ECOM COMERCIO ONLINE, SL (hereinafter, ECOM) has developed its From the Canary Islands Platform (hereinafter, the Platform). The Platform requires prior registration to access our services as a client or User or to contact us, so you will need to provide the personal information we request (“Data”). We are aware of the importance of privacy and, therefore, we assume the responsibility of complying with current data protection legislation and aim to process your data transparently.
In this Privacy Policy , we explain who is responsible for processing your personal data, the purpose for which it will be processed, the legal basis for processing, who we may share your data with, and your rights. When the legal basis for processing is your consent, we will request it explicitly and separately from any other purposes. Your consent is important to us because, in some cases, it will allow us to inform you of all the latest developments and keep you up-to-date on the most important features of our Platform.
ECOM reserves the right to modify this Privacy Policy to adapt it to new legislation, case law, or interpretations by the Spanish Data Protection Agency and/or to changes in the procedures or purposes for processing your data. ECOM will notify you in advance or announce any changes, clearly indicating the modifications made and requesting your acceptance, if necessary. ECOM will not make retroactive changes that reduce your rights unless legally required to do so by the processes we have implemented to protect your data.
To that effect, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), ECOM COMERCIO ONLINE , SL informs you of the processing it carries out on the personal data you provide and on which the security, technical and organizational measures provided for in current regulations are applied.
- Who is responsible for processing your data?
The entity responsible for processing the data collected through this Website is:
■ ECOM ONLINE COMMERCE, SL
- For what purpose do we process your data?
The personal data of the User of this Website and its platforms will be processed for the following purposes:
■ To enable registered Users to access and use the Platform in order to conduct direct transactions with Establishments or Promoters. Data processed for this purpose will be retained until the User withdraws their consent and, thereafter, for the legally established retention and limitation periods. The legal basis for this processing is the User's consent.
■ To respond to requests for information and/or inquiries made by the User. The data processed for this purpose will be kept until the request for information and/or inquiry has been answered and, thereafter, for the legally established retention and limitation periods. The legal basis for the processing is CUiiCO Tools' legitimate interest in responding to the request for information and/or inquiry.
■ To keep the User informed, including by electronic means, about CUiiCO Tools products, services, and news. Data processed for this purpose will be kept until the User withdraws their consent to receive such communications and, thereafter, for the legally established retention and limitation periods. The legal basis for this processing is the User's consent.
1.
■ Communication of specific promotional activations, either from CUiiCO Tools, or in collaboration with one of the partners or associated companies of the platforms, in order to offer end users the possibility of participating in promotions, raffles or other specific marketing activations.
■ Manage and prevent abuse and fraud .
■ We inform you that you can revoke your consent at any time by means of the automatic link that will be included for this purpose in the commercial communications you receive, if applicable, or by email addressed to legal@cuiicotools.com . If you wish to opt out of receiving marketing communications, ECOM informs you that you can register with advertising opt-out systems. For this purpose, you can consult the information published by the Spanish Data Protection Agency, the competent supervisory authority.
We may also process your data to compile statistics on service usage and/or the activation of functionalities in order to make improvements, carry out marketing activities, and develop tools. For the same purpose, we may create a user profile based on the information we collect about you; however, we will not make automated decisions based on this profile, nor decisions that have legal effects or could significantly affect you.
Processing data for purposes other than those detailed above will require a legal basis or prior and explicit consent in each case.
- What is the legal basis for processing your data?
The legal basis for processing your data as a User or customer and for sending commercial communications is your consent.
If you have registered as a Client or Registered User, the legal basis for processing your data is the execution of the Contract signed with ECOM or for the application of pre-contractual measures.
Furthermore, the legal basis for compiling statistics will be ECOM's legitimate interest. The processing of your data based on legitimate interests will, in all cases, be carried out with the utmost rigor and respect for your privacy, rights, and freedoms; under no circumstances will it be used for purposes that infringe upon your rights in this regard.
The legal basis for the processing of your curriculum data by ECOM is the processing necessary for the execution of a contract or establishment of pre-contractual measures and your consent when expressly required.
The processing of your data for the purposes set out in the previous section and based on the consent requested from you may be revoked at any time, without the withdrawal of this consent affecting the execution of the Contract signed, if applicable, with ECOM.
- To whom will your data be communicated?
Your data may be shared with the following third-party recipients: Owners of the establishments and promoters operating through the CUiiCO Tools platform where you have registered and/or purchased a product or service, and public authorities for compliance with legal obligations. Your data may also be shared with the following categories of processors: Providers of electronic communications, office software, hosting, housing, IT maintenance, administrative services, accounting, auditing, consulting, and legal representation. These processors may be located outside the European Economic Area, in which case CUiiCO Tools will have previously implemented appropriate safeguards.
In specific campaigns where data is shared between ECOM and a particular promoter, ECOM will request your consent.
In other cases, data will not be shared with third parties, except where legally required. However, if such a possibility were to arise, ECOM would request your consent.
Notwithstanding the foregoing, ECOM informs you that the provision of some of its services or the supply of its products require third-party access to your data. ECOM undertakes to comply with applicable legislation. To this end, ECOM informs you that it will entrust data processing to third parties, such as cloud storage services or services provided by third-party companies with which it has agreements, acting as legal and/or tax advisors, or as promoters of each of the specific platforms, primarily public administration entities.
- Do we perform international data transfers?
In the event that ECOM's activity requires transferring your data to a third country outside the European Union or that does not have an adequate level of protection according to the European Commission, it will adopt the appropriate safeguards to carry out such international transfers in accordance with applicable law.
- What are your rights when you provide us with your data?
Anyone has the right to obtain confirmation as to whether or not ECOM is processing personal data concerning them.
You can also exercise the rights granted to you by current regulations: right of access, rectification, erasure and opposition, limitation of processing, data portability and no longer being subject to automated individual decisions.
- Access: allows the data subject to obtain information on whether ECOM processes personal data concerning him or her and, if so, the right to obtain information about his or her personal data being processed.
- Rectification: allows you to correct errors and modify data that turns out to be inaccurate or incomplete.
- Deletion: allows data to be deleted and no longer processed by ECOM unless there is a legal obligation to retain it and/or other legitimate reasons for its processing by ECOM prevail in accordance with current regulations.
- Limitation: Under the legally established conditions, it allows the processing of data to be stopped, in such a way that ECOM prevents its processing in the future, and will only keep them for the exercise or defense of claims.
- Right to object: This allows you, under certain circumstances and for reasons related to your particular situation, to object to the processing of your data. ECOM will cease processing the data, except for legal reasons, or for the exercise or defense of potential claims.
- Data portability: This allows you to receive your personal data and transmit it directly to another data controller in a structured, commonly used, and machine-readable format. To exercise this right, you must provide a valid email address.
You also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.
■ You can exercise your rights by any means that allows proof of sending and receipt of your request. The request must be addressed to ECOM COMERCIO ONLINE, SL, Calle Colón, No. 5, 4th Floor, Right B, 28004 – Madrid, or to the email address legal@cuiicotools.com , indicating in both cases the reference “Data Protection”.
The application must include: Name, surnames and a photocopy of your ID card, a request specifying your application and address for notification purposes.
If you are not satisfied with ECOM's response to your exercise of your rights, you have the right to file a complaint with the Supervisory Authority (Spanish Data Protection Agency) for the protection of those rights.
- How did we obtain your data?
The personal data processed by ECOM has been provided by you through the completion of the corresponding forms on the Platform or Website; therefore, we will process the data included therein.
For this purpose, whether you are an affiliated Establishment, Customer or User, we will process the following data:
· Name
· Password
· Delivery address (if applicable)
· Billing address (if applicable)
· Phone
· ID/Tax ID (if applicable)
Processing your contact information will only require collecting your name, email address, and the entity or organization you belong to.
■ In principle, the CUiiCO Tools Platform services are not configured to disclose or display images of individuals. However, if a participating business, client, or user includes an image of themselves or a third party, it will be done solely to promote and publicize their products or services. In all cases, such an image must be displayed with absolute respect for the honor and dignity of the individual, and the participating business, client, or user must declare that they have obtained the consent of the interested party in accordance with the provisions of Organic Law 1/1982, of May 5, on the Civil Protection of the right to honor, privacy, and one's own image. However, if you believe that the disclosure of such an image does not respect these purposes or poses a detriment or risk to your integrity, you may request its removal at any time by contacting legal@cuiicotools.com
Data accuracy and legal age . By contracting the Platform's services, you guarantee that you are of legal age or over fourteen years old to give your consent in accordance with current data protection regulations and that the data provided is true, accurate, complete and up-to-date, being responsible for any damage or loss, direct or indirect, that may be caused as a result of non-compliance with this obligation.
- How long will we keep your data?
ECOM informs you that it will process and store your data as long as necessary for the performance of the Contract and while it remains in effect, and in order to use it in accordance with the purpose and legal basis for the processing for which it was collected, provided you do not revoke your consent. We will also process your data to comply with applicable legal requirements, prevent illegal activities, resolve disputes, troubleshoot problems, perform our contract, and for other actions permitted by law. Once the Contract has ended, we will retain your personal data for the statutory limitation periods, in accordance with applicable tax, civil, and commercial law.
Once the processing of your data is no longer necessary and the legal limitation periods have expired, we will delete and/or block them in accordance with our data retention and deletion policy.
ECOM will take appropriate security measures to prevent the alteration, loss, unauthorized processing, or access to your data. Furthermore, it will inform anyone with access to your data about their security and confidentiality obligations, and their duty to maintain secrecy.
ECOM processes your data with high levels of security. For this purpose, credit card transactions are transmitted through a secure SSL (Secure Socket Layer) server. When "http" changes to "https," the "s" indicates that you are in an SSL-secured area; your browser may also notify you of the site's security via a pop-up message. The SSL security protocol encrypts personal information during data transmission.
Notwithstanding the foregoing, the security of information transmitted over the internet cannot be guaranteed. In this regard, ECOM cannot be held liable for any interception or interruption of communications over the internet, or for any alteration or loss of information. Users of the Platform are responsible for maintaining the security of any password, username, or other form of identification used to access password-protected areas of any of our services. To protect your data and information, we may suspend your use of any of ECOM's services, without prior notice, if a security breach is suspected.