Privacy Policy

I. PRIVACY AND DATA PROTECTION POLICY

Respecting the provisions established by current legislation, Alfaro-Manrique Atelier (hereinafter, also the Website) undertakes to adopt the technical and organizational measures necessary, according to the level of security appropriate to the risk of the data collected.

Laws Included in This Privacy Policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the Internet. Specifically, it complies with the following regulations:

Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
Royal Decree 1720/2007 of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Controller of Personal Data

The controller for the processing of personal data collected on Alfaro-Manrique Atelier is: ALFARO MANRIQUE ATELIER, with VAT ID: B85166841 (hereinafter, the Controller). Contact details are as follows:

Address and registered office: Rabassa 37, 08024 Barcelona
Contact phone: 918865348
Contact email: info@alfaro-manrique.com

Registration of Personal Data

In compliance with the GDPR and the LOPD-GDD, we inform you that personal data collected by Alfaro-Manrique Atelier through the forms on its website will be included and processed in our file to facilitate, expedite, and fulfill the commitments established between Alfaro-Manrique Atelier and the User, or to maintain the relationship indicated in the forms, or to respond to a request or inquiry.

Furthermore, as provided in the GDPR and LOPD-GDD—unless the exception in Article 30.5 of the GDPR applies—a record of processing activities is maintained, specifying, according to its purpose, the processing activities carried out and other circumstances established in the GDPR.

Principles Governing the Processing of Personal Data

The processing of the User’s personal data will adhere to the following principles set out in Article 5 of the GDPR and Article 4 and following of Organic Law 3/2018:

Lawfulness, fairness, and transparency: User consent will always be required following complete and transparent information about the purposes for which data are collected.
Purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
Data minimization: Only the strictly necessary data will be collected for processing.
Accuracy: Personal data must be accurate and kept up to date.
Storage limitation: Personal data will be stored only as long as necessary for its intended purposes.
Integrity and confidentiality: Data will be processed securely to ensure confidentiality and protection.
Accountability: The Controller is responsible for ensuring all principles are adhered to.

Categories of Personal Data

The categories of data processed on Alfaro-Manrique Atelier are exclusively identifying data. Under no circumstances are special categories of data processed within the meaning of Article 9 of the GDPR.

Legal Basis for Processing Personal Data

The legal basis for processing personal data is consent. Alfaro-Manrique Atelier undertakes to obtain the User’s express and verifiable consent for the processing of their data for one or more specific purposes.

The User has the right to withdraw their consent at any time. Withdrawal will be as easy as giving consent, and it will not affect the use of the Website.

Whenever a User provides data via a form (to make inquiries, request information, etc.), it will be indicated if any field is mandatory because it is essential for properly handling the request.

Purpose of Processing

Personal data are collected and managed by Alfaro-Manrique Atelier to facilitate, expedite, and fulfill the commitments established between the Website and the User or to maintain the relationship indicated in the corresponding forms, or to address a request or inquiry.

Additionally, data may be used for commercial purposes—personalization, operations, and statistics—as well as for marketing research and data storage to adapt the offered content and improve the quality, performance, and navigation of the Website.

When personal data are collected, the User will be informed of the specific purpose(s) of processing.

Retention Periods

Personal data will be retained only as long as necessary for processing purposes and, in any case, during the following period: as long as the commercial relationship continues or until deletion is requested, and for the period necessary to meet potential legal liabilities arising from provided services.

When personal data are collected, the User will be informed about the retention period or, when not possible, the criteria used to determine it.

Data Recipients

User data will not be shared with third parties.

In any event, when personal data are collected, the User will be informed of the recipients or categories of recipients.

Data Concerning Minors

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, only persons over the age of 14 may lawfully give consent for their personal data to be processed by Alfaro-Manrique Atelier. For minors under 14, parental or guardian consent is required.

Confidentiality and Security of Personal Data

Alfaro-Manrique Atelier undertakes to adopt the necessary technical and organizational measures appropriate to the level of risk to guarantee the security of personal data and prevent their accidental or unlawful destruction, loss, alteration, or unauthorized access.

The Website is equipped with an SSL (Secure Socket Layer) certificate, ensuring that personal data are transmitted securely and confidentially through fully encrypted communication.

However, given that internet security cannot be guaranteed, Alfaro-Manrique Atelier commits to notifying the User without undue delay in the event of a data breach posing a high risk to individuals’ rights and freedoms.

Personal data will be treated confidentially by the Controller, who shall ensure this confidentiality is respected by employees, partners, and any individual granted access to such data.

User Rights Regarding Data

Users may exercise the following rights recognized by the GDPR and Organic Law 3/2018:

Right of access: To confirm whether Alfaro-Manrique Atelier processes their data and to obtain access and relevant information.
Right to rectification: To correct inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”): To request deletion of personal data when no longer necessary, when consent is withdrawn, or when processing is unlawful.
Right to restriction of processing: To request limitation of processing under certain conditions.
Right to data portability: To receive personal data in a structured, commonly used format and transmit them to another controller.
Right to object: To object to the processing of personal data.
Right not to be subject to automated decisions, including profiling: To avoid decisions based solely on automated processing.

Users may exercise their rights through a written request addressed to the Controller with the reference “GDPR-www.alfaro-manrique.com”, including:

Name, surname, and ID copy (or equivalent valid proof).
Reason for the request or information sought.
Address for notifications.
Date and signature.
Supporting documents if applicable.

Send requests to:

Postal address: Rabassa 37, 08024 Barcelona
Email: info@alfaro-manrique.com

Links to Third-Party Websites

The Website may include links to third-party websites not operated by Alfaro-Manrique Atelier. Those third parties are responsible for their own privacy practices and data processing policies.

Complaints to Supervisory Authorities

If a User believes that their data are being processed in violation of applicable regulations, they have the right to effective judicial protection and to file a complaint with a supervisory authority—in Spain, the Spanish Data Protection Agency (https://www.agpd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

Users must read and agree to the terms regarding the protection of personal data contained in this Privacy Policy and accept the processing of their data under the indicated conditions, durations, and purposes. Use of the Website implies acceptance of this Privacy Policy.

Alfaro-Manrique Atelier reserves the right to modify its Privacy Policy, either based on its own criteria or due to legislative, jurisprudential, or Spanish Data Protection Agency updates. Changes or updates will not necessarily be explicitly communicated to the User. It is therefore recommended to check this page periodically.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights.

This document was created using an online Privacy Policy template generator on February 23, 2021.