Privacy - Personal Data Protection Policy
1. Introduction
In accordance with the data protection regulations, users are informed that the personal data they supply by email, sent via forms included on this website, its private area or any other means included on this website, will be stored on the processing systems of EUSKAL KULTURGINTZA, S.A., hereinafter EKSA, the Data Controller (tax no.: A20075156), for the purpose of responding to enquiries and requests received, contacting you, managing the services requested, commercial relations and the legitimate functions and interests associated with its business, as well as sending commercial messages that might be of interest to you.
Your data will be stored for an unlimited time for the purposes described in this Privacy Policy, unless you specify otherwise. the legal basis for processing is the need to process your data for the transactions of goods and services requested by you, fulfilling the legal obligations of the Data Controller and the legitimate interest of the Data Controller.
Your data will be processed in confidence. EKSA is committed to the privacy and protection of users' data and uses its resources to ensure data subjects' security and privacy.
Your data may be passed on to companies belonging to the Elkar Group and other direct partners in order to ensure proper provision of the service.
2. Collection of personal data
The Data Controller will collect personal data in a proper, pertinent, specific, explicit, accurate and legitimate way.
The user supplies their personal data freely and voluntarily. The Data Controller does not ask for any more personal data than is necessary to provide the services and information requested. Sending information through this website necessarily means agreeing to this privacy policy and the general conditions of the website. The user is solely responsible for the truthfulness and accuracy of the data they supply, holding EKSA harmless of any liability in this respect.
The Data Controller does not require the user to supply any personal data to access the website. However, access to the private area requires prior registration. For registration to be secure and the service offered correct, the user must supply a series of personal data. Registration in the private area of the website is on a free, voluntary basis. EKSA does not ask for any more personal data than is necessary to provide the service requested.
Any user who includes content of whatever kind on this website (data, text, video, sound, photographs, graphics, messages or other material) declares and guarantees that they do so in a way that conforms to the conditions set forth herein. Any user who includes the personal data of third parties declares that they have their consent and permission to publish this data.
Users are in any case responsible for the accuracy, currency and authenticity of the personal data supplied, and undertake to keep them duly up to date.
3. Data subjects' rights
You can exercise your rights of access, correction, deletion, limitation of processing and objection, as well as withdrawing your consent or making any other request in this respect by writing to the Data Controller, ESKA, at Portuetxe, 88, 20018 Donostia (Gipuzkoa), tel. 943310301, or to the email address dblo-lopd@elkar.eus.
The request must enclose a copy of the document proving the applicant's identity (identity card or similar). If the application is made by a legal representative, it must also must enclose, as well as a copy of the document proving the applicant's identity, a document proving this power of attorney.
The supervisory body to approach if you do not agree with the way the applications have been dealt with or to lodge a complaint is the Spanish Data Protection Agency (aepd.es)
4. Security measures
In processing the personal data it handles, EKSA will adopt the necessary technical and organisational measures to ensure their security and prevent their alteration, loss or unauthorised processing or access, in view of the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the natural physical environment, in accordance with currently applicable regulations on security measures for the processing of personal data. However, users are informed that computer security measures are not impregnable and are not safe from possible illegal, undue attacks, for which EKSA would not be responsible.
5. Traffic Data
In order to offer a better service through this website, the IP address of the user's device may be recorded, so allowing subsequent processing of the data for the purpose of analysing, among other things, the number of pages visited, the number of visits, as well as visitors/users' activity on the website and how often they use it.
The user gives their prior, informed consent to the IP of their device being recorded while connected and browsing the website, and this need not be requested every time they access the site.
For the above-mentioned purpose, this site may be measured and analysed with Google Analytics and/or similar tools, which might use marks on the pages and cookies to analyse what happens on the different pages of the EKSA website.
EKSA reserves the right to change its privacy policy as it sees fit and in accordance with legislative or jurisprudential changes. In the event that the Data Controller makes any changes, the new text will be published on this same website, where the user can find out about it. In any case, relations with users will be governed by the rules in force at the particular time when the website is accessed. The Data Controller therefore recommends visiting this privacy policy every time you connect to the website.
EKSA will prosecute any infringement of this privacy policy, as well as any improper use of the functions and content presented on this website, by bringing all the civil and criminal actions that might be open to it by law.
7. Jurisdiction
Relations between EKSA and the user will be governed by the stipulations of current regulations in terms of applicable legislation and competent jurisdiction. However, in cases where regulations provide for the possibility of users submitting to a forum, EKSA and the user explicitly waive any other jurisdiction that might pertain to them for whatever reason and submit to the Courts and Tribunals of the city of Donostia-San Sebastián (Gipuzkoa).
EKSA will prosecute any infringement of this privacy policy, as well as any improper use of the content presented on this website, by bringing all the civil and criminal actions that might be open to it by law.