Privacy Policy
This privacy policy aims to provide users with all the information regarding the processing of their personal data resulting from the use of the website alababala.com (hereinafter “the Website”) in accordance with the provisions of the General Data Protection Regulation 679/2016 (hereinafter “GDPR”) and the Organic Law on the Protection of Personal Data and Guarantee of Digital Rights 3/2018 (hereinafter “LOPDGDD”).
1. Data Controller
In accordance with Article 13 of the GDPR, we inform you that the data controller for the personal data of the website is Amelia Fernández Cela, with address at C/ Joies, 11, 08180 Moià, and VAT number 43440571B (hereinafter ‘ALABABALÀ’ or the ‘Controller’ interchangeably).
2. Purposes of Data Processing
Depending on the functionalities the user wishes to enjoy during their navigation on the Website, we may have access to the following data:
a) Identifying data: name, surname, address, etc.
b) Contact data: phone, email.
The controller will process the data for the following purposes:
- Manage and formalize the right of withdrawal as stipulated in the General Terms and Conditions of Contract.
- Respond to and address requests and inquiries that the user may make through any means of contact with the Controller.
- Send information about the catalog and books of ALABABALÀ through its Newsletter in cases where the user has subscribed to it and in accordance with the details outlined in section 3 of this Privacy Policy.
- Improve the services and content of the website.
- Comply with legal obligations or obligations related to a contractual relationship with the user.
- For marketing purposes, as detailed in point 7.
3. Newsletter Information
In the event that the user has authorized, by checking the relevant box in the forms, the subscription to the Newsletter, Alababalà will send information about its activities, trainings, services, updates, etc.
The user subscribed to the Newsletter may revoke their consent to receive communications at any time, using the link or button provided for this purpose in each communication, or by communicating their desire to revoke consent through the following channels: an email addressed to info@alababala.com or a postal mail addressed to Alababalà, C/ Joies, 11 (Mas Cal Bigas), 08180 Moià.
4. Recipients
Alababalà is the main recipient of the personal data of users. Under no circumstances will the data be processed for its own purposes.
The personal data obtained from the user will not be sold, rented, transferred, or made available to third parties.
5. Duration of Processing and Data Retention Period
The Controller will process the personal data of users as long as it is necessary for the service and/or until the user requests the deletion of the data.
In any case, even if the user requests the deletion of their data, ‘ALABABALÀ’ may retain and maintain them, under due blocking, for the period necessary to comply with its legal obligations and for their availability to the authorities competent in the different relevant matters.
6. International Data Transfers
The processing of user data is not subject to international data transfers. However, in the event that it is required, the Controller must ensure that these data processing activities are always protected with the appropriate safeguards, which may include:
EU-approved Standard Contractual Clauses: These are contracts approved by the European legislator that provide sufficient guarantees to ensure that the processing meets the requirements established by the GDPR.
Third-party certifications: For example, the Privacy Shield, a framework agreement between the EU and the United States that establishes a standardized framework for data processing in accordance with the requirements of the GDPR.
7. Profiling and Automated Data Processing
For some services, the Controller may process user personal data using automated means. This means that certain decisions are made automatically, without human intervention.
8. Exercise of Rights
Current legislation grants users a series of rights regarding the processing of their data, which are summarized below:
Right of access: the user has the right to know their personal data processed by the Controller and the purposes for which this personal data will be used.
Right to rectification: the user can request the rectification of their data at any time.
Right to erasure: the user may request, at any time, the erasure of their personal data from the Controller’s files. However, as indicated in the data retention section, in certain circumstances, compliance with current legislation may prevent the effective exercise of this right.
Right to object: the user may object to the processing of their data for any of the purposes for which the Controller processes their data, in accordance with the privacy policies applicable in each case.
Right to restriction of processing: the user may request the restriction of processing in the following cases:
a) If they consider that the data are not correct or accurate;
b) If they consider that their data are not being processed legitimately, but prefer to limit the processing to their deletion;
c) If the data are no longer necessary according to the purpose for which they were collected, but they need to be kept for legal claims;
d) If, having exercised the right to object to any processing, they are awaiting a response from the Controller.
Right to data portability: the user has the right to, whenever technically and reasonably possible, request that the personal data they have directly provided be communicated to another data controller.
Even if the data have been collected with the user’s consent, they may revoke it at any time, without consequences for them other than, according to the right exercised, being unable to provide certain services.
The user can exercise these rights by contacting ALABABALÀ through one of the following means, attaching a copy of their ID or equivalent identifying document: an email addressed to info@alababala.com or a postal mail addressed to ALABABALÀ, C/ Joies, 11 (Mas Cal Bigas), 08180 Moià, Barcelona.
The user can make inquiries or suggestions regarding the processing of their personal data by contacting the addresses provided for the exercise of their rights.
The user may file a complaint with the competent authority in data protection if they believe that their data has not been processed lawfully or that their requests or rights have not been addressed.