Privacy Policy

1.0 Privacy Policy

1.1 Data protection controller

1.2 Purpose of processing

1.3 Legitimacy

1.4 Provision or transfer

1.5 Right of users

1.6 Security measures

1.7 Complaints procedure

1.1 Data protection controller

Delvalle Global Solutions, S.L.U. with Tax ID No. number B26177782 and main business address at Paso el Prao 6 01320 · Oyón, Spain (here in after Delvalle), ensures the protection of personal data that users voluntarily provide when communicating via email with DelValle, completing data collection forms, entering into a contractual relationship or using any service included in the web pages within the internet domain www.delvallebox.com and also with respect to the activities or services carried out offline that involve the communication of data or access to data. It shall process such data in accordance with the European Data Protection Regulation 679/2016, of 27 April, (GDPR) and also with the Organic Law of data protection and guarantee of digital rights 3/2018, of 5 December (LOPDGDD) and makes this policy public in order to comply with the principles of accountability and transparency in information, and to show unequivocal consent has been secured from the data subjects through it.

Any information on this matter will be sent to you from the email address: [email protected].

1.2 Purpose of processing

Personal data collected and processed by Delvalle, through these websites, trade fairs, contracts, conferences, newsletters, raffles, or other means, will be appropriate, relevant and limited to those necessary in relation to the purposes for which they are processed, including but not limited to:

For the data collection forms on the website and for other unspecified voluntary data deliveries, the purpose is to meet the specific request, as answer to queries, subscription to and sending of newsletters, commercial contact, registration in conferences, sending of documentation and information related to the services and, perhaps, commercial and/or advertising communications.
For contracting services: The purpose is to establish and maintain a contractual relationship that may be established, in accordance with the nature and characteristics of the hired service; for the maintenance of history and to perform research and development in this field.

In all cases, personal details are to be maintained in a way that allows for the identification of data subjects only for the time required for the purposes of the processing. Storage periods will only be extended when the purposes are for scientific, historical research or statistics.

1.3 Legitimacy

The legal basis or legitimation of data processing by DelValle depends on the different processing activities, the types of holders of the personal data and purposes thereof. We thus have as a basis for legitimation:

Acceptance or consent: Data subjects that contact DelValle to request information, make inquiries, subscribe to information and newsletters, training,... and voluntarily provide the requested personal data.
Contract: Clients that access the services of DelValle give their consent by entering into a contract.
Prevalent legitimate interests of the controller or third parties to whom the data is communicated. This legitimacy occurs when contact data is collected beyond the forms indicated in the section on the purpose of processing (example: receiving business cards, inquiries via e-mail) in order to carry out commercial activities.

Data subjects will be in any case liable for the veracity of the data provided and Delvalle reserves the right to exclude all false or illicit data, without prejudice to any other steps as may be provided by Law.

DelValle advises that, save for the existence of a legally constituted representation, no data subjects may use the identity of another person and communicate their personal data, so they should at all times take into account that they can only provide DelValle with personal data on their own identity that is adequate, relevant, up-to-date, exact and true. For such purposes, the interested party shall be solely liable for any direct and/or indirect damages caused to third parties or DelValle arising from the use of personal data of another person, or their own personal data when they are false, erroneous, not up-to-date, inadequate or irrelevant. Likewise, the person communicating the personal data of a third party shall be liable before the latter for the obligation to provide information set out in the GDPR when the personal data has not been collected from the data subject, and/or the consequences of not having informed the data subject.

The services provided by DelValle target professionals of legal age. The use of the services offered by minors must have been granted permission by their parents, guardians or legal representatives as they are considered to be responsible for all acts performed by the children in their care.

1.4 Provision or transfer

Provision: www.delvallebox.com only provides personal data to third parties to meet its contractual or legal obligations of service with suppliers or public or private organisations. In such cases, the data subjects consent to the said provision and, exercising their rights, may inquire about them.

International transfers:DelValle hereby notifies you that, in carrying out its activity, it uses the services of suppliers (such as data processors) outside the European Economic Area, to whom it provides data, thereby carrying out an international transfer in the cases indicated in the Cookies section https://www.delvallebox.com/en/cookies-policy with the necessary guarantees regarding the privacy shield, you can consult the Guide on the EU-US Privacy Shield on the AEPD website.

1.5 Rights of users

Users may at all times exercise their recognised rights over their personal data, as well as revoke the consent to the aforementioned uses, by means of written notification with the request or right exercised addressed to the business address of Delvalle or electronically via email to [email protected] including in both cases a photocopy of their identity document or similar proof of identity, to exercise their recognised rights, which are as follows:

Access. Request if this organisation is processing their data.
Rectification. Request the modification of the data if they are incorrect.
Erasure. Request the removal of data in cases set out by law.
Object. To cease processing the data, except for justified reasons.
Restriction of processing, they will only be stored by DelValle to exercise or defend itself against complaints.
Right to data portability: should the users wish to have their details dealt with by another SUPPLIER, DelValle shall facilitate the data portability to the new controller.

For further information about the exercise of these rights you can consult The Citizen´s Guide published by the Spanish Data Protection Agency.

1.6 Security measures

Personal information provided or collected from users whose controller is DelValle is structured in files, automated or otherwise, and a record of processing activities in accordance with current regulations is carried out. Also, in each data processing, DelValle establishes the appropriate technical and organisational measures to ensure the confidentiality, integrity, availability and resilience of the data included in a processing, that are necessary to guarantee its adequate security, including protection against unauthorised or illegal processing and against loss, destruction or accident damage, and that tend to:

I. The pseudonymisation and encryption of personal data;

II. The ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;

III. The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident;

IV. The process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.