Privacy policy

User Information
ERIC AMAYA CALDAS, as the Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (GDPR), we will process your data as set out in this Privacy Policy.
In this Privacy Policy, we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it, and your options regarding the processing of your personal data.
This Policy applies to the processing of your personal data collected by the company for the provision of its services. By accepting the measures in this Policy, you agree that we may process your personal data as defined in this Policy.
CONTACT
Commercial name: ERIC AMAYA CALDAS
VAT number: 41553366W
Registered office: Carrer Sant Pere, 73, 17200 Palafrugell, Girona.
Telephone: 623061816
e-mail: info@arbori.net
KEY PRINCIPLES
We have always been committed to providing our services with the highest degree of quality, which includes handling your data with security and transparency. Our principles are:
Legality: We will only collect your personal data for specific, explicit and legitimate purposes.
Data Minimisation: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it has been collected.
Purpose Limitation: We will only collect your personal data for the stated purposes and only as you wish.
Accuracy: We will keep your personal data accurate and up to date.
Data Security: We apply appropriate technical and organisational measures proportionate to the risks to ensure that your data is not damaged, such as unauthorised disclosure or access, accidental or unlawful destruction or accidental loss or alteration, and any other form of unlawful processing.
Access and Rectification: We have the means for you to access or rectify your data whenever you deem it appropriate.
Conservation: We conserve your personal data legally and appropriately, and only for as long as is necessary for the purposes for which it was collected.
International transfers: where your data is to be transferred outside the EU/EEA, it will be adequately protected.
Third-Party Sharing: Access and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations, and with adequate contractual guarantees.
Direct Marketing and cookies: We comply with applicable legislation regarding advertising and cookies.
Collection and processing of your personal data
The types of data requested and processed are:
Personal identification, personal characteristics, and social circumstances data.
Economic data, if applicable.
We also automatically collect data about your visit to our website as described in the “Use of Cookies” section below.
Whenever we request your personal data, we will clearly inform you of what personal data we collect and for what purpose. In general, we collect and process your personal data for the purpose of:
Provide information about our products and services.
To provide our services.
Respond to your queries and requests.
Legitimacy
In accordance with applicable data protection regulations, your personal data may be processed if:
You have given us your consent for the processing. Of course, you can withdraw your consent at any time.
It is necessary for the provision of some of our services through a contractual relationship between you and us.
With this processing, we are seeking a legitimate interest which is not overridden by your rights of privacy. This legitimate interest will be duly communicated to you in the privacy notice related to this particular processing.
You are required by law
Your Rights
In relation to the collection and processing of your personal data, you can contact us at any time in order to:
To know if we are processing your personal data.
To access your personal data and any other information indicated in Article 15(1) of the GDPR.
Rectify your personal data that are inaccurate or incomplete in accordance with Article 16 of the GDPR.
Delete your personal data in accordance with Article 17 of the GDPR.
To restrict the processing of your personal data in accordance with Article 18 of the GDPR.
Request the portability of your data in accordance with Article 20 of the GDPR.
Object to the processing of personal data according to Article 21 of the GDPR.
If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. To exercise your rights, you can send us a communication to info@arbori.net.
Legal information
The requirements of this Policy supplement, and do not replace, any other existing requirements under applicable data protection law, which shall prevail in any event.
This Policy is subject to periodic review, and the company may amend it at any time. When this occurs, we will notify you of any changes and ask you to re-read the latest version of our Policy and confirm your acceptance.
Information of interest
If you wish to access our complaint forms, simply contact us via the following email: info@arbori.net and we will provide you with detailed information.
Likewise, if you need to manage any type of complaint, you will need to send us an email to the same address info@arbori.net so that we can deal with it as quickly as possible.