POLICY OF PROTECTION OF PERSONAL DATA
FANTASY NAILS EUROPE S.L. (the “Company”) is an Organization in which personal data processing activities take place, which gives it an important responsibility in the design and organization of procedures so that they are aligned with legal compliance in this matter.
In the exercise of these responsibilities and in order to establish the general principles that should govern the processing of personal data in the Company, it approves this Policy for the protection of personal data, which notifies its Employees and makes available of all your interest groups.
1. PURPOSE
The Personal Data Protection Policy is a measure of proactive Responsibility that aims to ensure compliance with the applicable legislation on this matter and in relation to it, respect for the right to honor and privacy in the processing of data, of a personal nature of all the people who are related to The Company.
In development of the provisions of this Personal Data Protection Policy, the Principles that govern the processing of data in the organization are established and, consequently, the procedures, and the organizational and security measures that the people affected by they undertake to implement this Policy in their area of responsibility. To this end, the management will assign responsibilities to the personnel who participate in data processing operations.
2. AREA OF APPLICATION
This Personal Data Protection Policy will be applicable to the Company, its administrators, managers and employees, as well as all the people who are related to it, expressly including the service providers with access to data (“ Responsible for the treatment ”).
3. PRINCIPLES OF THE PROCESSING OF PERSONAL DATA
As a general principle, the Company will scrupulously comply with the legislation on the protection of personal data and must be able to demonstrate it (Principle of "proactive responsibility"), paying special attention to those treatments that may pose a greater risk to rights of those affected (Principle of «risk approach»).
In relation to the above, FANTASY NAILS EUROPE S.L. will ensure compliance with the following Principles:
• Legality, loyalty, transparency and limitation of the purpose. The data processing must always be informed to the affected party, through clauses and other procedures; and it will only be considered legitimate if there is consent for the processing of data (with special attention to that provided by minors), or it has another valid legitimacy and the purpose thereof is in accordance with Regulations.
• Data minimization. The data processed must be adequate, pertinent and limited to what is necessary in relation to the purposes of the treatment.
• Accuracy. The data must be exact and, if necessary, updated. In this regard, the necessary measures will be taken so that personal data that are inaccurate with respect to the purposes of the treatment are deleted or rectified without delay.
• Limitation of the conservation period. The data will be kept in a way that allows the identification of the interested parties for no longer than necessary for the purposes of the treatment.
• Integrity and Confidentiality. The data will be treated in such a way as to guarantee adequate security of personal data, including protection against unauthorized or illegal treatment and against its loss, destruction or accidental damage, through the application of appropriate technical or organizational measures.
• Data transfers. The purchase or obtaining of personal data from illegitimate sources or in those cases in which said data has been collected or transferred in contravention of the law or its legitimate origin is not sufficiently guaranteed.
• Hiring providers with access to data. Only suppliers that offer sufficient guarantees to apply appropriate technical and security measures in data processing will be chosen for their contracting. Due Agreement in this regard will be documented with these third parties.
• International data transfers. All processing of personal data subject to European Union regulations that involves a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements established in the applicable law.
• Rights of those affected. The Company will facilitate to those affected the exercise of the rights of access, rectification, deletion, limitation of treatment, opposition and portability, establishing for this purpose the internal procedures, and in particular the models for their exercise that are necessary and timely, which They must satisfy, at least, the legal requirements applicable in each case.
The Company will promote that the principles contained in this Policy for the protection of personal data are taken into account (i) in the design and implementation of all work procedures, (ii) in the products and services offered (iii) in all the contracts and obligations that they formalize or assume and (iv) in the implementation of any systems and platforms that allow access by employees or third parties and / or the collection or processing of personal data.
4. COMMITMENT OF WORKERS
Workers are informed of this Policy and declare that they are aware that personal information is an asset of the Company, and in this regard they adhere to it, committing to the following:
- Carry out the data protection awareness training that the Company makes available to you.
- Apply the security measures at the user level that apply to their job, without prejudice to the responsibilities in their design and implementation that may be attributed to them based on their role within FANTASY NAILS EUROPE S.L .
- Use the formats established for the exercise of Rights by those affected and inform the Company immediately so that the response can be made effective.
- Inform the Company, as soon as it becomes aware, of deviations from what is established in this Policy, in particular "Violations of security of personal data", using the format established for this purpose.
5. CONTROL AND EVALUATION
An annual verification, evaluation and assessment will be carried out, or each time there are significant changes in the data processing, of the effectiveness of the technical and organizational measures to guarantee the security of the processing.
ADDITIONAL INFORMATION ON DATA PROTECTION
WHO IS RESPONSIBLE FOR THE TREATMENT OF YOUR DATA?
Identity: FANTASY NAILS EUROPE S.L.
Postal Address: PASAJE GRAHAM BELL, 10 - PTA - MALAGA, 29590
Telephone: 952 42 59 22
Email: info@fantasynails.essonales?
FOR WHAT PURPOSE DO WE TREAT YOUR PERSONAL DATA?
At FANTASY NAILS EUROPE S.L. We treat the information that our users provide us to answer your questions and comments, as well as, where appropriate, keep in touch to inform you about our products / services.
FOR HOW LONG WILL WE KEEP YOUR DATA?
The personal data provided will be kept in any case while there is a commercial relationship, and for the maximum period established in the applicable Regulations from the end of this.
WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA?
The legal basis for the treatment of your data is the provision of your consent through the marking of the checkbox that you may revoke at any time.
WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
Your data will not be communicated to third parties. Transfers to third countries are not foreseen.
¿Cuáles son sus derechos cuando nos facilita sus datos?
Anyone has the right to obtain confirmation on whether FANTASY NAILS EUROPE S.L. we are treating personal data that concerns them, or not.
Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.
In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, the interested parties may object to the processing of their data. FANTASY NAILS EUROPE S.L. will stop processing the data, except for legitimate and compelling reasons, or the exercise or defense of possible claims.
Likewise, in certain circumstances and when technically possible, the interested parties have the right to have their personal data transmitted directly to another controller at their request.
To exercise these rights, write to: PASAJE GRAHAM BELL, 10 - PTA - MALAGA, 29590, info@fantasynails.es, accompanied by a copy of your ID.
Similarly, you can contact the Spanish Agency for Data Protection, especially when you have not obtained satisfaction in the exercise of your rights.