Privacy Policy

IDENTIFICATION OF THE OWNER AND RESPONSIBLE FOR THE TREATMENT

Owner: The website NEOZAPAS.COM (hereinafter, the “Owner”) is owned by Neo Zapas S.L., with registered office at Passeig Sant Agustí, 7, penthouse of Perafita, Spain with C.I.F nº B09646472.

E-mail: info@neozapas.com

DATA PROTECTION

The visit to this Website does not imply that the user is obliged to provide any information about himself. In the event that the user wants to proceed to make a purchase of the products through the online purchase gateway, he must provide the personal data required as necessary, in order that the Owner of the Website can comply with the order made and be able to duly comply with the tax obligations derived, in this case, as an essential requirement to complete the registration prior to purchase, the user must read and expressly accept the privacy policy and the general and particular conditions of the contracting of this Website.

If the User provides any personal information, the data collected on this Website will be used for the purpose, in the manner and with the limitations and rights contained in the current regulations on the Protection of Personal Data and the regulations on the protection of personal data in force, and as explained and detailed in our personal data protection policy and that the user has read, understood and expressly accepted when registering on this website.

In compliance with the provisions of these rules, the Owner as responsible for the files informs you that your personal data collected through the Website will be subject to automated processing in our files which are protected by computer security measures that prevent their free access, and guarantee their anonymization and confidentiality.

The purpose of the files is to manage the requests made and answer them as well as activities of our corporate purpose, consisting of activities of promotion and sale of the products shown on this Website and those of administrative and accounting management of the company. By accepting our privacy policy, you as a user are consenting to your data being expressly treated for the advertising and / or informative purpose of our products and the news that occur and that we consider may be the object of your interest through our sending of advertising, either through newsletter, digital, telephone or social media advertising.

The Owner informs you that once the contractual relationship between the parties has ended, due to its normalization or because you as the interested party express your willingness to cancel your data in our files, or because more than a year has elapsed without any type of activity between the parties, the company will only keep them for the time strictly necessary for compliance with its legal obligations. The data will be transferred to a file of a temporary nature and only for consultation, where they will be stored securely and where they will be protected by computer security measures that prevent their free access, and guarantee their anonymization and confidentiality during the time of mandatory conservation.

As a user and interested party, and by virtue of your right to information, in this section we expressly inform you that you are the owner of the rights indicated below, and which are respected by the Owner in the processing of your personal data:

Right of access: By virtue of the right of access, the affected party may obtain from the person responsible for the treatment information related to specific data, included in a certain file, or to all of their data subject to treatment. This right constitutes the pillar of the rights that the affected party has, since it is granted a right to know the data subject to treatment, and therefore, make possible its power of control over the data, in this way, the interested party is empowered to know the information related to his person that appears in databases and automated files or not.
Right of rectification: it is the right of the affected party to modify the data that turn out to be inaccurate or incomplete.
Right of cancellation: The exercise of the right of cancellation will result in the deletion of data that turn out to be inadequate or excessive, without prejudice to the duty of blocking in accordance with the provisions of current regulations.
Right of opposition: it is the right of the affected party not to carry out the processing of their personal data or to cease in the same in the following cases:
When your consent is not necessary for the treatment, as a result of the concurrence of a legitimate and well-founded reason, referring to your specific personal situation, that justifies it, provided that a Law does not provide otherwise.
In the case of files whose purpose is to carry out advertising and commercial prospecting activities, whatever the company responsible for their creation.
When the purpose of the processing is to adopt a decision referring to the affected party and based solely on an automated processing of their personal data.
Right to transparency: All processing of personal data must be lawful and fair. It should be absolutely clear to natural persons that personal data concerning them are being collected, used, consulted or otherwise processed, as well as the extent to which such data are or will be processed.
Right to be forgotten: The interested party will have the right to obtain without undue delay from the person responsible for the treatment the deletion of the personal data that concerns him, which will be obliged to delete without undue delay the personal data when any of the following circumstances occur:
Personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
The interested party withdraws the consent on which the treatment is based in accordance with the provisions of current regulations.
The interested party opposes the treatment in accordance with the provisions of current regulations.
Personal data have been processed unlawfully
Personal data must be erased in order to comply with a legal obligation laid down in Union or Member State law that applies to the controller
Right to restriction of processing: The interested party shall have the right to obtain from the controller the limitation of the processing of data when any of the following conditions are met:
The interested party contests the accuracy of the personal data, for a period that allows the person responsible to verify the accuracy of the same.
The processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the limitation of its use.
The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the formulation, exercise or defence of claims.
The interested party has objected to the treatment by virtue of the provisions of current regulations, while it is verified if the legitimate reasons of the person responsible prevail over those of the interested party.
Right to data portability: The interested party shall have the right to receive the personal data concerning him/her, which he/she has provided to a controller, in a structured, commonly used and machine-readable format, and to transmit them to another controller without being prevented by the controller to whom they were provided, when:
The treatment is based on consent in accordance with the provisions of current regulations, and
The processing is carried out by automated means

All the above rights, as well as those that may arise in accordance with current regulations on data protection, whether national or EU, are very personal and will be exercised by the affected party.

Such rights shall be exercised:

▪ By the affected party, proving their identity, in the manner provided for in the following section.

▪ When the affected party is in a situation of disability or minority that makes it impossible for him to personally exercise these rights, they may be exercised by his legal representative, in which case it will be necessary to prove such condition.

▪ The rights may also be exercised through a voluntary representative, expressly designated for the exercise of the right. In that case, the identity of the represented must be clearly accredited, by providing a copy of their National Identity Document or equivalent document, and the representation conferred by it.

The general conditions for the exercise of rights are:

Rights are independent rights, so that the exercise of any of them cannot be understood as a prerequisite for the exercise of another.
The exercise by the affected party of their rights will be free of charge.

The exercise of the rights must be carried out by means of a communication addressed to the person responsible for the file, which will contain:

Name and surname of the interested party; photocopy of your national identity card, passport or other valid document identifying you and, where applicable, of the person representing you, or equivalent electronic instruments; as well as the document or electronic instrument accrediting such representation. The use of an electronic signature identifying the affected party will exempt from the presentation of photocopies of the DNI or equivalent document.

The previous paragraph shall be without prejudice to the specific regulations applicable to the verification of identity data by Public Administrations in administrative procedures.

Request in which the request is specified.
Address for the purposes of notifications, date and signature of the applicant.
Documents accrediting the request you make, if any.

Likewise, once informed of their rights, and in relation to the data provided, the client expressly accepts that:

Your data is used to send you information, training and marketing of our services, by conventional or electronic means that you may consider of interest within the services we provide.
In the event that the user provides personal contact details of third parties -such as, for example, the user’s workers-, the user undertakes to communicate this clause to the holders of said data, informing them, prior to such communication to the Owner of the Website of all the aspects included in it, especially the existence of the file, the purposes of the treatment and the possibility of exercising rights. In case of not being communicated, the user undertakes to leave the Owner of the Website harmless, for any damage, prejudice, expense or sanction of any jurisdictional order that could bring cause of the lack of communication of this clause to the owners of the data provided by the user.
We will proceed to the cancellation of the data collected when they are no longer necessary or relevant for the purpose for which they were collected, or when you as a user, request it in accordance with your right of cancellation.
If the data collected are used for a different purpose for which they were collected or collected, the express and prior consent of the interested parties will be required.

The Owner of the Website expressly informs that all the necessary technical and organizational measures have been adopted at our disposal to guarantee the security and integrity of the data, as well as to avoid its alteration, loss, treatment or unauthorized access.

The data requested by the Owner of the Website are mandatory. The refusal to provide the requested data will imply the non-provision or the impossibility of accessing the service for which they were requested.

You may at any time exercise your rights to protect personal data by contacting the Owner of the Website, whose contact details appear at the beginning of the legal notice.

INFORMATION AND CONSENT

In accordance with the provisions of EU Regulation 679/2015 on Data Protection, by accepting this Privacy Policy, the User (hereinafter, the “User”) gives his informed, express, free and unequivocal consent so that the personal data collected through the website www.neozapas.com (hereinafter, the “Website”) are treated by NEOZAPAS in accordance with the provisions of this Privacy Policy.

All personal data requested from the User on the Website are mandatory, and access or registration on the Website is not possible if such data is not provided.

Likewise, when personal data are collected through forms that can be enabled on the Website due to the development of their activity, it will be necessary for the User to provide, at least, those marked with an asterisk since, if those data considered necessary are not provided, we will not be able to provide the service to the User through the Website.

The User guarantees that the personal data provided to NEOZAPAS are true and accurate, so NEOZAPAS will not be responsible for any incident arising from the inaccuracy or falsity of the information provided by the Users.

The User, as the sole data controller, shall be responsible for complying with all applicable data protection regulations. In addition, the User agrees to obtain all legally necessary consents, authorizations and/or approvals before including personal data on the Website or using the Website.

PURPOSE OF THE TREATMENT

The personal data of the User or third parties that are transferred by the User will be processed by NEOZAPAS through the Website only for the following purposes:

1) Carry out the functionalities of the Website aimed at providing the services offered therein.

2) Comply with the legally established obligations.

In no case will we carry out any of the following activities:

1) Transfer the data to other persons or entities, without the prior consent of the Users.

2) Transfer them to other States, without the prior consent of the Users.

USER DATA

The User guarantees that the data provided are true, accurate, complete and updated, being responsible for any damage, direct or indirect, that may be caused as a result of the breach of such obligation.

In the event that the data provided belonged to a third party, the User guarantees that he has informed said third party of the aspects contained in this document and obtained his authorization to provide his data to the person in charge for the purposes indicated above.

NEOZAPAS cannot guarantee the absolute invulnerability of the systems, therefore, it does not assume any responsibility for the damages derived from alterations that third parties may cause in the computer systems, electronic documents or files.

COOKIES POLICY

In accordance with the provisions of the RGPD and Law 34/2002, on Services of the Information Society, all personal data obtained through cookies during the use of the Website will be treated in accordance with the provisions of the Cookies Policy.

EXERCISE OF RIGHTS

In accordance with the provisions of the RGPD, we inform you that you can exercise your rights of access, rectification, cancellation, opposition, limitation of treatment and portability, requesting it in writing through any of the following means, attaching in any case a copy of a document proving your identity and specifying the right or rights you wish to exercise, directly to NEOZAPAS through the following e-mail: info@neozapas.com.

ACCEPTANCE OF THE PRIVACY POLICY

The User acknowledges and agrees to have read and understood this Privacy Policy whose content constitutes the entire agreement between the User and NEOZAPAS regarding the use and processing of their personal information within the Website.

The User expressly agrees to be bound by the terms of this Privacy Policy, in all its extension and scope, without excepting any of its provisions.

In addition to the provisions contained in this Privacy Policy, the User undertakes to comply with the Legal Notice.

NEOZAPAS reserves the right to update and make changes to the Privacy Policy even without prior notification to the User. Such modifications must become effective at the time of their publication on the Website, where they will be available to the User at all times. In this sense, we recommend the User to regularly consult the content of the Privacy Policy to be aware of any modifications that affect the processing of data within the Website.

Last updated: August 01, 2019.