Processing of personal data

The personal data that you have provided will be treated confidentially and will be incorporated into the corresponding treatment activity owned by our entity.

We request those essential data to meet your request, invoice if you make a purchase or contract or maintain the relationship with your person if you request it or when we are forced to provide services and / or service your purchases on this website.

Purpose

Your personal data will be processed for the sole purpose of meeting your requests.

We do not send advertising without the prior consent of the user.

Legitimation

The processing of your data is carried out on the following bases:

• The request for information, request for employment and / or contracting of our services and / or purchase of products. 
• The free, specific, informed and unequivocal consent, since we inform you of this privacy policy, which after reading this and agreeing, you can accept by marking the boxes provided for this purpose.

You can change your mind and withdraw your consent at any time.

Security measures

Our entity has implemented all the necessary technical and organizational measures to protect the processed personal data, avoiding its loss, theft or unauthorized use.

These measures are periodically verified in our controls for compliance with specific regulations.

Data retention

The personal data provided will be kept for the time necessary to fulfill the purpose for which it is collected and to determine the possible responsibilities that may arise from the purpose.

In the case of job applications, they will be kept for a maximum period of 1 year or until the interested party asks us to delete their data.

Rights of the interested parties

You have the right to know if our entity is treating your personal data; therefore, you have the right to access your data, rectify it if it is inaccurate or request its deletion when the data is no longer necessary.

You can also exercise your right of limitation or portability if you deem it convenient and for this you can do so in writing to our entity by email to info@alfombraroja.se attaching a copy of your ID to identify you.

If you have any suggestions or queries about the processing of your data, you can contact our data protection consultants here.

If you want to make a claim to understand that your rights have been violated, you can do so at the Spanish Agency for Data Protection, C / Jorge Juan, 6, 28001 Madrid or at www.aepd.es.

Elaboration of profiles

We do not create profiles using your personal data, but if you do, you will be informed and request permission to do so.

Similarly, you have the right to object to this type of treatment at any time.

Transfer of data

Your personal data will not be transferred to other countries or third parties except in cases where there is a legal obligation.

In case of purchasing products or contracting services, your personal data may be transferred to those entities necessary to deliver the products purchased or provide you with our services.

Our bank will know your data for the management of the collection of products or services, as well as those responsible for the treatment necessary for the execution of contracts and / or purchases.

In case of transfers to other entities or to other countries, we will inform you and request your prior consent.

Corporate Commitment to Data Protection

Area of application

This Code of Conduct will be mandatory for all departments, employees of our company and those acting on our behalf.

Object

We have established action protocols for the processing of personal data, in accordance with the provisions of Spanish and European data protection regulations, so that their security and confidentiality are guaranteed at all times.

Principles

Legality, Loyalty, Transparency, Minimization of data, Accuracy, Limitation of the conservation period, Integrity, Confidentiality and Active Responsibility.

Special category data

The treatment of personal data that reveals ethnic or racial origin, political opinions, religious or philosophical convictions, union affiliation, the treatment of genetic or biometric data, data related to health or data related to sexual orientation is prohibited. except in the legally authorized exceptions and with the prior consent of the interested party.

Rights of the interested parties

The interested parties will enjoy the right of access to their personal data, as well as to rectify them when they are inaccurate, delete them when they are no longer necessary or do not want their treatment, limit them to certain treatments, have the possibility of receiving their data easily and in formats structured and in common use of the person in charge, as well as that their data is used for the elaboration of profiles and to oppose the treatment at any time.

Activity Registration, Impact Assessment and Security Measures

Our company will carry out a registry of the treatment activities and will analyze the purposes of the treatment, categories of the interested parties and data, recipients, international transfers, storage periods, etc., to evaluate the risks of the treatment and implement security measures. necessary to safeguard personal data under the principles of confidentiality and secrecy. Likewise, we have analyzed the need to appoint a Data Protection Officer, establishing, if necessary, that the person designated for this position will comply with sufficient knowledge and experience, in accordance with the provisions of current regulations.

Control

We have hired the services of an external consultant to carry out a periodic audit to assess compliance with this commitment and all legal obligations in this area.

The Management

Updated July 29, 2020