Privacy Policy

Basic information about Data Protection

Responsible María José Castillo Sánchez

Purpose: Provision of online services

Purpose Provision of online services Management of web users Commercial communications related to our services

Legitimacy Express consent and legitimate interest

Recipients No data is disclosed to third parties, unless legally required.

Rights Access, rectify and delete data, as well as other rights, as explained in the additional information.

Additional information

You can consult the additional and detailed information on Data Protection in the attached clauses found at www.lamecaservices.com/politica-de-privacidad.

At La Meca Services we work to offer you through our products and services the best possible experience. In some cases, it is necessary to collect information to achieve this. We care about your privacy and we believe that we must be transparent in this regard.

Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE EUROPEAN COUNCIL of 27 April 2016 (hereinafter, “GDPR”) on the protection of individuals with regard to the processing of personal data. With regard to the processing of personal data and on the free movement of such data, and LAW 34/2002, of July 11, 2002, on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), María José Castillo Sánchez informs the user that, as responsible for the treatment, will incorporate the personal data provided by users in an automated file.

Our commitment begins by explaining the following:

Your data are collected so that the user experience improves, attending to your interests and needs.

We are transparent about the information we collect about you and why we do it.

Our intention is to provide you with the best possible experience. Therefore, when we use your personal information we will always do so in compliance with the regulations, and when necessary, we will ask for your consent.

We understand that your information belongs to you. Therefore, if you choose not to authorize, you can ask us to stop processing them.

Our priority is to ensure your security and to process your data in accordance with European regulations.

For more information about the processing of your data, please refer to the various sections of the privacy policy below:

Who is responsible for the processing of your personal data?

Identity: María José Castillo Sánchez

Registered Address: Calle Acebuche 39A

C.I.F. nº: 30210223E

Email: administracion@lamecaservices.com

La Meca Services has appointed a Data Protection Officer or an internal contact person within its organization. If you wish to make a query in relation to the processing of your personal data, you can contact him by email at administracion@lamecaservices.com

What personal data do we collect?

The personal data that the user may provide:

Name, address and date of birth,

telephone number and e-mail address,

location.

Information related to payments and returns.

IP address, date and time you accessed our services, internet browser you use, and data about your device’s operating system of the device.

Any other information or data you choose to share with us.

In some cases, it is mandatory to fill in the registration form to access and enjoy certain services offered on the website; likewise, not providing the personal data requested or not accepting the present data protection policy implies the impossibility of subscribing, register or participate in any of the promotions in which personal data are requested.

Why and for what purpose do we treat your data?

In La Meca Services we treat the information provided to us by the interested parties for the following purposes:

Manage orders or hire any of our services, either online or in physical stores.

To manage the sending of the information requested.

Develop commercial actions and perform the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and information tasks, automatic evaluations, profiling and segmentation of customers in order to personalize the treatment of the needs and improve the customer’s online experience.

Develop and manage contests, sweepstakes or other promotional activities that may be organized.

In some cases it will be necessary to provide information to the Authorities or third party companies for audit purposes, as well as to handle personal data from invoices, contracts and documents in order to respond to claims from customers or Public Administrations.

We inform you that the personal data obtained as a result of your registration as a user will be part of the Register of Activities and Treatment Operations (RAT), which will be updated periodically in accordance with the provisions of the RGPD.

What is the legitimacy for the processing of your data?

The processing of your data may be based on the following legal bases:

Consent of the interested party for the contracting of services and products, for contact forms, requests for information or registration in e-newsletters.

Legitimate interest for the processing of data of our customers in direct marketing activities and express consent of the data subject for everything related to automatic evaluations and profiling.

Fulfillment of legal obligations for fraud prevention, communication with public authorities and third party claims.

How long do we keep your data?

The processing of the data for the purposes described above will be kept for the time necessary to fulfill the purpose for which it was collected (for example, for the duration of the commercial relationship), as well as for compliance with the legal obligations arising from the processing of the data.

To which recipients is your data communicated?

In some cases, only when necessary, La Meca Services will provide user data to third parties. However, data will never be sold to third parties. External service providers (e.g., payment providers or delivery companies) with whom La Meca Services works may use the data to provide the use the data to provide the corresponding services, however, they will not use such information for their own information, for their own purposes or for transfer to third parties.

La Meca Services takes care to ensure the security of personal data when it is sent outside the company and ensures that third party service providers respect confidentiality and have adequate measures in place to protect personal data. These third parties are obliged to ensure that the information is handled in accordance with data privacy regulations.

In some cases, personal data may be required by law to be disclosed to public bodies or other parties, only what is strictly necessary for the fulfillment of such legal obligations will be disclosed.

Personal data obtained may also be shared with other group companies.

Where is your data stored?

In general, data is stored within the EU. Data that is sent to third parties outside the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the “Privacy Shield”.

What rights do you have and how can you exercise them?

You can send your communications and exercise your rights by sending a request to the following e-mail addresse-mail: administracion@lamecaservices.com.

Pursuant to the provisions of the GDPR you can request:

Right of access: you can request information about the personal data we have about you.

Right of rectification: you can communicate any change in your personal data.

Right of deletion and oblivion: you can request the deletion of your personal data after it has been blocked.

Right to limit processing: this means restricting the processing of personal data.

Right of opposition: you can withdraw your consent to the processing of your data, opposing further processing.

Right to portability: in some cases, you can request a copy of the personal data in an electronic format, structured, commonly used, machine-readable format for transmission to another responsible party.

Right not to be subject to individualized decisions: you may request that decisions not be made based solely on automated processing, including profiling, which produces legal effects or significantly affects the data subject.

In some cases, your request may be refused if you request the deletion of data necessary to comply with legal obligations.

In addition, if you have a complaint about the processing of your data, you can file a complaint with the data protection authority.

Who is responsible for the accuracy and veracity of the data provided?

The user is solely responsible for the veracity and correctness of the data included, exonerating La Meca Services of any responsibility in this regard. The users guarantee and respond, in the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the registration or subscription form. La Meca Services reserves the right to terminate the contracted services that had been concluded with the users, in case the data provided are false, incomplete, inaccurate or not up to date.

La Meca Services is not responsible for the veracity of the information that is not of its own elaboration and of which another source is indicated, and therefore does not assume any responsibility for any hypothetical damages that may hypothetical damages that could be caused by the use of such information.

La Meca Services reserves the right to update, modify or eliminate the information contained in its web pages being able even to limit or not to allow the access to the above mentioned information. La Meca Services is without any responsibility before any damage or damage that could suffer the user as a result of errors, defects or consequence of errors, defects or omissions, in the information provided by La Meca Services, provided that it comes from outside sources.

Likewise, the user certifies that he/she is over 14 years of age and that he/she has the legal capacity necessary for the consent to the processing of their personal data.

How do we treat the personal data of minors?

In principle, our services are not specifically addressed to minors. However, in the event that any of them are addressed to minors under fourteen years of age, in accordance with Article 8 of the GDPR and Article 7 of the GDPR of the RGPD and Article 7 of the LO3/2018, of December 5 (LOPDGDD), La Meca Services will require the valid, free, unequivocal, specific and informed consent of their legal guardians to process the personal data of minors. In this case, the DNI or other form of identification of the person giving consent will be required.

In the case of persons over fourteen years of age, data may be processed with the user’s consent, with the exception of those cases in which the law requires the assistance of the holders of parental or legal holders of parental authority or guardianship.

What security measures do we apply to protect your personal data?

La Meca Services has adopted the legally required levels of security for the protection of Personal Data legally required, and tries to install those other additional technical means and measures within its reach to avoid the loss, misuse, unauthorized access and theft of the Personal Data provided to La Meca Services.

La Meca Services is not responsible for hypothetical damages or harm that could be derived from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operative functioning of this electronic system, caused by reasons beyond the control of La Meca Services; overloads of telephone lines or overloads in the Data Processing Center, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties through illegal intromissions beyond the control of La Meca Services. This notwithstanding, the user must be aware that Internet security measures are not impregnable.

Links to other websites

The website www.lamecaservices.com may contain links to other websites. By clicking on one of these links and access an external website, the visit will be subject to the privacy policy of that website, being La Meca Services disassociated from any kind of responsibility about its privacy policy.

How do we use cookies?

The La Meca Services website uses cookies to optimize and personalize your browsing experience. Cookies are physical information files that are stored in the user’s own terminal. The information collected through cookies is used to facilitate user navigation through the portal and optimize the browsing experience. The data collected through cookies can be shared with the creators of the same, but in no case the information obtained by them will be associated with personal information obtained by cookies will not be associated with personal data or data that can identify the user.

However, if the user does not want cookies to be installed on your hard drive, you have the possibility to configure the browser in such a way as to prevent the installation of these files. For more information see our Cookie Policy www.lamecaservices.com/politica-de-cookies.

Can the privacy policy be modified?

This privacy policy is subject to change. We recommend that you review the privacy policy from time to time.