Through this privacy policy JAMES & RITA, S.L. wishes to inform all persons who browse and access the website www.jamesandrita.com about the processing of personal data.
Access to the website does not require prior registration. Before sending any request for information through the contact form on this website, the user must accept the privacy policy, in order to provide express and informed consent for the processing of data for the purposes indicated.
JAMES & RITA, S.L. in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as with Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, in its capacity as Data Controller of the personal data provided, provides you with the following information:
Controller: JAMES & RITA, S.L.
TAX ID: B02828614
Registered office: Avda. Diagonal, 605, 08028 Barcelona
E-mail address: info@jamesandrita.com
A contact form is available on our website that can be used to contact us electronically. If a user uses this option, we will receive and store the data entered in the data entry screen:
• First name
• Last name
• E-mail address
Purpose of processing:
• Manage the use of the functionalities made available through the Website, including responding to requests and/or queries made.
Legitimation
• The basis that legitimizes the processing of personal data is the consent given by the person concerned through the acceptance box provided for this purpose, under Article 6.1.a) of the GDPR.
Retention period
The data will not be kept longer than necessary for the purpose for which they have been collected, unless there is a legal obligation.
Addressees
They will not be communicated to other third parties, except under legal obligation or with the express consent of the data subject.
International data transfers
No International Data Transfers are made to third countries outside the European Union.
A contact form is available on our website for those entities wishing to book a Demo of the software offered by JAMES & RITA, S.L. If a user uses this option, we will receive and store the data entered in the data entry screen:
• First name
• Last name
• E-mail address
• Phone number
• Language
Purpose of processing
To manage the booking of the demo.
Legitimation
The basis that legitimizes the processing of personal data is the consent given by the person concerned through the acceptance box provided for this purpose, under Article 6.1.a) of the GDPR.
Retention period
The data will not be kept longer than necessary for the purpose for which they have been collected, unless there is a legal obligation.
Addressees
They will not be communicated to other third parties, except under legal obligation or with the express consent of the data subject.
International data transfers
No International Data Transfers are made to third countries outside the European Union.
When your personal data is processed, the User shall be considered a data subject within the meaning of the GDPR and, as such, shall have the following rights against the data controller:
Right of access
You may ask the controller to confirm whether your personal data is being processed by the controller.
If your data is being processed, you may request from the controller information on:
1. the purpose of the processing of the personal data.
2. the categories of personal data that will be processed.
3. the recipients or categories of recipients to whom your personal data has been or will be disclosed.
4. the period for which the personal data will be kept or, where this is not possible, the criteria used to determine this period.
5. the existence of the right of rectification or erasure of personal data concerning him/her, of the right of limitation of the processing by the controller or of the right to object to such processing.
6. the existence of the right to lodge a complaint with a supervisory authority.
7. any available information on the origin of the data where the personal data have not been obtained from the data subject.
8. the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) of the GDPR and, at least in such cases, meaningful information on the logic applied, as well as the significance and expected effects of such processing on the data subject.
You have the right to request information on whether your personal data has been transferred to a third country or to an international organization. In this context, you can request to be informed under Article 46 of the GDPR concerning the transfer of data.
Right of rectification
If the personal data concerning you is inaccurate or incomplete, you have the right to rectify or complete it with the data controller. The controller will rectify the data without delay.
Right to limit the processing
The User may request the limitation of the processing of his personal data when one of the following conditions is met:
• If he contests the accuracy of his personal data within a period of time that allows the controller to verify the accuracy of the personal data.
• That the processing is unlawful and the User objects to the deletion of the personal data and requests instead the limitation of its use.
• That the controller no longer needs the personal data for the purposes of the processing, but the User needs them to formulate, exercise or defend claims.
• If the User has objected to the processing pursuant to art. 21, para. 1 of the GDPR, while it is being verified whether the legitimate reasons of the controller prevail over his own.
Where the processing of personal data has been restricted, with the exception of their retention, such data may only be processed with your consent or for the purpose of making, exercising or defending claims or protecting the rights of another natural or legal person or for reasons of substantial public interest of the European Union or a Member State.
If the processing has been restricted in accordance with the above conditions, you will be informed by the controller before such restriction is terminated.
Right to suppression
You may request the controller to immediately delete your personal data and the controller is obliged to delete this data without delay in any of the following circumstances:
• That the personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• If the User revokes his or her consent, on which the data processing was based pursuant to Art. 6 para. 1 sentence 1 letter a) or Art. 9 para. 2 letter a) GDPR, and there is no other legal basis for the processing.
• If the User objects pursuant to Art. 21 para. 1 GDPR to the processing and there are no compelling legitimate grounds for the processing or objects to the processing pursuant to Art. 21 para. 2 GDPR.
• That your personal data has been unlawfully processed.
• Personal data must be deleted in order to comply with a legal obligation under European Union law or the law of the Member States to which the controller is subject.
• That your personal data has been obtained in connection with the provision of information society services offered in accordance with Art. 8, para. 1 of the GDPR.
If the Data Controller has made its personal data public and is obliged to delete it under Art. 17, para. 1 GDPR, it shall take appropriate measures, including technical measures, taking into account available technology and implementation costs to inform the data controllers of the personal data that the User, as a data subject, has requested the deletion of all links to this personal data or copies or replicas of this personal data.
The right of suppression does not exist to the extent that the processing is necessary:
• to exercise freedom of expression and information.
• o comply with a legal obligation requiring the processing of data required by the legislation of the European Union or of the Member States to which the controller is subject or to carry out a task carried out in the public interest or to exercise the public authority vested in the controller.
• for reasons of public interest in the field of public health, pursuant to Art. 9(2)(h) and (i) and Art. 9(3) of the GDPR.
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89, para. 1 of the GDPR, insofar as the law referred to in section a) above may make it impossible or seriously undermine the achievement of the purposes of this processing.
• to formulate, exercise or defend claims.
Right to information
If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom your personal data have been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.
The User has the right to be informed by the data controller of the recipients.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without being prevented from doing so by the controller to whom you have provided it, when
1. the processing is based on consent in accordance with § 6 Paragraph 1 Sentence 1 (a) GDPR or § 9 Paragraph 2 (a) GDPR or on a contract in accordance with § 6 Paragraph 1 Sentence 1 (b) GDPR.
2. the processing is carried out by automated means.
When exercising this right, the User shall also have the right to have personal data transmitted directly from one data controller to another insofar as technically feasible. The freedoms and rights of other persons may not be adversely affected by this.
This right to data portability shall not apply to any processing of personal data that is necessary to fulfill a task in the public interest or to exercise the public power vested in the controller.
Right to object
The User has the right to object at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her in accordance with Art. 6 para. 1 sentence 1 letter e) or f) GDPR; this shall also apply to profiling based on these provisions.
The controller shall no longer process your personal data unless it can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms or the processing is intended for the purpose of asserting, exercising or defending claims.
If the processing of your personal data takes place in order to carry out direct marketing actions, The User shall have the right to object at any time to the processing of the data for the purpose of such advertising; this shall also apply to profiling insofar as it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
The User has the option of exercising his or her right to object by means of automated procedures using technical specifications in connection with the use of information society services, regardless of the provisions of Directive 2002/58/EC.
Right to revoke the data protection declaration of consent
The User has the right to revoke his or her declaration of consent to data protection at any time. The revocation of consent shall not affect the lawfulness of the processing that took place on the basis of the consent given prior to its revocation.
Automated individual decisions, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on the User or similarly significantly affects him or her. This does not apply if the decision
1. is necessary for the conclusion or performance of a contract between the User and the data controller.
2. is authorized by European Union or Member State law to which the controller is subject and where such law contains reasonable measures to safeguard your rights and freedoms and legitimate interests.
3. if it is based on your explicit consent.
However, such decisions shall not be based on the special categories of personal data specified in Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (b) of the GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms as well as your legitimate interests.
With respect to the cases referred to in points 1 and 3, the data controller shall take appropriate measures to safeguard their rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express their point of view and to challenge the decision.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, the User shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his residence, place of work or place of alleged infringement, if he considers that the processing of personal data concerning him is in breach of the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of lodging a judicial remedy in accordance with Art. 78 of the GDPR.
The User may exercise his/her rights by sending a letter to Avda. Diagonal, 605 - 08028 Barcelona, or by e-mail to info@jamesandrita.com.
Regarding the forms on the Website, the User has to fill in those marked as "required". Failure to complete the required personal data or doing so partially may mean that JAMES & RITA, S.L will not be able to attend your requests and, consequently, JAMES & RITA, S.L will be exonerated from any responsibility for the non-provision or incomplete provision of the requested services.
The personal data that the User provides to JAMES & RITA, S.L. must be current so that the information in the records is updated and error free. The user is responsible for the accuracy of the data provided.
JAMES & RITA, S.L. informs that the processing of personal data is carried out at all times in accordance with the applicable regulations on data protection and information society services.
JAMES & RITA, S.L. has implemented the necessary technical and organizational security measures to ensure the security of the User's personal data and avoid its alteration, loss, treatment and/or unauthorized access in accordance with the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment, in accordance with the provisions of current legislation.
