Privacy Policy

This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), as well as in what is not contrary to the aforementioned regulations, to Organic Law 15/1999, on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that may replace or update them in the future. Our organization is committed to the privacy of your personal data. The personal data provided are necessary to provide our services and are processed in a lawful, fair and transparent manner, ensuring adequate security of the same, including protection against unauthorised or unlawful processing and against its accidental loss, destruction or damage through the application of technical and organisational measures. Through this document we want to offer you in a transparent and loyal way all the necessary information regarding the processing of your personal data carried out by this organization.

1 – DATA CONTROLLER

IDENTITY: AMATILE, S.L.
C.I.F. / N.I.F.: B56579907
ADDRESS: AVDA. DEL PAÍS VALENCIA, 231, 03720 BENISSA (ALICANTE)
PHONE: 695387903
E-MAIL: hola@amatile.com

2 – RECIPIENTS OF PERSONAL DATA

– The personal data provided will not be subject to any transfer unless this is provided for in the specific processing.

– Optionally, for the contracting of cloud computing services and/or services for sending e-mails, communication, as well as other related computer services, personal data may be:

a) Assigned to IT services companies located within the European Economic Area (EEA) or,

b) Transferred to IT service companies located outside the EEA that are covered by the Privacy Shield and therefore have adequate safeguards in place to ensure the security of personal data. You can learn more by visiting this link: https://www.privacyshield.gov/welcome

c) Optionally, to administrations and other bodies when required in compliance with legal obligations.

3 – LEGAL BASIS THAT LEGITIMIZES THE PROCESSING OF PERSONAL DATA

In each specific processing of personal data, we will inform you of the legal basis that legitimizes it.

4 – RIGHTS

RIGHT OF ACCESS

It is the right to obtain from the controller confirmation as to whether or not they are processing personal data concerning the data subject and, if so, the right of access to the personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data were or will be disclosed, storage period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or deletion of personal data or the limitation of the processing of personal data relating to the data subject or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where appropriate, of automated decisions, including profiling, when data is transferred to third countries the right to be informed of the appropriate safeguards applied.

RIGHT OF RECTIFICATION

It is the right to request the rectification of your personal data if it is inaccurate, including the right to complete data that is incomplete. It should be borne in mind that by providing us with personal data by any means, you guarantee that they are true and accurate and you undertake to notify us of any changes or modifications to them. Therefore, any damage caused by the communication of erroneous, inaccurate or incomplete information in the forms on the website will be the sole responsibility of the interested party.

RIGHT OF ERASURE

It is the right to request the deletion of your personal data when, among other cases, they are no longer necessary for the purpose for which they were collected, or are being processed in another way or withdraw consent. It should be borne in mind that deletion will not be appropriate when the processing of personal data is necessary, among other cases, for compliance with legal obligations or for the formulation, exercise or defence of claims.

RIGHT TO LIMITATION

It is the right to request the restriction of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to keep it beyond the necessary time when you may need it.

RIGHT TO WITHDRAW CONSENT

It is the right to withdraw the consent you have provided by marking “I have read and accept the privacy policy” at any time and as specified in the corresponding section “Exercise of rights” or in the specific treatment of commercial communications or Newsletter. Please note that this right will not take effect if, among other cases, the processing of personal data is necessary for the fulfilment of a legal obligation, the performance and maintenance of a contractual relationship, or for the establishment, exercise or defence of legal claims. Likewise, the withdrawal of consent will not have retroactive effects, i.e. it will not affect the lawfulness of the processing based on consent prior to its withdrawal.

RIGHT TO PORTABILITY

It is the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit them to another controller, provided that: the processing is based on your consent and is carried out by automated or computer means.

RIGHT TO OBJECT

It is the right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

If you believe that we are processing your personal data incorrectly, you can contact us or you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

EXERCISE OF RIGHTS

You can exercise your rights by writing to the postal address indicated above or by e-mail hola@amatile.com, attaching in both cases a copy of your NIF/NIE/Passport or similar document.

5 – PROCESSING OF PERSONAL DATA.

GENERIC PROVISIONS

The personal data requested in each of the specific processing processes are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, so that the principle of data minimisation is complied with. The personal data requested in each of the specific processing processes are strictly necessary, refusal to provide them would imply not being able to provide the requested service. The communications of personal data provided for in each of the specific processing processes are in some cases necessary for the execution and maintenance of a contract and in other cases for compliance with a legal obligation applicable to the data controller.

DIGITAL ASSISTANT – “CHATBOT” or “ONLINE CHAT”

In the event that this website uses the online chat software, provided as a self-service to provide users with an adequate and prompt response to common questions and to improve consumer services for the benefit of users who visit the website, the following data will be processed during the conversation with the “chat bot”: the IP address and other personal data that are entered into the chat bot’s conversational function. The data collected will not be used to personally identify the website visitor, and will not be merged with personal data about the bearer of the pseudonym, unless the personal data is provided voluntarily when using the online chat. The legal basis for this processing is set out in Article 6(1)(f) GDPR.

CONTACT FORM

Personal data will be processed to channel requests for information, suggestions and complaints from users or customers. The legal basis that legitimizes the processing of personal data is express consent by marking “I have read and accept the privacy policy”. Personal data will be kept for a period of two years from the moment they are no longer processed, without prejudice to the exercise of your rights as a data subject.

E-COMMERCE FORM

Personal data will be processed to manage your online purchases by processing your orders and returns through our online services, sending you notifications about the status of delivery or in case of problems with the shipment of the items, managing your payments, handling any complaints or issues about the warranty of the products or services, to identify and validate your legal age to contract, as well as for and, where appropriate, the formulation, exercise or defence of claims. The legal basis that legitimizes the processing of personal data is express consent by marking “I have read and accept the privacy policy”. The personal data will be transferred to the transport company in order to deliver the order to your home as well as to payment service providers. Personal data will be kept as long as you do not withdraw consent, unless they must be kept for the maintenance of the relationship between the parties or for the years necessary for compliance with legal obligations.