PRIVACY POLICY

Who are we?

The Privacy Policy forms part of the General Terms and Conditions governing this website https://elinails.es/

Who is responsible for the processing of your data?

EliNails, S.L.
VAT Number: xxxxxxxxxxxx
C. Anselmo Pérez de Brito, 24, Puerta izquierda, 38700 Santa Cruz de la Palma, Santa Cruz de Tenerife
Tel: 695252532
You can contact us in any way you wish.
We reserve the right to modify or adapt this Privacy Policy at any time.

Who can provide us with data?

Users’ access to the ELINAILS website may involve the processing of personal data. By accessing our website, you declare that you are of legal age and that all the information you provide us with, whether it is obligatory in order to provide you with the service or information or additional information that completes your information and request, is true and correct. This information is provided voluntarily.

WEB OR EMAIL CONTACTS:

What data do we collect through the Website?
We may process your IP address, which operating system or browser you use, and even the duration of your visit, anonymously.
If you provide us with data in the contact form, we will identify you so that we can contact you if necessary.

For what purposes will we process your personal data?

  • Respond to your queries, requests or petitions.
  • Manage the requested service, answer your request, or process your request.
  • Information by electronic means, relating to your request.

What is the legitimacy for the processing of your data?

Acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.
All our forms have the symbol * in the obligatory data. If you do not provide these fields, or do not tick the checkbox for acceptance of the privacy policy, the information will not be allowed to be sent. It usually has the following formula: “□ I have read and accept the Privacy Policy”.

What data do we collect?

When you contact us by e-mail, we may ask you to provide us with a number of personal details and information such as:

Basic and identifying data: Your name and surname.
Contact details: email address and telephone number.
We may treat your IP, what operating system or browser you use, and even the duration of your visit, anonymously.

What is the legitimacy for the processing of your data?

What is the legal basis for processing your data in application of Article 6(1)(c) and 6(1)(e) of the GDPR, as it is necessary for compliance with a legal obligation applicable to the controller and for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller?

Legal obligation applicable to the controller:

  • Ley 8/2015, de 1 de abril, de Cabildos Insulares
  • Ley 14/1990, de 26 de julio, de Régimen Jurídico de las Administraciones Públicas de Canarias
  • Ley 7/1985, de 2 de abril, reguladora de las Bases del Régimen Local
  • Ley 39/2015, de 1 de octubre, del Procedimiento Administrativo Común de las Administraciones Públicas
  • Ley 40/2015, de 1 de octubre, de Régimen Jurídico del Sector Público
  • Decreto 36/2009, de 31 de marzo, por el que se establece el régimen general de subvenciones de la Comunidad Autónoma de Canarias.

In addition, certain processing of your data will be in accordance with the legitimate basis of your consent as set out in article 6.1.a) of the GDPR. For this purpose, we will ask you to grant us your consent by activating the specific validation boxes.

MEDIA

If you upload images to the website, you should avoid uploading images with location data (GPS EXIF) included. Website visitors can download and extract any location data from images on the website.

COOKIES

If you leave a comment on our site you can choose to save your name, email address and website in cookies. This is for your convenience, so you don’t have to fill in your details again when you leave another comment. These cookies will last for one year.

If you have an account and log in to this site, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie does not contain any personal data and is deleted when you close your browser.

When you log in, we will also set a number of cookies to store your login information and screen display options. The login cookies last for two days, and the display options cookies last for one year. If you select ‘Remember me’, your login will last for two weeks. If you log out of your account, your login cookies will be deleted.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie does not contain any personal data and simply indicates the ID of the article you have just edited. It expires after 1 day.

SUPPLIERS/SERVICE PROVIDERS

For what purposes will we process your personal data?

  • Information by electronic means, relating to your request.
  • Manage the administrative, communications and logistical services provided by the Head.
  • Carry out the relevant transactions.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or otherwise your consent to contact us or offer us your products by any means.

Social Networking Contacts.

The personal data available in the RRSS profiles, as well as those that the user provides to the Responsible when contacting through this channel, will be processed for the purpose of:

  • Manage their participation in the various proposals
  • Respond to the request, or process a request.
  • Establish a user-responsible relationship, and create a community of followers.

What is the legitimacy for the processing of your data?

The bases that legitimize the treatment is the voluntary consent of the person concerned to contact and, where appropriate, the acceptance of a contractual relationship in the environment of the social network concerned.

The processing of data within the Social Network will be carried out in accordance with its privacy policies:
Facebook http://www.facebook.com/policy.php?ref=pf
Twitter http://twitter.com/privacy
Instagram https://help.instagram.com/519522125107875/?maybe_redirect_pol=0

How long will we keep personal data?

We can only consult or unsubscribe your data in a restricted way when you have a specific profile. We will process your data for as long as you follow us, include ‘like’, ‘follow’ or similar buttons.
Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

Do we include personal data of third parties?

No, as a general rule we only process the data provided to us by the data subjects. If you provide us with data of third parties, you must inform and request their consent beforehand, otherwise we will not be held liable for any failure to comply with this requirement.

Automated decisions?

This Entity may take automated decisions based on the legal coverage granted by article 41 of Law 40/2015, of 1 October, on the Legal Regime of the Public Sector. This would be any act or action carried out entirely by electronic means within the framework of an administrative procedure and in which a person has not intervened directly.
Automated decision-making must be regulated in its own regulations, defining the specifications, programming, maintenance, supervision and quality control. These regulations will be available to citizens at the electronic headquarters of this Entity.

What security measures do we apply?

An optimal level of protection of Personal Data has been adopted, installing all the necessary technical means and measures according to the state of technology to prevent the loss, misuse, alteration, unauthorised access and theft of Personal Data.
Se le comunica que el ELINAILS, S.L de conformidad con la Disposición Adicional Primera de la Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales, las medidas de seguridad, técnicas y organizativas, adoptadas y destinadas para salvaguardar la confidencialidad y protección de los datos personales, evitando su pérdida, alteración o acceso no autorizado, son de conformidad con el Anexo II del Real Decreto 3/2010, de 8 de enero, por el que se regula el Esquema Nacional de Seguridad en el ámbito de la Administración Electrónica (ENS).
Furthermore, the measures set out in EU Regulation 679/2016 of 27 April 2016 on General Data Protection shall also apply.

To which recipients will your data be communicated?

ELINAILS, S.L. will treat the data with proactive responsibility in compliance with the principles established in article 5 of the RGPD:

  • Fairness, loyalty and transparency
  • Purpose limitation
  • Data minimisation
  • Accuracy
  • Limitation of the retention period
  • Integrity and confidentiality.

Likewise, you are expressly informed that the data will only be communicated to those bodies and entities of the Public Administration with competence in the matter in accordance with the legal regulations in force.

Personal data may be communicated to data processors necessary for the provision of the service, who will have signed a data processor contract that obliges them to maintain the same level of privacy as that of the controller.

ELINAILS, S.L. does not intend to carry out international data transfers, however, if necessary, they will only be carried out in strict compliance with the obligations established in the European Regulation, or when there is a legal authorisation to carry out the international transfer.

Your Rights and Access to Information

De acuerdo con la normativa vigente, Reglamento UE 679/2016, de 27 de abril, General de Protección de Datos y a con la Ley Orgánica 3/2018, de Protección de Datos Personales y Garantía de los Derechos Digitales tiene la posibilidad de ejercitar los siguientes derechos personalísimos, acreditando de manera fehaciente su identidad:

Your rights are as follows:

  • The right to withdraw your consent and ask us not to process your data.
  • The right of access to the information we hold concerning you, specifying the purposes of the processing we carry out and the communications we have made to third administrations and companies, either because they are authorised by law or because they are necessary for the provision of the service you have requested, or because you have given your consent.
  • The right to rectify your data, whereby we will update and update the information and data we hold based on the information you provide to us.
  • The right to the deletion of your data, once the legal retention periods established by the applicable regulations have expired.
  • The right to object to our processing of your data by revoking your authorisation/consent.
  • The right to limit the processing of your data, such as in the event that you lodge a complaint or wish us to keep your data for a longer period of time, preventing its deletion.
  • The right to data portability, whereby we will provide you with the data that you have provided to us at the time of your registration as a user in a commonly readable file format.

Furthermore, we inform you that you can always turn to the Spanish Data Protection Control Authority (Spanish Data Protection Agency, www.agpd.es) to request its protection or to lodge a complaint in relation to the processing of personal data.