Privacy Policies

Through this website, personal data necessary for the management and maintenance of some of our services is collected.

We inform you that the website owner (data controller) complies with Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), EU Regulation 2016/679, General Data Protection Regulation (hereinafter, GDPR) and other regulations in force and applicable at any given time, ensuring the correct use and processing of the user's personal data.

In accordance with Article 13 of the GDPR and Article 11 of the LOPDGDD, this Privacy Policy applies to the processing of personal data carried out by Xany Stones as the data controller, in relation to the data that users and/or clients (natural persons) provide as a result of requesting information and/or contracting the services and/or products that it provides and markets through this website, or collected in any of the sections of this website.

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data will be used for the general purpose of managing and controlling the commercial relationship established between the user and the data controller, and specifically for:

• Manage full access to and proper use of services and/or products by users.
• To communicate with users in response to incidents, requests, comments and questions that they make to us through the contact forms on our website (including emails and/or phone calls).
• To provide, update, maintain and protect the services and/or products offered
• To offer new services and/or products, special offers or updates.
• In their case, managing personnel selection processes in the selection of workers and/or collaborators.
• Communications: We may send you emails, messages, and other types of communications regarding the services and/or products you have contracted, as well as for technical issues that may affect this website. These communications are considered part of the services and/or products you have contracted or requested.
• In your case, marketing communications: We may use your personal data to contact you, both electronically and non-electronically, to conduct surveys, obtain your feedback on the service provided, and, occasionally, to notify you of changes, important developments in services and/or products, offers and/or promotions of our services and/or products or of third-party companies related to us. These marketing offers will, in all cases, be expressly and separately authorized by the user. This consent may be revoked at any time using the means and methods implemented for this purpose.

We will not process your personal data for any purpose other than those described above, unless required by law or there is a judicial and/or administrative requirement that involves processing data for purposes other than those stated.

 

STORAGE PERIOD

The personal data provided will be stored and processed for as long as the contractual relationship with the user remains in effect, without prejudice to the possibility of exercising their data protection rights. The data may also be stored for the time necessary to comply with legal obligations applicable to the data controller.

The personal data of individuals interested in receiving commercial information and newsletters will be kept indefinitely unless the interested party requests their opposition to the sending of commercial communications or the deletion of their data.

LEGITIMACY OF THE PROCESSING

Xany Stones processes your personal data in accordance with the following legal bases: Consent of the data subject (1), the performance of a contract or pre-contractual measures (2) and legitimate interest (3).

1. The consent of the interested party given for the purposes described above, which will be requested:

• Before proceeding to process your data,
• In the process of registering/contracting as a client or,
• When sending commercial communications Xany Stones.

Information requests you submit require you to voluntarily provide the necessary data so we can process them. However, you are free to refuse to provide this data or, subsequently, revoke any previously granted consent for its processing. In these cases, refusing to provide personal data will make it impossible to process user requests, and revoking consent will not affect any processing based on consent carried out before it was revoked.

2. The processing of data by Xany Stones is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract. This legal basis will apply if the user purchases products or contracts for services through our website.

3. The legitimate interest of Xany Stones aims to maintain and retain its customers and/or users and better meet their previously expressed expectations or interests, for example: improving the products and/or services offered, managing requests, inquiries or complaints, offering products similar to those contracted, informing about current promotions and discounts, among others. All of the above shall be understood without prejudice to compliance by Xany Stones of the rest of the obligations relating to the sending of commercial communications by electronic means regulated by Law 34/2002, of July 11, on information society services and electronic commerce.

Xany Stones understands that, by providing us with their personal data, the interested party guarantees and is responsible for the truthfulness, accuracy and currency of said data, and that they expressly accept and consent to its processing for the purposes described above.

RECIPIENTS OF INTERNATIONAL ASSIGNMENTS OR TRANSFERS .

In general, Xany Stones will not share your personal data with third parties unless we are legally obliged to do so or you have expressly authorized us to do so when using our services and/or products.

Xany Stones will not transfer personal data collected through this website internationally, except in the following cases:

• That the international transfer of data is necessary for the performance of a contract or pre-contractual measures to which the data subject is a party.
• That the international transfer of data is necessary due to the application of current legislation.
• That the international transfer of data takes place with the express consent of the interested party.
• The international data transfer takes place because the website is hosted on servers located outside the European Economic Area.

In any case, in situations where international data transfers may take place, Xany Stones will verify that the data importing country guarantees an adequate level of protection in accordance with current regulations.

RIGHTS OF INTERESTED PARTIES .

Data protection regulations allow you to exercise your rights of access, rectification, objection, erasure (“right to be forgotten”), restriction of processing, data portability, and the right not to be subject to automated individual decision-making with the data controller. Below, we explain what these rights entail:

• Right of access: Allows the interested party to know and obtain information about their personal data being processed.
• Right of rectification: Allows you to correct errors, modify data that is inaccurate or incomplete, and ensure the accuracy of your personal data.
• Right to erasure: Allows you to request the deletion of your personal data when it is no longer necessary for the execution or provision of the service.
• Right to object: Allows the interested party to prevent or stop the processing of their personal data, except for legitimate reasons or for the exercise or defense of possible claims, in which case we will keep them blocked for the corresponding period.
• Right to object to receiving advertising: Interested parties may object to receiving commercial communications. In that case, they may revoke their consent to receive these notifications at any time.
• Restriction of processing: In certain circumstances, interested parties may request the restriction of the processing of their data, in which case it will only be kept for the exercise or defense of claims.
• Data portability: Interested parties may request to receive the data concerning them that they have provided to us or – where technically possible – to have it sent to another data controller of their choice, in a structured, commonly used and machine-readable format.
• Right not to be subject to automated individual decisions (including profiling): Interested parties have the right not to be subject to a decision based solely on automated processing which produces legal effects or significantly affects the interested party.
• Possibility of withdrawing consent: The interested party has the right to withdraw at any time the consent given when this consists of the legal basis for the processing of personal data, without this affecting the lawfulness of the processing based on the consent given at the time of providing us with their data.

If you wish to exercise any of the aforementioned rights, please contact us using the contact details provided in “Identification of the Data Controller,” including the following information: your full name, national identity document number, postal and/or email address, specifying the right you wish to exercise and the conditions thereof. We may request additional information to verify your identity.

Possibility of filing a complaint with the Supervisory Authority: Xany Stones also informs you of your right to file a complaint with the Spanish Data Protection Agency (www.agpd.es) if you believe that the processing carried out does not comply with current regulations.

ADDITIONAL INFORMATION

 

Minors

Xany Stones recommends that users of this website be over 18 years of age. If users under 14 years of age access the site, parental, guardian, or legal representative consent is required for the processing of their personal data. Parents, guardians, or legal representatives of minors will be solely responsible for the content their children may access while visiting our website.

Social networks

It is possible that Xany Stones maintains profiles on various social media platforms. Users may also be able to access private areas of this website through their social media accounts, instead of using a username and password. In these cases, users who provide personal data through their social media account and/or profile are informed that the social media platform is responsible for the data processing carried out, unless otherwise expressly stated for a specific processing activity.

 

Retention of certain data

Xany Stones informs that, in compliance with the provisions of Law 25/2007, of October 18, on the preservation of data relating to electronic communications and public communications networks, it must retain and preserve certain traffic data generated during the development of communications in order to transfer them to the legitimate authorities, when the legal circumstances provided therein occur.

Data recorded

Our servers automatically collect information when you use our website services. This log data may include your IP address, the device ID used to access our website, the operating system used, and device settings, among other things.

Security measures

The user is informed that the website owner (data controller) has implemented the necessary technical and organizational security measures to guarantee the security of their personal data and prevent its alteration, loss, and unauthorized processing and/or access, taking into account the state of the art, the nature of the stored data, and the risks to which it is exposed, whether arising from human action or the physical or natural environment. Furthermore, additional measures have been established to reinforce the confidentiality and integrity of the personal information held by Xany Stones, continuously maintaining supervision, control and evaluation of processes to ensure respect for data privacy.

 

Cookies

Our website uses its own and third-party cookies. You can find all the detailed information regarding cookies in our Cookie Policy.