Privacy Policy

PRIVACY POLICY


BASIC INFORMATION ON DATA PROTECTION



Responsible


OFFVIEW, SL


Purpose


We use your data, among other purposes, to manage the purchase of products and services, respond to your inquiries, and, where appropriate, send you personalized communications.


Legitimation


The legitimacy for the processing of your data lies, mainly,

in the provision of your consent and in the correct development of the contractual relationship with OFFVIEW , SL.


Recipients


Your data will be processed by other companies in the Group and third-party collaborators who work with us.


Rights


You have the right to access, rectify, delete, object to, restrict, and request the portability of your personal data.


Additional information


You can consult additional and detailed information about how we manage your personal data and the rights you have, by consulting the full text of the Privacy Policy that follows

below, as well as the Cookies Policy.

ADDITIONAL INFORMATION ON DATA PROTECTION

OFFVIEW , SL (hereinafter, "the Company") undertakes, as the Data Controller of your personal data, to adopt at all times the necessary technical and organizational measures to ensure that the processing of your data complies with the provisions of Regulation (EU) 2016/679 (hereinafter, "GDPR") and Organic Law 3/2018.


The Company processes your personal data lawfully and fairly, ensuring that it receives adequate protection and is not misused. Furthermore, the Company strives to be transparent in the management of its clients' and users' personal data, providing them with all necessary information regarding the collection and processing of their data.


The purpose of this Privacy Policy is to inform you about who will process your personal data, why we collect it, how long we will retain it, to whom we will share it, and what your rights are in this regard.


By providing us with your personal information and using our Website, we understand that you have read and understood the information regarding personal data protection set forth in this Privacy Policy and the Cookie Policy.



WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The person responsible for the processing of your personal data is:


Company name: OFFVIEW , SL .

NIF: B72903537

Telephone: 936 91 54 50

Postal address: Calle Bosc Tancat n.º 8, Cerdanyola del Vallés, (08290) Barcelona

Email: dataprotection@offview.com.



FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on the products, services, or functionalities requested by customers and users, the Company will need to process certain data, which will generally be as follows:

  • Identification and contact information : name, surname, contact telephone number, postal address, email address, among others;
  • Data associated with the execution of a sales contract or service provision agreement with the Company: identification and contact information, payment information, information about purchases, orders and returns, among others;
  • Automatically collected data : When you interact with our Website, certain browsing data is automatically collected. This information is collected through cookies, the regulation of which is detailed in the Company's Cookie Policy.

The information we may automatically collect relates to your use of our Website and the devices you use to access and interact with it. Some of the data we collect include: the IP address of the device you are using, the browser you are using, your operating system, the date and time you access the Website, the Internet address of the website through which you accessed our Website, geolocation data, information about the pages you visit within the Website and the time you spend on each page;

  • Data about your personal tastes and preferences .

The personal data collected are processed for the following purposes:

Manage the contracting of products and services offered by the Company : to be able to provide you with the product or service you request, to be able to operate our business internally (in terms of accounting, auditing and other internal functions) and to manage payment for products and services;

  • Quality analysis : conducting surveys on customer and user satisfaction with the quality of the products and services offered by the Company;
  • Customer and user service : channel and respond to your requests, queries and complaints for management and resolution;
  • Advertising and marketing actions : This primarily includes personalizing the services we offer and making recommendations based on your interaction with the Company through its website (e.g., based on your purchase and browsing history). If you give us your consent, your personal data will be used to periodically send you information about new products that may be of interest to you and to offer you promotions;
  • Improve the user experience on the Website : conduct analytical and statistical studies on how users navigate the Company's Website.


WHAT IS THE LEGITIMATION FOR THE PROCESSING OF YOUR DATA?

The legal basis that allows us to process your personal data depends on the purpose for which we process it, as detailed below:

  • Manage the contracting of products and services offered by the Company. The processing of your data is necessary for the proper execution and development of the contractual relationship with the Company. The legitimacy of the processing of your data also lies in your own consent (when deciding to contract our products or services) and in the Company's legitimate interest in carrying out the relevant checks to identify and prevent potential fraud, as well as for security reasons;
  • Quality analysis . The legitimacy of processing your data lies in the Company's legitimate interest in analyzing customer and user satisfaction, in order to offer them products and services of the highest quality;
  • Customer Service . The legitimacy of processing your data lies in the Company's legitimate interest in responding to your requests and complaints so that we can adequately serve you and resolve your requests. In the case of complaints or incidents related to the product or service purchased, the processing of your data is necessary for the Company to fulfill its contractual obligations . In the case of queries related to the exercise of your legally recognized rights in terms of data protection, the Company requires the processing of your data to comply with its legal obligations in this area.
  • Advertising and marketing actions . The legal basis for processing your data for advertising and marketing purposes is the consent you provide to send commercial communications (which may be personalized) and the Company's legitimate interest in sending you communications similar to those services or products you have purchased in the past or in which you have expressed interest.

Remember that if you have given us your consent to process your data for any purpose, you have the right to withdraw it at any time.

  • Improve the user experience on the Website. The processing of your data is based on the Company's legitimate interest in understanding user satisfaction and taking appropriate corrective measures to improve the quality of our services.


HOW LONG WILL WE KEEP YOUR DATA?

Your personal data will be duly retained for the time necessary to be used for the purpose for which it was collected.

Personal data will be stored, applying appropriate security measures to ensure its accuracy and integrity, as long as its processing is necessary for the purpose for which it was collected or as long as you do not exercise your right to erasure or restriction of processing.

In such cases, we will keep your personal information blocked, without processing it, for the legally established periods to address potential liabilities and to verify compliance with our legal and contractual obligations. The Company will then permanently delete your personal data.


WHO CAN WE SHARE YOUR DATA WITH?

Your personal data will be processed by members of the Company acting on behalf of the organization and with whom corresponding contracts have been concluded, which include specific obligations regarding confidentiality and diligent management of personal data in accordance with applicable law.

In certain cases, in order to fulfill the purposes set forth in this Privacy Policy, the Company needs to share your personal data with other Group companies and with the following third parties:

  • suppliers and collaborators of logistics, transportation and delivery services, and/or collaborating establishments thereof;
  • providers of services related to customer service;
  • suppliers and collaborators of services related to marketing and advertising;
  • Authorities and public bodies to: respond to a court order, subpoena, or investigation, or for any other reason required by law; address potential liabilities arising from the processing of personal data; prevent illegal uses of our Website or violations of our Website policies; address third-party claims; and contribute to the prevention and investigation of fraud, among others.

These third-party collaborators only have access to the personal information necessary to perform the corresponding services and are required not to use it for any purpose other than that requested. The Company also requires these third parties to maintain the same level of protection and confidentiality that we apply in the management of your personal information. Furthermore, all of them are subject to the obligations set forth in their respective data processing agreements with the Company.

WHAT ARE YOUR RIGHTS?

You are entitled to exercise the following rights in relation to the processing of your personal data:

  • Access (Article 15 GDPR): This allows you to obtain certain information about the purposes for which your data is being processed, the recipients to whom it is communicated, or the categories of data being processed, among other things.
  • Rectification (Article 16 GDPR): allows you to contact the Data Controller to modify inaccurate personal data and complete incomplete data.
  • Deletion (Article 17 GDPR): allows you to request the deletion, without undue delay, of your personal data that is being processed by the Controller, in the following cases:
  • the Controller no longer needs the data for the purposes for which they were initially collected;
  • the processing of the data is based on your consent and you decide to withdraw it, provided that there are no other processing operations covered by a legitimate basis other than consent;
  • you object to the processing of your data and the interests of the Controller do not prevail, provided that there are no other processing operations that do not allow opposition;
  • the personal data have been unlawfully processed;
  • personal data must be deleted due to legal obligation;
  • the data have been obtained within the framework of the provision of information society services.
  • Restriction of processing (Article 18 GDPR): allows you to obtain from the Controller the restriction on the processing of your data when any of the following conditions are met:
  • when you contest the accuracy of your personal data, for a period that allows the Controller to verify the accuracy of the same;
  • the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead;
  • the Controller no longer needs your personal data for the purposes of the processing, but you need them for the formulation, exercise or defense of legal claims;
  • you have objected to the processing, while it is verified whether the legitimate reasons of the Controller prevail over yours.
  • Portability (Article 20 GDPR): This allows you to receive your personal data or have it sent to a third party in a structured, commonly used, and machine-readable format, provided that the following conditions are met cumulatively:
  • when the Controller's legitimacy for processing your data is the provision of your consent or the execution of a contractual relationship;
  • that the processing of data is carried out by automated means.


Objection (Article 21 GDPR): This right allows you to object to the processing of your data by the Controller. However, you can only exercise this right against processing based on the legitimate grounds of public interest or the legitimate interest of the Controller.

  • Objection to automated processing (Article 22 GDPR): This allows you not to be subject to decisions based solely on automated processing of your data, including profiling, which produce legal effects on you or significantly affect you in a similar way.


How can I exercise my rights?

To exercise your data protection rights, the Company provides the following means:

  • By means of a written and signed request addressed to the Company (Bosc Tancat street no. 8, Cerdanyola del Vallés, (08290) Barcelona) stating the reason for your request and the right you wish to exercise, and attaching a photocopy of your ID or equivalent document that proves the identity of the applicant;
  • By sending a completed and signed form, including a photocopy of your ID or equivalent document proving your identity, to the following email address: dataprotection@offview.com.

The forms to exercise the different rights are provided below:


Likewise, you have the right to contact the corresponding competent data protection supervisory authority for any claim arising from the processing of your personal data: the Spanish Data Protection Agency ( Claims Submission Form ).