Privacy policy

I. Privacy and data protection policy

In accordance with current legislation, https://scalvent.com/ (hereinafter, also the Website) undertakes to adopt the technical and organisational measures necessary, according to the level of security appropriate to the risk of the data collected.

Laws incorporated in this privacy policy

This privacy policy is adapted to the Spanish and European legislation in force on the protection of personal data on the Internet. In particular, it complies with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).
• Spanish Royal Decree 1720/2007 of 21 December approving the Regulation implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
• Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The controller of the personal data collected on https://scalvent.com/ is Diego Cabrera Ramos, with national ID (DNI) 77173325E (hereinafter, the Controller). Contact details:

• Address: C/ Brunete 2B, 11007 Cádiz
• Contact email: diegoscalvent@gmail.com

Record of personal data

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by https://scalvent.com/ through the forms on its pages will be included and processed in our file in order to facilitate, speed up and fulfil the commitments established between https://scalvent.com/ and the User, or to maintain the relationship established in the forms the User completes, or to handle a request or enquiry. Likewise, in accordance with the GDPR and the LOPD-GDD, unless the exception in Article 30.5 GDPR applies, a record of processing activities is kept, specifying, by purpose, the processing activities carried out and the other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User's personal data shall be subject to the following principles set out in Article 5 GDPR and Article 4 et seq. of Organic Law 3/2018:

• Lawfulness, fairness and transparency: the User's consent will be required at all times, after fully transparent information about the purposes for which the personal data are collected.
• Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.
• Data minimisation: the personal data collected will be only those strictly necessary for the purposes for which they are processed.
• Accuracy: personal data must be accurate and kept up to date.
• Storage limitation: personal data will only be kept in a form that permits identification of the User for as long as necessary for the purposes of the processing.
• Integrity and confidentiality: personal data will be processed in a way that ensures their security and confidentiality.
• Accountability: the Controller is responsible for ensuring compliance with the above principles.

Categories of personal data

The categories of data processed on https://scalvent.com/ are only identification and contact data (for example, name, phone number, email, company and website). Special categories of personal data within the meaning of Article 9 GDPR are never processed.

Legal basis for processing

The legal basis for processing personal data is consent. https://scalvent.com/ undertakes to obtain the User's express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawing consent will not affect use of the Website.

Whenever the User must or may provide data through forms to make enquiries, request information or for reasons related to the content of the Website, they will be informed if completing any of them is mandatory because the data are essential for the operation in question.

Purposes of processing

Personal data are collected and managed by https://scalvent.com/ in order to facilitate, speed up and fulfil the commitments established between the Website and the User, or to maintain the relationship established in the forms the User completes, or to handle a request or enquiry.

The data may also be used for commercial personalisation, operational and statistical purposes and activities within the corporate purpose of https://scalvent.com/, as well as for data extraction, storage and marketing studies to adapt the Content offered to the User and to improve the quality, operation and navigation of the Website.

When the personal data are obtained, the User will be informed of the specific purpose or purposes of the processing, that is, of the use or uses that will be made of the information collected.

Retention periods

Personal data will only be kept for the minimum time necessary for the purposes of processing: the time needed to handle the User's request and, where applicable, to maintain the business relationship established, or until the User requests their erasure.

Recipients of personal data

The User's personal data will not be disclosed to third parties, except where required by law.

To provide the service, the data may be processed by technology providers acting as processors (web hosting and email), with the safeguards required by the GDPR.

If the Controller intends to transfer personal data to a third country or international organisation, the User will be informed, when the data are obtained, of the third country or international organisation concerned and of the existence or absence of an adequacy decision by the Commission.

Personal data of minors

In accordance with Article 8 GDPR and Article 7 of Organic Law 3/2018, only persons over 14 may lawfully consent to the processing of their personal data by https://scalvent.com/. For minors under 14, the consent of their parents or guardians is required, and processing will only be lawful to the extent that they have authorised it.

Confidentiality and security of personal data

https://scalvent.com/ undertakes to adopt the technical and organisational measures necessary, according to the level of security appropriate to the risk of the data collected, to guarantee the security of personal data and to prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or their unauthorised disclosure or access.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data are transmitted securely and confidentially, as the transmission of data between the server and the User, and back, is fully encrypted.

However, since https://scalvent.com/ cannot guarantee that the Internet is impregnable or that hackers or others will never fraudulently access personal data, the Controller undertakes to notify the User without undue delay of any personal data breach likely to result in a high risk to the rights and freedoms of natural persons. In accordance with Article 4 GDPR, a personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Personal data will be treated as confidential by the Controller, who undertakes to inform and to ensure, by means of a legal or contractual obligation, that such confidentiality is respected by its employees, associates and any person to whom it makes the information accessible.

Rights arising from the processing of personal data

The User may exercise the following rights recognised in the GDPR and Organic Law 3/2018 against the Controller:

• Right of access: the right to obtain confirmation as to whether https://scalvent.com/ is processing their personal data and, if so, to obtain information about the specific data and the processing carried out, as well as, among other things, available information about the origin of the data and the recipients of communications made or planned.
• Right to rectification: the right to have inaccurate personal data corrected or, taking into account the purposes of the processing, incomplete data completed.
• Right to erasure (right to be forgotten): the right, unless current legislation provides otherwise, to obtain the erasure of personal data when they are no longer necessary for the purposes for which they were collected; the User has withdrawn consent and there is no other legal basis; the User objects and there is no other legitimate reason to continue; the data have been processed unlawfully; the data must be erased to comply with a legal obligation; or the data were obtained in connection with an information society service offered directly to a minor under 14. In addition, taking into account available technology and the cost of implementation, the Controller shall take reasonable steps to inform other controllers processing the data of the request to erase any links to them.
• Right to restriction of processing: the right to restrict the processing of personal data when the User contests their accuracy; the processing is unlawful; the Controller no longer needs the data but the User needs them to make claims; or the User has objected to the processing.
• Right to data portability: where processing is carried out by automated means, the right to receive their personal data in a structured, commonly used and machine-readable format and to transmit them to another controller. Where technically possible, the Controller will transmit the data directly to that other controller.
• Right to object: the right to have https://scalvent.com/ not process their personal data or stop processing them.
• Right not to be subject to a decision based solely on automated processing, including profiling: the right not to be subject to an individual decision based solely on automated processing of personal data, including profiling, unless current legislation provides otherwise.

The User may exercise these rights by written communication addressed to the Controller with the reference «RGPD-scalvent.com», stating:

• The User's name and surname and a copy of their ID document. Where representation is accepted, the representative must also be identified by the same means and the document proving the representation must be provided. A copy of the ID may be replaced by any other legally valid means of proving identity.
• The request, with the specific reasons for it or the information to be accessed.
• Address for notifications.
• Date and signature of the applicant.
• Any document supporting the request.

This request and any attached documents may be sent to the following address and/or email:

• Postal address: C/ Brunete 2B, 11007 Cádiz
• Email: diegoscalvent@gmail.com

Links to third-party websites

The Website may include hyperlinks to third-party websites other than https://scalvent.com/, which are therefore not operated by https://scalvent.com/. The owners of those websites have their own data protection policies and are, in each case, responsible for their own files and privacy practices.

Complaints to the supervisory authority

If the User considers that there is a problem or infringement of current legislation in the way their personal data are being processed, they have the right to effective judicial protection and to lodge a complaint with a supervisory authority, in particular in the State of their habitual residence, place of work or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).

II. Acceptance and changes to this privacy policy

The User must have read and agreed to the conditions on the protection of personal data contained in this Privacy Policy, and accept the processing of their personal data, for the Controller to process them in the manner, for the periods and for the purposes indicated. Use of the Website implies acceptance of its Privacy Policy.

https://scalvent.com/ reserves the right to modify its Privacy Policy at its own discretion or as a result of legislative or case-law changes or doctrine of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is advised to consult this page periodically to stay informed of the latest changes.

This Privacy Policy has been updated to comply with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights.