First informative layer

Artbyrodca.com informs you that the personal data provided when filling in this form will be processed by Cristina Rodca as the person responsible for this website.

The purpose of the collection and processing of the personal data we request is to manage the products or services requested and to comply with the legal obligations applicable to the person responsible.

By ticking the acceptance box, you are giving your legitimate consent for your data to be processed in accordance with the purposes described in the privacy policy .

If you do not enter the personal data that appear on the form as obligatory, it will not be possible to respond to your request.

It is possible to exercise the rights of access, rectification, limitation and deletion of data by contacting the following e-mail address: [email protected]. It is also possible to exercise the right to lodge a complaint with a supervisory authority (www.dataprotectionauthority.be) in the event of considering that the rights recognized by the applicable data protection regulations have been infringed.

For further information, please consult our privacy policy.

Second layer of information

Cristina Rodca (hereinafter, the Holder) informs you about its Privacy Policy in relation to the processing and protection of personal data of users or customers that may be collected during the purchase process or any other through the website https://artbyrodca.com/shop/.

The Owner guarantees compliance with the applicable regulations in force regarding the protection of personal data, currently reflected in the Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPD) and in Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter, RGPD). Compliance with the provisions of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce is also guaranteed.

DATA CONTROLLER

Controller: Cristina Rodca

ID: B 4592832 76

Address: Dreve Richelle 272, 1410 Waterloo

E-mail: [email protected]

Contact: [email protected]

PRINCIPLES APPLIED IN TREATMENT

Lawfulness, fairness, transparency

The Data Controller shall obtain consent to the processing of personal data explicitly, for one or more purposes about which it shall inform the user in a transparent manner.

Data minimisation

Data shall be collected only for the purposes for which they have been informed and the processing shall be limited to what is strictly necessary for the fulfilment of those purposes.

Limitation of the retention period

The data shall be kept by the Data Controller for the time strictly necessary for the fulfilment of the purposes of the processing.

Principle of integrity and confidentiality

The personal data collected shall be processed with due security and confidentiality.

PURPOSE OF PROCESSING

If you are a Customer or User, the personal data will be processed for the following purposes:

  • Manage and execute the products requested.
  • To send communications of interest if the data subject has given due authorization.
  • To comply with the legal obligations corresponding to the data controller.

Different categories of personal data will be processed, among which are:

  • Identification data (name and surname, ID card number…)
  • Contact details (email, mobile phone number…)
  • Bank details (account number, bank card number…)
  • Other information provided by the interested party

In the case of a Supplier, the following professional categories will be dealt with:

  • Identification data (name and surname, ID card number…)
  • Contact details (email, mobile phone number…)
  • Bank details (account number, bank card number…)
  • Other information provided by the interested party

In this case, personal data will be processed for the following purposes

  • Administrative, tax and accounting management.
  • Monitoring and control of the commercial relationship.
  • Fulfilling the legal obligations corresponding to the data controller.

LEGITIMACY FOR THE PROCESSING

In accordance with Article 6.1 of the GDPR, the legitimate basis for the processing of the data in this case is as follows:

  • Consent of the data subject.
  • Execution of the contract or the implementation of pre-contractual measures with the data subject in order to provide the product or service purchased by the data subject from the Data Controller.
  • Fulfilment of legal obligations

 

OTHER ISSUES

Am I obliged to provide personal data?

Cristina Rodca will only request the data strictly necessary for the performance of the purpose for which they are collected, so it will not be possible to provide the requested service without these data.

How long will we keep your data?

The data obtained during the relationship between the data subject and Cristina Rodca will be kept for a period of 1 year from the last confirmation of interest or for as long as it is compulsory because it is required by law.

To which recipients will your data be communicated?

The data processed by Cristina Rodca may be disclosed to third parties where required by law.

In addition, Cristina Rodca has service providers for whom it is necessary to communicate data (e.g. parcel services). The relationship with these companies is regulated in article 28 of the GDPR. The data accessed by these companies will only be used for the necessary business purpose and will not be retained for any other purpose.

RIGHTS OF THE CONSUMER/USER WHO PROVIDES HIS/HER DATA

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data.

They may also request deletion when the data is no longer necessary for the purposes for which it was collected.

Likewise, interested parties may request the limitation of the processing of their data, as well as opposition to the processing of their data. Cristina Rodca will cease to process such data, except for legitimate reasons or for the exercise or defence of claims.

The user may send a letter to Cristina Rodca at any time for the following:

  • – To revoke the consents granted.
  • – Obtain confirmation as to whether personal data concerning the User are being processed.
  • – Access their personal data.
  • – Rectify inaccurate or incomplete data.
  • – Request the deletion of their data under the terms of article 17 of the GDPR.
  • Obtain the limitation of data processing when any of the conditions provided for in article 18 of the RGPD are met.
  • Request the portability of your data.
  • Contact the DPO Cristina Rodca.
  • File a complaint with the supervisory authority (www.dataprotectionauthority.be) if you consider that your rights under the applicable data protection regulations have been infringed.

The user may choose to send the letter to the address of the responsible person or to send an e-mail. Both addresses are available in point 1 of this privacy policy. In both cases, a photocopy of your identity document must be enclosed.

Cookies may be used during the provision of web services. For more information, please consult the cookie policy.