Privacy policy and protection of personal data

Company name: Dharma Soriano Rodríguez
Commercial Name: PUT ON ART
NIF:52595250T
Address: Masía Mas Gras, Callús CP 08262, Barcelona
e-mail: info@putonart.es

We have always been committed to providing our services with the highest degree of quality, including treating your data securely and transparently. Our principles are:

• Lawfulness: We will only collect your Personal Data for specified explicit and legitimate purposes.
• Data minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.
• Purpose Limitation: We will only collect your personal data for the stated purposes and only according to your wishes.
• Accuracy: We will keep your personal data accurate and up to date.
• Data Security: We apply appropriate technical and organizational measures proportionate to the risks to ensure that your data is not damaged, such as unauthorized disclosure or access, accidental or unlawful destruction or accidental loss or alteration and any other form of unlawful processing.
• Access and Rectification: We have the means to access or rectify your data when you consider it appropriate.
• Retention: We retain your personal data in a lawful and appropriate manner and only as long as it is necessary for the purposes for which it has been collected.
• International transfers: when it is the case that your data is going to be transferred outside the EU/EEA, it will be adequately protected.
• Third parties: The access and transfer of personal data to third parties is carried out in accordance with applicable laws and regulations and with appropriate contractual guarantees.
• Direct Marketing and cookies: We comply with the applicable legislation on advertising and cookies.

The types of data that may be requested and processed are:

• Identification data.

We also automatically collect data about your visit to our website as described in the cookie policy.

Whenever we request your Personal Data, we will clearly inform you of what Personal Data we collect and for what purpose. In general, we collect and process your personal data for the purpose of:

• Provide information, services, products, relevant information, and news in the sector.
• Sending communications.

You will always be informed at the time of collection by means of informative clauses about the person responsible for the treatment, the purpose and legal basis of the same, the recipients of the data and the period of conservation of your information, as well as the way in which you can exercise the rights that assist you in terms of data protection.

PUT ON ART uses social media and this is another way to reach you. Information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies where they explain how they use and share your information, so we recommend that you consult them before using them to confirm that you agree with the way in which your information is collected, treated and shared.

Likewise, this website collects cookies, which you can consult on the same page www.putonart.es in the cookies section.

In accordance with applicable data protection regulations, your personal data may be processed provided that:

• You have given us your consent for the purposes of the processing. You may, of course, withdraw your consent at any time.
• By legal requirement.
• Because there is a legitimate interest that is not undermined by your privacy rights, such as sending commercial information either by subscribing to our newsletter or by your status as a customer.
• Because it is necessary for the provision of any of our services through a contractual relationship between you and us.

In general, we do not share your personal information, except for those transfers that we must make based on imposed legal obligations.

In any case, in the case of being transferred to a third party, prior information would be produced requesting the express consent for such assignment.

Entities involved in any stage of processing are obliged to observe professional secrecy and to adopt the necessary levels of protection and technical and organizational measures at their disposal to guarantee the security of personal data.

Although it is not a transfer of data, to provide the requested service it may be that third companies, which act as our suppliers, access your information to carry out the service we have contracted them. These processors access your data following our instructions and without being able to use them for a different purpose and maintaining the strictest confidentiality.

• • WhatsApp Ireland Limited, domiciled in European territory, which provides instant messaging services. You can consult the privacy policy and other legal aspects at: https://www.whatsapp.com/contact/?subject=messenger https://www.whatsapp.com/legal?eea=1#privacy-policy
• • Mailerlite, used to automate commercial information bulletins and send to the email of the owner of the data, advertising of the products and / or services offered on the website. Located in the city of Vilnius, Lithuania. For more information visit: https://www.mailerlite.com/es/politica-de-privacidad
• • PayPal (Europe) S.à r.l. et Cie, S.C.A.: company used to manage credit card payments on the website. Located at 22-24 Boulevard Royal L-2449, Luxembourg. Privacy policy and other legal aspects of said company in the following link:
• • Amazon Payments Europe s.c.a.: company used to manage credit card payments on the website. Located at 38 avenue J.F. Kennedy, L-1855 Luxembourg. Privacy policy and other legal aspects of said company in the following link: https://pay.amazon.es/help/201212490

In relation to the collection and processing of your personal data, you can contact us at any time to:

• Access your personal data and any other information indicated in Article 15.1 of the GDPR.
• Rectify your personal data that is inaccurate or incomplete in accordance with Article 16 of the GDPR.
• Delete your personal data in accordance with Article 17 of the GDPR.
• Limit the processing of your personal data in accordance with Article 18 of the GDPR.
• Request the portability of your data in accordance with Article 20 of the GDPR.
• Object to the processing of your personal data in accordance with Article 21 GDPR.

If you have given your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal HR.

You can exercise these rights by sending a reasoned and accredited communication to info@putonart.es.

You also have the right to lodge a complaint with the competent supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.

The requirements of this Policy supplement, and do not replace, any other existing requirements under applicable data protection law, which will prevail, in any case.

This Policy is subject to periodic review and may be amended by the Company at any time. When this happens, we will notify you of any changes and ask you to re-read the most recent version of our Policy and confirm your acceptance.