PRIVACY POLICY – Sergio Nisticò Interior Design

1.- PRIVACY POLICY

SERGIO NISTICÓ is committed to protecting your privacy. This Privacy Policy explains how we collect and use your personal data, and what rights and choices you have regarding it. Please also refer to our Cookie Policy, which explains the use of cookies and other tracking devices on our website.

Who is responsible for the processing of your personal data?

SERGIO NISTICÓ, with tax identification number (N.I.F.) Y-4450744-M, registered office at C/ PINTOR VELÁZQUEZ No 59, BAJO A, C.P. 03004, ALICANTE, phone number +34 645-30.68.30 and email info@sergionistico.com, is the data controller responsible for the processing of your personal data. Therefore, we guarantee the security and confidential treatment of your data in accordance with the provisions of the EUROPEAN DATA PROTECTION REGULATION (EU) 2016/679, as well as any other applicable legislation.

What types and categories of personal data do we process?

The categories of data we will need from you are classified as follows:

Identification and contact data.
Billing and payment data.
Connection and browsing data.
Within each of these data categories, the following types of data may be requested from you or provided by you at some point during our relationship:
Identifying and contact data: Full name, postal address, shipping address, date of birth, phone number, and email address. It may happen that you provide us with data of third parties with whom you have some kind of relationship. In that case, we will process the data because we understand that you have informed those third parties that you would provide us with their data and have directed them to this privacy policy to know how we handle their data. Nonetheless, when possible, we will inform them directly about this privacy policy.
Billing and payment data: Billing address, current account number, and bank entity details. These data are necessary to issue and complete an invoice. For companies, in compliance with tax obligations, it is mandatory to have a VAT ID (NIF/CIF) to complete the invoice. Payment or card data are neither stored nor collected in our systems; instead, they are sent directly via the payment gateway to the payment service provider.
Connection and browsing data: In this case, we may have access to the IP address of your device, the device identification code, and metadata.
For companies, we will process the company name, tax identification number, contact person’s full name, address, and phone number.
We kindly ask that the data you provide us be accurate and up-to-date. If the data you provide are false, incomplete, inaccurate, or outdated, we reserve the right to terminate the contracted services or any other agreement entered into.
For what purposes do we use your personal data?

At SERGIO NISTICÓ, we use your data to the extent permitted by the GDPR, as well as by any other applicable current regulations. In all cases, the processing will be carried out for specific, explicit, and legitimate purposes, and under no circumstances will the data be processed in a way that is incompatible with those purposes. Specifically, the following processing activities will be carried out:

To respond to your inquiries, requests, or applications.
To manage the contractual relationship and the provision of consultation services requested by the client.
To manage your phone calls.
Issue payment receipts for the services provided to the client.
For the proper performance of the requested service, the client’s personal data necessary to monitor its progress during the provision of the service will be processed.
To carry out all administrative, tax, and accounting procedures necessary to fulfill our contractual commitments and comply with tax and accounting obligations.
Compliance with our legal obligations.
To analyze and improve our services and communications with you.
To supervise and evaluate compliance with our policies and regulations.
Manage the sending of information and commercial prospecting by any means, provided explicit consent has been given.
What is the legal basis for the processing of your data?
The processing of personal data that we carry out is always done in compliance with the provisions of Article 6 of the GDPR, as well as Article 8 of Organic Law 3/2018. In cases where the legal basis for the primary purpose of data use is not found in any of the aforementioned legal grounds, the consent of the data subject will be requested for the processing.

How long do we keep your data?

Personal data will be kept for the time necessary to provide the service or

personal data will be kept for the time necessary to provide the service or while the data subject does not withdraw their consent. Afterwards, the data will be deleted in accordance with the data protection regulations, which implies their blocking and making them available only upon request from Judges and Courts, the Ombudsman, the Public Prosecutor’s Office, or the competent Public Administrations during the statute of limitations period for any claims that may arise. Once this period has elapsed, the data will be completely erased.

Who do we share your data with?

We inform you that the data provided will be shared with various product and service providers as necessary for the execution of the requested processing. Our providers are obliged to use the data provided solely and exclusively for the fulfillment of the requested service. The personal data processed by SERGIO NISTICÓ to achieve the purposes detailed above may be communicated to the following recipients, depending on the legal basis for such communication:

Public administrations in cases provided for by law.
The State Security Forces and Corps
Banks and financial institutions for the collection of contracted services.
Public records of financial solvency and fraud prevention systems.
What are your rights?
Rights:
In particular, regardless of the purpose or legal basis under which we process your data, you have the right to:
Right of access:
Any individual has the right to obtain confirmation as to whether SERGIO NISTICÓ is processing personal data concerning them.
Right to rectification:
You have the right to access your personal data that we hold and request its rectification when it is inaccurate.

Right to erasure (right to be forgotten):
You have the right to request the deletion of your personal data when the data collected is no longer necessary for the purpose for which it was obtained.

Right to restriction of processing:
You may request the restriction of the processing of your data and ask that the data be retained for the exercise or defense of claims.

Right to data portability:
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, and to transmit those data to another data controller.

Right to withdraw consent:
You have the right to withdraw any consent you have previously given us to process your personal information. If you withdraw your consent, this will not affect the legality of the processing based on your consent before its withdrawal.

How can you exercise your rights?

S
SERGIO NISTICÓ is committed to respecting the confidentiality of your personal data and to guaranteeing the exercise of your rights. You can exercise your rights free of charge by sending us an email to info@sergionistico.com, simply indicating the reason for your request and the right you wish to exercise. Please note that, according to the law, it is mandatory to provide a copy of your ID card (DNI) or foreigner identification number (NIE).
We also inform you that, following our transparency policy, you can request the rights forms by any of the following means: at our headquarters or by email.
You are also informed that you can exercise your rights by filing a complaint with the competent supervisory authority if you do not obtain satisfaction in the exercise of your rights.

Would you like a form to exercise your rights?

We have forms available to exercise your rights. You can request them by email, or if you prefer, you may use the forms provided by the Spanish Data Protection Agency or third parties.
These forms must be electronically signed or accompanied by a photocopy of your ID (DNI).
If someone represents you, you must provide us with a copy of their ID (DNI), or they must sign the form with their electronic signature.
The forms can be submitted in person, sent by mail, or by email to the address of the Data Controller indicated at the beginning of this document.