1. General Information
At LEYSICA, S.L. we are committed to the responsible processing of your data in compliance with EU Regulation 2016/679 of the European Parliament and of the Council of 27 April (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Spanish Organic Law 3/2018 of 5 December (LOPDGDD) on the protection of personal data and the guarantee of digital rights. We provide the following information:
• Through our Privacy Policy we inform you about how your personal data will be processed on our website.
• In accordance with data protection regulations and the principle of transparency, we aim to ensure that all information and communications relating to the processing of your personal data are clear and easily accessible.
• This website respects and protects users' personal data. As a user, you should know that your rights are guaranteed.
• Your privacy is important to us. This website is a safe and trustworthy space. To that end:
• We never request personal information unless it is genuinely necessary to provide the services you require.
• We never share users' personal information with anyone, except to comply with our legal obligations or with your express authorisation.
• We never use your personal data for any purpose other than that stated in this Privacy Policy.
• We remind you that, as a user of this website, you are responsible for the accuracy of the data you provide and must notify us of any changes.
2. Minors
This website is not intended for persons under the age of 14. We do not intentionally collect personal information from minors. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at the address below to request its deletion.
3. Data Controller
LEYSICA, S.L. is the data controller for the personal data of website users, with registered address at Calle la Esperanza, 3, 24008 León, Spain. General contact email: [email protected]
4. Purpose of Data Processing
• When you access our website, we inform you that we will process your browsing data for analytical and statistical purposes, i.e. to understand how users interact with our platform and to introduce improvements accordingly.
• We also occasionally carry out quality surveys aimed at measuring customer and user satisfaction and identifying areas for improvement.
• No automated decisions will be made based on the data provided.
5. Legal Basis for Processing
The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data (GDPR Art. 6.1.f).
6. Data Retention Period
• We will process your data on an occasional basis for the duration of a specific quality action or survey, or until your browsing data is anonymised.
• Regarding browsing data, the retention period is set out in our Cookie Policy.
7. Recipients of Your Data
• Personal data subject to processing will not be disclosed to third parties, except where there is an applicable legal obligation.
• The personal data processed by LEYSICA, S.L. originates from: the data subject themselves when browsing our website.
8. Processing of Personal Data Derived from Enquiries and Other Requests
• The processing of your personal data will be aimed at managing the contact or enquiry you have submitted, in order to maintain a commercial relationship through the website's contact channels.
• No automated decisions will be made based on the data provided.
9. Legal Basis for Processing Enquiries and Requests
• The legal basis for processing your personal data is the consent you provide when submitting the contact form or enquiry (GDPR Art. 6.1.a).
• Providing your data is voluntary; however, if you do not do so, we will be unable to process your request or respond to your enquiry. Therefore, providing your personal data is a necessary requirement for us to attend to requests submitted through these channels.
• You may withdraw your consent at any time by sending a notification to [email protected], although this will not affect the lawfulness of any processing carried out prior to withdrawal.
• Where your enquiry relates to the exercise of the rights described below, the legal basis for processing your personal data is compliance with our legal obligations.
10. Data Retention Period for Enquiries and Requests
For the management of enquiries, requests and contacts made through the website's contact channels, we will process your data for as long as is necessary to address the request, enquiry or submission.
11. Recipients of Your Data (Enquiries and Requests)
Your data will not be disclosed to any third party, except where required by law. However, please be aware that third-party service providers may have access to your personal data in their capacity as data processors, within the framework of services provided to the Data Controller. In addition, the data controller may transfer or communicate personal data to Public Authorities where required by applicable legislation.
12. Origin of Data
The personal data processed by LEYSICA, S.L. originates from: the data subject themselves when browsing our website and completing the contact form or submitting an enquiry or request through any of the website's contact channels.
Other purposes for which we process your personal data:
• To ensure compliance with the terms of use and applicable law. This may include the development of tools and algorithms that help this website to safeguard the confidentiality of the personal data it collects.
• Other non-identifying data is also collected through certain cookies downloaded to your device when you browse this website, as detailed in our Cookie Policy. We use Google Analytics to help us understand how our customers use the site. You can find out more about how Google uses your personal information at: https://policies.google.com/privacy
• To manage social media (social networks). The processing of data belonging to persons who become followers of the organisation on the social media channels associated with this website will be governed by the terms of use, privacy policies and access regulations of the relevant social network, as accepted by the user.
• We will not under any circumstances use followers' social media profiles to send individual advertising. No automated individual decisions as referred to in Article 22 of the GDPR will be made.
13. User Rights
Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data and obtain a copy of the personal data being processed (Right of access), to update it, and to request the rectification of inaccurate data (Right of rectification), or where applicable, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected (Right to erasure).
Data subjects may request the restriction of the processing of their data; in such cases, we will only retain it for the establishment, exercise or defence of legal claims (Right to restriction of processing). As a result of applying the right to erasure or the right to object to the processing of personal data in the online environment, data subjects have the Right to be forgotten, in accordance with the case law of the Court of Justice of the EU.
Furthermore, where the processing of data is based on our legitimate interests, data subjects also have the right to object to the processing of their data. Likewise, data subjects have the right to object to the processing of their data for direct marketing purposes, including profiling. If you have provided your consent for the processing of your data for any purpose, you also have the right to withdraw it at any time by sending a notification to [email protected]. This will not affect the lawfulness of any processing carried out prior to withdrawal.
How to exercise your rights?
To facilitate the exercise of your rights, you may send an email to [email protected] and we will respond to your request or query.
How to lodge a complaint?
If you believe that your rights have not been properly addressed, you have the right to lodge a complaint with the competent authority: the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es