Broquetas S.L – hereinafter referred to as BQ – is the operator of the website www.broquetas.com and responsible for the personal data of users – hereinafter referred to as – the website in the sense of the General Data Protection Regulation (“GDPR”).
Collection of Personal Data
1.1 Personal data in the sense of this data protection regulation are all information referring to an identified or identifiable natural person – referred to below as the person concerned. This includes in particular your name, your e-mail address and, if applicable, your address and telephone number.
1.2 Personal information also includes information about your use of our website. In this context, we collect personal information from you as follows: information about your visits to our website, such as the extent of the data transfer, the location from which you retrieve data from our website, and other connection information and sources that you access. This usually happens through the use of logfiles and cookies. Further information on logfiles and cookies can be found below.
1.3 Basically, your personal data is stored for a period of 10 years. If we collect your IP address, it will only be stored for the time of your use of the website and then immediately deleted or anonymized by shortening. The remaining data is stored for a limited period of time. We delete data generated in this regard after it is no longer required or limit its processing.
Purpose and Legal Basis
2.1 Purpose of use
We use your personal information for the following purposes:
to respond to your request;
to ensure that our website is presented to you in the most effective and interesting way possible;
to comply with our obligations under any contracts between you and us;
to allow you to participate in interactive offerings, if you so desire;
to inform you about changes in our services.
2.2 Legal Basis
The processing of your personal data takes place exclusively on the basis of your consent. You can revoke these at any time. The lawfulness of the processing, which took place until the revocation on the basis of the consent, remains unaffected.
Information about your computer, cookies and targeting
3.1 Each time you access our site, we collect the following information about your computer: Cookies, IP address, User ID, Custom Dimensions, Custom Variables, Order ID, Location of the user, Date and time, Title of the page being viewed, URL of the page being viewed, URL of the page that was viewed prior to the current page, Screen resolution, Time in local time zone, Files that were clicked and downloaded, Link clicks to an outside domain, Pages generation time, Country, region, city, Main Language of the browser, User Agent of the browser. We use this data for the operation of our website, in particular to detect and eliminate website errors, to determine the utilization of the website and to make adjustments or improvements.
3.2 We may also collect information about your use of our website through the use of so-called browser cookies. These are small text files that are stored on your disk and that store certain settings and data for sharing with our system through your browser. A cookie usually contains the name of the domain from which the cookie data was sent, as well as information about the age of the cookie and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and to make any presettings immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard disk of the user’s computer. Cookies help us to improve our website and offer you a better service tailored to your needs. They allow us to recognize your computer when you return to our website and thereby:
Save information about your favorite activities on the site, and thus tailor our site to your individual interests. This includes, for example, advertising that corresponds to your personal interests.
speed up the processing of your requests.
3.3 The cookies we use will only store the information about your use of the website as explained above. This is not done by an assignment to you personally, but by assigning an identification number to the cookie (“Cookie ID”). A combination of the cookie ID with your name, your IP address or similar data that would allow a mapping of the cookie to you does not occur. For information on how to prevent the use of browser cookies, please refer to section 3.6.
3.4 Our website uses so-called tracking technologies. We use these technologies to make your website more interesting. This technique allows advertisers to use our advertisers’ websites for Internet users who are already interested in our website. The insertion of this advertising material on the pages of our partners is based on a cookie technology and an analysis of the previous usage behavior. We only use this technology if you have consented to it, if it is necessary to use it for the purpose of concluding or fulfilling a contract with you or if other legal provisions permit this.
3.5 We work with business partners who help us to make the website more interesting to you. Therefore, when you visit the website, cookies from these affiliates will also be stored on your hard drive. These are cookies that automatically delete after the specified time. The cookies of our partner companies are also only collected using a cookie ID, which allows our advertising partners to address you with advertisements that might actually interest you. For information on how to stop the use of such cookies, please refer to section 3.6.
3.6 If you do not wish to use browser cookies, you can set your browser so that the storage of cookies is not accepted. Please note that in this case you may be able to use our website only partially or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can choose the setting in your browser to block cookies from third-party providers.
Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of the data transmitted to our website via the Internet. However, we secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. In particular, your personal data is encrypted with us. We use the coding system SSL (Secure Sockets Layer) or TLS (Transport Layer Security).
No Transfer of Your Personal Data
We will not disclose your personal information to third parties unless you have consented to the disclosure of the data or we are entitled or obliged to share data due to legal regulations and / or official or court orders. This may, in particular, be the provision of information for the purpose of law enforcement, security or the enforcement of intellectual property rights.
Privacy and Third Party Websites
Your Rights and Contact
According to the EU General Data Protection Regulation, as an affected party you have the following rights:
8.1 Right to information
You have the right to receive information from us as the person responsible for the processing of personal data concerning you.
In addition, you may request information about the following concerns:
purpose of data processing;
the categories of personal data processed;
recipients or the categories to whom the personal data relating to you have been disclosed or are still being disclosed;
the planned duration of storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
all available information on the source of the data if the personal data are not collected from the data subject;
the existence of automated decision-making including pro-filing pursuant to Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the person concerned.
Finally, you also have the right to request information about whether your personal information is being transferred to a third country or to an international organization. In this case, you can obtain information about the appropriate guarantees in accordance with. Art. 46 DSGVO in connection with the transmission.
Here you can claim your right to information: firstname.lastname@example.org
8.2 Right to Rectification
If the personal data that we process and you are incorrect or incomplete, you have a right to rectification and / or completion. The correction shall be made without delay.
8.3 Right to Restriction
The right to restrict the processing of the personal data relating to you may be invoked in the following cases:
the accuracy of the personal data is contested for a period of time enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the cancellation of the personal data is refused, instead requiring the restriction of the use of personal data;
the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them to assert, exercise or defend their rights, or the person concerned filed an objection to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweighed those of the person concerned.
If the processing of personal data concerning you has been limited, such data may only be stored with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or juvenile person or Be processed for the sake of an important public interest of the Union or of a Member State.
If there is a restriction of processing according to the principles outlined, you will be informed by us before the restriction is lifted.
8.4 Right to Delete
If you have the following reasons, you can request that your personal data be deleted immediately. The responsible person is obliged to delete this data immediately. The reasons are:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- The processing is based on a consent acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO protected and you revoke the consent. Another condition is that there is no other legal basis for the processing.
- You object to the processing (Art. 21 (1) GDPR) and there are no legitimate reasons for the processing. Another possibility is that you have a contradiction to the processing acc. Art. 21 para. 2 DSGVO.
- The processing of personal data concerning you is unlawful.
- The deletion of personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data concerning you were collected in relation to the information society services offered under Article 8 (1) of the GDPR.
Have we made the personal data concerning you public and we are acc. Article 17 (1) of the GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data, taking into account available technology and implementation costs, that you, the data subject, have requested the deletion of all links to such personal data or copies or replications of such personal data.
We point out that the right to delete does not exist, as far as the processing is necessary
exercising the right to freedom of expression and information;
to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to perform a task of public interest or in the exercise of public authority delegated to the controller;
for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the attainment of the objectives of that processing, or to assert, exercise or defend legal claims.
8.5 Right to Information
If you have the right to rectify, delete or restrict the processing, we shall be obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this is the case proves to be impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.
8.6 Right to data Transferability
According to the GDPR, you also have the right to receive the personal data you provide us in a structured, standard and machine-readable format. Furthermore, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that
the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and
processing using automated procedures.
Finally, as part of the exercise of the data transferability right, you have the right to obtain that personal data relating to you be transmitted directly from one controller to another in so far as this is technically feasible and without prejudice to the freedoms and rights of others.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
8.7 Right to Revoke the Data Protection Consent Declaration
You have the right to revoke your privacy statement at any time. Please note that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
8.8 Right to Objection
Furthermore, for reasons arising from its particular situation, you have the right at any time against the processing of the personal data relating to you which, on the basis of Art. 6 para. 1 lit. e or f DSGVO takes action to file an opposition. The right of objection also applies to a profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to you are processed for the purpose of doing so, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. In the event of opposition to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
You also have the option, in the context of the use of information society services (regardless of Directive 2002/58 / EC), of exercising your right of revocation by means of automated procedures that use technical specifications.
8.9 Automated Decision on an Individual Basis Including Profiling
Under the EU General Data Protection Regulation, you remain entitled not to be subjected to a decision based solely on automated processing – including profiling – which will have legal effect or similarly affect you in a similar manner. An exception to this principle, however, is when the decision
is required for the conclusion or performance of a contract between you and the controller,
is permitted by Union or Member State legislation to which the controller is subject and where such legislation contains measures taken to safeguard your rights and freedoms and your legitimate interests, or with your express consent.
If the processing is carried out in accordance with the cases mentioned in (1) and (3), the person responsible shall take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests. This includes at least the right to obtain the intervention of a person on the part of the person responsible, heard of his own position and contestation of the decision.
The ruling under (1) to (3) may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Article 9 (2) lit. a or g and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
8.10 Right to Complain to a Supervisory Authority
Finally, if you believe that the processing of personal data concerning you is contrary to the GDPR, you will have the right to complain to a supervisor, in particular in the Member State of your residence, employment or the place of alleged infringement.
In addition, you have a right of appeal to a supervisory authority.
For Spain is:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6. 28001 – Madrid
Tel. 901 100 099 – 912 663 517
If you have any questions, comments or inquiries regarding the collection, processing and use of your personal data by us, please also contact us at the contact details provided.
As of: Nov 1, 2021