PRIVACY POLICY

1. Identification Data

ROSA BERNAL S.L., hereinafter ROSA BERNAL, owner of the web domain therosabernalcollection.com with registered office for these purposes at Calle Vereda de los Barros 53G, 28295, Alcorcón, Madrid, CIF number: B28772457, and contact email address fbernal@therosabernalcollection.com

2. Data Protection

ROSA BERNAL, in compliance with Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, and the GDPR, ensures the correct use and processing of the personal data of anyone browsing the website www.therosabernalcollection.com

To this end, along with each form for collecting personal data, in the services that each user may request from ROSA BERNAL, said person will be informed of the existence and acceptance of the specific conditions for the processing of their data in each case, informing them of the responsibility for the file created, the address of the person responsible, the possibility of exercising their rights, the purpose of the processing and the communication of data to third parties, if applicable.

3. IP addresses

The website servers will be able to automatically detect the IP address and domain name used by the user.

What is an IP address? An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity file, which allows for subsequent processing of the data for purely statistical measurements that allow us to determine the number of page impressions, the number of visits made to web services, the order of visits, the access point, etc.

4. Security

This website uses industry-accepted information security techniques, such as firewalls, access control procedures, and cryptographic mechanisms, all to prevent unauthorized access to data.

To achieve these purposes, the user/client expressly agrees that the provider may obtain data for the purposes of the corresponding authentication for access controls. Secure communication protocol enabled: SSL certificate used.

We protect your data with SSL, which stands for Secure Socket Layer, a security protocol that ensures your data travels securely and in its entirety. That is, the transmission of data between a server and a web user, and in feedback, is fully encrypted.

Any process involving the introduction of special category personal data, such as health data, ideology, etc., will always be transmitted using a secure communication protocol (Https://, etc.), so that no third party has access to the information transmitted electronically.

5. Minors

A person UNDER 14 years of age must not provide their personal data to ROSA BERNAL without the prior consent of their parent or legal guardian.

With the publication of the GDPR, the age for consenting to the transfer of personal data is set to be between 16 and 13 years of age. In Spain, since the entry into force of the LOPD-GDD, it has been set at 14 years of age.

If ROSA BERNAL detects users on the website who may be under 14 years of age, it reserves the right to request a copy of their ID or, where applicable, authorization from their parent or legal guardian. This will result in their cancellation if they fail to provide proof of compliance with this requirement or fail to respond.

6. Exercise of rights

At any time, the website user may modify their marketing preferences and exercise their rights under the regulations by sending a written communication to ROSA BERNAL at the postal address Calle Vereda de los Barros 53G, 28295, Alcorcón, Madrid, or by email to fbernal@therosabernalcollection.com.

In both cases, the website user must provide a copy of their ID, passport, or similar document.

– ACCESS: Obtain confirmation as to whether your data is being processed.
– DELETION: Obtain the deletion of your data.
– RECTIFICATION: Modify inaccurate, erroneous or incomplete data.
– PORTABILITY: Receive from ROSA BERNAL the personal data that concerns you and transmit it to another data controller.
– OBJECTION: Oppose the processing of your personal data based on the fulfillment of purposes of public interest, or of legitimate interest for the data controller.
– LIMITATION OF PROCESSING: Obtain from the data controller the limitation of data processing.

You can also use the templates and forms available on the AEPD portal to exercise these rights.

And, if you do not wish to receive communications by email, you can exercise your right to cancel and object by requesting to unsubscribe by regular or electronic mail, as well as through the link in every email you receive from ROSA BERNAL.

7. Processing activity and purpose

ROSA BERNAL collects information from each client/supplier/etc. to send commercial information, updates, and related news.

Categories of data accessible through this website:

Identification data (Name, surname, email, etc.)

Data transfers from the data controller:

ROSA BERNAL informs website users that their personal data will not be transferred to third parties or organizations except when the transfer is covered by a legal obligation or when the provision of the service requires a contractual relationship with service providers responsible for processing. In the latter case, data will only be transferred to a third party with the express consent of the user and when ROSA BERNAL maintains a contractual relationship with the data processor that guarantees confidentiality and compliance.

ROSA BERNAL expressly prohibits website users from sharing, providing, or transferring third-party data that may be obtained through contact, interaction, or browsing or querying through this website, unless they can prove express authorization from the user whose data they intend to transfer.

We remind everyone who uses this website that PERSONAL DATA also includes image files of individuals. Personal images are protected by law (Article 5.1 of the Regulations implementing the LOPD). Therefore, no one may use them without the express consent of the person appearing in them.

8. Applicable legislation

ROSA BERNAL’s privacy policy is governed by the following rules:

Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data;
Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE);
Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights.