PRIVACY POLICY
I. PRIVACY POLICY AND DATA PROTECTION
In compliance with the current legislation, Nails Dulce (hereinafter referred to as the Website) is committed to adopting the necessary technical and organisational measures, according to the appropriate level of security for the risk of the data collected.
Laws Incorporated into This Privacy Policy
This privacy policy is adapted to current Spanish and European data protection regulations. Specifically, it complies with the following standards:
- Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016, regarding the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR).
- Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
- Royal Decree 1720/2007 of 21 December, which approves the regulation for the development of Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
- Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The data controller for the personal data collected on Nails Dulce is: Hazel Navarrete, with NIF: (not provided) (hereinafter, Data Controller). The contact details are as follows:
- Address: Bulwer Court Road 46 E11 1DB London
- Contact phone: +44 795 8703490
- Email contact: info@nailsdulce.com
Registering Personal Data
In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Nails Dulce through the forms on its pages will be incorporated and processed in our file to facilitate, expedite, and comply with the commitments established between Nails Dulce and the User or to maintain the relationship established in the forms completed by the User, or to respond to any request or inquiry from the User.
Additionally, in accordance with the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, we maintain a record of processing activities that specifies, according to their purposes, the processing activities carried out and the other circumstances outlined in the GDPR.
Principles Applicable to the Processing of Personal Data
The processing of the User’s personal data will be subject to the following principles as outlined in Article 5 of the GDPR and Articles 4 and onwards of the Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights:
- Principle of lawfulness, fairness, and transparency: the consent of the User will be required at all times, with completely transparent information about the purposes for which the personal data is collected.
- Principle of purpose limitation: personal data will only be collected for specified, legitimate, and explicit purposes.
- Principle of data minimisation: personal data will only be collected to the extent necessary in relation to the purposes for which it is processed.
- Principle of accuracy: personal data should be accurate and kept up to date.
- Principle of storage limitation: personal data will only be retained for as long as necessary for the purposes of processing.
- Principle of integrity and confidentiality: personal data will be processed in a way that ensures its security and confidentiality.
- Principle of accountability: the Data Controller will ensure compliance with the above principles.
Categories of Personal Data
The categories of data processed by Nails Dulce are only identifying data. In no case are special categories of personal data, as referred to in Article 9 of the GDPR, processed.
Legal Basis for Processing Personal Data
The legal basis for processing personal data is consent. Nails Dulce is committed to obtaining the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.
The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawal of consent will not affect the use of the Website.
In cases where the User must or can provide data via forms to make inquiries, request information, or for reasons related to the Website’s content, they will be informed if the completion of any of these fields is mandatory because the data is necessary for the proper performance of the requested operation.
Purposes of the Processing of Personal Data
Personal data is collected and managed by Nails Dulce to facilitate, expedite, and comply with commitments established between the Website and the User, or to maintain the relationship established through the forms the User completes or to address a request or inquiry.
Additionally, data may be used for commercial purposes, operational and statistical personalisation, and activities related to Nails Dulce’s corporate object, as well as data extraction, storage, and marketing studies to adapt the content offered to the User and improve the quality, functioning, and navigation of the Website.
At the time of obtaining the personal data, the User will be informed of the specific purpose(s) for which the personal data will be used.
Retention Periods for Personal Data
Personal data will only be retained for the minimum time necessary for the purposes of processing and, in any case, only for the following period: 12 months, or until the User requests its deletion.
At the time of obtaining the personal data, the User will be informed of the period during which the personal data will be retained or, where that is not possible, the criteria used to determine that period.
Recipients of Personal Data
The User’s personal data will not be shared with third parties.
In any case, at the time of obtaining the personal data, the User will be informed about the recipients or categories of recipients of the personal data.
If the Data Controller intends to transfer personal data to a third country or international organisation, the User will be informed at the time the personal data is obtained about the third country or international organisation to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision by the Commission.
Personal Data of Minors
In compliance with Articles 8 of the GDPR and 7 of the Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, only individuals over the age of 14 can give valid consent for the processing of their personal data by Nails Dulce. If the User is under 14, parental or guardian consent is required for processing, and this consent will only be valid if authorised by them.
Confidentiality and Security of Personal Data
Nails Dulce is committed to adopting the necessary technical and organisational measures, according to the appropriate security level for the risk of the collected data, to ensure the security of personal data and prevent accidental or unlawful destruction, loss, alteration, or unauthorised access to personal data.
The Website has an SSL (Secure Socket Layer) certificate, ensuring that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User is encrypted.
However, since Nails Dulce cannot guarantee the invulnerability of the internet or the total absence of hackers or others who may access personal data fraudulently, the Data Controller is committed to notifying the User without undue delay in the event of a personal data security breach likely to result in a high risk to the rights and freedoms of individuals. According to Article 4 of the GDPR, a personal data breach is any breach of security that leads to the accidental or unlawful destruction, loss, alteration, or unauthorised access to personal data.
Personal data will be treated as confidential by the Data Controller, who is committed to informing and ensuring that this confidentiality is respected by employees, associates, and anyone who may have access to such data.
Rights Arising from the Processing of Personal Data
The User has the right to:
- Request access to their personal data.
- Request correction or deletion.
- Request the restriction of their processing.
- Oppose processing.
- Request the portability of personal data.
If you wish to exercise any of these rights, please contact us at the email info@nailsdulce.com or at the address provided earlier.
