Who we are
Our website address is: https://alairetail.com/
1. Data Controller.
In accordance with the provisions of the General Data Protection Regulation (hereinafter GDPR), we inform you that personal data will be processed by:
Alai Retail S.L.VAT
Identification Number: B16433526
Postal Address: Mundaiz bidea , 50 , 20012 Donostia – San Sebastián, Spain
Data for the exercise of data protection rights: hello@alairetail.com
2. General privacy principles.
When we collect and process your personal information, we abide by the following practical principles. All personal data:Are processed fairly, lawfully and transparently.Are collected for specified, explicit and legitimate purposes, and are not processed in a way that is incompatible with such purposes.Are adequate, relevant and limited to what is necessary with regard to the purposes for which the processing is carried out.Must be accurate and up-to-date. Inaccurate data will be updated or deleted.Must be kept in an identifiable format and only for strictly necessary purposes.Are kept secure through adequate and effective technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage (“integrity and confidentiality”).Are processed according to the principles of data protection by design and data protection by default.
3. Purposes of Processing of personal data.
The purposes are:Contact, either by telephone or email: dealing with your requests, suggestions and complaints.Sending information, including by electronic means: manage the sending of information.
4. Lawfulness of processing.
Web contacts: consent of the data subject.Marketing, including by electronic means and social networks: consent of the data subject. The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
5. Data access by third parties and international data transfers.
There will be no international transfers of personal data to third countries or organisations, since all data will be processed within the European Economic Area.
6. Profiling and automated decision-making.
No profiling or automated decision-making will be carried out.
7. Storage periods.
Users who have used a contact method: as long as the data are necessary to process their request.Sending information, including by electronic means: the data will be stored as long as the data subject does not unsubscribe. Users are reminded that they can stop receiving information at any time.
8. Rights.
You may address your communications and exercise your rights by following the procedures laid down by the GDPR. In all our operations related to your privacy, we strive to comply with the current regulation, which contains a number of rights. In order to exercise your rights, you may contact hello@alairetail,com under the subject “Data Protection”, indicating the right you wish to exercise. You may use an official template: https://www.aepd.es/reglamento/derechos/index.html You may address the data protection supervisory authority. In Spain: Agencia Española de Protección de Datos (AEPD) C/ Jorge Juan, 6. 28001 – Madrid Tel. 901100099 – 912 663 517 www.aepd.es Data subjects have the following rights: Your rights What does it mean?
Right to information. You have the right to be provided with clear, concise, transparent and easy to understand information about how we use your personal data and about your rights.
Right of access. You have the right to access the personal data we store about you (subject to certain limits).Manifestly unfounded, excessive or repetitive requests may not be granted.
Right to rectification. You have the right to rectify your data where they are inaccurate or no longer valid, or to request that they be supplemented where they are incomplete.
Right to erasure / to be forgotten. In certain cases, you have the right to request that your personal data be erased or deleted. It should be noted that this is not an absolute right, as we may have legal or legitimate grounds for keeping them.
Right to object to receiving communications from us. You may opt-out of receiving communications from us at any time.The easiest way to opt-out is to click on the “unsubscribe” link in any email or communication we send you. You may also email us at hello@alairetail.com
Right to withdraw consent at any time. In the event that consent has been granted for any of the purposes communicated and determined in the processing operations referred to, we inform you that you have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing based on your consent prior to such withdrawal.
Right to object to processing based on the satisfaction of legitimate interests. You can object at any time to the processing of your data when the processing is based on the satisfaction of legitimate interests.
Right to lodge a complaint with a supervisory authority. Likewise, we inform you that when you have not obtained satisfaction in the exercise of your rights or how to exercise them, you may file a complaint with the Control Authority. If you want to know more information about this right and how to exercise it, you can contact the Spanish Data Protection Agency. www.aepd.es Tel. 901 100 099 y 91.266.35.17. C/Jorge Juan,6 28001-Madrid.Please do not hesitate to contact us by any of the means indicated below before filing a complaint with the competent data protection authority.
Right to data portability. You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable form, so that they may be transferred to another data controller, where the processing is based on the execution of a contract or on your consent and is carried out by automated means.
Right to restriction of processing. You have the right to request the restriction of the processing of your data. If you exercise this right, the processing of your data will be subject to restrictions, so that we may store them, but we may no longer use or process them.This right may only be exercised in certain circumstances:· the data subject contests the accuracy of the personal data within a period of time which allows the data controller to verify the accuracy of such personal data;· the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use;· the data controller no longer needs the personal data for the purposes of the processing but the data subject needs them for the purposes of the lodging, exercise or defence of claims;· the data subject has objected to the processing pursuant to Article 21 (1), while it is being verified whether the legitimate grounds of the data controller outweigh those of the data subject.How can you exercise your data protection rights? To exercise your rights, you must send a letter to the postal address of the Data Controller or via e-mail: hello@alairetail.com indicating in the subject “RGPD. RIGHTS”. You must specify which of the rights you request to be satisfied and, in turn, must be accompanied by a photocopy of your ID card or equivalent identification document. In case you act through a representative, legal or voluntary, you must also provide a document proving the representation and identification document of the same. You can use an official model of the AEPD. https://www.aepd.es/reglamento/derechos/index.html
9. Security.
The security measures adopted are those required, in accordance with the provisions of Article 32 of the GDPR. In this sense, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying likelihood and severity to the rights and freedoms of natural persons, has established the appropriate technical and organizational measures to ensure the level of security appropriate to the existing risk.
The Data Controller has implemented sufficient mechanisms to:
Guarantee the permanent confidentiality, integrity, availability and resilience of the processing systems and services.
Restore availability and access to personal data quickly in the event of a physical or technical incident.
Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to guarantee the security of the processing.
Pseudonymise and encrypt personal data, where appropriate.
10. Social networks.
Fans or followers on the different social networks and in the context of this processing should consider that the data controller may consult or delete their data in a restricted manner due to the fact that they have a specific profile. Any rectification of their data or restriction of information or publications must be made through the configuration of their profile or user on the social network.Therefore, fans/followers consent:To the processing of their personal data in the context of said social network and in accordance with its own privacy policies.Access by the data controller to the data contained in their profile or biography, depending on their privacy configuration on each network.That the news published about our events or our comments may appear on their wall or biography.In the event that a form specifically created for promotional or other purposes is used, the data collected will be treated in accordance with the data protection policy of the Data Controller.If you want to stop following us, just click on the option ” Stop being a fan” or “Unfollow” or similar.
