Privacy policy
1. Information for users
Tao Proyectos S.L, hereinafter the CONTROLLER, is the controller of users’ personal data. These data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to personal data processing and the free movement of such data. The following information about this processing is provided:
Purpose of processing: to maintain a commercial relationship with the user. The intended processing operations are:
- Sending advertising and commercial communications by email, fax, SMS, MMS, social networks or any other present or future electronic or physical means that enables commercial communications. These communications will be sent by the CONTROLLER and concern its products and services, or those of partners or suppliers with whom it has a promotional agreement. In this case, third parties will never have access to personal data.
- Carrying out statistical studies.
- Processing orders, applications or any requests made by users through the available contact methods.
- Sending the website newsletter.
Data retention criteria: data will be retained while there is a mutual interest in maintaining the purpose of processing. Once no longer needed for that purpose, they will be erased using appropriate security measures to ensure pseudonymisation or complete destruction.
Disclosure of data: data will not be disclosed to third parties unless required by law.
Users’ rights:
- The right to withdraw consent at any time.
- The rights of access, rectification, portability and erasure of their data, and restriction of or objection to processing.
- The right to lodge a complaint with the supervisory authority (aepd.es) if they consider that processing does not comply with current legislation.
Contact details for exercising your rights:
Postal address: Tao Proyectos S.L, 28680 San Martín de Valdeiglesias (Madrid). Email: mariajose@bosqueencantado.net
2. Mandatory or optional nature of the information provided by users
By ticking the relevant boxes and entering data in fields marked with an asterisk (*) on contact or download forms, users expressly, freely and unequivocally accept that these data are necessary for the provider to respond to their request; completing the remaining fields is optional. Users guarantee that personal data provided to the CONTROLLER are accurate and undertake to notify any changes.
The CONTROLLER expressly informs and guarantees users that their personal data will not be transferred to third parties, and that any such transfer would require users’ prior express, informed and unequivocal consent. All data requested through the website are mandatory, as they are necessary to provide an optimal service. If all data are not provided, the information and services supplied cannot be guaranteed to fully meet users’ needs.
3. Security measures
In accordance with current personal data protection legislation, the CONTROLLER complies with all GDPR provisions when processing personal data for which it is responsible, particularly the principles in Article 5: data are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary for the purposes of processing.
The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR, protecting users’ rights and freedoms, and has provided users with appropriate information so they can exercise those rights.