Identification of the Data ControllerIdentification of the Data Controller
AVE FENIX BUSINESS BUSINESS, S.L. is RESPONSIBLE for the processing of the USER’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).
You can contact the person in charge at the following e-mail address clientesb2c@sangrialanovelera.es.
The address for the purpose of complaints shall correspond to the address indicated as the registered office of the company.
Purposes of processing
Respond to the questions that the interested party sends to the person in charge.
- Retention period: The data will be retained until the issue raised by the data subject is resolved. Subsequently, if necessary, the information will be kept blocked for the legally established periods of time.
- Legal Basis: Legitimate Interest of the Data Controller and Consent of the Data Subject.
Manage the subscription of the interested party to his or her User account.
- Retention period: The data will be retained as long as the data subject does not revoke the consent given. Subsequently, if necessary, the information will be kept blocked for the legally established periods of time.
- Legal basis: Consent of the data subject.
Process orders, requests for products or services made by the user.
- Retention period: The data will be processed for as long as there is an interest on the part of the data subject, based on the existing contractual relationship. Subsequently, if necessary, the information will be kept blocked for the legally established periods of time.
- Legal basis: Contractual relationship.
To send to the interested party commercial communications about our products that may be of interest (newsletter).
- Retention period: The data will be retained as long as the data subject does not revoke the consent given.
- Legitimate basis: Express consent of the interested party.
Recipients of your data
The Controller contracts with third party data processors in order to provide its services. With the exception of these entities, your data will not be disclosed to other third parties. If for any reason it is necessary to communicate such data to third parties, you will be informed in advance and, where appropriate, your consent will be requested and the purposes of the communication and the identity of the third party to whom the data will be communicated will be specified.
All of the above, with the exception of those cases in which a legal requirement makes it necessary to communicate such data to a third party.
Rights
The persons who provide us with their data have the following rights in relation to them:
- Right of access
- Right of rectification or suppression
- Right to limitation of processing
- Right to portability
- Right of opposition
- Right to revoke consent
If you would like more information about your rights, we suggest you visit the website of the Spanish Data Protection Agency.
These rights may be exercised by sending an email to clientesb2c@sangrialanovelera.es clearly indicating which right you wish to exercise and providing a copy of your identity document to prove your identification. You may also contact us by mail at the Responsible Party’s registered office listed in point 1 of this Privacy Policy.
Additionally, we inform you about the possibility of filing a complaint before the competent Control Authority, in this case, the Spanish Data Protection Agency, especially in case you have not obtained satisfaction in the exercise of your rights. You can contact the Spanish Data Protection Agency through their telephone numbers 901 100 099 and 912 663 517 or by visiting them at their address C/ Jorge Juan, 6. 28001 – Madrid (Spain).
Safety measures
The Controller guarantees the user that the processing carried out complies with all the provisions of the aforementioned data protection regulations, GDPR and LOPDGDD, and that the data are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Likewise, the Responsible Party guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated the appropriate information to them so that they can exercise them.
Source of data
All of the data collected comes from the data subject.
