Privacy Policy

Privacy Policy

Who are we?
We are responsible for processing your data. Therefore, the following aspects related to the data controller are expressly, precisely, and unequivocally informed to both the data subjects and the competent authorities:

SHUU BAREFOOT 2014 S.L
B93990174
CL. SAN VICENTE MARTIR, 159 Pta. 4, 46007 VALENCIA
hola@shuubarefoot.com

What processing do we carry out with your personal data?
- In compliance with Regulation (EU) 2016/679 and the Organic Law on the Protection of Personal Data, we inform you that your personal data may be subject to some of the following processing activities:
TR04 - Advertising campaigns (Legal basis: Law 34/1988, of November 11, General Advertising Law.)
TR08 - Collecting the opinion of the data subjects (Legal basis: Regulation (EU) 2016/679 on data protection and
LOPD.)
TR03 - Own personnel selection (Legal basis: Legislative Royal Decree 3/2015, of October 23, which approves the revised text of the Employment Law.)
TG01 - Own accounting and bookkeeping management, as responsible party. (Legal basis: Royal Decree 1514/2007, of November 16, regulating the General Accounting Plan.)
TG25 - Data collection for own tax management (Legal basis: Law 58/2003, of December 17, General Tax Law.)
TG12 - Own labor management: data collection (Legal basis: Legislative Royal Decree 1/1994, of June 20, approving the Revised Text of the General Social Security Law.)
TR09 - Safeguards on technical and organizational measures in applied software (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
TE08 - Personal Data Protection (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018.)
TE02 - Occupational risk prevention (Legal basis: Law 31/1995, of November 8, on Occupational Risk Prevention.)
TE07 - Document destruction (Legal basis: Regulation (EU) 2016/679)
TV01 - Sales / Service Provision (Legal basis: Commercial and Tax Legislation)
TE03 - Transport and/or package delivery service (Legal basis: Royal Decree of August 22, 1885, which publishes the Commercial Code.)
TR05 - Emails (Legal basis: Commercial Code and other applicable legislation.)
TR01 - Received information requests (Legal basis: Commercial Code and other commercial provisions.)
TR07 - Incident and/or security breach management (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
TE04 - Management of own legal matters (Legal basis: Applicable commercial and labor legislation.)
TE01 - Maintenance of computer systems (Legal basis: Commercial Code.

What do we use your personal data for?
In this organization, we may process your personal data exclusively for the purposes indicated below:
Verify that all necessary technical measures are being carried out for the proper management of personal data with the applied software.
Sending commercial and/or advertising information via email.
Management of information requests received from the data subject about our products or services.
Exclusive management of internal incidents detected in compliance with the GDPR requirements.
Conduct advertising campaigns to promote our services and/or products.
Gather the opinions of the data subjects.
Personnel selection to fill necessary job vacancies.
Comply with all the requirements set forth in the Occupational Risk Prevention Law.
Parcel and mail shipping.
Manage any legal issues affecting the company.
Manage, maintain, and repair computer storage systems.
Actions to carry out your own labor management
Actions to carry out the proper tax and accounting management
Comply with the principle of limiting the retention period of personal data
Compliance with the requirements set by Regulation (EU) 2016/679 and Organic Law 3/2018.
Administrative Management of Individual Customers

Carry out the sale or provision of the contracted service
- A commercial or user profile may be created based on the information provided or obtained. It is expressly stated that, under no circumstances, profiles will be created using data from a minor.
- The personal data you provide will be retained as long as the contractual relationship lasts or, if applicable, until you exercise your right to object or withdraw the consent given. To do so, you can go to the corresponding section on our website or send an email to the address indicated in the section related to the data controller.

Why do we use them? We are authorized to process your personal data for the following reasons:
-Your unequivocal, informed, and express consent, in cases where it is legally required, without the withdrawal of such consent affecting the execution of other processing activities with different legal bases, and without affecting the lawfulness of the processing prior to the withdrawal.
- A legal obligation of the data controller.
- The execution of the service provision and/or sale contract of the corresponding products, signed by you.
- The legal basis for processing your data is a legitimate interest of the controller. This interest is supported by a prior proportionality or balancing test between the legitimate interest of the controller and the interests or rights and freedoms of the data subjects. This balancing has involved evaluating the interest,
the impact assessment of the processing on the data subjects, the balance between the two previous concepts, and the implementation of additional safeguards. Since the final balance favors the controller, the processing may be carried out in accordance with applicable personal data protection regulations.
For any questions or clarifications, you can contact us through the email provided in the section corresponding to the data controller.

With whom can we share your personal data?
- Your personal data will be communicated to the following companies and organizations:
Tax Agency
State Public Employment Service
General Treasury of Social Security
National Data Protection Agency
Banks and savings banks
- Your personal data will not be transferred to any third country or international organization.

What data do we process and how have we obtained it?
- Your personal data will be included in the following files, owned by the organization:
FG01 Own accounting management
FG02 Own labor management
FG15 Own tax management. Data collection
FE01 IT maintenance
FE02 Occupational risk prevention
FE03 Transport and shipping
FE04 Own legal affairs
FR01 Information requests received
FR04 Advertising campaigns
FR05 Emails
FR07 Incident and/or security breach management
FR08 Gathering stakeholders' opinions
FR09 Software and hardware security
FE07 Document destruction
FE08 Personal Data Protection
FP01 Customers
- The personal data we process in our organization comes from the following sources: The data subject themselves

What rights can you exercise?

We guarantee the exercise of the rights you have regarding the processing of your personal data.
In particular, we inform you that you have the right to:
·Obtain confirmation about whether your data is being processed.
·Exercise the right of access to the personal data we hold, obtaining information about the purposes of the processing, the category of data processed, possible recipients, the retention period, the origin of the data, and, where applicable, profiling or automated decision-making.
·Exercise the right to rectification. For these purposes, we remind you that the personal data we hold must always be a true reflection of reality, so do not hesitate to exercise your right if any data undergoes modification, change, or cancellation. You guarantee that the personal data you
have provided us by any means is true and accurate, and you commit to notifying any change or modification of it, being solely responsible for any loss or damage caused to the controller or any third party due to communication of erroneous, inaccurate, or incomplete information.
·For reasons related to your particular situation, you may object to the processing of your data, in which case our organization will stop processing the data, unless there are legitimate reasons that prevent it.
·Request the deletion of your personal data when, among other reasons, they are no longer necessary for the purposes described above or we no longer have the legal basis to process them.
·Request the portability of your data, when the processing is carried out by automated means and is always linked to our entity based on a signed contract or you have given consent for the processing carried out. In these cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transmitted directly to another controller, when technically possible.
·In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims.
·Object to automated decision-making, including profiling.
These rights may be exercised free of charge, except in legally provided cases, through a written and signed request by you or, where appropriate, by your representative, addressed to the controller at the addresses provided for this purpose in the first section, or physically at any of our establishments.
- You also have the right to file complaints, either with the Spanish Data Protection Agency (at https://www.agpd.es/) or with the relevant supervisory authority.
- Likewise, you may go to the Courts of Justice to claim compensation.
- Finally, you have the right to withdraw your consent as easily as you gave it. To do so, you can visit our website, where you will find the necessary information to quickly and easily cancel the authorization granted to us to carry out these communications. You can also send an email to the address indicated in the section related to the data controller.
- We also inform you that for each processing of your personal data, the possible threats and impacts that may arise as a consequence are determined, mitigating or eliminating potential damages if possible, through the application of the corresponding security measures that are periodically reviewed to assess their effectiveness.
Our control system also allows compliance with the principles of processing your data, being able to demonstrate to the data subject the principle of purpose limitation, the principle of storage limitation, the principle of data minimization, as well as the principle of integrity and confidentiality.
Finally, we also inform you that you will periodically receive surveys that will allow us to know your opinion about any suggestion related to the processing of your personal data, as well as to comply with the principle of transparency and accuracy of the data processed.