Privacy Policy

2.- RECIPIENTS OF PERSONAL DATA.

• The personal data provided will not be subject to any transfer unless this is provided for in the specific processing.
• Optionally, for the contracting of cloud computing services and/or services for sending e-mails, communication, as well as other related computer services, personal data may be:
• o Transferred to computer service companies located within the European Economic Area (EEA), or
• o Transferred to computer service companies located outside the EEA that are covered by the Privacy Shield so that they have adequate protection measures to ensure the security of personal data. You can get more information by visiting this link: https://www.privacyshield.gov/welcome
• Optionally, to administrations and other bodies when required in compliance with legal obligations.

3.- LEGAL BASIS THAT LEGITIMIZES THE PROCESSING OF PERSONAL DATA.

In each specific instance of processing personal data, we will inform you of the legal basis that legitimizes it.

4.- RIGHTS.

Right of Access

This is the right to obtain confirmation from the controller responsible for processing as to whether or not they're processing personal data concerning the data subject and, in that event, the right of access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients that were or will be sent the personal data; the storage time or the criteria used to determine this period; the existence of the right to request from the responsible party the rectification or erasure of personal data or the restriction of processing of personal data concerning the data subject or to object to such processing; the right to file a claim with the Spanish Agency for Data Protection (AEPD); the existence, where applicable, of automated decisions, including profiling; when data may be transferred to third-party countries the right to be informed of the appropriate safeguards applied.

Right of Rectification

This is the right to request the rectification of your personal data if it is inaccurate, including the right to complete incomplete data. It should be kept in mind that, by providing us with personal data by any means, you ensure that it is true and accurate and that you will undertake to notify us of any changes or modifications thereof. Therefore, any damage caused by reason of erroneous, inaccurate, or incomplete information communication in the web forms will be the exclusive responsibility of the interested party.

Right to Erasure

This is the right to request the deletion of your personal data when, among other reasons, it is no longer necessary for the purpose for which it was collected, or it is being processed in another way or consent is withdrawn. It should be kept in mind that deletion will not proceed when the processing of personal data is necessary for compliance with legal obligations or for the formulation, exercise, or defense of claims, among other reasons.

Right to Limitation

This is the right to request the limitation of the processing of your personal data, which means that in certain cases, you can ask us to temporarily suspend the processing of your personal data or to keep it beyond the necessary time when you may need it.

Right to Withdraw Consent

This is the right to withdraw the consent you have provided by clicking, "I have read and accept the privacy policy," at any time and as specified in the corresponding section "Exercise of rights" or in the specific processing of commercial communications or the Newsletter. Keep in mind that this right shall not apply if, among other situations, the processing of personal data is necessary for compliance with a legal obligation, the implementation and maintenance of a contractual relationship, or for the formulation, exercise, or defense of claims. Likewise, the withdrawal of consent will not have retroactive effects; this means that it will not affect the legality of the processing based on the consent prior to its withdrawal.

Right to Portability

This is the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller, provided that: the processing is based on your consent and is carried out by automated or computerized means.

Right of Opposition

This is the right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

The Right to Lodge a Complaint with a Supervisory Authority

If you believe that we have processed your personal data in an improper way, you can contact us, or you also have the right to file a claim with the Spanish Data Protection Agency (AEPD):
https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

Exercise of Rights

You can exercise the rights that you possess by writing a letter to the postal address provided above or by e-mail at info@ale-hop.net. In either case, please attach a copy of your TIN / Alien ID / Passport or similar document.

5.- PROCESSING OF PERSONAL DATA.

Generic Provisions

The personal data requested in each of the specific instances of processing are adequate, relevant, and limited to what is necessary regarding the purposes for which they are processed; therefore, the principle of data minimization is complied with.

The personal data requested in each of the specific instances of processing are strictly necessary; refusal to provide them would imply not being able to provide the requested service.

The communications of personal data provided for in each of the specific instances of processing are in some cases necessary for the execution and maintenance of a contract and in other cases for the fulfillment of a legal obligation of the data controller.

Digital Assistant - "Chatbot" or "Online Chat."

In the event that this website uses online chat software, provided as a self-service option to provide users with quick, adequate responses to common questions and to improve consumer services for the benefit of users visiting the website, the following data will be processed during the conversation with the "chatbot:" the IP address and other personal data entered in the conversation function of the "chatbot."

The data collected will not be used to identify the website visitor personally, and it will not be merged with personal data about the bearer of the pseudonym unless the personal data is voluntarily provided when using the online chat.

The legal basis for this processing is laid down in Art. 6 sec. 1 letter f) of the GDPR.

Contact Form

Personal data will be processed to channel requests for information, suggestions, and complaints from users or customers.

The legal basis that legitimizes the processing of personal data is the express consent given by checking, "I have read and accept the privacy policy."

The personal data will be kept for a period of two years from the moment they stop being processed, notwithstanding the exercise of the rights that belong to you as an interested party.

Electronic Commerce (e-Commerce) Form

Personal data shall be processed in order to manage your purchases online by processing your orders and returns via our online services, to send you notifications about the delivery status or in the event of any problems with shipping the items, to manage your payments, to address any complaint or questions about the warranty of the products or services, to identify you and to validate your legal age to provide legal consent, and, as necessary, for the formulation, exercise, or defense of claims. The legal basis that legitimizes the processing of personal data is the express consent given by checking, "I have read and accept the privacy policy."

The personal data will be transferred to the transport company to be able to deliver the order to your home as well as to payment service providers

Personal data will be kept as long as you do not withdraw consent unless it must be kept for the maintenance of the relationship between the parties or for the number of years necessary for compliance with legal obligations.

CV Form

The personal data will be processed to manage the hiring process at the company.

The legal basis that legitimizes the processing of personal data is the express consent given by checking, "I have read and accept the privacy policy."

The personal data will be kept for a period of two years from the moment they stop being processed, notwithstanding the exercise of the rights that belong to you as an interested party.

Commercial Communications Form or Newsletter

The personal data will be processed to manage the subscription to our Newsletter, including the sending of personalized or non-personalized information about our products or services through various means such as telephone, e-mail, text, applications for mobile devices, and by any analogous procedure. It should be kept in mind that this type of data processing may involve the analysis of your user profile to determine what your preferences are and thus be able to send you information more relevant to your interests.

You can request cancellation of this type of treatment, depending on the means used, as follows:

• E-mail: Through the link to this effect that you will find in each electronic communication or through an analogous procedure specified in the commercial communication.
• WhatsApp (other apps): By requesting to unsubscribe.
• Text message: By requesting to unsubscribe from the subscription.

The legal basis that legitimizes the processing of personal data is the express consent given by checking, "I have read and accept the privacy policy" on the website, on a physical document, or by e-mail, as the case may be

It should be kept in mind that if the means used is WhatsApp, the personal data will be transferred to WhatsApp Ireland Limited, which is located within the EEA.

The personal data will be kept as long as you do not withdraw consent in accordance with the manner indicated in this section.