PRIVACY POLICY

WEBSITE PRIVACY POLICY

We are a company for which transparency is essential in establishing a relationship of trust with the people involved in our project and with our suppliers and customers. Protecting the personal data of those who place their trust in us is of vital importance; therefore, through this Privacy Policy, we wish to inform you of how we collect and process or use such data.

This Privacy Policy sets out the basis on which the company processes the personal data voluntarily provided by users through the website.

This Policy shall apply whenever data are provided to the company, which will be responsible for such data (the Data Controller), including through any contact or subscription forms used to collect personal data (name, email address, etc.).

OUR COMMITMENTS

• To respect our users’ privacy and process their personal data with their consent.
• To process only the personal data strictly necessary to provide the requested service, and to process them securely and confidentially, taking the measures required to prevent unauthorised access and misuse.
• Not to use personal data for purposes for which we have not previously obtained consent.
• Not to disclose or share personal data with third parties.
• To retain personal data only for the period strictly necessary for the specific purpose for which they were provided.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

WHAT ARE PERSONAL DATA AND WHAT DOES THE PROCESSING OF PERSONAL DATA MEAN?

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one whose identity can be established directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity.

The processing of personal data means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

WHAT PROCESSING ACTIVITIES DO WE CARRY OUT ON YOUR PERSONAL DATA AND FOR WHAT PURPOSES?

• Requests for information from users.
  To manage requests for information submitted by users through the contact form and/or the email address, postal address and/or telephone number provided through the website.
• Newsletter subscription.
  To manage subscriptions to the newsletter.
• Working with us by submitting a CV.
  To manage CVs received through the form available on the website.
• Registration and access to the user profile.
  To manage registration and access to the user portal through the relevant user account and password.
• Management of blog comments.
  To manage the submission and receipt of comments left by users on the blog.

WHAT PERSONAL DATA DO WE COLLECT?

Through our website, we may collect personal data for different purposes:

• Requests for information from users.
  We will collect the personal data you provide in connection with your enquiry.
• Newsletter subscription.
  We will collect your email address.
• Working with us by submitting a CV.
  We will collect the information contained in the CV you provide.
• Registration and access to the user profile.
  Username and password, together with any other data provided for the purpose of creating the account or profile.
• Management of blog comments.
  Any data provided when publishing the relevant comment.

Depending on the purpose for which the data are provided, only the data strictly necessary will be requested.

Users should be aware of the data they provide and the purpose for which they provide them, since by submitting such data they agree that we may collect, store and use them for the required purpose. Consent may be withdrawn at any time through the appropriate channels, and the data subject’s consent constitutes the legal basis and grounds for processing their personal data.

WHAT IS THE LEGAL BASIS FOR PROCESSING PERSONAL DATA?

Under current data protection legislation, we require a lawful basis to process your personal data. The lawful basis is your consent.

WHAT RIGHTS DO YOU HAVE IN RELATION TO THE PERSONAL DATA PROVIDED?

As a user, you may exercise the following rights:

• Right of access: You have the right to obtain confirmation from the company as to whether or not your personal data are being processed and, where applicable, what data are being processed.
• Right to rectification: You have the right to obtain from NJ Logistic And Conference Services, S.L. the rectification of inaccurate personal data concerning you. Your rectification request must identify the data you wish to have amended.
• Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you where such processing is based on the company’s legitimate interests. In that event, the company will cease processing the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is required for the establishment, exercise or defence of legal claims.
• Right to erasure: You have the right to obtain from NJ Logistic And Conference Services, S.L. the erasure of personal data concerning you.
• Right to data portability: You have the right to have the company transfer your personal data to another data controller. This right may only be exercised where the processing is based on the performance of a contract or on your consent and is carried out by automated means.
• Right to restriction of processing: You have the right to ask us to suspend the processing of your data where you contest their accuracy, while NJ Logistic And Conference Services, S.L. verifies that accuracy; or where you have exercised your right to object to the processing, while it is determined whether the legitimate grounds of NJ Logistic And Conference Services, S.L. override your interests as the data subject.

You may exercise these rights at any time by sending a written request, together with proof of identity, to the data controller at the address stated above, or by email to: info@massimoandfriends.com.

You may also lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if you believe that the processing of personal data infringes applicable legislation.

DATA SECURITY AND STORAGE

We will retain the data only for the period strictly necessary to provide the requested service and for as long as the data subject does not request their deletion. We will adopt appropriate technical and organisational measures to protect the data against unauthorised or unlawful processing and against accidental loss, destruction or damage, making every reasonable effort to keep them protected and secure.

WHAT PERSONAL DATA DO WE SHARE WITH THIRD PARTIES?

No disclosures of data are envisaged except where required by law or where communication is necessary to provide the requested service properly. No international data transfers are envisaged.