Privacy Policy – Contact Forms

Below we provide the details regarding the different personal data processing activities carried out at PALMADERA, S.A.

6.1. Processing of Users’ Personal Data

Basic Information on Data Protection

At PALMADERA, S.A., we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe we should be transparent about it.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, “GDPR”) and the LOPDGDD 3/2018 regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, and LAW 34/2002 of July 11 on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), PALMADERA, S.A. informs the user that, as data controller, it will incorporate the personal data provided by users into the organization’s automated processing systems.

Our commitment begins by explaining the following to you:

• Your data is collected to improve the user experience, addressing your interests and needs.
• We are transparent regarding the data we obtain about you and the reason why we do so.

Our intention is to offer you the best possible experience. Therefore, when we use your personal information, we will always do so in compliance with regulations, and when necessary, we will request your consent.

• We understand that your data belongs to you. Therefore, if you decide not to authorize us to process it, you can request that we stop processing it.
• Our priority is to guarantee your security and treat your data in accordance with European regulations.

If you wish to obtain more information about the processing of your data, please consult the different sections of the privacy policy below:

6.1.1. Additional Information on Data Protection

Who is the controller responsible for processing your data?

• Identity: PALMADERA, S.A. – CIF (Tax ID): A31007693
• Postal address: BARRIO ZALAIN, 9, 31780, Bera/Vera de Bidasoa, Navarra
• Telephone: 948630225
• Email: rgpd@parklexprodema.com

What personal data do we collect?

The personal data that the user may provide includes:

• Name, address, and date of birth.
• Telephone number and email address.
• Location.
• Information regarding payments and returns.
• IP address, date and time you accessed our services, internet browser used, and data regarding the device’s operating system.
• Any other information or data you decide to share with us.

In some cases, completing the registration form is mandatory to access and enjoy certain services offered on the website. Likewise, failing to provide the requested personal data or not accepting this data protection policy will make it impossible to subscribe, register, or participate in any promotions where personal data is requested.

For what purpose do we process your personal data?

At PALMADERA, S.A., we process the information provided by data subjects in order to provide the requested services and address your contact requests through our website forms at https://palmadera.com/. We also process it to develop and manage contests, raffles, or other promotional activities that may be organized.

Likewise, we process data to send commercial communications and informative newsletters, including via email, regarding our products and services.

In some cases, it will be necessary to provide information to Authorities or third-party companies for auditing purposes, as well as to handle personal data from invoices, contracts, and documents to respond to claims from clients or Public Administrations. We inform you that the personal data obtained as a result of your registration as a user will become part of the Record of Processing Activities (RoPA), which will be updated periodically in accordance with the provisions of the GDPR.

How long will we keep your data?

The data will be kept as long as you do not request its erasure.

What is the lawful basis for processing your data?

The legal basis for processing your data is as follows:

• Performance of a contract: Provision of the requested services.
• Consent of the data subject: Sending commercial communications and informative newsletters.
• Legitimate interest for processing our clients’ data for direct marketing actions, and explicit consent of the data subject for everything related to automated assessments and profiling.
• Compliance with legal obligations for fraud prevention, communication with public authorities, and handling third-party claims.

To which recipients will your data be communicated?

In some cases, and only when necessary, PALMADERA, S.A. will provide user data to third parties. However, data will never be sold to third parties. External service providers (for example, payment providers or delivery companies) with whom PALMADERA, S.A. works may use the data to provide the corresponding services; however, they will not use this information for their own purposes or transfer it to third parties.

PALMADERA, S.A. endeavors to guarantee the security of personal data when sent outside the company and ensures that third-party service providers respect confidentiality and possess appropriate measures to protect personal data. These third parties are under obligation to ensure that information is treated in accordance with data privacy regulations.

In some cases, the law may require that personal data be disclosed to public bodies or other parties; only what is strictly necessary to fulfill such legal obligations will be disclosed.

The personal data obtained may also be shared with other companies within the group.

Data transfers to third countries?

No data transfers to third countries are planned.

Where is your data stored?

Generally, data is stored within the EU. For data sent to third parties outside the EU, we will ensure they offer an adequate level of protection, either because they have Binding Corporate Rules (BCR) or because they adhere to the “Privacy Shield” framework (Note: if updating for current standards, the current framework is the EU-U.S. Data Privacy Framework).

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation as to whether or not PALMADERA, S.A. is processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under the provisions of the GDPR, you may request:

• Right of access: You can request information about the personal data we hold about you.
• Right to rectification: You can communicate any change in your personal data.
• Right to erasure and to be forgotten: You can request the deletion of personal data after it has been blocked.
• Right to restriction of processing: This entails the restriction of the processing of personal data.
• Right to object: You can withdraw your consent to the processing, objecting to further processing.
• Right to data portability: In some cases, you can request a copy of the personal data in a structured, commonly used, and machine-readable format for transmission to another controller.
• Right not to be subject to automated individual decision-making: You can request that decisions are not made based solely on automated processing, including profiling, which produces legal effects or significantly affects the data subject.

In some cases, the request may be rejected if you ask to delete data necessary for compliance with legal obligations.

Under certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defense of claims. Likewise, in legally established cases, you will have the right to the portability of your personal data.

Under certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In this case, PALMADERA, S.A. will stop processing the data, except for compelling legitimate grounds, or the exercise or defense of possible claims.

You can materially exercise your rights in the following way: by sending an email to rgpd@parklexprodema.com or at our offices located at BARRIO ZALAIN, 9, 31780, Bera/Vera de Bidasoa, Navarra. If you have given your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.

If you feel your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority via its website: www.agpd.es.

Who is responsible for the accuracy and veracity of the data provided?

The user is solely responsible for the veracity and correctness of the data included, exonerating PALMADERA, S.A. from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep it properly updated. The user agrees to provide complete and correct information in the registration or subscription form. PALMADERA, S.A. reserves the right to terminate the contracted services concluded with users if the data provided is false, incomplete, inaccurate, or not updated.

PALMADERA, S.A. is not responsible for the veracity of information that it did not draft itself and for which another source is indicated, and therefore assumes no liability for hypothetical damages that may arise from the use of said information.

PALMADERA, S.A. reserves the right to update, modify, or delete the information contained in its web pages and may even limit or deny access to said information. PALMADERA, S.A. is exonerated from liability for any damage or harm the user may suffer as a result of errors, defects, or omissions in the information provided by PALMADERA, S.A., provided it comes from external sources.

Furthermore, the user certifies that they are over 14 years of age and possess the necessary legal capacity to provide consent for the processing of their personal data.

How do we handle the personal data of minors?

In principle, our services are not specifically directed at minors. However, in the event that any of them are directed at children under fourteen years of age, in accordance with Article 8 of the GDPR and Article 7 of LO 3/2018 of December 5 (LOPDGDD), PALMADERA, S.A. will require the valid, free, unequivocal, specific, and informed consent of their legal guardians to process the personal data of minors. In this case, the ID card (DNI) or another form of identification of the person providing consent will be required.

In the case of persons over fourteen years of age, data may be processed with the user’s consent, except in those cases where the law requires the assistance of the holders of parental authority or guardianship.

What security measures do we apply to protect your personal data?

PALMADERA, S.A. has adopted the legally required security levels for the protection of Personal Data, and endeavors to install any other additional technical means and measures within its reach to prevent the loss, misuse, alteration, unauthorized access, and theft of the Personal Data provided to PALMADERA, S.A.

PALMADERA, S.A. is not responsible for hypothetical damages or losses that could derive from interferences, omissions, interruptions, computer viruses, telephone breakdowns, or disconnections in the operational functioning of this electronic system, motivated by causes external to PALMADERA, S.A.; from delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system, or in other electronic systems, as well as damages that may be caused by third parties through illegitimate intrusions beyond the control of PALMADERA, S.A. Nonetheless, the user must be aware that Internet security measures are not impregnable.

Links to other websites

On the website https://palmadera.com/ there may be links to other web pages. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of said website, leaving PALMADERA, S.A. dissociated from any type of responsibility regarding its privacy policy.

How do we use cookies?

The website and social media profiles of PALMADERA, S.A. use cookies to optimize and personalize your browsing experience. Cookies are physical information files housed in the user’s own terminal; the information collected through cookies serves to facilitate user navigation through the portal and optimize the browsing experience. The data collected through cookies may be shared with their creators, but in no case will the information obtained by them be associated with personal data or data that can identify the user.

However, if the user does not want cookies installed on their hard drive, they have the ability to configure the browser in such a way as to prevent the installation of these files. For more information, consult our Cookie Policy: https://palmadera.com/en/legal-notice/#Cookie-Policy

Can the privacy policy be modified?

This privacy policy may be modified. We recommend that you review the privacy policy periodically.