PRIVACY POLICY

1. Identity of the data controller

This legal notice and privacy policy, VELATTI BY SANDRA ACOSTA, S.L. with NIF. B64828411 and address at C/. Muntaner 200, entlo 2ª, 08036- Barcelona Spain, hereinafter VELATTI, has the following purpose: To inform users visiting the website of their Privacy Policy and describe what data is collected, how it is used and the options that users have concerning this data, including how to access and update it.

The use of the website and any of the services it contains will imply full acceptance of the conditions contained in this privacy policy.

2. Data collection and consent

In compliance with Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of digital rights, and the General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council, of 27 April 2016, you are informed that the personal data requested in our forms or which may be submitted through our email addresses, will be included in our Processing Activity Files.

Moreover, when a user fills in any of the forms with requested personal data, as set out in the GDPR, they must grant unequivocal and explicit consent, which can be revoked and does not have retroactive effects.

You are informed that all personal data will be treated with maximum confidentiality and in compliance with data protection legislation.

The owner of this website will not be responsible for the processing of personal data carried out by sites accessed by the user through links on our website.

This website is governed exclusively by Spanish legislation, which any person, either Spanish or foreign, who uses this website will be subject to.

3. Legal basis for personal data processing

We inform you that all personal data will be handled with maximum confidentiality, and in compliance with the new European legislation on personal data protection. The legislation governing collecting and processing personal data is as follows:

• Organic Law 3/2018, of 5 December, of Personal Data Protection and Guarantee of Digital Rights.
• Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR).

Our databases comply with the requirements of Art. 31 of the LOPDGDD and the GDPR, concerning the content of the Register of Processing Activities, and the corresponding security measures. If users feel their personal rights are not protected, they may file a complaint before the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

4. Purposes of processing

The data we request is necessary for the purpose it is collected, and will not be used for any other purpose apart from this, and under no circumstances will it be handed over to third parties without the consent of the owner.

Users are under no obligation to submit their personal data. Nevertheless, this data will be absolutely necessary to be able to supply the services we offer.

In compliance with the LOPD GDD 3/2018 and Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016, the reason for collecting the personal data is: To provide information about the products offered on the website http://www.velattib2b.com/

Unless stated otherwise, all the fields in each form must be filled in, submitting truthful, exact, complete and current data.

The user alone will be responsible for any direct or indirect damages caused to the owner of the website or any third party by submitting false, inexact, incomplete or outdated information, or data referring to third parties.

5. Right of the user to access, correct, delete (Right to be forgotten), portability, limitation and oppose their personal data

In compliance with the rights of the interested party set out in Chapter II of Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of Digital Rights, users have the right to access information concerning them, stored in the databases of the website owner, correct this information if it is erroneous, cancel it or oppose its processing, in the terms established in said regulations, by contacting VELATTI BY SANDRA ACOSTA, S.L., using any of the following means:

• Electronic mail: b2c@velattib2b.com
• Conventional mail: C/. Muntaner 200, entlo 2ª, 08036- Barcelona, Spain, including a photocopy of their DNI or other ID document.
• The user must indicate to the data handler which right they wish to exercise.

To keep the personal data up to date, it is essential to inform the owner of the website of any modification. Otherwise, the owner will not be liable for the truthfulness of the data.

If the user does not expressly cancel their personal data from the records of VELATTI, it is understood that they are interested in remaining in these records, as long as they are used for the purpose they were collected for and while they continue to deem this opportune.

The rights of the interested party are the following:

The right to Access: Any user has the right to receive confirmation about their personal information held by the company. The user will have the right to receive a copy of their personal data that has been processed, and they will even be able to access it remotely.

The right to correction: Users may correct any inaccurate personal data. They will have the right to complete the personal data if this is not attributable to the owner of the website.

The right to cancel: Users may request their personal data to be deleted from the owner’s database. The Right to be Forgotten is not considered an autonomous or differentiated right concerning the traditional rights of the interested party, but rather it is the consequence of the application of the right to delete the personal data. As such, it is a manifestation of the rights of cancellation or opposition in the online environment. Therefore, the user will be entitled to request the deletion of their digital personal data, through the so-called Right to be Forgotten.

The right to oppose: The holder of the right may request the owner of the records to stop processing their personal data.

The right to limit processing will enable the interested party, whose personal data is being processed, to request the data handler to apply measures to some personal data for, among other things, avoiding modification or deletion, if requested.

6. Personal data security

The security measures required by the European Regulation (GDPR), establish that the data handlers must take appropriate technical and organisational measures to guarantee the security of personal data.

This means that, in this website, personal data protection has been included in the design and applied by default, requesting the user’s consent and acceptance of this privacy policy.

With these technical and organisational measures, the owner of the website guarantees total compliance with the GDPR, ensuring that personal data is only processed for each of the specified purposes.

7. Commercial communication by electronic mail

In compliance with article 21 of the Information Society and E-commerce services Law (Law 34/2002, of 11 July on the information society and e-commerce), which forbids the sending of commercial communications by e-mail if this has not been first expressly authorised by the receiver.

• Electronic mail: b2c@velattib2b.com
• Post: C/. Muntaner 200, entlo 2ª, 08036- Barcelona, Spain, enclosing a photocopy of their DNI or other ID document.

8. Modifications of this confidentiality policy

VELATTI reserves the right to modify its data protection policy in the future as deemed fit or due to changes in legislation or business practices. In the case of any modification, the new text will be published on this same website, where the user can obtain information about the data protection policy. In any case, relations with the user will be governed by the regulations in force at time moment the website is accessed, therefore, it is necessary to read this data protection policy whenever you submit your data through our website.

The use of the Website will make you a user and implies acceptance of the Conditions provided herein.