Who is responsible for the processing of personal data?
The company responsible for the processing of personal data is Montana Colors SL (hereinafter, Montana Colors), with CIF B60556065 and address of Polígono Industrial Pla de les Vives, Calle Anaïs Nin, 6, Sant Vicenç de Castellet (CP 08295), tel . (+34) 93 833 27 60, email address email@example.com, www.montanacolors.com. It is registered in the Mercantile Registry of Barcelona, in volume 27064, Folio 96, Page number 112794, Inscription 1.
Who is the Data Protection Officer?
The Data Protection Officer (DPO) is the person who oversees compliance with Montana Colors’ data protection policy, ensuring that personal data is properly processed and people’s rights are protected. Among their functions is to answer any questions, suggestions, complaints or claims from the people whose data is processed. You can contact the Data Protection Delegate by writing to Pol. Ind. De les Vies, Calle Anaïs Nin 6 in Sant Vicenç de Castellet (CP 08295), telephone (+34) 93 833 27 60 or by email: firstname.lastname@example.org.
For what purpose and with what legitimacy do we process the data?
Contact. We respond to the inquiries of the people who contact us through email, contact forms on our website or by phone. We process this data with the consent of the person who has contacted us.
Customer service. We register customers and additional data that may be generated as a result of the business relationship and as users of our applications. The business relationship involves incorporating the data into accounting, billing or information to the tax administration. We process this data in compliance with contractual relationships and legal obligations.
Management of the data of our suppliers. We process the data of our suppliers from whom we obtain services or goods. We obtain the data necessary to maintain the commercial relationship and we use it solely for this purpose. We process this data in compliance with contractual relationships and legal obligations.
Information about products and services. With the authorization of our clients, contact information is used to send advertising related to our services or products. We process this data based on the consent of the person receiving the communications.
Video surveillance. In the access to our facilities, we communicate the existence of video surveillance cameras by means of approved signs. We process images to preserve the legitimate interests of our company.
Who is the data communicated to?
As a general rule we only communicate data to administrations or public powers, always in compliance with legal obligations. For billing purposes we can communicate data to banks. No data transfers are made outside the scope of the European Union (international transfer).
How long do we keep the data?
We comply as far as possible with the legal obligation to limit the period of data conservation. For this reason, data is kept only the time necessary and justified by the purpose that motivated its collection. In certain cases, such as the data contained in the accounting and billing documentation, tax regulations oblige us to save data In the case of the data that are processed based on the consent of the person in question, they are kept until this person revokes this consent. The images obtained by the video surveillance cameras are kept for a maximum of one month, although in the case of justifiable incidents, data will be kept for the time necessary to facilitate the actions of the security forces or judicial bodies.
What rights do people have in relation to the data we process?
The people whose data we process have the following rights:
Access. The right to know what personal data are being processed, why they are processed, communication with other people, the right to obtain a copy or know the expected conservation period.
To request rectification. The right to rectify inaccurate data.
To request the deletion. The right to request the deletion of the data when, among other reasons, they are not necessary for the purposes for which they were collected and justified the processing.
Request limitation of processing. In certain circumstances there is the right to request the limitation of the data processing: they will cease to be processed and will only be kept for the exercise or defense of claims.
To portability. The right to obtain personal data in a commonly used machine-readable format, and transmit them to another data controller if the interested party so decides.
To object to the processing. In adducing reasons related to their particular situation, a person may ask us to stop processing their data if it may cause harm.
How can rights be exercised or defended?
The rights that we have just enumerated can be exercised by sending a written request to Montana Colors at our postal address or by sending an email to email@example.com indicating in all cases “Protection of personal data”.
If no satisfactory response has been obtained in the exercise of rights, it is possible to file a claim with the Spanish Agency for Data Protection, through the forms or other channels accessible from its website www.agpd.es.
In all cases, whether to file complaints, request clarifications or send suggestions, it is possible to contact the Data Protection Delegate by email at the address firstname.lastname@example.org