Privacy policy

Natàlia Ferré Mateu, the Holder, informs about its Privacy Policy regarding the processing and protection of personal data that may be collected while browsing, when shopping at the Online Store, when registering for a course or when hiring a service on the nataliaferre.com website.

In this regard, the Holder guarantees compliance with current regulations on the protection of personal data, reflected in the Organic Law 3/2018 of December 5, 2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

The use of website implies acceptance of this Privacy Policy as well as the conditions included in the Legal notice.

Identity of the responsible

• Responsable: Natàlia Ferré Mateu
• Tax ID: 39694602Y
• Address: Carrer Major 77, 43400 Montblanc, Tarragona, Spain
• Email: galeria@nataliaferre.com
• Phone number: (+34) 678 611 170
• Website: nataliaferre.com

Principles applied in data processing

In the processing of your personal data, the Holder will apply the following principles that comply with the requirements of the new European Data Protection Regulation (GDPR):

• Principle of lawfulness, fairness and transparency: the Holder will always require consent for the processing of personal data which may be for one or more specific purposes about which the Holder will inform the User beforehand with absolute transparency.
• Principle of data minimization: The Holder will request only the data strictly necessary for the purpose or purposes for which it is requested.
• Principle of limitation of the retention period: The Holder shall keep the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Data Controller will inform the User of the corresponding retention period according to the purpose. In the case of subscriptions, the Data Controller will periodically review the lists and delete those records inactive for a considerable time.
• Principle of integrity and confidentiality: The personal data collected will be treated in such a way that their security, confidentiality and integrity is guaranteed. The Holder takes the necessary precautions to prevent unauthorized access or misuse of the data of its users by third parties.

Obtaining personal data

To browse the Web site is not necessary to provide any personal data.

The cases in which you do provide your personal data are the following:

• When purchasing a product or contracting a service.
• When signing up for a subscription form or a newsletter that the Owner manages with MailChimp.

Rights

The Holder informs you that about your personal data you have the right to:

• Request access to the stored data.
• Request rectification or deletion.
• Request the limitation of its processing.
• Oppose the processing.

You may not exercise the right to data portability.

The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly to the Data Controller, which means that any customer, subscriber or collaborator who has provided their data at any time, can contact the Data Controller and request information about the data it has stored and how it was obtained, request the rectification of the same, oppose the treatment, limit its use or request the cancellation of such data in the files of the Data Controller.

To exercise your rights you have to send your request together with a photocopy of your National Identity Card or equivalent to the following email address: galeria@nataliaferre.com

The exercise of these rights does not include any data that the Data Controller is obliged to keep for administrative, legal or security purposes.

You have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data concerning you is in breach of the Regulation.

Purpose of the processing of personal data

When you connect to the Website to send an email to the Owner, subscribe to its newsletter or purchase a product or service, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, telephone number, and other information. By providing this information, you consent to your information being collected, used, managed and stored by 1&1 IONOS España SLU only as described on the pages:

• Legal notice
• Privacy policy

The personal data and the purpose of processing by the Holder is different depending on the information capture system:

• Product or service contracting forms: The Holder requests personal data among which may be: name and surname, identity document (tax identification number, foreigner identification number, passport or residence permit), email address, postal address, telephone number and payment data (payment methods or bank details) in order to maintain a business relationship with the User, to carry out the shipment of orders, to provide the contracted services and to carry out the billing and collection of the contracted products or services.
• Content subscription forms: The Owner requests the following personal data: name and surname, email address, telephone number and website address to manage the subscription list, send newsletters, promotions and special offers. The personal data provided to the Holder will be located on the servers of The Rocket Science Group LLC d/b/a, domiciled in the USA. (Mailchimp).

There are other purposes for which the Registrant processes personal data:

• To ensure compliance with the conditions set out in the Legal Notice page and applicable law. This may include the development of tools and algorithms to help the Website ensure the confidentiality of the personal data it collects.
• To support and improve the services offered by this Website.
• To analyze user navigation. The Owner collects other non-identifying data obtained through the use of cookies that are downloaded to the User’s computer when browsing the Website whose characteristics and purpose are detailed in the Cookies policy page.
• To manage social networks. The Owner has a presence on social networks.
• If you become a follower on the social networks of the Holder the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and that you have previously accepted. You can consult the privacy policies of Instagram and Facebook. The Holder will process your personal data in order to properly manage its presence in the social network, inform you of its activities, products or services, as well as for any other purpose that the regulations of the social networks allow. In no case will the Holder use the profiles of followers in social networks to send advertising individually.

Security of personal data

To protect your personal data, the Holder takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, improper access, disclosure, alteration or destruction.

The Website is hosted by: 1&1 IONOS España SLU. The security of the data is guaranteed, as they take all the necessary security measures to do so. You can consult their privacy policy for more information.

The Owner informs the User that their personal data will not be transferred to third party organizations, except that such transfer of data is covered by a legal obligation or when the provision of a service implies the need for a contractual relationship with a processor. In the latter case, the transfer of data to the third party will only be carried out when the Owner has the express consent of the User.

However, in some cases, collaborations with other professionals may be carried out, in such cases, the consent of the User will be required, informing about the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest security standards.

Content from other websites

Pages on this website may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.

Cookie Policy

In order for this website to function properly it needs to use cookies, which is information that is stored in your web browser.

You can consult all the information regarding the policy of collection and treatment of cookies on the Cookie policy page.

Legitimation for data processing

The legal basis for the processing of your data is:

• The consent of the data subject.
• Execution of the contract or the implementation of pre-contractual measures with the data subject, in order to provide him/her with a product or service purchased from the Holder.
• To comply with legal obligations.

Categories of personal data

The categories of personal data processed by the Data Controller are:

• Identifying data.
• No categories of specially protected data are processed.

Retention of personal data

Personal data provided to the Data Controller will be kept until you request its deletion.

You can see how Google handles privacy regarding the use of cookies and other information on Google’s Privacy Policy page: policies.google.com/privacy.

You can also see a list of the types of cookies used by Google and its partners and all information regarding their use of advertising cookies at:

• Types of cookies used by Google.
• How Google uses advertising cookies.

Web browsing

When browsing the Website non-identifying data may be collected, which may include, IP address, geolocation, a record of how services and sites are used, browsing habits and other data that cannot be used to identify you.

The Website uses the following third-party analytics services:

• Google Analytics.

The Holder uses the information obtained to obtain statistical data, analyze trends, administer the site, study browsing patterns and to gather demographic information.

The Proprietor is not responsible for the processing of personal data by websites that may be accessed through the various links contained in the Website.

Accuracy and truthfulness of personal data

You undertake to ensure that the data provided to the Owner are correct, complete, accurate and current, as well as to keep them duly updated.

As User of the Website is solely responsible for the accuracy and correctness of the data submitted to the Website exonerating the Holder from any liability in this regard.

Acceptance and consent

As User of the Website declares to have been informed of the conditions on the protection of personal data, accepts and consents to the processing of such data by the Holder in the manner and for the purposes stated in this Privacy Policy.

To contact the Owner, subscribe to a newsletter or make comments on this Web site you must accept this Privacy Policy.

Changes to the Privacy Policy

The Holder reserves the right to modify this Privacy Policy to adapt it to new legislation or jurisprudence, as well as industry practices.

These policies will remain in force until they are modified by other duly published policies.