The person responsible for the processing of personal data collected at Kessler Museum Merchandising is: TERESA KESSLER FRADERA, with tax identification code NIF: 35.028.760J with registered office at Carrer de les Mimoses, 10, local. 08034, BARCELONA.
You can contact us by phone 932 059 740, or by email at the address email@example.com.
Collection and processing of personal data
During the process of ordering or opening a new account, personal data will be collected. These data will be incorporated into a file under the responsibility of Kessler Museum Merchandising, with the aim of managing the processing and execution of your order. If you have previously given your express consent, we will use your email address to send commercial communications. You can unsubscribe from them at any time, by sending a message to our contact address described here or by clicking on the link provided for it in the e-mail with this commercial communication.
Unless you expressly consent to the continued use of your personal data, these will be blocked once the order has been executed and the purchase price has been paid in full.
Your personal data will be deleted after the legally established period for the fulfillment of our mercantile and fiscal obligations, as long as you have not expressly authorized the continuation of its use or other legal requirements to prescribe its conservation up to the officially foreseen limit.
Recipients of personal data
Your personal data will be communicated to the transport agency responsible for sending the goods. Likewise, your data will be transferred, where appropriate, to the credit institution that provides payment services within the framework of payment management.
Rights of access, rectification, cancellation and opposition
You can exercise your rights of access, rectification, deletion, limitation to processing, portability and opposition regarding the processing of your personal data, free of charge, sending an email to the address: firstname.lastname@example.org
For more information, see Data Protection Policy in this same web space.
Data protection policy
- Who is responsible for the processing of your personal data?
The person responsible for the treatment: Kessler Museum Merchandising C / Mimoses, 10- Bajos 08034 Barcelona, Spain. Email: email@example.com
- For what purposes will we continue to process your personal data?
We treat the personal data of our contacts, clients and suppliers in order to manage the commercial relationship with our organization and, especially, the contractual aspects, the sending of information of our organization and the sector, the organization of activities, campaigns or events and the sending of informative and commercial communications.
- When will we keep your personal data?
The personal data will be kept for a period of six (6) years in accordance with current accounting regulations and, if applicable, for ten (10) according to the rules on the prevention of money laundering.
In any case, Kessler Museum Merchandising will keep your personal data as long as they are necessary for the contractual provision of our relationship, unless you request its deletion. Likewise, it will keep them for the period of time necessary to comply with the legal obligations that in each case correspond according to the type of data.
- What is the legitimacy for the processing of your personal data?
The legal basis for data processing is the mutual interest and the consent of the user.
- To which recipients will your personal information be communicated?
The data may only be communicated to organizations of the same group or linked to Kessler Museum Merchandising in the field of the management of their products and / or services for the same purposes referred to above, as well as to those Public Administrations competent when required by current regulations.
Employees of Kessler Museum Merchandising who have authorized access rights in accordance with the internal security structure Kessler Museum Merchandising can access your data with the objectives described in this Data Protection Policy. All employees of Kessler Museum Merchandising have been trained and informed of their responsibilities to the respect and sign the corresponding confidentiality agreement. Likewise, they can access their data, third-party organizations that their intervention is required and / or necessary for the proper management of the provision of the service. Kessler Museum Merchandising has established contracts or contractual agreements and security measures with third parties, to ensure the appropriate level of security and protection of personal data.
- What are your rights in relation to your personal data?
You can request access, rectification, deletion, limitation to treatment, portability and opposition to the processing of your data at any time. You can revoke the consent to send commercial communications and exercise the rights referred to above, by sending an email to firstname.lastname@example.org accompanied by the documentary accreditation of your identity. With the exception of that you indicate it to us by means of the option to unsubscribe that you will find in the electronic submissions.
If you do not obtain a satisfactory answer and wish to make a claim or obtain more information about any of these rights, you can contact the Spanish Agency for Data Protection (www.agpd.es).
- What is the relation of personal information stored?
The basic identification and relationship data are saved, necessary to create invoices, such as name, delivery address.
- What is the data storage / availability / backup policy and its location?
No information is deleted, unless deletion is requested by the user and the deletion proceeds (see point 3). It is always available, although it may be blocked for informational marketing / commercial shipments, if the withdrawal rights have been exercised, limitation to treatment or opposition by the user.
Backup copies are made of the servers that contain personal data, duly controlled and guarded.
- What is the Privacy and Information Security Policy and its access?
Access to the database is protected by username and password.
In the case of remote access, this is done using the VPN protocol
- What is the Policy for responding to security incidents and impact analysis?
Kessler Museum Merchandising has adopted appropriate technical and organizational protection measures and these measures have been applied to personal data affected by the potential violation of the security of personal data. There is no access to client / user data for people who are not authorized to access them.
Kessler Museum Merchandising has carried out and maintains an updated risk analysis of the vulnerability of personal data and its impact on the security of the privacy of customers / users.
- What is the Policy of deletion of information in the event of service losses?
Kessler Museum Merchandising deactivates the accounts of customers / users who decide to unsubscribe and who have exercised their right to deletion. In this case, the client / user data will be blocked and maintained for the time required by regulations, exclusively to account for the legal obligations that justify the past relationship between the parties.
- Who is our Data Protection Officer?
Kessler Museum Merchandising has no legal obligation to designate a DPD (Data Protection Delegate), in accordance with current legislation.
In the event that Kessler Museum Merchandising identifies a breach of security of personal data, users will be notified as soon as possible in relation to it and, if it is of significant risk, will be notified to the competent authority.