Website Privacy Policy

DATA CONTROLLER

The company responsible for processing your data according to this Privacy Policy is:AFEHC

NIF: G62404710

Address: Plaça Gal.la Placídia 1-3 Local 08006 Barcelona

E-mail address: afehc@afehc.com

Website: afehc.com

Telephone no.: 93 585 1905

Registered in the Companies Register of Barcelona in volume ………., folio ….., section ….., page ……, entry 2nd.

At AFEHC, we recognise the importance of protecting your personal information and we are committed to processing it responsibly and in compliance with the data protection laws.The purpose of this privacy policy is to regulate all the aspects relating to the processing of data of the different users browsing the website or providing their personal details on the different forms to be found on it.Personal Data

Personal Data is the information that identifies you or may identify you. Through the website, in the boxes that are stablished for that purpose, it is collected the personal data that the User provides us: Name, surname, email, telephone number, postal code, city, etc. In addition, it is collected all the personal data that the User voluntarily provides us through any of the social networks, of which the User is registered. In this case, the privacy settings will depend on both the configuration that the User established as well as the terms and conditions of the social network itself.When a user visits the website, this does not mean that he/she has to provide any information about his/her personal data. However, if such information is provided, the data will be processed lawfully and subject at all times to the principles and rights contained in the GDPR 2016/679 of 27 April 2016 and the LOPDGDD 3/2018 of 5 December.Purpose, duration and legitimation of the processing:

We will process the data provided to us by the user for the following purposes:

The basis for legitimation of the data processing will be the consent granted by the user when checking the box for acceptance of our privacy policy before sending the request. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The basis for legitimation of the data processing will be the consent granted by the user when registering through the blog subscription form and checking the box for acceptance of our privacy policy before sending the request. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The basis for legitimation of the data processing will be the consent granted by the user when registering using the form provided for this purpose on the website and checking the box for acceptance of our privacy policy before sending the request.

The basis for legitimation of the data processing will be the performance of a contract of sale to which the data subject is a party. If the user does not provide his/her personal data, it will not be possible to manage his/her purchase and the requested service cannot be provided.

The ground of lawfulness for the processing of the personal data will be the legitimate interests of the Controller for facilitating as much as possible the purchase of the product to which the User has shown interest by adding it to the cart.

The basis for legitimation of the data processing will be the consent granted by the user when checking the box for acceptance of our privacy policy before subscribing to the newsletter in the form provided for this purpose on the website. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The legitimate basis for managing and processing the data subject’s CV/résumé is his/her consent; this is given by carrying out the affirmative action of sending it and checking the box for acceptance of our privacy policy prior to it being sent. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The legitimate basis for managing the customer/loyalty card is the performance of a contract in which the data subject is a party. If the user does not provide his/her personal data, we cannot deal with his/her request and will not be able to provide the loyalty and discounts service offered by the AFEHC card.

The legitimate basis for drawing up profiles is the user’s consent, granted by checking the corresponding box. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The basis for legitimation of the data processing will be the consent granted by the user when registering with the registration form and checking the box for acceptance of our privacy policy before sending the request. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The legitimate basis for improving website browsing is the consent given by the user when accepting the cookies. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The legitimate basis for managing our social networks and sending users our activities and new features is the consent we are given to do so. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The basis for legitimation of the data processing will be the consent granted by the user when completing the participation form on the website and checking the box for acceptance of our privacy policy and for the rules of the competition or draw. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The basis for legitimation of the data processing will be the consent given by the user when completing the participation form provided for this purpose on the website and checking the box for acceptance of our privacy policy. The user has the right to revoke his/her consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to it being withdrawn.

The legitimation for this purpose of personal data processing is the performance of the contract to which the user is a party, i.e. for the maintenance, execution, development, monitoring and performance of the contractual relationship between you and AFEHC.

The legitimate basis for dealing with and managing the booking made by the user on the website form will be the performance of a contract to which the data subject is a party. If the user does not provide his/her personal data, it will not be possible to manage his/her booking and the requested service cannot be provided.

 The lawful ground for the processing is the consent of the data subject granted to us for the use of the service. The user has the right to revoke their consent at any time without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

The processing of your personal data will be based on the legitimate interest to improve the quality of the service when the user has purchased products and/or services. In the absence of such a contractual activity, the processing of personal data will be based on the user’s consent set forth in the current regulations in force. Additionally, if you withdraw your consent to any of the processing, this will not affect the lawfulness of the processing conducted previously.

The ground of lawfulness for the processing of the personal data of the data subject is based on the consent through the formalization and sending of the corresponding request of the member, providing us with the personal data required in the mandatory fields without which we cannot manage your request.

Transfer and flow of personal data

Your data will not be transferred to third parties unless otherwise stated by law or unless it is transferred to other companies of the Group under administrative or internal management purposes.

The recipients of the data will be the service providers bounded to the Controller that act as processors. In this sense, the Controller engages, for the hosting services, to the company _____________, provider that offers adequate safeguard measures and whose servers are located in EU.International transfers

At AFEHC we process your data within the European Economic Area and generally we have service providers located within the European Economic Area or in countries determined to have an adequate level of data protection.If we need to use service providers which carry out processing outside the European Economic Area or in countries not determined to have an adequate level of data protection, we will ensure that your data is processed in a secure and legitimate manner on the basis of adequacy decisions, standard data protection clauses, binding corporate rules, exceptions or any other instrument approved by the supervisory authority that offers adequate guarantees for the international transfer of data.

In addition, to perform the purposes of the processing, AFEHC will outsource the services _________ of the company __________, located in Andorra, implying an international transfer of data to a country with an adequate level of protection under the Decision 2010/625/EU of the Commission, 19 October 2010.Likewise, we inform you that to send newsletters or other commercial information, the CONTROLLER may use the services of Mailchimp whose servers are located in the USA. However, the mentioned provider has standard contractual clauses in accordance with article 46 of the GDPR that legitimize the international transfer of personal data.

Similarly, AFEHC makes available the WhatsApp application so that interested individuals can contact the CONTROLLER party through this means. In this sense, we inform that while the servers of the WhatsApp application for EU users are located in Ireland, communications with US servers could occur for technical reasons, which would imply an international data transfer.

Updating of data

In order for us to keep the personal data up to date, the user must always inform us of any change in said data; if this is not done, we cannot be liable for the veracity of the data.The user guarantees that the personal data provided are true, and guarantees that all the information provided corresponds to reality, is up to date and is accurate. He/she is obliged to communicate any modification thereto.Third Party Data

If the user provides third party data for any purpose to AFEHC, he/she guarantees that he/she has obtained these data lawfully, has informed the affected parties in advance, has obtained his/her consent to communicate them, and that the information provided is accurate and true.Compulsory nature of the information requested

All our forms have an asterisk (*) to indicate which details are compulsory. If the user does not complete these fields, or does not check the privacy policy box, the information will not be sent.Use of passwords

In order to access your account, the USER must “Log in” and include the email address and password generated in the registration form according to the complexity rules established at each moment on the web.The users are responsible for the adequate custody and confidentiality of any identifiers and/or passwords that they have selected in the registration from, and they undertake not to assign their use to third parties, nor to allow their access to outsiders.Likewise, it will be the obligation of the user to notify immediately to the Controller any fact that allows the misuse of the identifiers and/or passwords, such as theft, loss, or unauthorized access to them, in order to proceed to its immediate cancellation.Rights of data subjects:

You have the right to access your data and obtain confirmation regarding the processing thereof, as well as a copy of the personal data being processed. You have the right to update them and request that any inaccurate data be corrected, or request removal of the data when they are not necessary for the purposes for which they were collected. You may request a restriction in the processing of your data and object to them being processed by revoking your consent, and also exercise your right to data portability. Similarly, you have the right not to be the subject of decisions based solely on the automated processing of your personal data. You may exercise your rights by contacting us Pl. Gal·la Placídia, 1-3 – 08006 Barcelona (Barcelona).

E-mail: afehc@afehc.com.If you consider that your rights have not been duly respected, you have the right to lodge a complaint with the Spanish Data Protection Agency www.aepd.es.Processing of the data of Minors

Anyone providing data through the forms on this website and accepting the processing of such states that he/she is at least 14 years old. Access to, and use of the website is prohibited for anyone younger than 14. If, at any time, the Data Controller detects that a person younger than 14 years of age has provided personal data, we will cancel said data. In addition, parents or tutors may in any event write to AFEHC to block any access account created by minors in their charge who have registered by falsifying their identity.Cookies

A cookie is a small file that is downloaded and stored on the user’s computer when he/she access a website. Cookies allow the website, amongst other things, to store and recover information on the browsing habits of the user or of his/her computer and, depending on the information they contain and the way in which you use your computer, they may be used for user recognition.The user has the option to prevent the generation of cookies, by selecting the corresponding option in his/her browser program. You can obtain more information by reading our Cookies Policy.

Last Updated: 2023/06/01