ARANDOVO, S.L. (hereinafter, “ARANDOVO” or the “Company”) makes this Privacy Policy available to users of the website found at the URL https://www.arandovo.com (hereinafter also referred to as the “Website”), to provide them with information about how we process their personal data and protect their privacy and information.

ARANDOVO asks those users to take a few minutes to read the full contents of this Privacy Policy.

Introduction

 This Privacy Policy applies to ARANDOVO’s Website, which is made available to the public at the URL https://www.arandovo.com. It also applies to the user’s interactions with ARANDOVO that take place through that Website.

ARANDOVO may modify this Privacy Policy any time it is considered necessary. If any modifications are made, we will provide notification of this through the Website, or by some other means of communication, to inform the Website’s users about the new privacy terms and conditions. If after being notified about any such changes, you continue to use the features made available by ARANDOVO, it means that you accept those changes, except under any circumstances where your express consent is needed.

Who is the Data Controller for your personal data?

 The Data Controller for the personal data is ARANDOVO, S.L., which has tax identification number (CIF) B16912719, with its registered office at Calle M, Número 11, Polígono Talluntxe II, Tajonar, Navarra (Spain). Its telephone number is 664309076 and its email address is info@arandovo.com

What data does ARANDOVO process, and what are the sources of those data?

 As a result of the user’s interactions with ARANDOVO through our Website, ARANDOVO processes data derived from the following sources:

• Data that the user provides, whether by filling in the forms that ARANDOVO provides for contacting the Company, or by sending emails, or by any other means that the user makes use of to communicate with ARANDOVO.
• Data generated as a result of the user’s navigation at ARANDOVO’s Website and use of that Website.
• Data generated as a result of developing, processing, and maintaining the relationship between the user and ARANDOVO.
• Data provided by the user regarding third parties.

ARANDOVO may process the following types of personal data, depending on the relationship existing with the user:

• Identification data (e.g., names and surnames, postal address, email address, telephone number, IP address, etc.).
• Data regarding navigation (e.g., use of ARANDOVO’s Website, sections visited, etc.).

For what purposes do we process your personal data, and what is the legal basis for the processing?

ARANDOVO will process any personal data provided by this Website’s users for the following purposes, depending on the type of data provided by the user and the interactions the user has with ARANDOVO through the Website:

• PURPOSE 1: Contact form
  • Description of the purpose: Personal data of users who contact ARANDOVO, through any of the contact channels made available at the Website managed by ARANDOVO, will be processed for the purpose of managing that contact, responding to requests received through those channels, providing the services requested, or providing the information requested by the user.
  • Legal basis: Article 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Data processed for this purpose: Identification and contact data (e.g., names and surnames, postal address, email address, telephone number, etc.).

• PURPOSE 2: Sending commercial communications
  • Description of the purpose: ARANDOVO may process the users’ personal data for the purpose of sending them advertising or promotional materials about its products and activities, whether by postal mail or by email, SMS, or other means of electronic communication. This will only occur in cases where the user has granted consent for that data processing purpose, by expressly checking the box to accept such commercial communications, advertising, or promotional materials.
  • Legal basis: Article 6(1)(a) GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • Data processed for this purpose: Identification and contact data (e.g., names and surnames, postal address, email address, telephone number, etc.).

At any time, the user may object to ARANDOVO’s purpose for processing his or her data for advertising or promotional purposes, by using the channels made available, as described in the section What rights do you have in relation to your personal data?

In all cases, and if necessary, in order to comply with the purposes of the processing, ARANDOVO may give third-party service providers, acting in the status of Data Processors, access to the user’s personal data. ARANDOVO informs you that giving those Data Processors access involves international data transfers to locations outside of the European Economic Area. However, ARANDOVO assures the user that there are adequate mechanisms and safeguards existing, as established in the applicable laws, regulations, and rules (e.g., the European Commission’s adequacy decision, binding corporate rules and/or standard contractual clauses, among others) to ensure that those service providers are applying a level of security equivalent to the level required under the European data protection legislation.

Who are your data disclosed to?

The personal data that ARANDOVO processes for the purposes described above may be disclosed to the following recipients, to ensure proper development of the relationship established and to comply with ARANDOVO’s legal obligations:

• Governmental bodies and agencies, to comply with the legal obligations that apply to ARANDOVO.

How long will we store your data?

ARANDOVO will store your personal data for the amount of time necessary to provide the requested service and/or achieve the intended purpose of the data processing.

After that, and unless the user has exercised his or her right to request erasure, the user’s data will be stored for the applicable time periods established by law in each case, taking into account the type of data and the purpose of the processing.

The data and documentation used to keep records of the service provided and/or required for compliance with the contractual and/or legal obligations will be stored for the time periods imposed by the applicable legislation, and also for the duration of the statutory limitation periods that apply to any civil, criminal, or administrative actions, or any other type of legal actions that could arise from the contractual relationship.

You can request more information about ARANDOVO’s storage periods for personal data at info@arandovo.com .

What types of personal data do you need to provide to us in each case?

ARANDOVO informs the users that when the personal data are collected through a form made available at our Website, the user must as a minimum provide the data for the fields marked with an asterisk (*). Those minimum data are considered to be necessary, which means that if they are not provided, ARANDOVO will not be able to manage provision of the service or respond to the user’s question or claim.

What are your obligations to us when providing your personal data?

The user must ensure that the data provided are true, accurate, complete, and up-to-date, and the user will be liable for any direct or indirect harm or losses that may arise as a result of breaching that obligation.

If the user provides any data pertaining to a third party, the user must ensure that he or she has informed that third party regarding all aspects of this Privacy Policy, and that he or she has obtained that person’s consent to provide us with their data for the purpose of the processing involved. This must be done before any third party’s data are provided to us through any page at our Website.

ARANDOVO informs you that you must be at least 18 years of age in order to provide us with any personal data through our Website. The user providing data to ARANDOVO through this Website represents and warrants that he or she is at least 18 years of age, and the user will be held fully liable for the accuracy of that statement.

What measures have we implemented to protect your personal data?

ARANDOVO wants to ensure that your data will always remain secure and confidential, and it has therefore implemented the levels of security required to protect those personal data. It has also implemented the technical measures within its scope to prevent any loss, misuse, alteration, or theft of the personal data provided through the Website, or any unauthorized access to them. However, it must be understood that security measures applied to the Internet are not infallible.

What rights do you have in relation to your personal data?

ARANDOVO informs you that you have the right to obtain confirmation regarding whether or not we are processing any of your personal data.

ARANDOVO also informs you that you have the following rights in relation to your personal data:

• Right to request access to your data: You have the right to access your data, so that you can be aware of the personal data we are processing.
• Right to request rectification or erasure of your data: Under certain circumstances, you have the right to rectification for your personal data being processed by ARANDOVO, if you believe there are any inaccuracies. You also have the right to request erasure of your data when, among other reasons, those data are no longer necessary for the purposes for which they were collected.
• Right to restriction of processing of your data: Under certain circumstances, you will have the right to ask us to restrict the processing of your data, and if you do this, we will only retain possession of the data for which you have requested that processing restriction in order to initiate claims or defend against them.
• Right to data portability: Under certain circumstances, you will have the right to receive a copy of your personal data in a structured, commonly used and machine-readable format, or to ask ARANDOVO to transfer those data to another data controller.
• Right to object to processing of your data: Under certain circumstances, and for reasons related to your particular situation, you will have the right to object to the processing of your data. If this occurs, we will stop processing those data unless we need to continue doing so for compelling legitimate grounds, or to initiate or defend against potential claims.

We also inform you that you have the right, at any time, to object to our sending of information and advertising related to ARANDOVO’s products and services.

You may also withdraw any of the consents you have granted for processing of your data, although this will not affect the legitimacy of any processing that was based on your consent before it was withdrawn.

ARANDOVO informs you that you may exercise your rights in relation to your personal data by using any of the following channels:

• By sending a written request to ARANDOVO, S.L. at Calle M, Número 11, Polígono Talluntxe II, Tajonar, Navarra (Spain)
• By sending an email to info@arandovo.com

The identity of the person exercising their rights must be verified, if the Company is unable to confirm it by the means used to send the message.

ARANDOVO must provide the requested information within a maximum period of one month, counted from the date the request is received. That period can be extended for another two months, if necessary, because of the number of requests or their complexity.

ARANDOVO informs you that you can lodge a complaint with the Supervisory Authority that has competence in relation to the subject of data protection, at www.aepd.es .