Privacy policy

June 2021

MASLAIMAR SL is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by MASLAIMAR SL implies the user’s acceptance of the provisions contained in this Privacy Policy and that their personal data will be processed as stipulated herein. Please note that although there may be links from our website to other websites, this Privacy Policy does not apply to the websites of other companies or organizations to which the website may be redirected. MASLAIMAR SL does not control the content of third-party websites nor does it accept any responsibility for the content or privacy policies of such websites.

Information on data processing (Regulation (EU) 2016/679 and LO 3/2018)

Data controller	MASLAIMAR SL NIF: B17824962 Address: Can Quelot s/n 17150 Sant Gregori Email: marangels@marangels.com
Data purpose	To offer and manage our IT services.
Legal basis	In general, the legal basis for data processing will be the consent obtained from the data subject or the execution of the service contract.
Recipients	The data will not be disclosed to third parties unless required by law or necessary to fulfill the purpose of the processing.
Data subject rights	Data subjects have the right to exercise their rights of access, rectification, restriction of processing, erasure, data portability, and objection by sending their request to our address.
Data retention period	As long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.
Complaint	Data subjects may contact the Spanish Data Protection Agency (AEPD) to file any complaint they deem appropriate.
Additional information	You can consult the additional and detailed information below under “Privacy matters.”

Privacy matters

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (RGPD)  and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we provide you with the following information regarding the processing of your personal data:

Who is the data controller for your data?

Identity:  MASLAIMAR SL

NIF: B17824962

Address: Can Quelot s/n 17150 Sant Gregori

Phone: 972 429 159

Email: marangels@marangels.com

For what purpose do we process your personal data?

• We process the information provided to us in order to manage our IT services.
• If you contact us to make an inquiry, we will process your data in order to respond to you.
• If you give us your consent, we may also process your data to send you information about our activities, products, or services. 

How long will we keep your data?

• The personal data provided will be retained as long as you are a user of our services or wish to receive information from us, since you may object to the processing of your data for promotional purposes at any time, and  after that, for the periods established to comply with our legal obligations, which, in the case of accounting and tax documentation for commercial purposes, will be 6 years in accordance with Article 30 of the Commercial Code, and for tax purposes will be 4 years, in accordance with Articles 66 to 70 of the General Tax Law.

What is the legal basis for processing your data?

The legal basis for processing your data is the execution of the service contract and the consents you provide to us.

With regard to any information sent by children under the age of 14, it is an essential requirement that it be provided with the consent of a parent, guardian, or legal representative of the minor for the personal data to be processed. If this is not the case, the legal representative of the minor must inform us as soon as they become aware of it.

To whom will your data be disclosed?

The data will not be disclosed to third parties unless required by law or necessary to fulfill the purpose of the processing.

What are your rights when you provide us with your data?

• Everyone has the right to obtain confirmation as to whether or not  we are processing their personal data.
• Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
• In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of legal claims.
• Also, in certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such cases, we will stop processing the data unless there are compelling legitimate grounds or for the exercise or defense of possible legal claims.
• Data subjects also have the right to data portability.
• Any data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or significantly affects them in a similar way.
• Finally, data subjects have the right to lodge a complaint with the competent Supervisory Authority.

How can you exercise your rights? 

By sending us a written request along with a copy of a document that identifies you, to our physical or electronic address. 

How did we obtain your data?

The personal data we process comes from the interested party, who guarantees that the personal data provided is true and is responsible for communicating any modification. The data marked with an asterisk are mandatory in order to provide the requested service.

What data do we process?

The categories of data that  we can process are:

• Identification data
• Postal or electronic addresses
• Data of legal representatives of legal entities

The data is limited, since we only process the data necessary for the provision of our services and the management of our activity. 

Do we carry out international data transfers?

In providing our services, we use auxiliary companies that process data on our behalf outside the European Union. These international data transfers are covered by the Standard Data Protection Contractual Clauses adopted by the European Commission, in accordance with the examination procedure referred to in Article 93(2) of the GDPR.

Do we use cookies?

We use cookies while browsing our website with the user’s consent. 

The user can configure their browser to notify them of the use of cookies and to prevent their use. Please visit our cookie policy.

What security measures do we apply?

We apply the security measures established in article 32 of the GDPR, therefore we have adopted the necessary security measures to guarantee a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability and permanent resilience of the processing systems and services.

Some of these measures are:

• Information on data processing policies to staff.
• Performing regular backups.
• Data access control.
• Regular verification, evaluation and assessment processes.

How do we process data on behalf of third parties?

When, in the provision of our services, we have to process personal data for which other entities are responsible, we will do so as data controllers, in accordance with the provisions of article 28 of the GDPR. These processing operations of personal data will be regulated in the corresponding data processing contract.