1. PRIVACY POLICY AND DATA PROTECTION
In accordance with current legislation, ANFORA IMPORTS AND EXPORTS SL (hereinafter, the “Website”) is committed to adopting the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected.
Laws included in this privacy policy
This privacy policy is adapted to Spanish and European regulations on personal data protection online. Specifically, it complies with the following rules:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (GDPR).
Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD-GDD).
Royal Decree 1720/2007 of 21 December, approving the Regulation for the development of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).
Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The person responsible for the processing of personal data collected on the ANFORA IMPORTS AND EXPORTS SL website is Zilvinas Dedynas, with C.I.F.: B01936889 (hereinafter, the “Data Controller”). Contact details are as follows:
Address: La Rambla 13, 07003 Palma, Balearic Islands (Spain)
Contact Phone: +34 618 983 639
Contact Email: crew@bostonbeaman.eu
Personal Data Registration
In compliance with the GDPR and LOPD-GDD, users are informed that the personal data collected by ANFORA IMPORTS AND EXPORTS SL, through forms on its pages, will be incorporated into the company’s file to facilitate, expedite, and meet the commitments established between ANFORA IMPORTS AND EXPORTS SL and the User or to maintain the relationship established in the forms the User fills out, or to respond to a request or query.
Additionally, in accordance with GDPR and LOPD-GDD, unless otherwise provided under Article 30.5 of the GDPR, a record of processing activities is maintained that specifies, according to its purposes, the activities of data processing carried out and other circumstances established by the GDPR.
Principles Applicable to the Processing of Personal Data
The processing of the User’s personal data will be subject to the following principles, as set out in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights:
Principle of lawfulness, fairness, and transparency: The User’s consent will be required at all times after full transparency about the purposes for which personal data are collected.
Principle of purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
Principle of data minimization: The personal data collected will be only those strictly necessary in relation to the purposes for which they are processed.
Principle of accuracy: Personal data must be accurate and kept up to date.
Principle of storage limitation: Personal data will only be kept in a form that permits identification of the User for the time necessary for the purposes for which they are processed.
Principle of integrity and confidentiality: Personal data will be processed in a manner that ensures their security and confidentiality.
Principle of proactive responsibility: The Data Controller will be responsible for ensuring that the above principles are complied with.
Categories of Personal Data
The categories of data processed by ANFORA IMPORTS AND EXPORTS SL are solely identifying data. No special categories of personal data as defined in Article 9 of the GDPR are processed.
Legal Basis for the Processing of Personal Data
The legal basis for the processing of personal data is consent. ANFORA IMPORTS AND EXPORTS SL undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes.
The User shall have the right to withdraw their consent at any time. It will be as easy to withdraw consent as it is to give it. As a general rule, the withdrawal of consent will not condition the use of the Website.
When the User is required to provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if the completion of any of them is mandatory because they are essential for the proper development of the operation carried out.
Purposes of the Processing of Personal Data
Personal data are collected and managed by ANFORA IMPORTS AND EXPORTS SL for the purpose of facilitating, expediting, and fulfilling the commitments established between the Website and the User or to maintain the relationship established in the forms the User completes or to respond to a request or query.
Likewise, the data may be used for commercial, operational, and statistical purposes and for activities related to ANFORA IMPORTS AND EXPORTS SL social purpose, as well as for data extraction, storage, and marketing studies to tailor the content offered to the User and improve the quality, functionality, and navigation of the Website.
At the time the personal data are obtained, the User will be informed of the specific purpose(s) for which the personal data will be used.
Retention Periods for Personal Data
Personal data will only be retained for the time necessary for the purposes of their processing and, in any case, only for the following period: 12 months or until the User requests their deletion.
Recipients of Personal Data
The User’s personal data will not be shared with third parties.
In any case, at the time personal data are collected, the User will be informed about the recipients or categories of recipients of the personal data.
Personal Data of Minors
In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only individuals over the age of 14 may legally consent to the processing of their personal data by ANFORA IMPORTS AND EXPORTS SL. If the person is under 14 years of age, consent must be given by the parents or guardians, and it will only be considered lawful to the extent that they have authorized it.
Data Security and Confidentiality
ANFORA IMPORTS AND EXPORTS SL is committed to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, to ensure the security of personal data and to avoid accidental or unlawful destruction, loss, or alteration, or unauthorized communication or access to the data.
Nevertheless, because ANFORA IMPORTS AND EXPORTS SL cannot guarantee the invulnerability of the Internet, nor the absence of hackers or other fraudulent actors, the Data Controller undertakes to notify the User without undue delay of any breach of the security of personal data that is likely to result in a high risk to the rights and freedoms of natural persons. In accordance with Article 4 of the GDPR, a personal data breach is understood as any breach of security that results in accidental or unlawful destruction, loss, or alteration, or unauthorized access to personal data transmitted, stored, or otherwise processed.
Personal data will be treated as confidential by the Data Controller, who undertakes to inform and guarantee that this confidentiality is respected by its employees, partners, and anyone to whom it makes the information accessible.
Rights Related to the Processing of Personal Data
The User has the following rights under ANFORA IMPORTS AND EXPORTS SL, which they can exercise before the Data Controller in compliance with the GDPR and Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights:
Right of Access: The User has the right to obtain confirmation from ANFORA IMPORTS AND EXPORTS SL about whether their personal data is being processed and, if so, obtain information on the specific data and how it is being processed, including, among other things, the origin of the data and the recipients of communications made or planned.
Right of Rectification: The User has the right to have their inaccurate personal data corrected, or completed if incomplete, taking into account the purposes of the processing.
Right of Erasure (“Right to be Forgotten”): The User has the right, as long as the applicable legislation does not stipulate otherwise, to have their personal data deleted when it is no longer needed for the purposes for which it was collected or processed, when the User withdraws their consent to the processing, or if there is no other legal basis for the processing. Additionally, if personal data was processed unlawfully, or must be deleted to comply with a legal obligation, the Data Controller, considering the available technology and the cost of implementation, shall take reasonable steps to inform any controllers processing the data about the User’s request to erase links to such personal data.
Right to Restriction of Processing: The User has the right to restrict the processing of their personal data when they contest the accuracy of the personal data, if the processing is unlawful, or if the Data Controller no longer needs the data but the User requires it for legal claims.
Right to Data Portability: In cases where the processing is carried out by automated means, the User has the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
Right to Object: The User has the right to object to the processing of their personal data or request that the processing be stopped by ANFORA IMPORTS AND EXPORTS SL.
Right not to be Subject to Automated Decision-Making: The User has the right not to be subject to a decision based solely on automated processing, including profiling, unless otherwise provided by applicable law.
The User may exercise these rights by submitting a written request to the Data Controller with the reference “GDPR-bostonbeaman.eu,” specifying:
Name, surname(s) of the user, and a copy of the ID. In cases where representation is allowed, identification of the representative must be provided through the same method, along with a document proving the representation. A copy of the ID can be replaced by any other legally valid means that proves the identity.
Specific request or information sought.
Address for notifications.
Date and signature of the applicant.
Any document that supports the request.
This request, along with any additional documents, can be sent to the following address and/or email:
Postal address: La Rambla 13, 07003 Palma, Balearic Islands (Spain)
Email: crew@bostonbeaman.eu
Links to Third-Party Websites
The Website may include hyperlinks or links that allow access to third-party websites other than ANFORA IMPORTS AND EXPORTS SL and, therefore, are not operated by ANFORA IMPORTS AND EXPORTS SL. The owners of these websites will have their own data protection policies and will be responsible for their own files and privacy practices.
Claims Before the Supervisory Authority
If the User considers that there is an issue or a violation of the current regulations in the way personal data is being processed, they will have the right to effective judicial protection and the right to file a claim before a supervisory authority, particularly in the country where they reside, work, or where the alleged violation took place. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).
2. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
The User must have read and agreed with the conditions regarding personal data protection contained in this Privacy Policy, as well as accept the processing of their personal data so that the Data Controller can proceed in the manner, within the timeframes, and for the purposes indicated. The use of the Website will imply acceptance of its Privacy Policy.
ANFORA IMPORTS AND EXPORTS SL reserves the right to modify its Privacy Policy at its discretion or due to legislative, jurisprudential, or doctrinal changes from the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User periodically check this page to stay informed about the latest changes or updates.
This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.
This Website Privacy Policy document was created using the free online privacy policy template generator on 07/05/2024.