1) Data controller

– Owner: VEGTUS 2020, SL (hereinafter “VEGTUS”)

– Registered address: C/ Valldaura nº 8, 08195 Sant Cugat del Vallès, Barcelona, Spain

– TIN B01661438

– Email: soporte@vegtus.com

The foregoing is the controller of all data collected from data subjects to run its business operations, which are carried out subject to the requirements and restrictions established in Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation or GDPR).

 

2) Purpose

The personal data that you provide to us through the form on the contact page of this website, and any data that you may provide in the future, shall be added to a data file owned by VEGTUS and retained under its responsibility.

The purpose of said file is to manage the relationship between VEGTUS and the users of the Website and other customers and to provide them with the information that they request from us and manage any services that they procure from us. Furthermore, we shall use it to keep you informed about our services, for such purpose using the email address or other contact details provided by the user with their express consent.

The information that you provide in the data collection forms is voluntary; however, if you do not provide it to us, we shall not be able to provide you with the service.

You shall be obliged to keep the information up-to-date so that it is accurate at all times. The user shall be liable for any misrepresentation or inaccurate statement that may arise as a result of the data provided, and any damage caused to VEGTUS by such information.

 

3) Data retention periods

At VEGTUS, all data retention periods and the criteria established for them shall be in accordance with the current regulations.

It shall be retained for as long as there is a mutual interest to maintain the purpose of the processing and when it is no longer necessary for such purpose, it shall be deleted using appropriate security measures to ensure the pseudonymisation of the data or its total destruction.

 

4) Legal grounds

The legal basis for processing your data is your consent.

 

5) Recipients

VEGTUS shall only allow the personal data to be accessed by the administrators, partners and persons under its control who need to access the personal data due to the activity that they perform as part of the contracted services.

To ensure compliance with the provisions of the General Data Protection Regulation, when VEGTUS entrusts the processing activities to a data processor, it shall only use data processors who offer sufficient guarantees, in particular in respect of having the expertise, reliability and resources required in order to apply the technical and organisational measures that meet the requirements of the GDPR, including the security of the processing.

The user consents to all of their personal data being fully disclosed to Aplazame from the moment that the user starts to procure the deferred payment service offered by the latter when choosing the payment method. This acceptance extends to any third-party entities that need to access the files to enable the full performance of the contract.

 

6) International data transfers

We hereby inform you that for the purpose of sending out its marketing messages and newsletters, VEGTUS transfers personal data to MailChimp, owned by:

The Rocket Science Group LLC

dpo@mailchimp.com

675 Ponce de Leon Ave NE, Suite 5000

Atlanta, GA 30308 USA

 

7) Rights

Any person has the right to obtain information about whether or not VEGTUS is processing personal data concerning them.

Data subjects have the right to access their personal data and request the rectification of any inaccurate data or, where appropriate, request that it be deleted when, among other reasons, the data is no longer necessary for the purpose for which it was collected.

Under certain circumstances, data subjects may request that processing of their data be restricted, in which case we shall only retain it for filing or defending claims.

Under certain circumstances, and for reasons related to their specific situation, data subjects may object to the processing of their data. VEGTUS shall stop processing the data, except when there are compelling legal reasons to do so or for filing or defending any claims.

The user may exercise the aforementioned rights at any time by using the contact details at the start of this privacy policy to write to us by post or by email.

To process any request to exercise their rights, it shall be necessary to verify the user’s identity, so the aforesaid notification should include their full name, the specific details of the request being made, an address for notification purposes, the date, a signature and a photocopy of their ID card or another valid identity document.

Exercising these rights shall not in any way affect access to the website. Depending on the right that you want to exercise, if you wish, we shall provide you with the appropriate form so that you can fill it out, pursuant to the provisions of Regulation (EU) 2016/679 of 27 April 2016.

For further information about exercising your rights, you can visit the website of the Spanish Data Protection Agency.

 

8) Complaining to the Supervisory Authority

If you believe that there is a problem with the way that VEGTUS is processing your data, you may send your complaints to the relevant data protection authority, with this being the Spanish Data Protection Agency in the case of Spain. The Agency’s email address is www.agpd.es

 

9) Updating data

The user is the sole source of information about their personal data so, for the purpose of keeping your data updated and up-to-date at all times in accordance with the principles of the Data Protection Act, VEGTUS asks that you inform it of any changes thereto, by following the procedure established in the relevant section on exercising your rights of access, rectification, cancellation and objection.