The owner of the Website https://alpacaselcamino.com/ is Arsenio Diego Fernández with DNI 21140946J, as well as the person responsible for the processing of personal data provided by its users.

The processing of personal data carried out through this Website observes the provisions of Regulation (EU) 2016/679, General Data Protection, in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and with the technical and organizational security measures to ensure a level of security appropriate to the risk of processing.

Information on data protection

If the user decides to request information on our Website, the data strictly necessary to achieve the purpose for which our Website is intended, which is the information and promotion of our services, all of which are available on our Website, will be requested. In no case will be used for purposes other than those that have been voluntarily entered on the Web.

The personal data provided by the user will be treated, having been previously informed of the purposes of treatment and other information through the “Accept” button.

Those who voluntarily provide their data to the owner of the Web by any of the means always established for this purpose, have had at their disposal in a transparent and clear, having clicked the appropriate box, the following aspects:

1.1 The person responsible for the processing is Arsenio Diego Fernández with DNI 21140946J., with address at Barrio Camino 26, 39640 Villacarriedo (Cantabria).

1.2 The PURPOSE of the processing is as follows:

the management of the application, request or query, and the maintenance of relations between the Web and its users.
Unequivocal authorization so that the data provided can be used to send you, by any means of communication, including electronic, commercial communications, with information of interest, and reminder communications, if you have checked the corresponding box or have expressed, by any means, your unequivocal authorization.
to contract any of the specific products or services
information for the use of cookies for concrete and specific purposes always informed in this privacy policy.
1.3 The LEGAL BASIS of the treatment is based on the established relationship, in compliance with legal obligations and your unequivocal consent if you have given it. We inform you that you can revoke your consent at any time, through an easy and simple means. In the case of contact persons of a legal entity, the legal basis for the processing is the legitimate interest of this entity in maintaining relations with that legal entity.

1.4 We inform you that the TERM OF CONSERVATION of your data will be the duration of the contract and after its termination, in the case where so determined by law, for the duration of the obligation of conservation and, where appropriate, during the period of limitation of the corresponding actions. WE WILL retain your data if the legal basis is consent if you do not revoke your authorization, and once revoked, it will be set according to the criterion of exhaustion of the statute of limitations for actions.

1.5 RECIPIENTS: no recipients of your data are foreseen, unless legally obliged to do so.

1.6 We guarantee your RIGHTS of access, rectification or deletion of your data, as well as your right of limitation or portability, in accordance with the other information provided in this Privacy Policy.

Information about users

We record your IP (Internet Protocol) data assigned to the subscriber who owns the telephone line at the time of connection to this website, for the purposes of security and cooperation with Justice. The data will be kept by the service provider for the time established by current legislation.

Rights of Access, Rectification, Opposition, Deletion, Limitation, unless they are subject to automated decisions and Portability.

At any time, the user has the right to access their information, to rectify it if their data is incorrect, to oppose any type of treatment associated with the maintenance of the contractual relationship, to revoke the consent given, to request the limitation or deletion of their treatment, to not be subject to automated decisions, and to unsubscribe from the services of ALPACAS EL CAMINO.

These rights may be exercised upon accreditation of the personality in the forms and deadlines established in the General Data Protection Regulation, by writing to the postal address listed in the Legal Notice of the Web.

The processing of personal data and the sending of communications by electronic means, where appropriate, comply with the regulations established in the General Data Protection Regulation, in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and in the Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.

Remaining information on data protection.
The following information is an extended information on data protection:

If you are a customer:

Information on data protection. The data controller is: ALPACAS EL CAMINO The personal data will be processed for the purpose of CUSTOMER MANAGEMENT, OPERATIONAL ADVICE, FINANCIAL INTERMEDIATION, VIRTUAL SITE MANAGEMENT, INVOICING AND MAINTENANCE.

The legal basis for the processing is the contract concluded, the fulfillment of a legal obligation, legitimate interest in the case of contact persons of legal entities and consent, where applicable, revocable at any time.

The criterion for the retention of your data is the statute of limitations. If the basis for the processing was consent, the data will be retained until revocation of consent or objection to the processing and thereafter for the period of time for lodging complaints.

The recipients of your data are the tax authorities and banks, where applicable.

You have at your disposal the exercise of the rights of access, including the right to obtain a copy of the personal data being processed, rectification, opposition, suppression or erasure, where appropriate, portability and limitation of processing, by writing to the data controller at the following email address: info@alpacaselcamino.com.

2- Data processing agreement.

In the case of the provision of a service for which personal data of the client or Contracting Party are processed, the Property will act as the data controller, being the client or contracting party the data processor, who has decided to choose this CONTROLLER because it offers sufficient guarantees to apply the appropriate technical and organizational measures to the data provided, ensuring that the processing entrusted complies with Regulation (EU) 2016/679, on Data Protection (RGPD). In this regard, the controller shall provide the data it has lawfully obtained, and the processor undertakes the following:

2.1- It will only process the data in accordance with the instructions of the CONTROLLER OF THE PROCESSING, and for the purposes of this proposal or contract, not communicating them to any third party, not even for their conservation. The processing of personal data is necessary for the provision of the service. The type of personal data may be POS transaction data and data derived therefrom, provided by the RESPONSIBLE, and the categories of personal data may refer to customers or users (Identification data, contact, cell phone, means of payment used and transaction). The processing operations are: collection, registration, consultation, consultation, sending, modification, transfer, storage, deletion and destruction.

2.2- It undertakes to ensure that the persons who are part of the structure of the DATA CONTROLLER and who process the data have undertaken to comply with the rules of confidentiality, and the DATA CONTROLLER undertakes to adopt the necessary security measures and to guarantee the rights of those affected, in accordance with the provisions of Art. 32 of the RGPD, and must establish the following measures

the pseudonymization and encryption of personal data;
the ability to ensure the confidentiality, integrity, availability and permanent resilience of the processing systems and services;
the ability to quickly restore availability and access to personal data in the event of a physical or technical incident;
have established a process of regular verification, evaluation and assessment of the effectiveness of the technical and organizational measures to ensure the security of the processing; and
make available to the controller all information necessary to demonstrate compliance with the obligations set out in the GDPR, as well as to enable and assist in the performance of audits, including inspections, by the controller or another auditor authorized by that controller
Assist the controller, where possible, to facilitate the response to rights exercised by data subjects and to assist the controller in complying with the security measures of Articles 32 and 36 of the GDPR, taking into account the nature of the processing and the information available to the controller.
It shall adopt all other requirements of Article 28 of the GDPR.

2.3- Once the contractual performance has been fulfilled, the personal data must be destroyed or returned to the RESPONSIBLE, at its option, which must be stated, unless there is any legal provision that requires its retention. The data, if any, must be returned in the same form in which they were obtained and within two months from the effective completion of the provision, without the RESPONSIBLE hindering its receipt. When responsibilities may arise between the RESPONSIBLE PARTY and the RESPONSIBLE PARTY, the RESPONSIBLE PARTY may keep the data duly blocked. The CONTROLLER of the PROCESSING will inform the RESPONSIBLE in case of receiving a request for the exercise of rights by a data owner and will do so within three working days from the receipt of the request and in the same way in which the RESPONSIBLE and the RESPONSIBLE usually communicate, with preference being given to electronic means. It is not the RESPONSIBILITY’s responsibility to answer and respond to requests for these rights.

2.4- If the TREATMENT CONTROLLER uses the data for another purpose, communicates them or uses them in breach of this contract, he/she will also be responsible for the processing. If the PROCESSOR decides to subcontract all or part of this service, he/she must have prior written authorization from the CONTROLLER. Once the subcontracting has been authorized, the SUB PROCESSOR of the processing shall be subject to the same conditions and in the same written form as the CONTROLLER, being liable to the CONTROLLER in the event of non-compliance by the SUBPROCESSOR.

2.5- Professional secrecy is mandatory with respect to the personal data subject to processing and must be maintained in secrecy during the processing and after the end of the processing. It is guaranteed that the persons authorized to process the personal data subject to this contract have expressly undertaken to respect confidentiality and the duty of secrecy, a commitment that has been documented and is available to the RESPONSIBLE.

2.6- The processing to which the RESPONSIBLE will have access as a result of this contract are all those necessary to fulfill the purpose of this contract. The RESPONSIBLE authorizes the RESPONSIBLE to transfer the data object of processing that are necessary to the third parties referred to in this contract or expressly indicated by the RESPONSIBLE, in order to comply with the provisions of this contract.

If you are a supplier:

Information on data protection. The data controller is: ALPACAS EL CAMINO Personal data will be processed for the purpose of managing suppliers and payments. The criterion established for the conservation of your data is the prescription of actions.

The legal basis for the processing is the contract concluded, the fulfillment of legal obligations, legitimate interest in the case of contact persons of legal persons.

The recipients of your data are the tax authorities and banks, if applicable.

You have at your disposal the exercise of the rights of access, including the right to obtain a copy of the personal data being processed, rectification, opposition, erasure or deletion, portability and limitation of processing, by writing to the data controller at the following customer service email address is info@alpacaselcamino.com. You have the right to lodge a complaint with the supervisory authority”.

In case of being a user of the social networks of this entity:

Information on data protection. Your profile data and all the data you provide to us become part of a data processing and you will be kept as a person interested in our company. You should know and when you become a friend or follower of the company’s profile or account that the data you have open may be processed by us for the purpose of providing information about the company or the services it may provide. Your data may also be consulted by other members who have become friends or added to this company, being you who can decide your degree of privacy in the social network. The data controller is: ALPACAS EL CAMINO. The legal basis is the consent, which you assume once you have decided to be part of the account, consent that you can revoke at any time. Your data will not be retained once you have decided not to be part of the network, account or profile of this entity.