PRIVACY AND DATA PROTECTION POLICY

As set out in Regulation (EU) 2016/679 of the European Parliament and the Council of the 27 April 2016 on the protection of natural persons with regards to the processing of personal data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), in Law 34/2002 of the 11 July for the Information Society and Electronic Commerce Services (hereinafter referred to as the “LSSI-CE”) and in Organic Law 3/2018 for the Protection of Personal Data and guarantee of digital rights, POST BY ME, S.L. guarantees the protection and confidentiality of the personal data  of any kind provided by our clients, in accordance with what is laid down in the General Data Protection Regulation.

POST BY ME, S.L.’s Data Protection Policy relies on the principle of proactive responsibility, according to which The Organization Responsible for the Treatment is also responsible for complying with the legislative and regulatory framework and shall be able to demonstrate this should the corresponding control authorities request so.

The data supplied shall be treated according to what is laid down in the GDPR. To this respect, POST BY ME, S.L. has adopted the legally required protection levels and installed all the technical measures available to prevent the loss, misuse, alteration and unauthorized access by third parties which follow. Nonetheless, users must bear in mind that Internet security measures are never invulnerable.

The Organization Responsible for the Treatment: Who are we?

Name: POST BY ME, S.L. (hereinafter referred to as “THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT”)

Tax ID Number: B87220927

Activity: IAE Group 847 – Postal Services and Telecommunications

Address: C/Eduardo Haro Tegclen, 13, 28055 Madrid (hereinafter referred to as the “ADDRESS OF THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT”)

Telephone number: 910 299 742

Email: info@postby.me

Purpose of the treatment: What shall we use your information for?  Any information supplied by our clients and/or visitors on the website of THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT or to such organization’s staff shall be included in the personal information treatment activities registry, which is created and maintained under the responsibility of THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT and shall be essential to render the services requested by the users or to solve any doubts or issues raised by our visitors. It is our policy not to create profiles for those who use our services.

Legitimacy of the processing: Why do we need your information?

1. Contractual relationship: This is the relationship which applies when you buy one of our products or hire any of our services.
2. Legitimate interest: To answer any claims or queries you may have as well as to manage the recovery of any arrears owed.
3. Your consent: If you are a user of our website, when you check the box included in the contact form, you authorize us to send you any and all necessary communications to answer the query or information request you have sent.

Recipients: Who do we share your information with?   We shall not disclose your personal information to anyone, with the exception of those public or private entities to which we have to disclose your personal information with the aim of complying with the applicable law. For example, we are compelled by the Spanish Tax Law to provide certain information to the Spanish Tax Office related to financial operations which exceed a certain monetary amount. Should we need to disclose your personal information to any third parties in a situation which is not one of the abovementioned cases, we shall request your permission through clear options which allow you to make a decision as to whether you accept such disclosure.

Communication: Where could we send your information?   We shall not transfer your personal information internationally for any of the purposes mentioned.

Retention: For how long will we retain your information?   We shall only retain your personal information for the period which is necessary to achieve the purposes for which it was collected. When it comes to assessing the optimal retention period, we shall examine the risks which such treatment entails, as well as our contractual, legal and legislative obligations, our internal data retention policies and our legitimate business interests described in the Privacy Notice and Cookie Policy. To this respect, THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT shall retain the personal information once the relationship with you has become extinct duly blocked during the prescribed period of any actions which may derive from the relationship with the interested party. Once blocked, THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT shall not have access to your information and such information shall not be handled except to make it available to public administrations, judges and courts to deal with any responsibilities arisen by any treatment of such information, as well as to exercise and defend any claims with the Spanish Data Protection Agency.

Security: How will we protect your information?   We shall make all reasonable efforts to retain the confidentiality of the personal information handled by our systems. We maintain the strictest security levels to protect the personal information we process from incidental loss and unauthorized access, treatment and disclosure, taking due account of the state of technology, the nature of and the risks to which information is exposed. Nevertheless, we cannot be held responsible for the use you make of the information (including your login information and password) which you use on our website. Our staff follow strict privacy rules and, should we contract third parties to render support services, we demand they abide by the same rules, as well as allowing us to conduct audits to verify that the abovementioned is being observed.

Your rights: What rights can you exercise as an interested party?   We hereby inform you that you shall be able to exercise the following rights:

1. The right to access your personal information, with the aim of being aware of which information is being treated and the data treatment operations carried out with any such information.
2. The right to rectify any inaccurate personal information.
3. The right to erase your personal information, when this is possible (for example, if it is required by law).
4. The right to limit the treatment of your personal information when the accuracy, legality or need of the information treatment is doubtful, in which case, we shall be able to retain it to exercise or defend ourselves against any claims.
5. The right to oppose the treatment of your personal information, when the legal basis which allows the treatment of such information is in our legitimate interest. THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT shall cease to process your information unless it has a legitimate interest in or in the case that it is necessary to defend itself against any claims.
6. The right of portability of your information, when the legal basis which enables us to process such information is the existence of a contractual relationship or your consent.
7. The right to revoke the consent granted to THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT.

To exercise your rights, you may do so at no cost to you and at any time by contacting us at the ADDRESS OF THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT and attaching a copy of your National Identity Document.

Protection of rights: Where can you submit a claim?

Should you have reason to believe that our entity has neglected your rights, you may submit a claim to the Spanish Data Protection Agency by way of one of the following means: .- Online office: https://www.aepd.es .- Post: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid .- Phone: 901.100.099 and 912.663.517   Submitting a claim to the Spanish Data Protection Agency does not incur in any costs and it is not necessary to have an attorney or lawyer in attendance.

Updates: What changes can be implemented in this Privacy Policy?

THE ORGANIZATION RESPONSIBLE FOR THE TREATMENT reserves the right to modify this policy to adapt it to legislation or case-law changes which may affect its compliance.