DATA PROTECTION POLICY

INFORMATION ON DATA PROCESSING FOR RESIDENTS OF THE EUROPEAN UNION

  1. Who is the Data Controller of your data?

The person responsible for data processing is MULTIÓPTICAS, S.C.L. (hereinafter MO), domiciled at Avda de los Reyes, s/n P.I. La Mina 28770 Colmenar Viejo (Madrid) and with Tax Code (CIF) F28465193.

For the purposes of our data protection policy, the contact telephone number is +34 918357000 and the contact email address is sales@multiopticas.com

MO has appointed a Data Protection Officer (DPO) to whom you may address any queries you may have regarding the processing of your personal data. To do so, please send an email to: dpo@multiopticas.com

We also inform you that, in the processing of data, there are no Joint Data Controllers.

  1. What kind of data do we have about you and how did we get it?

The categories of personal data processed by MO about its customers and suppliers are:

  • Identificatory details
  • Contact details
  • Postal or email addresses
  • Commercial information
  • Economic and transaction data
  • Professional data

We also inform you that we do not process special categories of data and that all the above-mentioned data have been obtained either directly from you by submitting a commercial offer, contractual proposal, etc. or from your company by providing us with identificatory details and other information required to fulfil the purpose of the contractual relationship between the parties concerned. In the event of any changes to such data, you or your company must provide us with updated data.

  1. How long will we keep your data?

The data you provide will be retained for as long as the business relationship with you continues and you do not ask us to erase it. In any case, the minimum legal storage periods will be respected, depending on the subject matter.

In any event, MO will keep your personal data for as long as is reasonably necessary taking into account our needs to respond to any issues that arise or to resolve problems, make improvements, activate new services and comply with requirements under applicable law. This means we may retain your personal data for a reasonable period of time even after you have stopped using our products or you have stopped using this website. After this period, your personal data will be deleted from all our systems.

  1. For what purpose and on what basis do we process your data?

We process the data you provide us with in order to manage various activities resulting from specific procedures carried out in the areas of sales, after-sales service, service quality, etc. Consequently, we will use your data to carry out some of the following actions based on the respective lawful basis:

PURPOSE FOR PROCESSING

LAWFUL BASIS

Manage the registration of new users in the private area of the website.

Consent of the data subject

Process orders placed by registered users through the website and by email.

(Pre)contract performance

Management, maintenance and administration of the contractual relationship with the customer.

(Pre)contract performance

Legal obligation

Accounting, tax, administrative and commercial management of collaborators

(Pre)contract performance

Legal obligation

Periodic sending of commercial communications

Consent of the data subject

Legitimate interest of the controller

Respond to requests for information arriving via the online form, email,

Consent of the data subject

Resolve incidents

Consent of the data subject

(Pre)contract performance

Avoid sending commercial communications to those who have expressed their refusal or opposition to receiving them.

Legitimate interest of the controller

Responding to data protection requests from data subjects

Legal obligation

We inform you that, should you fail to provide your personal data, your contract cannot be performed, legal obligations cannot be fulfilled and/or your request cannot be processed.

  1. Who will we pass on your data to?

We will never share your personal data with any third party company that intends to use them for direct marketing purposes, unless you have expressly authorised us to do so.

Please note that we may disclose your personal data to government agencies and the relevant authorities in those cases in which we have received a legal request from such authorities or when, acting in good faith, we believe such action is reasonably necessary to comply with a legal procedure, to respond to any legal claim or demand and/or to protect the rights of MO or its customers and the general public.

We may pass on your personal data to third parties (e.g. internet service providers who help us to administer our website or carry out contracted services, IT support and maintenance companies, logistics operators, tax and accounting consultancies, etc.). In any case, these third parties must maintain, at all times, the same levels of security as MO in relation to the processing of your personal data and, where necessary, they will be bound by legal requirements to store your personal data privately and securely, and to only use the information in accordance with our specific instructions.

We inform you that MO may share your data, according to the needs of the service provided to the following recipients out of the EU, having that transfer sonsideration of international data transfer according to the current law:

List of recipients of international transfers from  MULTIÓPTICAS, S.C.L. regarding Users, Clients, and Suppliers

Recipient’s name

Cuntry

Purpose of data transfer

International transfer authorization

Recipient profile¹

SALESFORCE.COM EMEA LIMITED

USA

Mandatory for service provision

Clauses Type of data protection adopted by the EU Commission

Processig Manager

¹ Processing Manager: third party that provides services to our entity, the data processing is carried out under our instructions and responsibility

  Deputy Processing Manager:  third party providing services to us indirectly by providing services to our data processor. The Deputy Manager follow the work intructions given be the person in charge and, therefore, it is under the control of our entity as the Processing Manager.

Assignee: third party that obtains the data based on a legal authorization, the need to facilitate the provision of a service or the consent of the interested party. Once the communication of the data has been carried out, the transferee becomes the Processing Manager with respect to the transferred data.

  1. What are your rights as a data subject?

Data subjects may request the right to access their personal data, as well as to receive these in a commonly used, machine-readable format if the processing is carried out by electronic means (right of portability).

Likewise, data subjects may request the right to rectify inaccurate data or, where appropriate, request its erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In addition, under certain circumstances data subjects may request restriction of processing their data and, under certain circumstances and for reasons related to their particular situation, data subjects may exercise their right to object to their data being processed. MO shall no longer process the data, except for compelling legitimate grounds or for the exercise or defence of possible legal claims, or in those exceptions established in the applicable regulations.

We also inform you that you are entitled to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

You may exercise the aforementioned rights at any time by writing to us using the contact details given in Section 1, 'Data Controller' of this Data Protection Policy, enclosing a copy of your National Identity Card.  

You also have the right to lodge a complaint with the Spanish Data Protection Agency ( https://www.aepd.es/es), particularly when you have not obtained satisfaction in the exercise of your rights.

  1. Protecting the data of website users

The personal data of Users of the website will be processed for the processing activity indicated on each data collection form. Such processing of data will be covered by their consent.  By clicking on the "SEND" button, the User consents to their data being processed by MO.

Likewise, we inform you that we will not pass on your data to third parties, except when legally obliged to do so or with your express consent.

On the other hand, in accordance with the provisions of Spanish Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI), MO undertakes not to send advertising via email without first obtaining the express authorisation of the recipient. Users may oppose the sending of advertising by ticking the corresponding box.

  1. Other information of interest regarding our privacy policy

8.1 Security measures

We adopt the security levels required by current European and Spanish data protection legislation taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing described, as well as the risks, of varying likelihood and severity, to your rights and freedoms as an individual.

8.2 Amendments to our Data Protection Policy

From time to time, we may make changes and corrections to this section. Please check back regularly to see what changes may have been made and how they may affect you.

8.3 Why is it necessary to accept this Data Protection Policy?

This section provides you, in a readily accessible way, with all the information necessary you need regarding the type of data we process about you, the purposes thereof, the rights you have, under data protection regulations, as the data subject and how to exercise these rights. Therefore, by deliberately sending your personal data via our means of contact and/or by entering into a business relationship with our company, we consider that you acknowledge and agree to the processing of your personal data as described in this policy. This personal information will only be used for the purposes for which you have provided it to us or as permitted by certain national and regional regulations.

In any case, we must warn you that a refusal on your part to provide us with certain data requested could hinder the development of the contractual relationship between the parties, with possible serious consequences at the time of providing the various services contemplated within the commercial contract.

Should you have any doubts in relation to this section, please contact the company using the address provided in Section 1, 'Data Controller' and we will be happy to assist you and answer any additional questions you may have.

  1. Applicable legislation

This Data Protection Policy shall be governed at all times by the provisions of Spanish and European legislation regarding the protection of personal data and privacy.