Terms and Conditions

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter, "GDPR"), with Law 34/2002 of 11 July on information society services and electronic commerce (hereinafter, "LSSI-CE") and with Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (hereinafter, "LOPDGDD"), EMRA2EMRA guarantees the protection and confidentiality of the personal data of any kind provided to us by our clients, in accordance with the provisions of the General Data Protection Regulation.

The data provided will be processed under the terms established in the GDPR. In this regard, EMRA2EMRA has adopted the levels of protection legally required and has implemented all the technical measures within its reach to prevent loss, misuse, alteration and unauthorised third-party access, as set out below. Nevertheless, users should be aware that security measures on the Internet are not impregnable.

Purpose of the processing

All data provided by our clients and/or visitors on the EMRA2EMRA website or to its staff will be included in a record of personal data processing activities, created and maintained under the responsibility of EMRA2EMRA. Such data is essential in order to provide the services requested by users, or to resolve the queries or questions raised by our visitors. Our policy is not to build profiles of the users of our services.

Lawful basis for the processing

Contractual relationship: This applies when you purchase one of our products or engage any of our services.

Legitimate interest: To handle any queries and complaints you may submit to us, and to manage the collection of amounts owed.

Your consent: If you are a user of our website, by ticking the box included in the contact form, you authorise us to send you the communications necessary to respond to the query or request for information submitted.

Recipients

We do not disclose your personal data to anyone, with the exception of those public or private entities to which we are required to provide your personal data in order to comply with a legal obligation. By way of example, tax law requires certain information on economic transactions above a given amount to be reported to the Spanish Tax Agency.

Should we need to disclose your personal information to other entities beyond the cases described above, we will first request your permission through clear options that will allow you to decide in this respect.

Communication

We will not carry out international transfers of your personal data for any of the purposes indicated.

(INTERNAL NOTE: THIS PARAGRAPH MUST BE AMENDED BY THE CONTROLLER IF INTERNATIONAL TRANSFERS DO IN FACT TAKE PLACE. WE RECOMMEND SEEKING PROFESSIONAL ADVICE IF YOU ARE UNSURE HOW TO WORD THIS CORRECTLY IN ORDER TO COMPLY WITH THE REGULATIONS.)

Retention

We will only retain your personal data for as long as is necessary to achieve the purposes for which it was collected. When determining the appropriate retention period, we examine the risks entailed by the processing, as well as our contractual, legal and regulatory obligations, our internal data retention policies and our legitimate business interests as described in this Privacy Notice and Cookie Policy.

In this regard, EMRA2EMRA will retain your personal data once your relationship with us has ended, duly blocked, for the duration of the limitation period applicable to any actions that may arise from the relationship maintained with the data subject.

Once blocked, your data will be inaccessible to EMRA2EMRA and will not be processed except to make it available to public authorities, judges and courts, in order to address any liabilities arising from the processing, as well as for the exercise and defence of claims before the Spanish Data Protection Agency.

Security

We make every reasonable effort to maintain the confidentiality of the personal information processed in our systems. We maintain strict security standards to protect the personal data we process against accidental loss and against unauthorised access, processing or disclosure, taking into account the state of the art, the nature of the data and the risks to which it is exposed. However, we cannot be held responsible for the use you make of the data (including username and password) that you use on our website. Our staff follow strict privacy rules and, where we engage third parties to provide support services, we require them to abide by the same rules and to allow us to audit them in order to verify compliance.

Your rights

We inform you that you may exercise the following rights:

• Right of access to your personal data, in order to know which data is being processed and the processing operations carried out with it;
• Right to rectification of any inaccurate personal data;
• Right to erasure of your personal data, where this is possible (for example, subject to legal requirements);
• Right to restriction of processing of your personal data where the accuracy, lawfulness or necessity of the processing is in doubt, in which case we may retain it for the exercise or defence of claims;
• Right to object to the processing of your personal data, where the lawful basis entitling us to process it is our legitimate interest. «Company_Name» will cease processing your data unless it has a legitimate interest or the processing is necessary for the defence of claims;
• Right to data portability, where the lawful basis entitling us to process your data is the existence of a contractual relationship or your consent;
• Right to withdraw the consent granted to EMRA2EMRA.

To exercise your rights, you may do so free of charge and at any time by contacting us at EMRA2EMRA, enclosing a copy of your national ID document (DNI).

Protection of rights

If you consider that your rights have not been properly addressed by our organisation, you may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) through any of the following channels:

• Electronic office: https://www.aepd.es
• Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid
• Telephone: 901 100 099 and 912 663 517

Filing a complaint with the Spanish Data Protection Agency is free of charge and does not require the assistance of a lawyer or court representative (procurador).

Updates

EMRA2EMRA reserves the right to amend this policy in order to adapt it to legislative or case-law developments that may affect compliance with it.