1. INFORMATION FOR THE USER

EXOTICOS MALAGA S.L.U., hereinafter referred to as the DATA CONTROLLER, is responsible for processing the User’s personal data and hereby informs the User that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD). Accordingly, the following information regarding the processing of personal data is provided:

Purpose of the processing: to maintain a commercial relationship with the User. The processing activities envisaged are as follows:

• Sending advertising and commercial communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, whether existing now or developed in the future, that enables commercial communications to be sent. These communications shall be sent by the DATA CONTROLLER and shall relate to its products and services or to those of its partners or suppliers with whom it has entered into a promotional agreement. In such cases, third parties shall never have access to personal data.
• Carrying out statistical studies.
• Processing orders, requests or any other type of enquiry submitted by the User through any of the contact methods made available to them.
• Sending the website newsletter.

Legal basis for processing: the consent of the data subject.

Data retention criteria: personal data shall be retained for no longer than is necessary to fulfil the purpose for which they are processed. When the data are no longer required for that purpose, they shall be deleted using appropriate security measures to ensure the pseudonymisation of the data or their complete destruction.

Disclosure of data: Data shall not be disclosed to third parties unless required by law.

Rights of the User:

• The right to withdraw consent at any time.
• The right of access, rectification, portability and erasure of their data, as well as the right to restrict or object to their processing.
• The right to lodge a complaint with the supervisory authority (agpd.es) if they consider that the processing does not comply with current legislation.

Contact details for exercising your rights:
Postal address: EXOTICOS MALAGA SLU. CALLE SAINT EXUPERY, 10 LOCAL 2, 29007 MALAGA (MALAGA), SPAIN. Email: info@aracavia.es
Email address: info@aracavia.es

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

By ticking the relevant boxes and entering data in fields marked with an asterisk (*) in the contact form or in download forms, Users expressly, freely and unequivocally accept that their data are necessary for the service provider to deal with their request. The provision of data in the remaining fields is voluntary. The User guarantees that the personal data provided to the DATA CONTROLLER are accurate and undertakes to notify the DATA CONTROLLER of any changes to such data.

The DATA CONTROLLER expressly informs and guarantees Users that their personal data shall under no circumstances be transferred to third parties and that, whenever any transfer of personal data is to be made, the Users’ prior express, informed and unequivocal consent shall be obtained. All data requested through the website are mandatory, as they are necessary in order to provide the User with an optimal service. If all the requested data are not provided, it cannot be guaranteed that the information and services provided will fully meet the User’s needs.

3. SECURITY MEASURES

In accordance with the provisions of current personal data protection legislation, the DATA CONTROLLER complies with all applicable GDPR requirements governing the processing of personal data for which it is responsible, and in particular with the principles set out in Article 5 of the GDPR, under which personal data must be processed lawfully, fairly and transparently in relation to the data subject and must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The DATA CONTROLLER guarantees that it has implemented appropriate technical and organisational policies and measures in order to apply the security measures required by the GDPR, with the aim of protecting the rights and freedoms of Users, and that it has provided them with the appropriate information so that they may exercise those rights.