PRIVACITY POLICY

The Person Responsible for the Treatment is PEPA RICO, SL , C / Pelayo 19 BIS,   03650, Pinoso (ALICANTE).

PRINCIPLES OF PRIVACY

From PEPA RICO, SL we commit ourselves to work continuously to ensure privacy in the treatment of your personal information, and to offer you at all times the most complete and clear information that we can. We encourage you to read this section very carefully before you provide us with your personal information. If you are under fourteen years of age, please do not give us your data without your parents’ consent.

In this section we inform you of how we process the data of the people who have a relationship with our organization, starting by our principles:

• We do not request personal information, unless it is necessary to provide you with the services that you require.
• We never share personal information with anyone, except to comply with the law, or under your express authorization.
• We will never use your personal data for purposes other than those expressed in this privacy policy.
• Your data will always be treated with an adequate level of protection to the legislation on data protection, and we will submit it to automated decisions.

This privacy policy has been drafted taking into account the requirements of the current data protection legislation:

• Regulation (EU) 2016/679 of the European Parliament and of the Council, April 27^th 2016, on the protection of natural persons (GDPR).
• Organic Law 15/1999, of December 13, on the Protection of Personal Data (LOPD).
• Royal Decree 1720/2007, of December 21 (RLOPD).

This privacy policy is drafted on the date May 25^th, 2018.

On the occasion of the modification of processing criteria, in order to facilitate its understanding or adapt it to the current legislation, we may change this privacy policy. We will update its date, so you can check its validity.

TREATMENTS THAT WE MAKE

CONTACT TREATMENT

Purpose: To address your requests or queries received from the web, by email or telephone. To give answer to your request and provide a later follow-up.

Legitimation: Consent of the interested party.

Recipients: No data will be transferred to third parties.

Conservation period: We will keep your data during the time necessary to fulfill the purpose for which it has been collected and to determine the possible responsibilities that could derive from the said purpose and the data processing.

TREATMENT OF CLIENTS

Purpose: Manage customer relationships, invoicing and payment. Sending offers of similar products or services or complementary to those that you have already purchased from us.

Legitimation: Contractual relationship and legitimate interest.

Recipients: Your data will be communicated to the competent public bodies in the cases provided for in the legislation in force, and for the purposes established by the said legislation. We will only inform those third parties if they are essential for the provision of the service.

Conservation period: We will keep your data for an indefinite period of time once the mandatory period by law has expired, or until your request for its cancellation.

MARKETING TREATMENT

Purpose: To provide you with information about products and services that we may consider of your interest. In each commercial communication you will have the opportunity to reject this processing by resigning from it.

Legitimation: Consent of the interested party.

Recipients: No data will be transferred to third parties.

Conservation period: We will keep your data for an indefinite period of time. We will cancel it under your request, or if after a certain number of emails, you do not take any action.

TREATMENT OF HR

Purpose: To assess the CV that you provide us in future staff selection processes we may undertake.

Legitimation: Consent of the interested party.

Recipients: No data will be transferred to third parties.

Conservation period: We will keep your data for a period of time not longer than 5 years.

YOUR RIGHTS

You have the right to request a copy of your personal data, to rectify inaccurate data or complete them if they were incomplete, or if necessary delete them, when they are no longer necessary for the purposes for which they were collected.

You also have the right to limit the processing of your personal information and obtain your personal data in a structured and readable format.

You can oppose to the processing of your personal data in some circumstances (in particular, when we do not have to process them in order to comply with a contractual requirement or other legal requirement, or when the aim of the treatment is direct marketing).

When you have given us your consent, you can withdraw it at any time. From that moment we will stop treating your data or, if applicable, we will stop doing it for that specific purpose. If you decide to withdraw your consent, this will not affect any treatment that has taken place while your consent was   valid.

These rights may be limited; for example, if in order to meet your request we had to disclose information about another person, or if you request that we delete some records that we are required to maintain by a legal obligation or by a legitimate interest, such as the right of defense before claims. Or, even in those cases where the right of freedom of expression and information prevails.

You can contact us through any of the means indicated in the section Responsible for Treatment included in this privacy policy, providing a copy of a document that certifies your identity (usually the ID).

Another of your rights is not to be the subject of a decision based only on an automated processing, including profiles making that may produce legal effects or affects you in some way.

In the face of any violation of your rights, such as, for example, not attending your request, you have the right to submit a claim before the Control Authority regarding the protection of data. This can be your country’s (if you live outside Spain) or the Spanish Agency for Data Protection (if you live in Spain).

ADDITIONAL INFORMATION

Processing your data outside the European Economic Area

For the indicated processing we can use the service of the following providers outside the European Economic Area, but under the Privacy Shield Framework, approved by the UE authorities of data protection.

GOOGLE : Cloud services and email. More information:   https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

MICROSOFT : Cloud services, communication via Skype and mail   electronic. More information:   https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK

AMAZON : Cloud services. More information:   https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4

DROPBOX : Cloud storage, synchronization and sharing   records. More information:   https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0

MAILCHIMP : Management of emails. Plus   Information: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG

WHATSAPP : Instant messaging service and file sending. Plus   information:   https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG

Links to third-party websites

Our website may, on occasion, contain links to other websites. It is your responsibility to make sure you read the policy of data protection and the legal conditions that apply to each site.