1. USER INFORMATION
Who is responsible for the processing of your personal data?
CORESURFING S.L. is the CONTROLLER of the USER's personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and Organic Law 3/2018 of 5 December (LOPDGDD).
Why do we process your personal data and why do we do it?
Depending on the form where we have obtained your personal data, we will process them confidentially to achieve the following purposes:
In the Contact form
- To respond to inquiries or any type of request made by the user through any of the contact forms made available on the controller's website.
(for the legitimate interest of the controller, art. 6.1.f GDPR) - To send commercial advertising communications by e-mail, fax, SMS, MMS, social networks, or any other electronic or physical means, present or future, that allows commercial communications. These communications will be made by the controller and will be related to their products and services, or those of their partners or providers with whom they have reached a promotional agreement. In this case, the third parties will never have access to the personal data.
(by the consent of the interested party, 6.1.a GDPR) - To perform statistical analysis and market studies.
(for the legitimate interest of the controller, art. 6.1.f GDPR)
In the Newsletter form
- To send newsletters, news, offers, and online promotions.
(by the consent of the interested party, 6.1.a GDPR)
In the User registration form
- To manage the user account to provide personalized access to the website and the interactive services offered.
(by the consent of the interested party, 6.1.a GDPR)
In the E-commerce form
- To manage your online purchase or order, process the payment, and proceed with shipping, based on the general terms and conditions of contract.
(for the performance of a contract or pre-contract, 6.1.b GDPR) - To manage, maintain, improve, or develop the services provided.
(for the performance of a contract or pre-contract, 6.1.b GDPR) - To carry out satisfaction and quality surveys.
(for the legitimate interest of the controller, art. 6.1.f GDPR)
How long will we keep your personal data?
Data will be kept for no longer than is necessary to maintain the purpose of processing or as long as there are legal requirements that dictate their custody, and when they are no longer necessary for this, they will be deleted with adequate security measures to ensure the anonymization of the data or their total destruction.
Who do we provide your personal data to?
No transfer of personal data to third parties is planned, except if necessary for the development and execution of the purposes of processing, to our service providers related to communications, with whom the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.
In the case of payment for an order using the APLÁZAME payment method: The user accepts that all their personal data be entirely transferred to Aplazame from the moment the user has initiated the contracting of the deferred payment service offered by the latter when choosing the payment method. This acceptance extends to third-party entities that may need to access the files for the proper performance of the contract.
What are your rights?
The rights belonging to the USER are:
- Right to withdraw consent at any time.
- Right of access, rectification, portability, and erasure of your data, and of restriction or opposition to their processing.
- Right to file a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.
Contact details for exercising your rights:
CORESURFING S.L.. Calle Santo Domingo de la Calzada, 6 - 15701 Santiago de Compostela (A Coruña). E-mail: legal@coresurfingshop.com
2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
USERS, by marking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary for the provider to meet their request, with the inclusion of data in the remaining fields being voluntary. The USER guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for communicating any modification thereof.
The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary for the provision of optimal service to the USER. In the event that not all data is provided, it is not guaranteed that the information and services provided will be completely adjusted to their needs.
3. SECURITY MEASURES
In accordance with the provisions of current regulations on personal data protection, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data for which they are responsible, and manifestly with the principles described in Article 5 of the GDPR, by which they are processed lawfully, fairly, and transparently in relation to the interested party and are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
The CONTROLLER guarantees that they have implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of the USERS and has communicated the appropriate information to them so that they can exercise them.
For more information about privacy guarantees, you can contact the CONTROLLER via CORESURFING S.L.. Calle Santo Domingo de la Calzada, 6 - 15701 Santiago de Compostela (A Coruña). E-mail: legal@coresurfingshop.com
