Privacy Policy

1.Identification of the data controller

The data controller is the Spanish company DERIA, S.L., located at C/ Entença, 332-334, 6º 7ª – 08029 Barcelona, Spain (“DERIA”).

2.Purposes, lawful bases for processing, categories and recipients of personal data

Purposes	Categories of personal data and recipients	Lawful basis
To assess and, if applicable, to respond to any requests for information or suggestions. To interact (i.e. respond to messages or comments, generate reactions, share content, etc.) with users of DERIA’s profiles on social networks, which would involve the communication of certain data (e.g. IP address and browsing history data) to the providers of these social networks.	Categories of personal data: Identification data and personal characteristics¹ Contact details² Browsing history data⁴ Recipients: Information technology, marketing and social network providers.	Legitimate interest of DERIA and/or third parties (article 6.1(f) of the General Data Protection Regulation): DERIA has interest in providing an optimal service to website and social network users in a secure online environment. For this reason, DERIA considers that the legitimate interest on which the processing of personal data is based prevails over the fundamental rights and freedoms of the interested parties since the processing is within the reasonable expectations of the data subjects based on their relationship with DERIA. In any event, data subjects may request further information on the legitimate interest or exercise their right to object to the processing of their personal data based on legitimate interest by addressing their request to info@deria1986.com.
To customize certain features of the website (e.g. the language of content display) based on the data subjects’ browsing preferences and analyse their browsing behaviour (e.g. sections that attract a greater or lesser number of visits) with the aim to improve the services offered through the website and to permit that third parties offer personalized advertising. The information about profiling activities and behavioural analysis is available in this Privacy Notice and, if applicable, in the Cookies Policy of the website.	Categories of personal data: Identification data and personal characteristics¹. Professional data³. Browsing history data⁴. Interests and preferences. Recipients: Information technology and marketing service providers	Consent (article 6.1(a) of the General Data Protection Regulation): data subjects may provide their consent by clicking acceptance or preference selection buttons or by making any other affirmative clear action. Data subjects may withdraw their consent at any time, as set out in Section 5.
To send commercial information about DERIA’s products, services and activities, by any means, including electronic ones. As set out in Section 5, data subjects may exercise their right to object and withdraw their consent to have their data processed for direct marketing purposes.	Categories of personal data: Identification data and personal characteristics¹. Professional data². Interests and preferences. Recipients: Information technology and marketing service providers	Legitimate interest of DERIA and/or third parties (article 6.1(f) of the General Data Protection Regulation): DERIA has interest in sending data subjects marketing communications related to products and services that are identical or similar to the ones previously contracted to DERIA. For this reason, DERIA considers that the legitimate interest on which the processing of personal data is based prevails over the fundamental rights and freedoms of the interested parties since the processing is within the reasonable expectations of the data subjects based on their relationship with DERIA. In any event, data subjects may request further information on the legitimate interest or exercise their right to object to the processing of their personal data based on legitimate interest by addressing their request at info@deria1986.com. Consent: if DERIA cannot rely on its legitimate interest to send marketing communications to data subjects, DERIA will collect data subjects’ consent by requesting them to fill in data collection forms, to click acceptance buttons, to tick boxes or by making any other affirmative clear action. Data subjects may withdraw their consent at any time, as set out in Section 5.
^1. For example, name, last name, username ^2. For example, postal address, email and personal phone number. ^3. For example, professional contact details, job position, place of work, member of professional ^4. For example, IP address, device or user ID, browser type and version, visited sections, country from which the connexion is made.

DERIA’s website may include social network plugins, which can be recognised by the social network’s logo or name, so that users can access DERIA’s profile on these platforms. By clicking these buttons, users’ personal data (including IP address and browsing data) will be transferred to the providers of said social networks. DERIA will not be liable for any further processing that the providers of the social networks may carry out with this personal data. The purpose and scope of the collection of data and its subsequent processing and use by the providers of these social networks, as well as the related rights and the possibilities of configuring privacy settings can be consulted in the data protection information of each of these companies.

DERIA will endeavour that the personal data is only transferred to countries that offer an adequate level of data protection. If the personal data is processed in countries that do not offer said level of protection, DERIA and/or the providers (as the case may be) will adopt, if necessary, the appropriate safeguards to carry out such international data transfers in accordance with the applicable data protection legislation. Information on the appropriate safeguards for international data transfers can be obtained from DERIA at info@deria1986.com

DERIA does not share personal data with any other third party, other than those indicated above unless required by the applicable law or to potential investors or purchasers in the event of corporate reorganization activities.

3. Retention period

DERIA will retain the personal data for the time strictly necessary for the fulfilment of the purposes for which it has been collected or, if applicable, until the end of the statutes of limitation of any liabilities that may arise and during the term required to comply with any applicable legal obligation.

4. Sources of personal data

In addition to the personal data that data subjects provide directly to DERIA, DERIA may also obtain personal data from cookies or similar technologies installed in the devices of the data subjects.

5. Derechos de protección de datos

Rights	Content
Access	You may request confirmation as to whether or not your personal data is being processed and, if so, you can obtain access to your personal data included in DERIA’s files.
Rectification	You may request the rectification of your personal data if inaccurate.
Erasure	You may request the erasure of your personal data.
Objection	You may request that your personal data is not processed under specific circumstances.
Portability	You may request receiving, in an electronic file, the personal data that you provided DERIA with, as well as the right to transmit it to other parties.
Restriction of processing	You may request a restriction on how your personal data is processed when: the accuracy of the personal data is being verified after you have contested its accuracy. processing of your personal data is unlawful and you object to its erasure. DERIA does no longer need the personal data for the purposes of processing it, but you need it in order to prepare, exercise or defend a legal claim. you have objected to the processing of the personal data for the performance of a task carried out in the public interest or necessary for the purposes of a legitimate interest, while verifying if DERIA’s legitimate grounds override yours.
Withdrawal of consent	You may withdraw your consent without affecting the lawfulness of the processing based on consent before its withdrawal.

You can exercise, when appropriate, your data protection rights, for example, by sending a written communication to DERIA at info@deria1986.com. To that end, DERIA may request further information or documents if necessary to identify you.

Likewise, you may lodge a complaint with a data protection authority, including the one at your residence, place of work or place of the alleged infringement.

Date of creation: march 2023