Data protection policy

In accordance with Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April (“General Data Protection Regulation” or “GDPR”), this Privacy Policy applies to the processing of personal data carried out by SHOP AND ROLL ESPAÑA, SL (hereinafter, S&R) as Controller, in relation to the data collected from users in any of the sections of the website.

If you do not agree to the terms of this Policy, do not access or use the Services. This Privacy Policy does not apply to any other product, service or activity of third parties.

Controller of your data

• Registered name: SHOP AND ROLL ESPAÑA, SL
• Registered office: Pol. Ind. San Miguel, C/ Nicolás Copérnico 2, 50830 Villanueva de Gállego (Zaragoza).
• Tax ID (NIF): B70717160
• Contact email: privacy@shopandroll.com or dpd@shopandroll.com.

Purposes of data processing

Your personal data will be used for the general purpose of managing and administering the website and, specifically, to:

• Manage and administer the website.
• Respond to requests for information made by the user.
• Communicate with users in response to requests, comments and questions submitted through the contact forms on our website (including emails, phone calls, etc.).

We will not process your personal data for any other purpose beyond those described above unless required by law or by a judicial order.

Duration of data processing

S&R will retain and process the personal data from the moment the user gives their consent until they request to unsubscribe from the Portal or withdraw their consent for data processing.

Right to withdraw consent: the user has the right to withdraw consent at any time, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal. Likewise, the user may at any time object to receiving any electronic communication from S&R.

Legal basis for data processing

The legal basis for processing the data is the legitimisation based on the data subject’s consent given for the purposes described above, which will be requested at the time:

• of processing their data.
• of including their data in our forms.
• of requesting information or subscribing.

Requests for information submitted to us require the data subject to voluntarily provide the data necessary for us to attend to them. The obligation or need to provide such data will be indicated with an asterisk (*) in the corresponding forms or sections.

However, the data subject may freely refuse to provide us with such data or subsequently revoke the consent previously given to process their data, although such refusal will mean that we cannot attend to their request or provide the relevant service.

S&R understands that, by providing us with such data, the data subject guarantees and is responsible for their truthfulness, currency and accuracy and expressly accepts and consents to their processing for the purposes described above.

Recipients of disclosures or transfers

As a general rule, S&R will not disclose your personal data to third parties unless legally required to do so or you have expressly authorised it when using our services.

Social networks

S&R has different social networks (LinkedIn, Instagram, YouTube, Facebook) to disseminate content related to S&R as well as to provide users with a means of contact. S&R is responsible for processing the data of its followers and contacts on social networks. However, to the extent that the processing of personal data is carried out within the framework of the social networks whose providers impose their own rules of operation, S&R’s obligations will be limited to those aspects in which it has freedom to act. Under no circumstances will S&R extract data from the social networks, create profiles of its users or collect additional personal data relating to tastes, hobbies or how the social networks are used, without the express consent of those affected.

Rights of data subjects

Any person has the right to obtain confirmation of whether or not S&R is processing personal data concerning them. In particular, you may exercise the following rights before S&R:

• Right of access: allows the data subject to know and obtain information about their personal data subject to processing.
• Right of rectification: allows you to correct errors, modify data that is inaccurate or incomplete and ensure the accuracy of the information being processed.
• Right to erasure: allows you to request the deletion of data being processed when it is no longer necessary.
• Right to object: the data subject’s right to have their personal data not processed, or to have such processing cease, except for legitimate reasons or for the exercise or defence of possible claims, in which case they will be kept blocked for the corresponding period while legal obligations persist.
• Right to object to advertising: data subjects may object to the sending of commercial communications by S&R. In that case you may at any time revoke your consent to receive these notifications using the mechanism implemented for that purpose within them, or by sending a written communication with the subject “Unsubscribe”.
• Restriction of processing: in certain circumstances, data subjects may request the restriction of the processing of their data, in which case it will only be retained for the exercise or defence of claims.
• Data portability: data subjects may request to receive the data concerning them that they have provided to us or — provided this is technically possible — for us to send it to another controller of their choice, in a structured, commonly used and machine-readable format.
• Right not to be subject to automated individual decisions (including profiling): the right not to be subject to a decision based on automated processing that produces significant effects or significantly affects them.
• Right to withdraw consent: the data subject also has the right to withdraw their consent at any time, without this affecting the lawfulness of the processing based on the consent given when providing us with their data.

If you wish to exercise any of the rights set out above, please send us a letter with all your details to the following address: Pol. Ind. San Miguel, C/ Nicolás Copérnico 2, 50830 Villanueva de Gállego (Zaragoza), or by email to privacy@shopandroll.com or dpd@shopandroll.com, including the reference “LOPD”.

Right to lodge a complaint with the supervisory authority: S&R also informs you of your right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with current regulations.