PRIVACY POLICY
Information about data processing and your rights
1. Data Controller
The data controller for your personal data is Biurrun Inversiones, a Spanish company with registered office at C/Tomás López 10 and NIF B56365158. You can contact the controller at: [email protected].
2. Purpose of Data Processing
We collect and process your personal data for the following purposes:
- Requested services:
- To provide you with the services requested through our website.
- Commercial communications:
- To send you newsletters and commercial/promotional communications related to our services via email, SMS, postal mail, or other digital means (with your prior consent).
- Service improvement:
- To improve our services based on your interactions and preferences.
3. Legal Basis for Processing
The legal bases for processing your personal data are:
- Contract performance:
- Performance of a contract (Article 6.1.b GDPR).
- Explicit consent:
- Your explicit consent for marketing and non-essential cookies (Article 6.1.a GDPR).
- Legitimate interest:
- The controller's legitimate interest in maintaining website security and functionality (Article 6.1.f GDPR).
4. Data Retention
Personal data will be retained while there is an active contractual or service relationship, or until the user exercises their right to deletion. Once the retention period expires, data will be securely deleted or anonymized.
5. User Rights (GDPR)
You have the right to:
- Access:
- Access your personal data.
- Rectification:
- Rectify inaccurate or incomplete data.
- Deletion:
- Request deletion ('right to be forgotten').
- Restriction:
- Restrict the processing of your data.
- Objection:
- Object to the processing of your data.
- Data portability:
- Request data portability.
- Withdraw consent:
- Withdraw your consent at any time.
To exercise these rights, contact us at [email protected], including a valid identity document.
6. Data Security
We have implemented technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, please note that no security system is completely infallible.
7. CCPA Compliance (for California Users)
Under the California Consumer Privacy Act (CCPA), California residents have the right to:
- Know data:
- Know what personal data is collected, shared, or sold.
- Deletion:
- Request deletion of personal data.
- Opt-out:
- Opt out of the sale of personal data.
- Non-discrimination:
- Not be discriminated against for exercising these rights.
To exercise any of these rights, contact: [email protected] with the subject 'California Privacy Request'.
8. External Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external websites. We recommend that users review the privacy policies of those websites.