General information
This website is operated by Inves Melange 2016 SL. In this Privacy Notice you will find information on how your personal data is handled when you visit the Inves Melange 2016 SL website.
Definitions
The data protection statement of Inves Melange 2016 SL is based on the terms used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our data protection statement should be easy to read and understand for the general public, as well as for our clients and business partners. To ensure this, we would first like to explain the terminology used.
In this data protection statement we use, among others, the following terms:
a) Personal data
Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
c) Processing
Processing is any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting its processing in the future.
e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
g) Controller or controller responsible for the processing
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
h) Processor
The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
i) Recipient
A recipient is a natural or legal person, public authority, agency or other body to which the personal data is disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of that data by those public authorities shall comply with the applicable data protection rules according to the purposes of the processing.
j) Third party
A third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process personal data.
k) Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.
Collection and use of personal data
We only collect and process the personal data (e.g. name, address, email) that you provide to us when you register, when you place an order for products or services, or when you make enquiries, and only to the extent necessary to establish the legal relationship, define its content or amend it. Once the contract has been concluded, your data will be deleted in accordance with the statutory retention obligations, unless you have expressly agreed to the further use of this data. We, and the persons we engage, will not pass on your personal data to third parties without your consent or without a relevant official order.
Controller’s contact details
When you register to create a new customer account, the data you enter will be stored permanently in our database. You may request that your data and your profile/account be deleted at any time.
Storage period
We only process and store your data for as long as is necessary for its processing or to comply with legal obligations. Your data will be blocked or erased once the purpose of the processing no longer applies. If statutory retention obligations also exist, we will block or erase your data at the end of the statutory retention periods.
Privacy policy
Basic information on Data Protection
Controller:
Inves Melange 2016 SL
Purpose:
Provision of online services. Management of website users. Commercial communications relating to our services.
Legal basis:
Express consent and legitimate interest.
Recipients:
No data is disclosed to third parties, except where required by law.
Rights:
To access, rectify and erase the data, as well as other rights, as explained in the additional information.
Additional information:
You can consult additional and detailed information on Data Protection in the attached clauses available at www.ancar.studio.
At Inves Melange 2016 SL we work to offer you the best possible experience through our products and services. In some cases, we need to collect information to achieve this. We care about your privacy and believe we should be transparent about it.
Therefore, for the purposes of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and LAW 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), Inves Melange 2016 SL informs users that, as data controller, it will include the personal data provided by users in an automated file.
Our commitment begins by explaining the following:
· Your data is collected to improve your user experience, taking into account your interests and needs.
· We are transparent about the data we obtain about you and the reason we do so.
· Our aim is to offer you the best possible experience. That is why, whenever we use your personal information, we will always do so in compliance with the regulations and, where necessary, we will ask for your consent.
· We understand that your data belongs to you. Therefore, if you decide not to authorise us to process it, you can ask us to stop processing it.
· Our priority is to guarantee your security and to process your data in accordance with European regulations.
If you would like more information about how your data is processed, please see the different sections of the privacy policy below:
Who is the controller of your personal data?
Identity: Inves Melange 2016 SL
Registered office: C/ Miquel Marqués 10
Tax ID (C.I.F.) no.: B57998304
Email:
Inves Melange 2016 SL has appointed a Data Protection Officer or an internal contact person within its organisation. If you have any query regarding the processing of your personal data, you can contact them by email at
What personal data do we collect?
The personal data that users may provide:
· Name, address and date of birth.
· Telephone number and email address.
· Location.
· Information relating to payments and refunds.
· IP address, the date and time you accessed our services, the web browser you use and data about your device’s operating system.
· Any other information or data you decide to share with us.
In some cases, completing the registration form is mandatory in order to access and use certain services offered on the website; likewise, failing to provide the personal data requested or not accepting this data protection policy means that it will not be possible to subscribe, register or take part in any promotions in which personal data is requested.
Why and for what purposes do we process your data?
At Inves Melange 2016 SL we process the information provided to us by data subjects for the following purposes:
· To manage orders or the contracting of any of our services, whether online or in physical shops.
· To manage the sending of information requested from us.
· To carry out commercial activities and to maintain and manage the relationship with the user, as well as to manage the services offered through the website and provide information, which may involve automated assessments, profiling and customer segmentation in order to personalise our service according to each customer’s characteristics and needs and to improve the customer’s online experience.
· To run and manage any competitions, prize draws or other promotional activities that may be organised.
· In some cases it will be necessary to provide information to the Authorities or to third-party companies for auditing purposes, as well as to handle personal data from invoices, contracts and documents in order to respond to claims from customers or Public Administrations.
Please note that the personal data obtained as a result of your registration as a user will form part of the Record of Processing Activities (RAT), which will be updated periodically in accordance with the GDPR.
What is the legal basis for processing your data?
The processing of your data may be based on the following legal grounds:
· The data subject’s consent for the contracting of services and products, for contact forms, requests for information or subscription to e-newsletters.
· Legitimate interest for processing our customers’ data in direct marketing activities, and the data subject’s express consent for everything relating to automated assessments and profiling.
· Compliance with legal obligations for fraud prevention, communication with public Authorities and third-party claims.
How long do we keep your data?
Data will be processed for the purposes described for as long as necessary to fulfil the purpose for which it was collected (for example, for the duration of the business relationship), as well as to comply with the legal obligations arising from the processing of the data.
To which recipients is your data disclosed?
In some cases, and only when necessary, Inves Melange 2016 SL will provide users’ data to third parties. However, data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) with which Inves Melange 2016 SL works may use the data to provide the corresponding services, but they will not use that information for their own purposes or pass it on to third parties.
Inves Melange 2016 SL endeavours to guarantee the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures in place to protect personal data. Such third parties are obliged to guarantee that the information is processed in accordance with data privacy regulations.
In some cases, the law may require personal data to be disclosed to public bodies or other parties; only what is strictly necessary to comply with those legal obligations will be disclosed.
The personal data obtained may also be shared with other companies in the group.
Where is your data stored?
As a general rule, data is stored within the EU. Where data is sent to third parties outside the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have signed up to the “Privacy Shield”.
What are your rights and how can you exercise them?
You can send your communications and exercise your rights by submitting a request to the following email address: .
Under the GDPR you may request:
· Right of access: you can ask for information about the personal data we hold about you.
· Right to rectification: you can notify us of any change to your personal data.
· Right to erasure and to be forgotten: you can request the deletion of your personal data, after it has first been blocked.
· Right to restriction of processing: this involves restricting the processing of personal data.
· Right to object: you can withdraw your consent to the processing of your data, objecting to its further processing.
· Right to data portability: in some cases, you can ask for a copy of your personal data in a structured, commonly used and machine-readable format so that it can be transmitted to another controller.
· Right not to be subject to individual automated decisions: you can request that no decisions be taken based solely on automated processing, including profiling, which produce legal effects or significantly affect the data subject.
In some cases, your request may be refused if you ask for the deletion of data that is necessary to comply with legal obligations.
Likewise, if you have any complaint about the processing of your data, you can lodge a complaint with the data protection authority.
Who is responsible for the accuracy and truthfulness of the data provided?
The user is solely responsible for the truthfulness and correctness of the data provided, releasing Inves Melange 2016 SL from any liability in this regard. In all cases, users guarantee and are responsible for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it duly up to date. The user agrees to provide complete and correct information in the registration or subscription form. Inves Melange 2016 SL reserves the right to terminate any services contracted with users if the data they have provided is false, incomplete, inaccurate or out of date.
Inves Melange 2016 SL is not responsible for the truthfulness of information that it has not produced itself and for which another source is indicated, and therefore accepts no liability for any hypothetical damage that may arise from the use of such information.
Inves Melange 2016 SL reserves the right to update, modify or remove the information contained on its web pages, and may even limit or deny access to such information. Inves Melange 2016 SL is released from liability for any loss or damage that the user may suffer as a result of errors, defects or omissions in the information provided by Inves Melange 2016 SL, provided that it comes from third-party sources.
Likewise, the user certifies that they are over 14 years of age and have the legal capacity required to give consent to the processing of their personal data.
How do we process the personal data of minors?
In principle, our services are not specifically aimed at minors. However, should any of them be aimed at children under the age of fourteen, in accordance with article 8 of the GDPR and article 7 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Inves Melange 2016 SL will require the valid, free, unambiguous, specific and informed consent of their legal guardians in order to process the minors’ personal data. In this case, the national identity document (DNI) or another form of identification of the person giving consent will be required.
In the case of those over the age of fourteen, data may be processed with the user’s consent, except in cases where the Law requires the assistance of the holders of parental authority or guardianship.
What security measures do we apply to protect your personal data?
Inves Melange 2016 SL has adopted the legally required levels of security for the protection of Personal Data and endeavours to install any other additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorised access and theft of the Personal Data provided to Inves Melange 2016 SL.
Inves Melange 2016 SL is not responsible for any hypothetical loss or damage that may arise from interference, omissions, interruptions, computer viruses, telephone faults or disconnections in the operation of this electronic system caused by circumstances beyond the control of Inves Melange 2016 SL; for delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads at the Data Processing Centre, in the Internet system or in other electronic systems; or for damage that may be caused by third parties through unlawful intrusions beyond the control of Inves Melange 2016 SL. Nevertheless, users should be aware that security measures on the Internet are not impregnable.
Links to other websites
The website www.ancar.studio may contain links to other websites. When you click on one of these links and access an external website, your visit will be subject to that website’s privacy policy, and Inves Melange 2016 SL accepts no liability whatsoever for its privacy policy.
How do we use cookies?
The website and social media channels of Inves Melange 2016 SL use cookies in order to optimise and personalise your browsing. Cookies are physical files of information stored on the user’s own device; the information collected through cookies helps users browse the site and optimises their browsing experience. The data collected through cookies may be shared with their creators, but under no circumstances will the information obtained through them be associated with personal data or with data that could identify the user.
However, if users do not want cookies to be installed on their hard drive, they can configure their browser to prevent these files from being installed. For more information, please see our Cookie Policy at www.ancar.studio.
Can the privacy policy be changed?
This privacy policy may be changed. We recommend that you review the privacy policy periodically.
Branding
Web Design
Social Media
Studio Partner