive effects, it will not affect the lawfulness of the processing based on the consent prior to

its withdrawal.

4.6. RIGHT TO PORTABILITY

It is the right to receive the personal data concerning you and that you have provided to us, in a

structured, commonly used and machine-readable format and to transmit them to another

controller, provided that: the processing is based on your consent and is carried out by automated

or computerised means.

4.7. RIGHT TO OPPOSITION

You have the right to oppose the processing of your personal data on the basis of our legitimate

interest. We will cease to process your personal data unless we can prove compelling legitimate

grounds for the processing that prevail over your interests, rights and freedoms, or for the

formulation, exercise or defence of claims.

4.8. RIGHT TO LODGE A COMPLAINT WITH A CONTROL AUTHORITY

If you believe that we are processing your personal data in an incorrect manner, you can contact

us or you also have the right to lodge a complaint with the Spanish Data Protection Agency

(AEPD):

https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

4.9. EXERCISING OF THESES RIGHTS

You may exercise your rights by sending a letter to the postal address indicated above or by email

facturacion@casabarrera.com, enclosing, in both cases, a copy of your NIF/NIE/Passport or

similar document.

V.- SECURITY MEASURES

The responsible person implements appropriate technical and organisational measures to ensure the

confidentiality, integrity and availability of the data.

VI.- PERSONAL DATA PROCESSING.

6.1. GENERAL PROVISIONS

Personal data requested in each of the specific processing operations are adequate, relevant and limited to

what is necessary in relation to the purposes for which they are processed, thereby complying with the

principle of data minimisation.

Personal data requested in each of the specific processing operations are strictly necessary, and refusal to

provide them would mean that the requested service could not be provided.

The communication of personal data provided for in each of the specific processing operations is in some

cases necessary for the performance and maintenance of a contract and in other cases for compliance with

a legal obligation applicable to the responsible party.

6.2. BASIC PROCESSING

CONTACT FORM

Personal data provided in the contact form will be used solely to respond to queries or requests for

information and to manage the relationship arising from the query.

The legal basis that legitimises the processing of personal data is the express consent given by ticking ‘I

have read and accept the privacy policy’.

Data will not be transferred to third parties, except where legally required or when necessary for the proper

provision of the service.

Personal data will be kept for a period of two years from the moment it ceases to be processed, without

prejudice to the exercise of your rights as a data subject, unless there is a contractual or legal relationship

that requires it to be kept for longer.