Privacy policy

COOKIES POLICY

In compliance with Law 34/2002, of 11 July on Information Society Services and E-Commerce, the User is hereby informed of the cookies in use on this website.

Among other things, cookies allow statistical information to be collected, certain technical functions to be provided, information about the browsing habits or preferences of Users or their device to be stored or retrieved, and the User may be recognised (such as their language, country, browser, etc.). If the User does not wish to enable cookies, they may configure their browser to delete them from the hard drive of their computer, disable them, or receive a warning when they are installed.

Our website uses cookies and other related technologies (for convenience, all technologies are called "cookies"). Cookies are also placed by third parties we have contracted. In the following document we inform you about the use of cookies on our website.

What are cookies, scripts or web beacons?

A cookie is a small simple file that is sent along with the pages of this website and that the user's browser stores on the hard drive of their computer or other devices (smartphone, tablet, connected TV...). Stored information may be returned to our servers or relevant third-party servers during a subsequent visit.

A script is a piece of program code that is used to make our website work properly and interactively. This code runs on our server or on the user's device.

A web beacon (or pixel tag) is a small, invisible piece of text or image on a web that is used to track traffic on a website.

Cookies

Technical or functional cookies

Some cookies ensure that certain parts of the website work properly and that user preferences continue to be remembered. By placing functional cookies, we facilitate the visit and use of our website. In this way, it is not necessary to repeatedly enter the same information when visiting our website and, for example, the items remain in the shopping cart until the user finishes the purchase. The regulations allow us to place these cookies without your consent.

Analytical cookies

We use analytical cookies to optimize the experience on our users' website. With these analytical cookies we gain knowledge of the use of our website. The user's consent is required to insert analytical cookies.

Advertising or marketing cookies

On this website we use advertising cookies, which allows us to personalize the ads for each user, and we (and third parties) obtain information about the results of the campaign. This happens based on a profile that we create with user clicks and navigation in and out of "www.maria-goya.com”. With these cookies the user, as a visitor to the website, is linked to a unique ID. The user's consent is required to insert these cookies.

Consent and cookies setting

When you visit our website for the first time, we will show you a pop-up window with an explanation about cookies ("first layer"). As soon as you click the acceptance button, you agree that we will use the categories of cookies and plugins you have selected in the pop-up window, as described in this cookie policy. You can disable the use of cookies through your browser, but please note that our website may stop working properly if you do so.

Your personal data rights

Visit our privacy policy to learn about your rights with respect to the processing of personal data, and how to exercise them.

Enabling, disabling and deleting cookies

You can use your Internet browser to delete cookies automatically or manually. You can also specify that certain cookies cannot be placed. Another option is to change the settings of your Internet browser so that you receive a message each time a cookie is placed. For more information about these options, see the instructions in the “Help" section of your browser.

Please note that our website may not function properly if all cookies are disabled. If you delete cookies from your browser, they will be placed again after your consent when you visit our website again.

PRIVACY POLICY

María Goya is fully committed to complying with Spanish and European personal data protection regulations and ensuring full compliance with the obligations set forth, as well as implementing the security measures detailed in the General Data Protection Regulation (GDPR) (EU) 2016/679, of 27th April, and Law 3/2018, of 5th December, on Data Protection and Digital Rights (LOPD and GDD, hereinafter LOPD).

 

Pursuant to these regulations, you are hereby informed that use of our website may require that certain personal data be collected through contact forms, or by sending emails, that will be processed by María Goya, the Data Controller.

Collection and processing of personal data

Personal data is any information concerning a person: name, email address, postal address, telephone number, tax ID number, etc. Additionally, when the User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by the User’s internet service provider.

María Goya, as the Data Controller, must suitably inform Users of this website about the collection of personal data that may be carried out, either by sending an email or by filling in the forms included on the site.

Only the data necessary to perform the hired service, or to be able to respond appropriately to the request for information made by the User, will be obtained. The data collected are identification data and they correspond to a reasonable minimum required to carry out the activity requested. Specifically, no specially protected data is collected at any time.  Under no circumstances will María Goya use the data obtained for purposes different to the purpose agreed with the User.

Minimum age restriction

Only people over the age of 14 may provide personal data on this website. As required by the Organic Law on Data Protection and Guarantee of Data Rights, in the case of minors under 14 years of age, the consent of their parents or guardians will be a compulsory condition for us to process their personal data.

On the other hand, only people over 18 years old can hire our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

Security measures

María Goya hereby informs Users that the necessary technical, organisational and security measures available to us have been taken to prevent the loss, misuse, alteration, unauthorised access or theft of data, and thus guarantee the confidentiality, integrity, and quality of the information contained therein, in accordance with data protection regulations in force. The personal data collected using forms are processed only by the staff of María Goya or designated processors.

The María Goya website also has SSL encryption, which allows Users to safely send their data using the website’s contact forms.

Veracity of data

The User states that all data they provide are true and correct, and they agree to keep them up to date. The User will be responsible for the truthfulness of their data and will be solely liable for any conflicts or disputes that may result from their falsification. It is essential that, for us to keep personal data up to date, the User informs María Goya whenever there has been any modification to their data.

Data Transfer

"María Goya" will not transfer or communicate to any third party your data, except in the cases legally provided or where the provision of a service implies the need for a contractual relationship with a Processor. The User accepts that some of the personal data collected will be provided to these Data Processors (payment platforms, processing agencies, intermediaries, etc.), when it’ll be necessary for the effective performance of a contracted service or product acquired. The User also agrees that, in the event of the provision of services, these may be, in whole or in part, subcontracted to other persons or companies, which will be considered as Data Processors, with which the corresponding contract of confidentiality, or adhered to their privacy policies, set out on their respective websites. The User may refuse the transfer of his/her data to the Data Processors, by written request, by any of the means mentioned above.

In addition, where necessary, the data of Clients may be transferred to certain agencies, in compliance with a legal obligation: Spanish Tax Agency, banks, Labour Inspectorate, etc.

How a User can exercise their rights

The LOPD and the GDPR grant interested parties the option of exercising several rights related to processing of their data. To do so, the User must contact us, providing a copy of documentation proving their identity (ID card or passport), by email sent to hola@maria-goya.com, or by written communication sent to the address provided in our Legal Notice. This request should also include the following information: User’s name and surname, request, address, and supporting data.

The User must exercise these rights himself/herself. However, they may also be exercised by a person authorised as the User’s legal representative, when documentation attesting to such representation is provided.

The User may exercise the following rights:

·The right to access personal data, which is the right to obtain information on whether their data is being processed, the purpose of any processing that is being developed, as well as the information available on the origin of such data and the communications made or planned thereof.

·The right to rectification, where personal data are incorrect or inaccurate. The User may also request that data found to be inadequate or excessive be erased.

·The right to request a restriction of processing their data, in which case said data will only be retained by María Goya to exercise or defend claims.

·The right to object: User has the right to request that their data not be processed or that processing be ceased in cases where their consent is not necessary for processing. Users may oppose commercial prospecting files or decisions related to the person concerned that are based solely on automatic processing of their data, unless further processing is required for legitimate reasons or to exercise or defend potential claims.

·The right to data portability: if the User would like their data to be processed by another company, María Goya will provide the User with a portable copy of their data in an exportable format.

If the User grants consent for a specific purpose, they have the right to withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

We are committed to enforcing all these rights within the maximum legal deadline of 1 month.

If the User believes there is an issue with how María Goya processes their data, they can contact our data protection officer or the appropriate data protection authority. The Spanish Data Protection Agency (AEPD) is the control authority in Spain.

Data retention

Requested information of Users’ personal data collected by contact form or by email will only be used strictly during the time necessary to fulfil the request for information, or until consent is withdrawn.

Customers’ personal data will be processed until the end of the contractual relationship. The particular data retention period shall be the minimum necessary, and it may be maintained for:

·Four years: Law on Social Infringements and Sanctions, related to obligations in matters of affiliation, contributions, payment of wages; Arts. 66 et seq. General Tax Act (accounting).

·Five years: Art. 1964 of the Civil Code (personal actions without special deadline).

·Six years: Art. 30 of the Commercial Code, related to accounting records and invoices.

·Ten years: Art. 25 of the Law on the Prevention of Money Laundering and Financing of Terrorism.

·No term: disaggregated and anonymised data.

Social networks

María Goya has profiles on some of the world’s major social networks (Instagram), identifying itself in all cases as Data Controller processing the data of its followers, fans, subscribers, commentators and other user profiles (hereinafter, followers) published by María Goya.

The purpose of data processing by María Goya, when not prohibited by law, will be to inform its followers of its activities and offers, in any way that the social network allows, as well as providing a personalised user care service. The legal basis for such processing shall be the consent of the person concerned, which may be withdrawn at any time.

Under no circumstances will María Goya obtain data from social networks, unless the User grants their consent in this regard (for example, to hold a contest).

Confidentiality

The information supplied by the User shall, in any case, be regarded as confidential and may not be used for purposes other than those described herein. María Goya is obliged to refrain from disclosing information about the User’s claims, the reasons for the information requested, or the duration of its relationship with the User.

Term of validity

This privacy and data protection policy has been drafted by EXPERTOSLOPD®, a data protection company, on Mach 17, 2022. It may vary depending on changes in regulations and jurisprudence. It is the responsibility of the data holder to read the updated document in order to understand their rights and obligations in this regard at any time.