Privacy Policy

In this Privacy Policy, you will find all the relevant information that applies to CRFacadeDesign’s use of the personal data of our customers and users who interact with us. We are transparent about what we do with your personal data, so that you understand the implications of how we use it and your rights in relation to your data. To this end, we make all the information in this Privacy Policy permanently available to you, which you can consult whenever you deem appropriate. In addition, you will also find information about each instance of processing of your personal data as you interact with us.

Who is responsible for processing your data?

Domain name: crfacadedesign.com
Company name: Carlos Romero Cano
Tax ID number: 74726030L
Registered office: Calle Fray Vicente Pinilla, 10. 18600 – Motril (Granada)
Phone: 622 832 305
Email: carlos@crfacadedesign.com

Policy updates

CRFacadeDesign may modify this privacy policy without prior notice whenever necessary to bring it into line with any legislative, regulatory, jurisprudential, or administrative changes, or for the purpose of adapting said policy to the instructions issued by the Data Protection Agency or the legitimate purpose of any modification of this policy. Notwithstanding the foregoing, it will be published and announced on the CRFacadeDesign website.

For all of the above reasons, CRFacadeDesign recommends that users periodically review these policies in order to be aware of any changes that may be made to them.

Purpose and legal basis for recording activities

Depending on the products, services, or features you wish to enjoy at any given time, we will need to process certain data, which will generally be, as applicable, the following:

  • Your identifying information (e.g., your first name, last name, contact details, etc.).
  • Financial and transactional information (e.g., your payment or card details, information about your purchases, orders, returns, etc.).
  • Connection and browsing data
  • Commercial information (for example, if you subscribe to our newsletter), data about your tastes and preferences.

Remember that when we ask you to fill in your personal details to give you access to a feature or service on the website, we will mark some fields as mandatory, as this is information we need in order to provide you with the service or give you access to the feature in question. Please note that if you decide not to provide us with this information, you may not be able to complete your user registration or enjoy these services or features.

Depending on how you interact with our website, we will process your personal data for the following purposes:

  • To manage your registration as a user of the website.
  • For the development, fulfillment, and execution of the purchase or service agreement you have entered into with us on the website.
  • Browsing the website and using our digital media: We process information to enable and facilitate your access to and browsing of our digital media, as well as to provide you with the services we offer through them.
  • Improving the services we offer and security: Another use for which we employ the information is to maintain, improve, and ensure the effectiveness of our services and digital media, which allow us to develop new features, protect the security of your data and our digital media, and detect and prevent fraud in transactions.

If you decide to register as a user on our website, we need to process your data to identify you as a user and give you access to the various features, products, and services available to you as a registered user. You can cancel your registered user account by contacting us through Customer Service. This purpose includes the processing of your data mainly for the following reasons:

  1. To contact you regarding updates or informative communications related to the features, products, or services contracted, including sending quality surveys about the products or services provided.
  2. Manage payment for the products you purchase, regardless of the payment method used.

For example:

  • If, when purchasing any of our products through the Website, you choose to activate the functionality to save your card details for future purchases, we need to process the data indicated for the activation and development of this functionality. Consent to activate this feature allows your payment details to be autocompleted for subsequent purchases so that you do not have to re-enter them each time, and they will be understood to be valid and current for subsequent purchases. You can modify or delete your cards at any time through the payment information section.
  • Activate the necessary mechanisms to prevent potential fraud against you and CRFacadeDesign during the purchase process. If we consider that the transaction may be fraudulent, this processing may result in the transaction being blocked.
  • Manage possible returns once you have made a purchase and manage requests for information about the availability of our products, product reservations through the Website, depending on the options available at any given time.
  • For billing purposes and to provide you with receipts and invoices for purchases you have made on the Website.
  • To guarantee your use of other available features or services, such as the purchase, management, and use of Gift Cards or Gift Vouchers.
  • To respond to requests or inquiries you make through our Customer Service channels. We only process personal data that is strictly necessary to manage or resolve your request or inquiry.
  • For marketing purposes. This purpose includes the processing of your data mainly for:
    • When you subscribe to our Newsletter, we will process your personal data to manage your subscription, including sending you personalized information about our products or services through various means. We may also send you this information via push notifications if you have enabled them on your mobile device.
    • Remember that you can unsubscribe from the Newsletter at any time and at no cost through the “Newsletter” section of the Platform, as well as through the instructions provided in each communication.
    • Carry out promotional activities. By participating in any promotional activity, you authorize us to process the data you provide us with in accordance with each promotional activity and to communicate it through various media such as social networks or on the Platform itself.

For each promotional activity in which you participate, the legal terms and conditions will be available, providing you with more detailed information about how your data will be processed.

  • Share photographs or images that you have shared publicly on the Web or through our social media channels, provided that you give us your consent to do so.
  • Usability and quality analysis to improve our services.

If you access our website, we inform you that we will process your browsing data for analytical and statistical purposes, that is, to understand how users interact with our website and thus be able to make improvements to it. Likewise, we occasionally carry out quality actions and surveys aimed at determining the degree of satisfaction of our customers and users and detecting areas where we can improve.

What is the legal basis for processing your data?

The legal basis that allows us to process your personal data also depends on the purpose for which we process it. And the purpose is:

  1. Managing your registration as a user of the Website
    The processing of your data is necessary for the execution of the terms governing the use of the Platform. In other words, in order for you to register as a user on the Website, we need to process your personal data, as otherwise we would not be able to manage your registration. If you choose to access or log in through a social network, the reason we are entitled to process your data is the consent you give when you authorize the transfer of your data from the social network.
  2. Development, fulfillment, and execution of the contract for the purchase of our products.
    The processing of your data is necessary for the execution of the purchase agreement or service provision agreement that binds us to you. It is possible that some data processing associated with the purchase process will only be activated because you request or authorize it, such as the storage of payment data (card) for future purchases or to inform you of the availability of our products. In these cases, the basis on which we process your data is your own consent. We consider that we have a legitimate interest in carrying out the necessary checks to detect and prevent possible fraud when you make a purchase. We understand that the processing of this data is beneficial for all parties involved when payment for a purchase is made, and in particular for you, as it allows us to put measures in place to protect you against attempts at fraud by third parties.
  3. Customer Service
    We believe that we have a legitimate interest in responding to requests or queries that you submit to us through the various means of contact available. We understand that the processing of this data is also beneficial to you in that it allows us to serve you properly and resolve any queries you may have. When you contact us, in particular, to manage incidents related to your order or the product/service purchased through the Website, the processing is necessary for the execution of the sales contract. When your query is related to the exercise of the rights we inform you about below, or to complaints related to our products or services, what legitimizes us to process your data is the fulfillment of legal obligations on our part.
  4. Marketing
    The legitimate basis for processing your data for marketing purposes is the consent you give us, for example, when you agree to receive personalized information through various media or when you accept the legal basis for participating in a promotional campaign.
  1. Usability and quality analysis

We believe that we have a legitimate interest in analyzing the usability of the Website and the degree of user satisfaction, as we understand that the processing of this data is also beneficial to you because the purpose is to improve the user experience and offer a higher quality service.

Consent

Please note that when users who do not have a business relationship with CRFacadeDesign send an email or other communication to the WEBSITE OWNER, providing other personal data, they are giving their free, unequivocal, specific, informed, and express consent for CRFacadeDesign to process their personal data for the purposes set out above, as well as to respond to their communication or send documentation.

For the same purposes, CRFacadeDesign informs that if the customer sends an email or communicates their personal data to the WEBSITE OWNER due to their position in a company, whether as an administrator, manager, representative, and/or any other position as a contact person in the company, it will be understood that such communication implies the provision of their free, unequivocal, specific, informed, and express consent for the processing of their personal data by CRFacadeDesign for the purposes set out above.

Identification of recipients to whom CRFacadeDesign plans to transfer or grant access to data on behalf of third parties

CRFacadeDesign only plans to transfer or communicate data that, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, in order to comply with its obligations to public administrations, bodies, or persons directly related to CRFacadeDesign, in cases where this is required in accordance with the legislation in force in each area and at each time, as well as the transfers necessary for the management of the purchase made, such as to carriers; or in cases where you have expressly consented.

Likewise, the WEBSITE OWNER informs the user that any other transfer of data that must be carried out will be brought to their attention when required by the GDPR, informing them expressly, precisely, and unequivocally of the recipients of the information, the purpose for which the data will be used, and the nature of the data transferred, or, where applicable, when established by the GDPR, prior to the user’s specific, unequivocal, and informed consent will be requested in advance.

However, CRFacadeDesign informs users and customers that any processing of personal data is subject to current Spanish legislation on data protection, established by the GDPR and its complementary and implementing regulations. In this regard, CRFacadeDesign is only responsible for and guarantees the confidentiality of the personal data it requests from users through its website.

Data quality

CRFacadeDesign warns users that, unless they are legally authorized to do so, no user may use another person’s identity or disclose their personal data. Users must therefore bear in mind at all times that they may only include personal data corresponding to their own identity and that such data must be appropriate, relevant, current, accurate, and true. To this end, users shall be solely liable for any direct and/or indirect damage caused to third parties or to the WEBSITE OWNER through the use of another person’s personal data, or their own personal data when it is false, erroneous, outdated, inadequate, or irrelevant. Likewise, users who use the personal data of a third party shall be liable to the latter for the obligation to provide information established in the GDPR when the personal data has not been collected from the data subject themselves, and/or for the consequences of not having informed them.

Exercising your rights of access, rectification, restriction of processing, portability, erasure, objection to processing, and deletion of data

We are committed to respecting the confidentiality of your personal data and guaranteeing your rights. At CRFacadeDesign, we have agreed that you can exercise these rights free of charge by sending us an email to carlos@crfacadedesign.com, simply stating the reason for your request and the right you wish to exercise.

If we deem it necessary in order to identify you, we may request a copy of a document proving your identity.

In particular, regardless of the purpose or legal basis on which we process your data, you have the right to:

  • Request access to the data we hold about you. We remind you that if you are a registered user of the Website, you can also consult this information in the section corresponding to your personal data.
  • Ask us to rectify the data we already have. Remember that if you are a registered user of the Website, you can also access the section corresponding to your personal data in your account to modify or update your personal data. In any case, please note that by actively providing us with your personal data by any means, you guarantee that it is true and accurate and you undertake to notify us of any changes or modifications thereto. Any loss or damage caused to the Website or to the person responsible for the Website or to any third party as a result of the communication of erroneous, inaccurate, or incomplete information in the registration forms shall be the sole responsibility of the user. Please remember that, as a general rule, you should only provide us with your own personal data, not that of third parties, except as permitted in this Privacy and Cookies Policy.
  • Ask us to delete your data to the extent that it is no longer necessary for the purposes for which we need to process it, as we have informed you above, or to the extent that we no longer have the legal basis to do so.
  • Ask us to restrict the processing of your data, which means that in certain cases you can ask us to temporarily suspend the processing of your data or to keep it beyond the time necessary when you may need it. If you have given us your consent to process your data for any purpose, you also have the right to withdraw it at any time. When our legal basis for processing your data is your consent or the performance of the contract, you also have the right to request the portability of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, so that you can transmit it directly to another entity, provided that this is technically possible.

On the other hand, when the processing of your data is based on our legitimate interest, you also have the right to object to the processing of your data.

Finally, we inform you of your right to lodge a complaint with the relevant data protection supervisory authority, in particular with: the Spanish Data Protection Agency (https://www.agpd.es/portalwebAGPD/index-ides-idphp.php).

Use of forms for collecting personal data

In the purchase and contact forms on the website, where personal data is collected, the user must expressly consent, prior to sending the data, to the acceptance and understanding of the privacy policy by checking the box “I have read and accept the privacy policy,” the content of which can be accessed via the link provided in this legal notice. If the checkbox is not marked by the user, the data contained in these forms will not be sent.

Security measures adopted in relation to the processing of personal data

CRFacadeDesign informs users that, in accordance with the provisions of the GDPR, it has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data stored and the risks to which it is exposed. CRFacadeDesign also guarantees users compliance with the duty of professional secrecy regarding users’ personal data and the duty to store it.

Social media policy

Informs users (hereinafter, the “User” or “Users” as applicable) that it is the owner of the profiles on social networks such as Facebook, Twitter, etc., under the name CRFacadeDesign, and that these have been created for the main purpose of advertising the services and events developed at CRFacadeDesign.

The User has a profile on one of the aforementioned Social Networks and has decided to join the page created by CRFacadeDesign, showing interest in the information advertised on the corresponding Social Network. By joining the CRFacadeDesign page, the User is giving their consent for CRFacadeDesign to process the personal data published on their profile.

Users can access the privacy policies of the Social Network itself at any time, as well as configure their profile to ensure their privacy.

User data on the Social Network will be processed by CRFacadeDesign solely within the Social Network itself and will under no circumstances be processed by CRFacadeDesign outside of it.

Users have the right to exercise their rights of access, rectification, erasure, portability, and restriction, as defined by the functionality of the Social Network itself and CRFacadeDesign’s ability to access information from User profiles. These rights may only be exercised in relation to information that is under the control of CRFacadeDesign. Similarly, Users may file a complaint regarding the protection of their personal data with the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 – Madrid, when they consider that CRFacadeDesign has violated the rights recognized by the applicable data protection regulations. CRFacadeDesign may take the following actions:

  • Access to public information in the User profile.
  • Send personal and individual messages through the Social Network channels.

Users can always control their connections, delete content that no longer interests them, and restrict who they share their connections with. To do so, they must access their privacy settings on the social network.

Publications

Once the User has joined the CRFacadeDesign page, they may post comments, links, images, photographs, or any other type of multimedia content supported by the Social Network on the page. In all cases, the User must be the owner of said content, hold the copyright and intellectual property rights, or have the consent of the third parties concerned. Any publication on the page, whether text, graphics, photographs, videos, etc., that violates or is likely to violate morality, ethics, good taste, or decorum, and/or that infringes, violates, or breaches intellectual or industrial property rights, image rights, or the law is expressly prohibited. In such cases, CRFacadeDesign reserves the right to immediately remove the content and may request the permanent blocking of the User.

CRFacadeDesign shall not be held liable for content freely published by the User.

Users should bear in mind that their posts will be seen by other Users, and therefore they themselves are primarily responsible for their privacy.

Images that may be published on the page will not be stored by CRFacadeDesign, but will remain on the social network.