In accordance with the provisions of the General Data Protection Regulation (GDPR) EU 679/2016 and Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, you are provided with the following information regarding the processing of your personal data:

Who is responsible for the processing of your personal data?

Data controller: CATALINA CALAFAT VILLALONGA, NIF/CIF: 41585379E, Address: PASSATGE PARTICULAR DE SANTA CATALINA DE SENA Nº1, CP: 07002, PALMA, Telephone 620036636, Email: contacto@catalinacalafat.com. DATA PROTECTION OFFICER: CONTACT: / http://www.protecmir.com / EMAIL: protecmirlegal@protecmir.com .

What data do we process?

At CATALINA CALAFAT VILLALONGA, we process the personal data you provide by completing the forms provided for this purpose on this website, personal data derived from the provision or contracting of our services or products, and/or personal data derived from the commercial relationship you maintain with us. In addition, we process personal data generated in the context of your activity on our website, which includes your browsing data obtained through the website.

It is important for us to keep your personal data up to date. You are required to inform us of any changes or errors in your personal data as soon as possible by contacting us at contacto@catalinacalafat.com.

For what purpose do we process your personal data?

Purpose: CATALINA CALAFAT VILLALONGA may process your personal data for the following purposes:

-Management and maintenance of the services provided through the website.

-Management and response to inquiries and requests for information submitted by users through the contact form. The email address and personal data you provide through the website's contact form will be used exclusively to respond to your inquiries.

-Compliance with applicable legal obligations.

-Sending commercial communications and newsletters, as well as advertising for our services and products.

-Management of the contracting of our services and/or products.

-Management of requests for information or requests for quotes for our services or products.

-If you have given your consent, and in order to offer you services tailored to your interests, your personal data may be used to create a commercial profile. No automated decisions will be made based on this profile.

We retain your personal data in our systems and files for the time necessary to carry out the purposes of the processing and to comply with applicable law. Your personal data will be retained for as long as a contractual and/or commercial relationship exists with you, or as long as you do not exercise your right to erasure and/or restriction of processing. The retention period for personal data will vary depending on the purposes of the processing and, in general, will:

-The personal data you provide to us when contracting our services or products will be retained throughout the contractual relationship and, once it has ended, for the duration of any legal action that may arise from it.

-The personal data you provide to us to process requests for information or inquiries through the contact form will be retained as long as you do not request its deletion or cancellation.

-The personal data you provide to subscribe to our newsletter will be retained as long as you do not request its deletion, objection, or restriction.

-The personal data obtained from your browsing and consumer habits, as well as the commercial profile obtained, will be retained as long as you do not request its deletion or cancellation.

Your personal data will be retained as long as it is useful for the purposes indicated and, in any case, for the legally required periods and the time necessary to address any potential liabilities arising from the processing.

Data security.

We have appropriate technical and organizational security measures in place to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage, ensuring their integrity and confidentiality. The technical and organizational security measures implemented allow us to: guarantee the ongoing confidentiality, integrity, availability, and resilience of processing systems and services; restore the availability of and access to personal data quickly in the event of a physical or technical incident; and regularly verify, evaluate, and assess the effectiveness of the technical and organizational measures implemented to ensure the security of processing.

These technical and organizational security measures have been designed taking into account our IT infrastructure, the state of the art in accordance with current standards and practices, the cost of implementation, and the nature, scope, context, and purposes of processing, as well as the risks of varying likelihood and severity that the processing of your personal data entails.

What is the legitimacy for processing your data?

Legitimation: The legitimacy to process your personal data is based on:

-The execution and maintenance of a contractual and commercial relationship with you, such as, for example, the contracting of products and services from the entity, management and request for quotes for the products and/or services of the entity, all in accordance with the provisions of Article 6.1.B of the GDPR (EU) 679/2016 and Organic Law 3/2018, of December 5 (LOPDPGDD).

-Your express consent for one or more purposes, such as the sending of advertising communications or newsletters from you or third parties, management of CVs, participation in activities or competitions, all in accordance with the provisions of Article 6.1.A of the GDPR (EU) 679/2016 and Organic Law 3/2018, of December 5 (LOPDPGDD).

-Compliance with various legal obligations, all in accordance with the provisions of Article 6.1.C of the GDPR (EU) 679/2016 and Organic Law 3/2018, of December 5 (LOPDPGDD).

– The satisfaction of legitimate interests pursued by the data controller or a third party, for example, for security reasons, to improve our services, or to manage your requests or inquiries.

During the data collection process, and at each location on the website where personal data is requested, the user will be informed, either through a hyperlink or by including appropriate information on the form itself, whether the collection of their personal data is mandatory or not.

The personal data requested in the website forms is, in general, mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if the requested personal data is not provided, or is provided incorrectly, the purposes cannot be fulfilled.

You are required to provide your personal data when purchasing a service or product, and/or when requesting quotes or offers.

The sending of advertising communications, newsletters, or bulletins about our products and services is based on the consent requested from you. The withdrawal of this consent does not, under any circumstances, affect the contractual or commercial relationship you maintain with us.

If you have authorized us to send advertising for our services and products, your personal data may be used to manage the sending of advertising offers and newsletters via electronic means. In these cases, the provisions of Articles 20 and 21 of Law 34/2002, of July 11, on information society services and electronic commerce, apply to the use and processing of your personal data for the purpose of managing the sending of advertising via electronic means.

If you have opted in to receive advertising, or if you have subscribed to our newsletter, you can opt out at any time.

To which recipients will your data be communicated?

Recipients: In general, your personal data will not be shared with any third party outside the entity, except under legal obligation. However, we inform you that third-party providers may have access to your personal data as data processors, within the framework of providing a service to the entity responsible for the processing. We inform you that you can request the complete list of recipients who may receive your personal data as data processors or as third-party recipients by transfer by email: contacto@catalinacalafat.comIn addition to the above, the entity may transfer or communicate personal data to meet its obligations to public authorities when required, in accordance with current legislation.

-International data transfers:

In order to carry out the data processing activities detailed above, we may transfer data to countries outside the European Economic Area (EEA) and store such data in physical or digital databases managed by entities acting on our behalf. Database management and data processing are limited to the purposes of the processing and are carried out in accordance with applicable data protection laws and regulations. If data is transferred outside the EEA, the company will use appropriate contractual measures to ensure data protection, which may include, but are not limited to, contracts based on the standard data protection clauses adopted by the European Commission applicable to the transfer of personal data outside the EEA.

What rights do you have regarding the processing of your personal data?

Rights: You have the right to obtain access to your personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you can request the restriction of the processing of your data, in which case we will only retain it for the exercise or defense of legal claims. Likewise, and for reasons related to your particular situation, you can object to the processing of your data, in which case your personal information will no longer be processed for the purposes to which you have expressed your objection. When technically possible, you can request the portability of your data to another data controller. To exercise these rights, in accordance with current legislation, you may contact CATALINA CALAFAT VILLALONGA at PASSATGE PARTICULAR DE SANTA CATALINA DE SENA Nº1, ZIP CODE 07002, PALMA, enclosing a copy of your identity document (DNI), or by email at contacto@catalinacalafat.com. You have the right to lodge a complaint with the Supervisory Authority: the Spanish Data Protection Agency (www.agpd.es).

Origin of Personal Data: the interested party himself.

You expressly agree to the inclusion of personal data collected while browsing the website and/or provided by completing any form, as well as any data arising from a potential business relationship, in the entity's automated personal data files.

The entity guarantees the confidentiality of its users' personal data. However, the entity will disclose personal data and any other information in its possession or accessible through its systems to the competent public authorities upon request, in accordance with the applicable legal and regulatory provisions. Personal data may be retained in files owned by CATALINA CALAFAT VILLALONGA, even after the commercial relationships formalized through the entity's website have ended, exclusively for the purposes indicated above and, in any case, for the legally established periods, available to administrative or judicial authorities.

Use of social networks.

When you interact with our website through various social media platforms, such as when you connect with us, follow us, or share our content on social media platforms (Facebook, Twitter, LinkedIn, Instagram, or others), we may receive information from those social media platforms, including your profile information, the user ID associated with your social media account, and any other public information you allow to be shared with third parties on the social media platform.

The entity uses social media to provide information about the services it offers, as well as any other activities or events it may carry out and wish to publicize. However, at no time will it obtain personal data from users who interact with it, unless specifically authorized.

This data is only used within the social network itself and is not incorporated into any processing system.

Social networks have their own terms of use and privacy policies that you are required to take into account and comply with if you use them.