JESÚS NAVARRO, S.A. (hereinafter, CARMENCITA) has developed its Platform www.carmencita.com (hereinafter, the Platform) for the purpose of creating a community in which to provide services and sell products of interest to you through our website. The Privacy Policy shall apply when using our website, which hereinafter shall be identified, “Web”. In order to access some of our services or buy our products, it will be necessary to provide the personal information that we request (“your Data”). We know that privacy is important for you and, as a result, we assume the responsibility of complying with the national and European laws in effect in matters of data protection, and have the goal of processing your data transparently. To that end, in this Privacy Policy we explain who is responsible for processing your personal information, for what purpose they are going to be processed, the legal basis that allows us to carry out this processing, to whom we may convey your data, how we gather them, the rights involved and the processes we have available to protect your data. When the legitimation is based on your consent, we request it explicitly and separately from the other purposes so you can decide. It is important to us that you give your consent given that, in some cases, it will allow us to inform you of all the new things that come up and to keep you up to date on the most noteworthy offers. CARMENCITA reserves the right to change the present Privacy Policy to adapt it to legal and juridical developments or interpretation by the Spanish Data Protection Agency and/or the procedures or purposes for processing your data. CARMENCITA will notify you or announce the changes made before hand, indicating clearly and sufficiently in advance of the changes made and requesting, in case it is needed, your acceptance of them. CARMENCITA will not make retroactive changes to the processes we have available to protect your data that reduce your rights unless it is legally required. To that end, and in conformance with that set forth in Regulation (EU) 2016/679 of the European Parliament and Council, of 27 April 2016, related to the protection of physical persons as regards the processing of personal data and the free circulation of those data (GDPR) and in Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD); CARMENCITA, as the entity responsible for the processing, advises you of the processing carried out on the personal data you give us and to which are applied the security, technical and organizational measures laid out in the regulations in effect.

Who is responsible for processing your data?

• Entity responsible: JESÚS NAVARRO, S.A.
• TIN: A08941544
• Postal addr: C/ Isaac Peral, 46 03660-Novelda (Alicante, Spain)
• E-mail: rrhh@carmencita.com

For what purpose do we process your data?

The personal information we ask for from our users is requested in accordance with the following purposes:

• Handling your purchase request from our website.
• Responding to requests made through our customer service.
• Asking to subscribe to our newsletter.
• Creating a new user account.
• Participating in sales campaigns, as well as games, contests or drawings through our social network profiles.
• For navigating on our website (cookies).

What is the basis of legitimation for the processing of your data?

The legal basis for the processing of purchase requests is the contractual relationship between the user and CARMENCITA. The legal basis for the rest of the processing is your consent. We inform you that all processing based on consent can be revoked at any time.

To whom are your data conveyed?

In the processing to handle your purchase request, your data will be given to the transport company so the product can be delivered. In this case, we inform you that said transfer is made with all the security measures in the GDPR, among them, commissioning the processing between CARMENCITA and the transport company, where that company commits itself to handle all the data protection security measures as well. Without limiting the aforementioned, CARMENCITA advises you that the provision of some of its services or the supply of its products require access to your data by third parties, CARMENCITA being committed to complying with that set forth in the applicable laws in force. For these purposes, CARMENCITA, informs you that it will commission processing with third parties for services like cloud storage or services with third-party companies with which this entity has agreements like legal and/or tax advisers. Such processing commissions can require international transfers of data, always made to countries of the European Union, the privacy shield of the US or which have a suitable level of protection in conformance with the regulations in force. Other than these cases, there is no transfer of data anticipated, except by legal obligation. In the event that such a possibility is contemplated, CARMENCITA will ask for your consent.

What are your rights when you give us the data?

Every person has the right to obtain confirmation of whether CARMENCITA is processing personal data that concerns them or not. They can also exercise the rights conferred by the regulations in effect: the right of access, rectification, erasure and opposition, limitation of processing, data portability and not being the object of individualised automated decisions. Access: allows the owner of the data to obtain information as to whether CARMENCITA is processing personal information that concerns them or not and, in such a case, the right to obtain information about the personal information subject to processing. Rectification: allows the correction of errors and changing erroneous or incomplete data. Erasure: allows the data to be suppressed and no longer processed by CARMENCITA unless there is a legal obligation to keep them and/or no other reasons for processing by CARMENCITA prevails, in conformance with the regulations in force. Limitation: under the conditions legally established, allows stopping the processing of data such that it prevents their future processing on the part of CARMENCITA, which will only keep them for the exercise of or defence against complaints. Opposition: allows the data owner, in defined situations and for reasons related to their particular situation, to be able to oppose the processing of their data. CARMENCITA, will stop processing the data, except for legal reasons or the exercise of or the defence against possible complaints. Portability: allows the data owner to receive their personal data in order to be able to send them directly to another processor in a structured, commonly used, machine readable format. In order to exercise this right, the data owner must provide a valid e-mail address Likewise, they have the right to withdraw their consent at any time, without it affecting the legality of the processing based on the consent prior to its withdrawal. They can exercise their rights by whatever means allows proving the sending and receipt of their request. The request shall be addressed to CARMENCITA by means of the data that are included in the section “Party Responsible for the Processing”, referring to “Data Protection”. The request must include: Name, surnames and photocopy of their identification document, petition that specifies the request and the address for notifications. In the event of not being satisfied with the response from CARMENCITA regarding the exercise of their rights, they have the right to make complaints before the Control Authority (Spanish Data Protection Agency), the supervisor of the same.

How have we obtained your data?

The personal data processed by CARMENCITA have been provided by you through the completion of the corresponding registration and/or subscription forms on the Web; through which we process the data which are included in them and, in no event, will we process special types of data. Exactness of the data and legal age. In any of the cases in which you provide data in conformance with this Privacy Policy, you guarantee that you are of legal age or older than fourteen years of age in order to provide your consent in conformity with the regulations in force on the matter of data protection, and that the data provided are true, exact, complete and up to date, being responsible for any damages, direct or indirect, that might be occasioned as a consequence of failure to meet this obligation.

For how long are your data kept?

CARMENCITA informs you that it will process and store your data as long as needed to fulfil the contract signed at the time of acquiring one of our products, and this is in force and for the purpose of being able to use them in conformance with the purposes and legal basis for treatment for which they were collected and as long as your consent is not revoked. We will also process your data to comply with the requirements of the applicable legislation, prevent illicit activity, resolve disputes, solve problems, carry out our contract and other actions permitted by law. When the Contract is finished, we shall keep your personal information for the periods prescribed by law, in conformance with the applicable legislation in force regarding Tax, Civil and Mercantile matters. When the processing of your data are not needed and the periods prescribed by law have passed, we will eliminate and/or block them in conformance with our policy on the retention and erasure of data. CARMENCITA shall adopt the security measures suitable to avoid the alteration, loss, processing or unauthorised access to the data. Likewise, it shall inform anyone who has access to your data about their obligations regarding security, confidentiality and their duty of secrecy. CARMENCITA processes your data under levels of security. For these purposes, credit card transactions shall be transmitted via a secure SSL (Secure Socket Layering) server. When the letters “http” change to “https”, the “s” means you are in an SSL area; your browser may also tell you of the security of the site with a pop-up message. The SSL security protocol encrypts personal information during the transport of the data. Without limiting the aforementioned, the security of the information transmitted via the internet cannot be guaranteed. In this regard, CARMENCITA cannot be considered responsible for any interception or interruption of communication over the internet or of changes in the information or the loss thereof. Users of the Platform are responsible for maintaining the security of any password, username or any other form of identification to gain access to areas protected by password of any of our services. For the purpose of protecting your data and information, we shall suspend the use of any of the services of CARMENCITA, without prior notice, if a violation or breach of security is suspected. Should this event arise, CARMENCITA shall provide notice of that violation or breach of security so that it can adopt the means of protection it considers appropriate.