Privacy Policy
Identification details of the Data Controller
In compliance with the duty to inform set out in article 10 of Spanish Act 34/2002, of 11 July, on Information Society Services and Electronic Commerce, the following details are provided: the company that owns the web domain is EFECTO FUERAPARTE 3D, SL (hereinafter, ENEFECTO), with address for these purposes at Calle Escultor Duque Cornejo, 2. Edificio Miró, 2nd floor, office 5. Alcalá de Guadaíra, Seville; and tax ID (CIF) B-90069931, registered in the Commercial Registry at Folio 46 of volume 5,708 of the General Companies Section, Sheet SE-97,582, entry 1.
The owner of the website is aware of the importance of the privacy of personal data and of compliance with the regulations in force at both European and national level. It has therefore implemented a data processing policy designed to provide maximum security in the use and collection of such data, guaranteeing compliance with the applicable regulations and making that policy one of the cornerstones of the company's activity.
Enefecto is the owner of the following social media accounts:
- Vimeo: https://vimeo.com/enefecto3d
- Facebook: https://www.facebook.com/Enefecto3D
- Twitter / X: https://twitter.com/enefecto3D
Anyone who accesses this Website (hereinafter, the User) confirms that they are of the minimum legal age to give consent in relation to information society services. Otherwise, the User must refrain from accessing this Website.
By accessing this Website, the User expressly accepts all the clauses of this legal notice, of the privacy policy and of the cookie policy, as well as any particular conditions set out for the use of certain services. If the User does not accept any of these clauses, they must refrain from accessing this Website.
Processing carried out by Enefecto 3D as Controller
Processing of registrations on the website
Legal basis: GDPR: 6.1.b) Processing necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Spanish Act 34/2002, of 11 July, on information society services and electronic commerce. Spanish Act 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights.
Purposes of the processing: The processing consists of signing up for the services offered by ENEFECTO 3D through its website.
Data subjects: Clients and users.
Data categories: Email address, first name and surname.
Categories of recipients: ENEFECTO 3D.
International transfers: No international data transfers are planned.
Retention period: Data will be kept for as long as necessary to fulfil the purpose for which it was collected and to determine any liability that may arise from that purpose and from the processing of the data.
Security measures: The security measures in place correspond to those set out in Annex II (Security measures) of Spanish Royal Decree 3/2010, of 8 January, regulating the National Security Framework for Electronic Government.
Rights: Access, rectification, erasure, restriction, portability and objection. For any complaint you may contact the Spanish Data Protection Agency.
Controller: EFECTO FUERAPARTE 3D, S.L.
Data Protection Officer: reyes@enefecto3d.com
1. Data provided by telephone call
Who is the controller of your data? Enefecto
For what purpose do we process your personal data? We will process the information you provide, or authorise us to access, in order to handle the matter raised in your call.
How long will we keep your data? The personal data you provide will be kept for as long as the matter raised in your call is being handled, or for the minimum time necessary to comply with legal obligations.
What is the legal basis for processing your data? The legal basis for processing your data is your freely given consent.
Who will your data be disclosed to? Data will not be transferred to third parties, except where legally required or with your prior authorisation.
What are your rights when you give us your data? You have the right to lodge a complaint with a supervisory authority, to withdraw your consent, to access, rectify, erase and port your data, to restrict and object to its processing, and not to be subject to decisions based solely on the automated processing of your data, where applicable (more information in the Rights section).
What data must you provide? You are not required to provide any data in order to contact ENEFECTO by telephone.
2. Data provided through WhatsApp messages
Who is the controller of your data? Enefecto
For what purpose do we process your personal data? We will process the information you provide, or authorise us to access, in order to handle the matter raised in your WhatsApp message.
How long will we keep your data? The personal data you provide will be kept for as long as the matter raised in your WhatsApp message is being handled, or for the minimum time necessary to comply with legal obligations.
What is the legal basis for processing your data? The legal basis for processing your data is your freely given consent.
Who will your data be disclosed to? Data will not be transferred to third parties, except where legally required or with your prior authorisation.
What are your rights when you give us your data? You have the right to lodge a complaint with a supervisory authority, to withdraw your consent, to access, rectify, erase and port your data, to restrict and object to its processing, and not to be subject to decisions based solely on the automated processing of your data, where applicable.
What data must you provide? You are not required to provide any data in order to contact Enefecto through WhatsApp messages.
3. Data provided by email
Who is the controller of your data? Enefecto
For what purpose do we process your personal data? We will process the information you provide, or authorise us to access, in order to handle the matter raised in your email.
How long will we keep your data? The personal data you provide will be kept for as long as the matter raised in your email is being handled, or for the minimum time necessary to comply with legal obligations.
What is the legal basis for processing your data? The legal basis for processing your data is your freely given consent.
Who will your data be disclosed to? Data will not be transferred to third parties, except where legally required or with your prior authorisation.
What are your rights when you give us your data? You have the right to lodge a complaint with a supervisory authority, to withdraw your consent, to access, rectify, erase and port your data, to restrict and object to its processing, and not to be subject to decisions based solely on the automated processing of your data, where applicable.
What data must you provide? You are not required to provide any data in order to contact Enefecto by email.
4. Data provided through the "Contact form" section
Who is the controller of your data? Enefecto
For what purpose do we process your personal data? We will process the information you provide, or authorise us to access, in order to handle the matter raised in the contact form.
How long will we keep your data? The personal data you provide will be kept for as long as the matter raised in the contact form is being handled, or for the minimum time necessary to comply with legal obligations.
What is the legal basis for processing your data? The legal basis for processing your data is your freely given consent.
Who will your data be disclosed to? Data will not be transferred to third parties, except where legally required or with your prior authorisation.
What are your rights when you give us your data? You have the right to lodge a complaint with a supervisory authority, to withdraw your consent, to access, rectify, erase and port your data, to restrict and object to its processing, and not to be subject to decisions based solely on the automated processing of your data, where applicable.
What data must you provide? The form fields marked as required must be completed; if you do not provide that data, you will not be able to contact Enefecto.
5. Data provided to receive our newsletter
Who is the controller of your data? Enefecto
For what purpose do we process your personal data? We will process the information you provide, or authorise us to access, in order to send you our email newsletter with information about our services, activities and news related to our work.
How long will we keep your data? The personal data you provide will be kept until you cancel your newsletter subscription, or for the minimum time necessary to comply with legal obligations.
What is the legal basis for processing your data? The legal basis for processing your data is your freely given consent.
Who will your data be disclosed to? Data will not be transferred to third parties, except where legally required or with your prior authorisation.
What are your rights when you give us your data? You have the right to lodge a complaint with a supervisory authority, to withdraw your consent, to access, rectify, erase and port your data, to restrict and object to its processing, and not to be subject to decisions based solely on the automated processing of your data, where applicable.
What data must you provide? The form fields marked as required must be completed; if you do not provide that data, you will not be able to request a newsletter subscription.
6. Data provided through your participation on social media
Who is the controller of your data? Enefecto
For what purpose do we process your personal data? We will process the information you provide, or authorise us to access, in order to manage contacts on social media.
How long will we keep your data? The personal data you provide will be kept for as long as you do not delete the information from the social network, or for the minimum time necessary to comply with legal obligations.
What is the legal basis for processing your data? The legal basis for processing your data is your freely given consent.
Who will your data be disclosed to? Data will not be transferred to third parties, except where legally required or with your prior authorisation.
What are your rights when you give us your data? You have the right to lodge a complaint with a supervisory authority, to withdraw your consent, to access, rectify, erase and port your data, to restrict and object to its processing, and not to be subject to decisions based solely on the automated processing of your data, where applicable.
What data must you provide? You are not required to provide any data in order to contact ENEFECTO through social media.
7. Data provided through your comments in the "Blog" section and its articles
Who is the controller of your data? Enefecto
For what purpose do we process your personal data? We will process the information you provide and your IP address, or authorise us to access, in order to publish your comment.
How long will we keep your data? The personal data you provide will be kept for as long as you do not request its cancellation, or for the minimum time necessary to comply with legal obligations.
What is the legal basis for processing your data? The legal basis for processing your data is your freely given consent.
Who will your data be disclosed to? Your first name, surname and comment will be accessible to all Internet users.
What are your rights when you give us your data? You have the right to lodge a complaint with a supervisory authority, to withdraw your consent, to access, rectify, erase and port your data, to restrict and object to its processing, and not to be subject to decisions based solely on the automated processing of your data, where applicable.
What data must you provide? The form fields marked as required must be completed; if you do not provide that data, your comment cannot be published.
Processing of Personal Data as Processor
A User who enters into a service agreement with ENEFECTO 3D as data processor authorises it to process the personal data necessary to provide the service requested. In order to carry out the services arising from this assignment, the controllers will make available to ENEFECTO the personal data necessary to provide the service requested. This agreement will remain in force for as long as the contractual relationship lasts. Once the contractual relationship ends, ENEFECTO must return the personal data to the controller or transfer it to another processor designated by the controller, and delete any copy in its possession. It may, however, keep the data blocked in order to address any administrative or judicial liability.
ENEFECTO and all its staff undertake to:
- Use the personal data being processed, or that it collects for inclusion, only for the purpose of this assignment. Under no circumstances may it use the data for its own purposes.
- Process the data in accordance with the controller's instructions.
- Keep a written record of all categories of processing activities carried out on behalf of the controller, containing: the name and contact details of the processor or processors and of each controller on whose behalf the processor acts; the categories of processing carried out on behalf of each controller; and a general description of the appropriate technical and organisational security measures being applied.
- Not disclose the data to third parties, unless it has the express authorisation of the controller, in the cases permitted by law. If the processor wishes to subcontract, it must inform the controller and request prior authorisation.
- Maintain the duty of secrecy with regard to the personal data it has had access to under this assignment, even after the contract has ended.
- Ensure that the persons authorised to process personal data undertake, expressly and in writing, to respect confidentiality and to comply with the corresponding security measures, of which they must be duly informed.
- Keep available to the controller the documentation evidencing compliance with the obligation set out in the previous section.
- Provide the necessary personal data protection training to the persons authorised to process personal data.
- Where data subjects exercise their rights of access, rectification, erasure and objection, restriction of processing and data portability before ENEFECTO 3D, it must notify the controller by email. The notification must be made immediately and in no case later than the working day following receipt of the request, together with any other information that may be relevant in order to resolve the request.
Notification of personal data breaches:
ENEFECTO will notify the controller, without undue delay and by email, of any personal data breaches in its area of responsibility of which it becomes aware, together with all the information relevant for documenting and reporting the incident. At a minimum, the following information will be provided:
- A description of the nature of the personal data breach, including, where possible, the categories and approximate number of data subjects affected, and the categories and approximate number of personal data records affected.
- Contact details of the person from whom further information can be obtained.
- A description of the likely consequences of the personal data breach.
- A description of the measures taken or proposed to remedy the personal data breach, including, where appropriate, the measures taken to mitigate any adverse effects.
Where it is not possible to provide the information at the same time, and to the extent that it is not, the information will be provided in stages without undue delay.
At the controller's request, ENEFECTO will report such data breaches to the data subjects as soon as possible, where the breach is likely to result in a high risk to the rights and freedoms of natural persons. The communication must be made in clear and plain language and must include the elements indicated by the controller in each case, as a minimum: the nature of the data breach; the contact details of the controller or processor from whom further information can be obtained; a description of the likely consequences of the personal data breach; and a description of the measures taken or proposed by the controller to remedy the personal data breach, including, where appropriate, the measures taken to mitigate any adverse effects.
- Make available to the controller all the information necessary to demonstrate compliance with its obligations, and to allow for audits or inspections carried out by the controller or another auditor authorised by it.
- Implement the technical and organisational security measures necessary to guarantee the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
- Return the personal data to the controller and, where applicable, the media on which it is held, once the service has been provided. The return must involve the complete deletion of the data held on the computer equipment used by ENEFECTO. ENEFECTO may, however, keep a copy, with the data duly blocked, for as long as liability may arise from the provision of the service.
The controller is responsible for:
- Providing the processor with the data necessary to deliver the service.
- Ensuring, beforehand and throughout the processing, that ENEFECTO complies with the General Data Protection Regulation.
- Supervising the processing.
Social media
By accessing ENEFECTO's social media accounts, the User accepts the processing of their personal data by those platforms in accordance with their individual privacy policies:
- Vimeo: https://vimeo.com/enefecto3d
- Facebook: https://www.facebook.com/Enefecto3D
- Twitter / X: https://twitter.com/enefecto3D
Warranty
The User warrants that the data provided is true, accurate, complete and up to date, and is liable for any direct or indirect damage that may be caused as a result of a breach of that obligation. Where the data provided belongs to a third party, the User warrants that they have informed that third party and obtained their authorisation to provide their personal data to ENEFECTO.
Users' rights
Right of access: The User has the right to obtain confirmation from ENEFECTO as to whether or not personal data concerning them is being processed and, if so, the right to access that personal data.
Right to rectification: The User has the right to obtain from ENEFECTO, without undue delay, the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the User has the right to have incomplete personal data completed, including by means of a supplementary statement.
Right to erasure: The User has the right to obtain from ENEFECTO, without undue delay, the erasure of personal data concerning them, and ENEFECTO is obliged to erase that personal data without undue delay.
Right to restriction of processing: The User has the right to obtain from ENEFECTO the restriction of the processing of their data.
Right to data portability: The User has the right to receive the personal data concerning them that they have provided to ENEFECTO, in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance from the controller to which it was provided.
Right to object: The User has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. ENEFECTO will stop processing the personal data unless it demonstrates compelling legitimate grounds for the processing which override the User's interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Automated individual decision-making, including profiling: The User has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
Right to withdraw consent: The User has the right to withdraw their consent at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. It will be as easy to withdraw consent as to give it.
The User may exercise their rights before ENEFECTO by writing to ENEFECTO, C/ Escultor Duque Cornejo, 2, 2º, 5ª (Alcalá de Guadaíra, 41500, Seville) or by sending an email directly to the address reyesvega@enefecto.es.