Privacy Policy

Privacy Policy

What treatments do we carry out with your personal data?
- In compliance with Regulation (EU) 2016/679 and the Organic Law on the Protection of Personal Data, we inform you that your personal data may be subject to some of the following treatments:
TR04 - Advertising campaigns (Legal basis: Law 34/1988, of November 11, General Advertising Law.)
TR08 - Collecting the opinion of the interested parties (Legal basis: Regulation (EU) 2016/679 on data protection and
LOPD.)
TR03 - Selection of own personnel (Legal basis: Legislative Royal Decree 3/2015, of October 23, which approves the revised text of the Employment Law.)
TG01 - Own accounting and bookkeeping management, as data controller. (Legal basis: Royal Decree 1514/2007, of November 16, which regulates the General Accounting Plan.)
TG25 - Data collection for own tax management (Legal basis: Law 58/2003, of December 17, General Tax Law.)
TG12 - Own labor management: data collection (Legal basis: Legislative Royal Decree 1/1994, of June 20, which approves the Revised Text of the General Social Security Law.)
TR09 - Safeguards on technical and organizational measures in applied software (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
TE08 - Personal Data Protection (Legal basis: Regulation (EU) 2016/679 and Organic Law 3/2018.)
TE02 - Occupational risk prevention (Legal basis: Law 31/1995, of November 8, on the prevention of Occupational Risks.)
TE07 - Document destruction (Legal basis: Regulation (EU) 2016/679)
TV01 - Sales / Service Provision (Legal basis: Commercial and Tax Legislation)
TE03 - Transport service and/or package shipments (Legal basis: Royal Decree of August 22, 1885, publishing the Commercial Code.)
TR05 - Emails (Legal basis: Commercial Code and other applicable legislation.)
TR01 - Received information requests (Legal basis: Commercial Code and other commercial provisions.)
TR07 - Incident and/or security breach management (Legal basis: Regulation (EU) 2016/679 on data protection and LOPD.)
TE04 - Management of own legal matters (Legal basis: Applicable commercial and labor legislation.)
TE01 - Maintenance of computer systems (Legal basis: Commercial Code.

Who are we?
- We are responsible for processing your data. Therefore, the following aspects related to the data controller are expressly, precisely, and unequivocally informed to both the data subjects and the competent authorities:

SANCHEZ RAMON , YASMINA
41529923L
CAMIN VELL DE LA FOSCA 55, PALAMOS, 17230, GIRONA
hola@shuubarefoot.com

What do we use your personal data for?
- In this organization, we may process your personal data exclusively for the purposes indicated below:
To ensure that all necessary technical measures are being carried out for the proper management of personal data with the applied software.
Sending commercial and/or advertising information via email.
Managing information requests received from the data subject about our products or services.
Exclusive management of internal incidents detected in compliance with GDPR requirements.
Carrying out advertising campaigns to promote our services and/or products.
Gathering the opinions of interested parties.
Staff selection to fill necessary job vacancies.
Comply with all the requirements set forth in the Occupational Risk Prevention Law.
Parcel and mail delivery.
Manage any legal issues affecting the company.
Manage, maintain, and repair computer storage systems.
Actions to carry out own labor management.
Actions to carry out own fiscal and accounting management.
Comply with the principle of limitation of the personal data retention period.
Compliance with the requirements demanded by Regulation (EU) 2016/679 and Organic Law 3/2018.
Administrative management of individual clients.

Carry out the sale or provision of the contracted service.
- A commercial or user profile may be created based on the information provided or obtained. It is expressly informed that, under no circumstances, profiles will be created with data from a minor.
- The personal data provided by you will be kept as long as the contractual relationship lasts or, if applicable, as long as you do not exercise your right to object or withdraw the consent given. For this, you can go to the corresponding section on our website or send an email to the address indicated in the section related to the data controller.

Why do we use them? We are authorized to process your personal data for the following reasons:
- Your unequivocal, informed, and express consent, in cases where it is legally required, without the withdrawal of such consent affecting the execution of other processing activities whose legal basis is different, and without such withdrawal affecting the lawfulness of the processing prior to the withdrawal.
- A legal obligation of the data controller.
- The execution of the service provision and/or sale contract of the corresponding products, signed by you.
- The legal basis for processing your data is a legitimate interest of the controller. This interest is supported by a prior proportionality or balancing test between the legitimate interest of the controller and the interests or rights and freedoms of the data subjects. This balancing has involved the evaluation of the interest, the
assessment of the impact of the processing on the data subjects, the balance between the two previous concepts, and the implementation of additional safeguards. Since the final weighting is favorable to the controller, the processing may be carried out in accordance with the applicable personal data protection regulations.
For any questions or clarifications, you can contact us through the email provided in the section corresponding to the data controller.

Who can we share your personal data with?
- Your personal data will be communicated to the following companies and organizations:
Tax Agency
State Public Employment Service
General Treasury of the Social Security
National Data Protection Agency
Banks and savings banks
- Your personal data will not be transferred to any third country or international organization.

What data do we process and how have we obtained it?
- Your personal data will be incorporated into the following files, owned by the organization:
FG01 Own accounting management
FG02 Own labor management
FG15 Own tax management. Data collection
FE01 IT maintenance
FE02 Occupational risk prevention
FE03 Transport and shipping
FE04 Own legal matters
FR01 Information requests received
FR03 Own staff selection
FR04 Advertising campaigns
FR05 Emails
FR07 Incident and/or security breach management
FR08 Gathering the opinion of interested parties
FR09 Software and hardware security
FE07 Document destruction
FE08 Personal Data Protection
FP01 Customers
- The personal data we process in our organization comes from the following sources: The data subject themselves

What rights can you exercise?

We guarantee the exercise of the rights you have regarding the processing of your personal data.
In particular, we inform you that you have the right to:
·Obtain confirmation as to whether your data is being processed.
·Exercise the right of access to the personal data we hold, obtaining information about the purposes of the processing, the category of data processed, possible recipients, the retention period, the origin of the data, and, where applicable, profiling or automated decision-making.
·Exercise the right to rectification. For this purpose, we remind you that the personal data we hold must always be a true reflection of reality, so do not hesitate to exercise your right if any data undergoes modification, change, or cancellation. You guarantee that the personal data you
have provided us by any means is true and accurate, and you commit to notifying any change or modification thereof, being solely responsible for any loss or damage caused to the controller or any third party due to communication of erroneous, inaccurate, or incomplete information.
·For reasons related to your particular situation, you may object to the processing of your data, in which case our organization will stop processing the data unless there are legitimate grounds that prevent it.
·Request the deletion of your personal data when, among other reasons, they are no longer necessary for the purposes described above or we no longer have the legal basis to process them.
·Request the portability of your data when the processing is carried out by automated means and is linked to our entity based on a contract or you have given consent for the processing. In these cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transmitted directly to another controller when technically possible.
·In certain circumstances, you may request the restriction of the processing of your data, in which case we will only keep them for the exercise or defense of claims.
·Object to automated decision-making, including profiling.
These rights may be exercised free of charge, except in legally provided cases, by written and signed request by you or, where appropriate, by your representative, addressed to the controller at the addresses provided for this purpose in the first section, or physically at any of our establishments.
- You also have the right to file complaints, either with the Spanish Data Protection Agency (on the website https://www.agpd.es/) or with the relevant supervisory authority.
- Likewise, you may go to the Courts of Justice to claim compensation.
- Finally, you have the right to withdraw your consent as easily as you gave it. To do so, you can visit our website, where you will find the necessary information to quickly and easily revoke the authorization granted to us to carry out these communications. You can also send an email to the address indicated in the section related to the data controller.
- We also inform you that for each processing of your personal data, possible threats and impacts that may arise as a consequence are determined, mitigating or eliminating potential harm if possible, through the application of the corresponding security measures that are periodically reviewed to determine their effectiveness.
Our control system also ensures compliance with the principles of data processing, being able to demonstrate to the data subject the principle of purpose limitation, the principle of storage limitation, the principle of data minimization, as well as the principle of integrity and confidentiality.
Finally, we also inform you that you will periodically receive surveys that will allow us to know your opinion on any suggestions related to the processing of your personal data, as well as to comply with the principle of transparency and accuracy of the data processed.