LEGAL NOTICE 

In compliance with current regulations on the protection of personal data, we inform you that the personal data collected in this form are part of files under the responsibility of GTM LA VAGUADA, AIE, and are processed by it for the purpose of managing communications between GTM LA VAGUADA, AIE and you.

You may exercise your rights of Access, Rectification, Cancellation, and Objection through the following address [email protected] (In compliance with EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018, of December 5, on Personal Data Protection and the guarantee of digital rights, we inform you that the personal data of applicants will be processed by GTM LA VAGUADA, AIE solely for the purpose of resolving the corresponding selection processes, with interested parties being able to exercise their rights of access, rectification, erasure, restriction, and objection before this Company (Av. de Monforte de Lemos, 36, Fuencarral-El Pardo, 28029, Madrid). The legal basis for the processing of the data derives from compliance with legal obligations contained in the aforementioned regulations, as well as from the consent of the data subject and transparency regulations.

We also inform you that the party responsible for your personal data is GTM LA VAGUADA, AIE. These will not be transferred to third parties, except in cases of legal obligation.

This Privacy Policy has been developed taking into account the provisions of Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the movement of such data, hereinafter GDPR, as well as in Organic Law 3/2018, of December 5, on Personal Data Protection and digital rights (hereinafter, LOPDGDD) and other applicable regulations.

The purpose of this Privacy Policy is to inform natural persons who provide their personal data, and/or those of the person they represent, with respect to whom information is being collected, of the specific aspects regarding the processing of their data, the purposes of the processing, the contact details to exercise their rights, the retention periods of the information, and the security measures, among other things.

WHO IS RESPONSIBLE FOR THE PROCESSING? 

Below are the contact details of the Data Controller:

• Identity of the controller: GTM LA VAGUADA AIE.
• Physical address: Av. de Monforte de Lemos, 36, Fuencarral-El Pardo, 28029, Madrid.
• Email:  [email protected]

WHAT PERSONAL DATA DO WE PROCESS? 

All information collected by GTM LA VAGUADA AIE will be processed fairly, lawfully, and transparently.

Furthermore, the data requested in each of the processes carried out will consist solely of those strictly necessary to achieve the intended and informed purpose in each case.

Thus, the data collected will be adequate, relevant, and not excessive in relation to the purposes for which they are processed in each case. Therefore, your personal data will be collected for specific, explicit, and legitimate purposes, and will not be further processed in a manner incompatible with those purposes. In addition, they will be updated whenever necessary.

FOR WHAT PURPOSE AND SPECIFIC CASES DO WE PROCESS PERSONAL DATA? 

In general terms, personal data are processed for the following purposes:

• User registration management: The information you provide in the registration form will be processed for the management of users on our platforms. After registration, you will be able to check your order history, redeem gift cards or discount vouchers, modify your personal data and/or shipping and billing addresses, wish lists, reviews, or alerts.
• Management, compliance, and execution of the purchase contract: Specifically, personal data will be used for the formalization of the purchase contract; for the management and payment of transactions; to contact you in case of any incident related to your purchase; for the management of billing and delivery of tickets and purchase invoices; for the management of product returns; to inform you about the availability of the requested products; and/or for the management of coupons or gift cards redeemed on the website.
• Newsletter: Sending information through the provided means about updates, news, products, and services related to us or our sector.
• Sending advertising commercial communications, sending communications or commercial events about products or services similar to those contracted, promotions, and/or offers.
• Contact: responding to requests for information received about the products and services offered, as well as responding to any other type of question sent by users.
• Clients: carrying out the management of the sale of goods and services, billing, accounting, collections, defaults, offers, quotes, and contracts, customer service, contact, and business relationships.
• Potential Clients: Carrying out follow-up and business opportunities for the organization.
• Suppliers: carrying out the management of purchases, accounting, payments, delivery notes and order management, contact, and business relationships.
• Video surveillance: Controlling access to the organization"s facilities and ensuring the safety of the company"s assets and people.
• Candidates: Carrying out internal recruitment processes, both current and future.

No profiles will be created nor will automated decisions be made with the personal data collected.

WHAT IS THE LEGAL BASIS FOR PROCESSING DATA? 

As a general rule, prior to the processing of personal data, GTM LA VAGUADA AIE informs of the legal basis on which the legitimacy of the processing is established.

However, the organization may process personal information for:

• Compliance with legal and regulatory obligations:  Including but not limited to: General Law for the Defense of Consumers and Users, General Tax Law, Corporate Tax Law, Audit Law, Value Added Tax Law, Civil Code, Commercial Code, as well as the existence of a law or specific regulation authorizing or requiring the processing of the data subject"s data, which will be indicated in the corresponding informative clause.
• Execution of a Contract: for the prior management of a contracted service or product, development of the execution of a contract, or subsequent management arising from such operations.
• Consent: there are processes based on obtaining the express and unequivocal consent of the owner, by incorporating informed consent clauses in the different systems of information collection, granting consent through a statement or a clear affirmative action such as ticking a box provided for this purpose, signing the appropriate document, or by sending data through the indicated contact means. Additionally, we inform you that we will only use personal information under this Privacy Policy and, generally, we will request your consent for uses other than those for which you initially provided it.
• Legitimate interest: the processing of data based on the legitimate interest of the controller will be established mainly for the sending of communications or commercial events about products or services similar to those contracted. According to article 21.2 of the Law on Information Society Services, this processing will only be valid when, being a client, you have not expressly objected at the time of data collection or in any of the communications we make.

HOW LONG DO WE PROCESS PERSONAL DATA? 

On the GTM website, personal data are processed for the time necessary to fulfill the purpose for which they were collected, as long as the service provision or employment/contractual relationship is maintained, there is mutual interest, and/or during the period provided by the corresponding regulations.

Once the time criteria have been met, the data will be canceled. This cancellation will lead to the blocking of the data, being kept only at the disposal of Public Administrations, Judges, and Courts, to address possible responsibilities arising from the processing, during their statute of limitations, after which the information will be destroyed.

Regarding the video surveillance system, the retention period will not exceed one month.

WITH WHOM DO WE SHARE PERSONAL DATA? 

As a general rule, GTM LA VAGUADA AIE does not transfer or communicate your data to third parties, except where legally required.

However, if necessary, such transfers or communications of data will be informed to the data subject through the informative clauses contained in the different means of personal data collection.

ARE INTERNATIONAL TRANSFERS MADE? 

We inform you that, in general, no international transfers are made outside the European Economic Area (EEA). In the event that a data transfer outside the EEA occurs, THE ORGANIZATION will have the appropriate safeguards to carry out such transfer, in accordance with the requirements established by the General Data Protection Regulation.

WHAT RIGHTS CAN YOU EXERCISE? 

According to European regulations, the rights you are entitled to are as follows:

• Right of Access: the right to request information from the controller of a file about whether your personal data are being processed.
• Right of Rectification: the right allowing the affected person to request the modification of inaccurate or incomplete data.
• Right of Objection: the right of a person to object to the processing of their personal data or its cessation.
• Right regarding Automated individual decisions: the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or significantly affects them in a similar way.
• Right of Restriction: the right to suspend the processing of the user’s personal data in certain cases.
• Right of Erasure or Right to be Forgotten: the right to request the deletion of the data subject’s personal data.
• Right to Data Portability: the right to request that the controller provide the personal data in a structured, clear format to another controller.
• Right to lodge a complaint before the competent supervisory authority if you consider that the processing does not comply with the current regulations.

HOW TO EXERCISE YOUR RIGHTS? 

The applicant may exercise their rights through the following means: 

• Email to [email protected] providing documentation proving the applicant’s identity (copy of the front of the National Identity Document, or equivalent)
• Postal mail to Av. de Monforte de Lemos, 36, Fuencarral-El Pardo, 28029, Madrid providing documentation proving the applicant’s identity (copy of the front of the National Identity Document, or equivalent)

In any case, you may request the protection of the Spanish Data Protection Agency through its website.

In this regard, GTM LA VAGUADA AIE will respond to your request as soon as possible, taking into account the deadlines established in the data protection regulations.