Data protection policy

Who is responsible for the processing of personal data?
The person responsible for the processing of personal data is 2003 TOT GESTIÓ NOU, SL., With CIF B17747932 and address at Av. La Pau, 26 1st 6th, Platja d'Aro (CP 17250), tel. 972 825 180, email, Figure registered in the Mercantile Register of Girona, Volume, Folio, Section, Sheet, Registration.

For what purpose and with what legitimacy do we process the data?
Contact. We take care of queries from people who contact us by e-mail, contact forms on our website or by telephone. We process this information with the consent of the addressee.

Customer service. We record customers and any additional data that may be generated as a result of the business relationship with these customers. The business relationship involves incorporating data into accounting, billing or information to the tax administration. We process this data in compliance with contractual relationships and legal obligations.

Management of data from our suppliers. We process the data of the suppliers from whom we obtain services or goods. We obtain the data necessary to maintain the business relationship and use it solely for this purpose. We process this data in compliance with contractual relationships and legal obligations.

Information on products and services. With the permission of the customer, their contact details are used to send advertising related to our services or products. We process this data based on the consent of the person receiving the communications.

To whom is the data communicated?
As a general rule, we only communicate data to administrations or public authorities and always in compliance with legal obligations. In billing we can communicate them to banks. No data transfers are made outside the scope of the European Union (international transfer).

How long do we keep the data?
We comply with the legal obligation to limit the retention period of data to the maximum. For this reason, only the time necessary and justified by the purpose for which it was obtained are kept. In certain cases, such as the data contained in the accounting documentation and invoicing, the tax regulations require that they be kept until they prescribe the responsibilities in this matter. In the case of data processed on the basis of the consent of the person concerned, they are kept until that person revokes that consent.

What rights do people have in relation to the data we process?
The people whose data we process have the following rights:
To access it. Right to know which personal data are being processed, what is the purpose for which they are processed, communications to other people, the right to obtain a copy or to know the expected retention period.
To request rectification. Right to have inaccurate data rectified.
To request its deletion. Right to request the deletion of data when, among other reasons, they are not necessary for the purposes for which they were collected and justified their processing.
Ask for treatment limitation. In certain circumstances there is the right to request the limitation of the processing of data: they will cease to be processed and will only be kept for the exercise or defense of claims.
In portability. The right to obtain personal data in a commonly used machine-readable format, and to transmit it to another controller if the data subject so decides.
To oppose treatment. By giving reasons related to your particular situation, a person may ask us to stop processing your data if it may harm you.

How can rights be exercised or defended?

The rights we have just listed can be exercised by sending a written request to 2003 TOT GESTIÓ NOU, SL. to our postal address or by sending an e-mail to indicating in all cases “Protection of personal data.” If a satisfactory response has not been obtained in the exercise of the rights, it is possible to file a complaint with the Spanish Data Protection Agency, through the forms or other channels accessible from its website