FERRETERÍA Y HERRAJES GARCÍA, S.L. with NIF B22319305 and address for these purposes at Av. Aragón 3, 22500-Binéfar, Huesca (Spain), declares that it is responsible for the processing of the data collected on the website www.carbinstore.com and domains (hereinafter, the “Web”) in accordance with the obligations provided for in Regulation (EU) 2016/679 General Data Protection (hereinafter, the “RGPD”), Organic Law 3/2018, of December 5, on Data Protection Personal Rights and Guarantee of Digital Rights (hereinafter, the “LOPDGDD”) and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (hereinafter, the “LSSICE”) .

Completing all the data requested as mandatory through the Website is necessary to achieve optimal provision of the services made available to the User. If all the data required by the Store is not provided, there is no guarantee that the information and services provided can be provided, are provided correctly or adjust to the needs of the User.

The term User/s is used here to refer to all persons of legal age who access the Website.

BASIC INFORMATION REGARDING DATA PROCESSING

Data Controller

FEHERGA, S.L.

Purpose of treatment

Registration and access as a Web User

Online sale

New stock notifications

Contact Form

Legitimation of the treatment

The processing of your data may be based on your consent and/or the execution of a contract.

Recipients

No data will be transferred to third parties, except to our necessary collaborators.

Rights

Access, rectification, deletion, opposition, limitation of processing, data portability, unless subject to automated individual decisions, to revoke the consent given, as well as to file a claim with the Spanish Data Protection Agency, if deemed appropriate.

Additional Information

You can consult detailed information on the protection of your data below.

DETAILED INFORMATION ABOUT DATA PROCESSING

1. Identity and contact information of the Data Controller

In the terms of the applicable data protection regulations and, in particular, Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons in what Regarding the processing of personal data and the free circulation of these data and Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights, the Data Controller is:

Data Controller

FERRETERÍA Y HERJAJES GARCIA, S.L.

Av. ARAGÓN 3 22500-BINEFAR, Huesca (Spain)

Phone

+34 974429924

Contact E-Mail

hello@groupalgatec.com

2. Compliance with applicable regulations

The Store has adapted the Website to the RGPD and the LOPDGDD. To this end, it has put into practice those policies, means and technical and organizational procedures to guarantee and protect the confidentiality, integrity and availability of your personal data.

The transmission of data by the user of the Store's services (hereinafter, the "User") through the Website is carried out voluntarily and the user is informed prior to processing of the use and purposes of the same.

3. Principles we apply to your personal information

The data provided to the Store by different means, online contact forms or any other procedure used to collect your data, will be treated in accordance with current data protection regulations and with the sole purpose of providing the service that has been informed.

When processing your personal data, we apply the following principles that comply with the requirements of the RGPD:

Principle of legality, loyalty and transparency: We will always have a legal basis for the processing of your personal data for one or more specific purposes that we will inform you of in advance with absolute transparency. The Store informs you that only the information necessary to achieve the purpose of the treatment is collected and only the data that you have provided will be processed for the purpose(s) for which you were informed.
Data minimization principle: We will only request the data that is strictly necessary in relation to the reported purposes.
Principle of limitation of the conservation period: Personal data will be kept for the time strictly necessary until the purpose for which it was collected ends and as long as the cause that legitimized the processing of these personal data is maintained. Once the cause that legitimized the treatment has ended, the personal data will be kept duly blocked during the limitation period.

of the actions that may arise from the relationship maintained between the parties and/or the conservation periods provided by law.
Principle of integrity: Your data will be treated in such a way that adequate security of personal data is guaranteed and confidentiality is guaranteed. You should know that we take all necessary precautions to prevent unauthorized access or misuse of data by third parties.
Principle of confidentiality: The Store, in its capacity as data controller, guarantees confidentiality in the processing of all personal data of the User to which it has access. The person responsible for the treatment, like any other person involved in any phase of the treatment, is subject to the strictest professional secrecy, with a special commitment to adopt the levels of protection and the necessary measures, both technical and organizational, to guarantee the security of personal data and prevent its alteration, misuse, loss, theft, unauthorized treatment or access.
Principle of data accuracy: All information that the User provides to the Store must be truthful and the User will be solely responsible for any false or inaccurate statements made and any damage caused to the Store or third parties.
The Store reserves the right to exclude from the services any User who has provided false data, without prejudice to other legal actions that may apply.

4. Processing of personal data

4.1. Collection and processing of personal data

By providing us with their data through the Website, the User guarantees that they are true, accurate, complete and updated, taking responsibility for any damage or loss, direct or indirect, that may be caused as a result of failure to comply with such obligation.

In the event that the Store is provided with third-party data, the User must have their consent and undertake to transfer the information contained in this Policy to them, exempting the Store from any responsibility in this regard. However, the Store may carry out verifications to verify this fact, adopting the appropriate due diligence measures, in accordance with data protection regulations.

4.2. Treatment purposes

The purposes of the processing carried out by the Store on the User's personal data are:

Data treatment

Purpose of treatment

Legal basis of treatment

Conservation period

Registration and access as a Web User

Manage the User's registration to use the Website and give access to their profile within it, as well as the recovery of their password.

Consent of the interested person and, where appropriate, execution of the contract.

Revocation of consent or 5 years after ending the contractual relationship.

Online sale

Management of online purchases of products made through the Web, as well as informing interested parties of the status of the order and the corresponding shipment.

Execution of the contract.

5 years after ending the contractual relationship.

New stock notifications -promos

Sending notifications of new stocks of the selected products to Users through electronic means.

Consent of the interested party.

Until consent is revoked.

Contact Form

Properly attend to and manage the User's queries, comments, incidents or suggestions, as well as, where appropriate, job requests made through the contact form enabled on the Website.

Consent of the interested party.

Until consent is revoked.

4.3. Category of data and interested parties

Taking into account the aforementioned purposes, the Store collects and processes the following categories of User data:

a) Identifying data: name, surname, email address, postal address, telephone number.

b) Data on personal characteristics: gender and date of birth.

The personal data collected belongs to the following categories of interested parties: web users, clients and potential clients.

In relation to queries or requests made through the data collection forms available on the Website, the User is allowed to briefly explain the reason for the query or contact. Please note that the Store will not respond to any personal queries, except those strictly established by current legislation. Under no circumstances will the User communicate special categories of data (for example: health data, religion, etc.) through the forms enabled on the Web. If doing so, the User exempts the Store from all liability. In the event that inappropriate queries or content are sent, the Store will proceed to eliminate it.

4.4. Automated individual decisions, including profiling

Adoption is not planned

5. Data processing by third parties and transfer

Depending on the purposes for which personal data is collected, your personal data may be processed by:

§ Authorized personnel of the Store or their representatives acting on their behalf, subject to the applicable data protection regulations in force.

§ Administrations, Authorities and Public Bodies, including Courts and Tribunals, when required by applicable regulations.

§ FEHERGA, S.L. and its partners to carry out the management, maintenance and hosting of the Website.

§ Third party external service providers that the Store hires and who have the status of data processor [IT service providers that process information, data storage, maintenance of the Web]. All this only after carrying out the necessary measures to ensure that we can share said information and after having signed a data processing contract with our data processors, in compliance with data protection regulations.

If there is a sale, merger, consolidation, change in corporate control, substantial transfer of assets, reorganization or liquidation of the Store's business then, at our discretion, we may transfer, sell or assign the information collected on the Website to one or more relevant parties.

6. Security measures

The Store adopts the security levels required by the RGPD appropriate to the nature of the data that is processed at all times due to its activity. In this sense, it uses encryption techniques that do not allow a third party to track the identity of the User who interacts with our services.

However, technical security in a medium such as the Internet is not impregnable and there may be malicious actions by third parties, although the Store provides you with the means to avoid such actions.

7. International data transfer

We do not transfer the User's personal data to third parties outside the European Union. In the event of international data transfers, all appropriate technical and organizational measures will be taken to guarantee the security of the data.

8. Rights of interested parties and their exercise

In accordance with the RGPD and the LOPDGDD, Users can exercise the following rights:

Right of access: The User may ask the Store if it is processing their data and, if so, access it.
Right to rectification: The User may request rectification of the data if it is inaccurate or incomplete.
Right to request the deletion of your data, when possible. In any case, at the time the User exercises this right, all personal data linked to their account, as well as the information and content included in their profile, will be deleted and will remain blocked until the end of the legal period provided. .
Right to request the limitation of your processing: In this case we will only keep them for the exercise or defense of claims.
Right to object to processing: The Store will stop processing personal data, with the exception that it must continue to be processed for reasons of compelling legitimate interest or for the exercise or defense of possible claims.
Right to data portability: If the User wants their data to be processed by another data controller, the Store will facilitate the transfer of their data to the new controller if both have the necessary technical means to do so. it.
Right not to be subject to a decision based solely on the automated processing of your personal data.
Right to revoke consent: If the User has granted consent for a specific purpose, they may withdraw it whenever they wish, without affecting the legality of the treatment based on the consent prior to its withdrawal.
Right to file a claim with the Spanish Data Protection Agency: If you consider that a violation of data protection legislation has been committed regarding the processing of your personal data (www.aepd.es).
To exercise your rights, you can use the models and forms available on the official website of the Spanish Data Protection Agency (https://www.aepd.es/es/derechos-y-deberes/conoce-tus-derechos), and write to the address of the Store or to the email address info@ferreteriasistach.com, REF: “Data Protection”.

9. User Consent

The User states that he or she has read and expressly accepted this Privacy Policy, when the legal basis for the processing is his or her consent. He can withdraw consent at any time. The withdrawal of consent will not affect the legality of the processing.

The User undertakes to hold the Store harmless from any possible claim, fine or sanction that it may be forced to bear as a result of the User's failure to comply with the duty described in this paragraph.

10. Links to other websites

This Website contains links to other websites not managed by the Store, so the Store does not exercise any control over them, nor is it responsible for the information to which they have access. Please visit these websites directly to obtain information about their privacy policy, which provides information on the protection of your data, security, data collection and provisions regarding data transmission.

11. Changes to the privacy policy

We will only use personal data as established in the Privacy Policy that is in force at the time such data is collected.

The Store reserves the right to modify this Privacy Policy at any time with effect from the date of publication of such modifications on the Website, so it is recommended to visit it each time it is accessed. In any case, if at any time we decide to process personal data differently from what was declared at the time it was obtained, the User will be informed of this, obtaining their consent if necessary.

In the event that any clause of this Privacy Policy is annulled or considered null, the rest of the conditions will not be affected, fully preserving their validity and validity, in accordance with the current applicable regulations at all times.

12. Applicable legislation

The privacy of all the information provided, both by the User through the different personal data request forms, and that accessible through the Website, is regulated by current data protection regulations, especially by the RGPD. and by the LOPDGDD.

13. Cookies

Access to the Website may involve the use of cookies. Cookies are small amounts of information that are stored in the browser used by each user so that the server remembers certain information that it can later use. This information allows you to be identified as a specific user and allows you to save your personal preferences, as well as technical information about the use and operation of the Website.

Brands