Privacy Policy
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter GDPR) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), we inform users of this website that personal data provided through it or by any other means will be processed in accordance with this Privacy Policy.
Data Controller
Business Name: Berta Sola Sánchez
Address: C/Perfecte 11
Phone: 645.260.599
Email: info@bertasola.com
Website: bertasola.com
Tax ID: B05269659
Purposes for Processing Your Personal Data
In Berta Sola Sánchez, we may process the personal data collected for the following purposes:
– Contact Form: Data provided by users through the contact form on our website, available to any user who wants to send us a question, doubt, suggestion, or complaint. This data will be processed only to manage the inquiries received.
– Private Area Registration: Data provided through the registration form for the private area of our website by users interested in becoming active users of our private area. This data will be processed only to manage their request and, once accepted, provide them with access credentials through this channel.
– Private Area Access: Manage the access of users enabled in this private area, manage their participation requests, facilitate the management of their sales points, collect the documentation needed to carry out our activity, process the user’s withdrawal from this service, and provide access to their participation history.
– Advertising of Own Products: Send, through postal mail, email, SMS, and other current and future electronic communication methods, general advertising related to products and services of Berta Sola Sánchez.
– Advertising of Third-Party Products: Send, through postal mail, email, SMS, and other current and future electronic communication methods, general and/or customized advertising based on your characteristics, either of our products and services or those of trusted third-party companies associated or actively collaborating with Berta Sola Sánchez.
– Other Channels: Collect your personal data through other channels owned by Berta Sola Sánchez, such as phone, email, and social networks, in which case we will inform you of the purposes for which we will process your data and obtain your consent in all cases.
– Compliance with Legal Obligations: Fulfill legal obligations imposed on Berta Sola Sánchez in any order, such as security or tax matters. This may involve, depending on the case and closely related to the previous purpose, responding to judicial and/or administrative orders or requirements.
What Categories and Data Do We Process?
The categories of personal data that Berta Sola Sánchez processes about its users, employees, collaborators, and suppliers are:
– Identifying – Personal characteristics – Family and social circumstances – Employment details – Academic and professional – Judicial and administrative – Labor and attendance control – Economic, financial, and insurance – Transactions – Commercial information – Convictions and criminal offenses – Special (Health data) – Multimedia (Image, video, audios, etc.)
How Do We Obtain Them?
All personal data collected in the previous categories have been obtained directly from the interested parties, following the principle of proportionality. They are appropriate, relevant, and limited in relation to the purpose for which they were collected and processed in accordance with the principles established in the GDPR (art. 5). Depending on the purpose, the processed data include the following types:
– Identifying (Name and surname; ID / CIF / identification document; Address; Email; Phone; Fax; Social security number / mutual; Signature; Electronic signature; Username; Image; Driver’s license; Telecommunications network traffic data; User navigation data that can identify them; Voice).
– Personal characteristics (Gender; Marital status; Nationality, Age) – Family and social circumstances: Number of children; Age of children; Permits, licenses, and authorizations; Relationship; Registrations in forums, clubs, or associations; Grants and subsidies; Residence permit.
– Commercial information (Activities and businesses; Commercial licenses; Artistic creations).
– Transaction data: Data of economic transactions carried out with you and inherent to the service we provide to you.
– Multimedia (Image, video, audios, etc.)
Any type of personal data subject to processing that may be required by applicable law to Berta Sola Sánchez.
Legal Basis for the Processing of Your Data
Personal data will be processed with the highest privacy and confidentiality controls, detailed in the Register of Treatment Activities prepared by Viruta Fina S.L, available to the corresponding Control Authorities as the data controller. The legal basis for the detailed purposes are:
– The information collected in the «contact,» «registration in the private area» forms, and through «Other channels» will be processed to address your requests and/or various inquiries. Depending on the nature of the request, the purpose will be to manage the queries and requests collected through them, and electronic communications of informative nature that arise in accordance with your request. The legitimizing basis for these processes is the express consent granted by you and, where applicable, for the provision of contracted services.
– «Access to Private Area»: We will process the information we already have along with other information that is automatically generated inherent to the service we provide to authorized users from this area. The legal basis in this case is the legitimate interest that supports us in the contractual relationship between the user and Berta Sola Sánchez and/or, where applicable, for the provision of contracted services.
– «Advertising of Own and Third-Party Products»: The legal basis for these processes is the express consent granted by you. The user may revoke this consent at any time from any communication received, selecting the link created expressly for this purpose.
– «Compliance with Legal Obligations»: The data processing in these cases will have as its legal basis the necessary treatment to comply with a legal obligation applicable to the data controller.
Although automated decisions will not be made, Berta Sola Sánchez may create a commercial profile based on the information provided by the user and their interactions with the contents offered on the portal, to send them personalized information even through electronic means. In this case, the legal basis is the legitimate interest of Berta Sola Sánchez in knowing the profile of the user interested in its communications and services to offer personalized information and content adapted to their interests and activity.
To Whom Do We Disclose Your Data?
Personal data processed by Berta Sola Sánchez will never be shared with any entity unless you, as the interested party, have expressly authorized us to do so. However, to achieve the purposes indicated above, your data may be communicated to the following recipients based on the legal basis, as we intend to ensure the proper development of the contractual and/or commercial relationship and comply with our legal obligations:
– Public Bodies and Administrations. – Financial entities (for payment management) – Companies belonging to Berta Sola Sánchez
Additionally, we may provide and/or grant access to your personal data to third-party companies that carry out subcontracted services (e.g., event promoters, municipalities, IT, consulting, accommodations, logistics, tax and accounting advisory, etc.). Berta Sola Sánchez requires all these companies to maintain the same levels of security established regarding personal data and, when necessary, to ensure the custody, security, and privacy, we will link these subcontracting to specific legal commitments, conditioning the subcontractor to use the information only following the specific instructions we give them for this purpose.
How Long Will Your Data Be Retained?
Personal data will be kept for the time necessary for the provision of the service or until you withdraw your consent. Subsequently, the data will be deleted in accordance with the data protection regulations, which implies their blocking, being available only at the request of Judges and courts, the Public Prosecutor’s Office, or competent Public Authorities during the prescription period of possible actions that may arise, and after this, their complete deletion.
Other data may be kept properly anonymized and secured for historical and statistical purposes, which is not incompatible with the purposes for which they were collected.
Your Rights as an Interested Party
Any interested person may exercise their rights in accordance with the provisions of the GDPR, LOPDGDD, and related regulations. The exercise of the rights provided is free, but if the requests are manifestly unfounded or excessive (e.g., repetitive), Berta Sola Sánchez may refuse to act or charge a fee proportional to the administrative costs incurred (GDPR art. 12.5 and LOPDGDD art.13.3).
To exercise your rights, you can contact Berta Sola Sánchez through any of the means indicated in the Data Controller section in this Privacy Policy, providing in all cases a copy of your ID or another identification document that fulfills the same function. Although the most convenient way is to access the Rights Exercise Portal enabled at the following link
The rights that can be exercised are as follows:
− Right of access to your data. We will inform you whether we are processing your data, what data we have, how we obtained it, for what purpose it is being processed, whether it has been transferred or communicated to third parties, and the storage period.
− Right of rectification, you may rectify inaccurate personal data.
− Right of objection, especially when we do not have to process it to comply with a contractual requirement or other legal requirement, or when the purpose of the processing is direct marketing or advertising. We will stop processing your data as you indicate, unless for legitimate reasons or in the exercise and/or defense of possible claims, they must continue to be processed.
− Right to erasure («right to be forgotten»), if the data is no longer necessary for the purposes for which it was collected.
− Right to restriction of processing, in which case it will only be retained for the exercise or defense of claims.
− Right to data portability, to obtain your personal data in a structured and readable format in case you want your data to be processed by a third party.
− Right not to be subject to individual automated decisions, so that you determine that you are not the subject of a decision based solely on the processing of your data, including the creation of profiles, that has legal effects on you or significantly affects you in a similar way.
− Right to information, so that you know as an interested party who processes your personal data, for what purposes, how they are processed, and how or against whom you should exercise your rights.
The exercise of these rights may be limited; if to fulfill your request we have to disclose data about another person, or if you ask us to delete some records that we are obliged to keep due to a legal obligation or a legitimate interest, such as defense against claims, even in cases where the right to freedom of expression and information must prevail.
If you have not obtained satisfaction in the exercise of your rights against Berta Sola Sánchez, or if you believe that your data is being processed differently from how it was collected, you have the right to file a complaint with the supervisory authority, with the Spanish Data Protection Agency being the one indicated in the case of Spain. (Spanish Data Protection Agency)
Security Measures
Berta Sola Sánchez has adopted and implemented the security levels required by current European and Spanish regulations regarding data protection, and therefore complies with the security measures established by said legislation, taking into account the state of the art, application costs, the nature, scope, context, and purposes of the processing, as well as the risks of variable probability and severity for your rights and freedoms as a person.
The processing of personal data is always carried out after applying appropriate technical and organizational measures to ensure an adequate level of security to the risk and, where appropriate, through third parties duly authorized by the interested parties or with whom we have contracts for data processing managers adapted to current regulations.
With each of the measures, we seek to guarantee the permanent confidentiality, integrity, availability, and resilience of the systems and processing services. Likewise, we regularly carry out verification, evaluation, and assessment processes of the effectiveness of technical and organizational measures to ensure the security of processing, conducting a complete audit annually.
Modifications to Our Privacy and Data Protection Policy
Berta Sola Sánchez may make modifications and corrections to this section, in its legal notice, or cookie policy as many times as necessary. When this occurs, it will inform all registered users of the changes made in the corresponding section, so that they can consult them and know how the changes may affect their relationship with Berta Sola Sánchez.
Processing of Your Data Outside the European Economic Area.
Countries outside the European Union (and the European Economic Area, EEA) treat the protection of personal data differently from countries in the European Union. Berta Sola Sánchez uses service providers located outside the European Union for the processing of your data.
Currently, the EU Commission has not ruled that these third countries generally offer an adequate level of protection. Therefore, following our commitment to give you the maximum guarantees regarding the personal data you provide to us when browsing our content or using our services. Therefore, you should know that when data is processed outside the EU or the EEA context, there is a risk that they may access your data without informing you or allowing you to appeal.
The transfer of your browsing data to these providers will only be made if you have given us your express consent, by accepting the cookie notice for the group to which it refers. If you do not accept this option, your browsing data will not be provided to these companies.
In the event that you have given your consent, we inform you as a user that, in compliance with the applicable data protection regulations, the processing of your browsing data will be based on the provisions of Article 49, paragraph 1, letter a of the GDPR
Below, we inform you of the service providers to whom we make international data transfers:
– Google LLC, as a subsidiary company of Alphabet. It uses analytical cookies (Google Analytics) and technical cookies to distinguish between humans and robots regarding the use of the website (including the IP address). The information will be directly transmitted and stored by Google on servers in the United States. Information regarding the data processing it performs can be found at the following link
– DoubleClick by Google, as a subsidiary company of Delaware. It uses a set of advertising services provided by Google that uses cookies to increase the relevance of ads related to your recent searches. Information regarding the data processing it performs can be found at the following link
– Google AdSense, as a subsidiary company of Delaware. It uses a set of advertising services provided by Google, which uses cookies to improve advertising, target it based on content relevant to users, and improve performance reports for campaigns. Information regarding the data processing it performs can be found at the following link
– YouTube LLC, as a subsidiary company of Google LLC. It uses marketing cookies to record and maintain statistics on which videos the user has viewed, calculate bandwidth, and save user preferences. Information regarding the data processing it performs can be found at the following link
In Google’s Privacy Policy page, it is explained how Google manages privacy regarding the use of cookies and other information. You can also see a list of the types of cookies used by Google and its partners and all the information related to the use they make of advertising cookies.
