Website owner details:
| COMPANY NAME | GET ACTIVE TOSSA SL |
| NIF | B55316129 |
| DOMAIN | www.getactivetossa.com |
| MAILING ADDRESS | SES ARCADES (LOCAL6-7),17320 TOSSA DE MAR (GIRONA) |
| ELECTRONIC ADDRESS | gruposorganizados@gruposorganizados.com |
| PHONES | 625343690 |
| REGISTRATION NUMBER/DATA ADDITIONAL |
Data protection
In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by GET ACTIVE TOSSA SL with NIF B55316129 and registered office at SES ARCADES (LOCAL6-7),17320 TOSSA DE MAR (GIRONA). Below is information on the treatments performed:
| TREATMENTS PERFORMED | |
| Purpose: Collection, registration and processing of data for the purposes of responding to your queries and/or requests, as well as advertising and commercial prospecting. Conservation period: as long as the consent given is maintained, Commercial actions, except legal obligation. web form Legitimate basis: The consent of the interested party. Data Typology: Basic information: Name and surname, Email address | |
| Newsletter | Purpose: Management of subscription to the newsletter, to make the corresponding shipments. Conservation period: as long as the consent given is maintained. Legitimate basis: The consent of the interested party. Data Typology: Basic information: Name and surname, Email address |
| Web user management | Purpose: Collection, registration and processing of user data. Conservation period: as long as the consent given is maintained, except legal obligation. Legitimate basis: The consent of the interested party. Data Typology: Basic information: Name and surname, Email address |
| Cookie installation | Purpose: Management and installation of cookies. Conservation period: as long as the consent given is maintained. Legitimate basis: The consent of the interested party. Data Typology: Basic information: Email address, IP address |
| Web Form Management | Purpose: Respond to your queries and/or requests. Conservation period: as long as the consent given is maintained. |
| Legitimate basis: The consent of the interested party. Data Typology: Basic information: Name and surname, Email address, IP address | |
Rights of interested parties
GET ACTIVE TOSSA SL informs Users that they may exercise the rights of access, rectification, limitation, deletion, portability, opposition to the processing of their personal data and the right not to be subject to automated decisions, including the creation of profiles, before the Data Controller, as well as the withdrawal of the consent given.
Right of Access: It is the user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data processed and the legal information of the processing (purposes, legitimizing basis, conservation periods, transfers, origin of the data, etc.).
Right of Rectification: It is the right of the affected person to have data modified that turns out to be inaccurate or incomplete. In relation to the website, it can only be satisfied in relation to that information that is under the control of the website, for example, removing comments published on the page itself, images or web content containing the user's personal data.
Right to Limitation of treatment: It is the right to limit the purposes of the treatment originally planned by the person responsible for the treatment in certain cases.
Right of Deletion: It is the right to delete the user's personal data, except as provided in the RGPD itself (freedom of expression and information, obligations of conservation, formulation, exercise or defense of claims, etc.).
Right to Portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit it to another controller when the processing is based on consent or the execution of a contract and is carried out by automated means.
Right of Opposition: It is the user's right not to have their personal data processed or to have their processing stopped by the website when the processing is based on legitimate interest or public interest or when it involves direct marketing treatments.
Right not to be subject to automated decisions, including profiling: When the processing is not necessary for the conclusion or performance of a contract, is not authorized by European Union or Member State law or is not based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects you.
Right to withdraw consent: For any processing based on your consent, you have the right to withdraw it, at any time and free of charge.
To exercise any of the data protection rights described above, you must follow the following instructions:
Submission of a letter to the address SES ARCADES (LOCAL6-7), 17320 TOSSA DE MAR (GIRONA) (for the attention of GET ACTIVE TOSSA SL) or by email togruposorganizados@gruposorganizados.com.
The letter sent by the owner of the personal data (interested party) requesting the exercise of rights must take into account the following:
o You must identify yourself reliably and, in the event that there are doubts about the identity of the applicant, you will be asked to correct the request (e.g. by requesting more information, such as the DNI number, the DNI document, the email address provided, etc.)
o The request can be made by the representative, legal or voluntary, when he or she is duly identified and authorized by the owner of the data (through express authorization from the owner to exercise the very personal rights regulated in the regulations on the protection of personal data).
o Petition in which the request is specified (Right/s that are intended to be exercised). If you do not refer to a specific treatment, you will be provided with a response in relation to all the treatments that affect your personal data. If you request information about a specific treatment, only the information about it. If you request it by phone, you will be instructed to do so in writing and you will be informed of how you can do it and the address to which you must send it. You will never be given information over the phone.
o Postal or electronic address for notification purposes.
o Documents accrediting the request you make, if necessary.
o The applicant must use any means that allows proof of sending and receiving the application.
Finally, we inform you that you have the right to file a claim with the Spanish Data Protection Agency in the event that you are aware or consider that an event may represent a breach of the applicable regulations on data protection.
GET ACTIVE TOSSA SL undertakes to adopt the necessary technical and organizational measures, according to the level of risks that accompany the treatments carried out by them and indicated in this same section, so as to guarantee their integrity, confidentiality and availability.
Last update: March 11, 2024
GET ACTIVE TOSSA SL must ensure that the personal data of the interested party collected on the website are treated in accordance with the principles relating to processing:
Treated in a lawful, loyal and transparent manner in relation to the interested party (“lawfulness, loyalty and transparency”).
Collected for specific, explicit and legitimate purposes, and cannot be treated in a manner incompatible with said purposes (“purpose limitation”).
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimization”).
Accurate and, if necessary, updated, adopting reasonable technical and organizational measures to delete or rectify them when they are inaccurate with respect to the purposes for which they are processed (“accuracy”).
Kept in a way that allows identification for no longer than is necessary for the purposes of the processing (“retention period limitation”).
Treated in such a way as to ensure adequate security through the application of appropriate technical or organizational measures (“integrity and confidentiality”).
Thus, GET ACTIVE TOSSA SL will be responsible for compliance with the above provisions and must be able to prove it subsequently (“proactive responsibility”).
Likewise, the processing carried out by the entity will only be legal if it meets at least one of the following conditions (“legality of the processing”):
The interested party gave his/her consent to the processing of his/her personal data for one or more specific purposes;
The processing is necessary for the performance of a contract to which the interested party is a party or for the application at the request of the interested party of pre-contractual measures;
The processing is necessary for compliance with a legal obligation applicable to the controller;
The processing is necessary to protect the vital interests of the data subject or another natural person;
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of public powers vested in the controller;
The processing is necessary for the satisfaction of legitimate interests pursued by the controller or a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data, in particular when the data subject is a child. Said legitimate basis will not apply to the processing carried out by public authorities in the exercise of their functions. When the treatment is based on the consent of the interested party, the
responsible must be able to demonstrate that he/she consented to the processing of his/her personal data.
If the consent of the data subject is given in the context of a written statement that also refers to other matters, the request for consent shall be presented in such a way that it is clearly distinguished from the other matters, in an intelligible and easily accessible form and using clear and simple language.
The interested party will have the right to withdraw their consent at any time. The withdrawal of consent will not affect the legality of the processing based on the consent prior to its withdrawal. Before giving consent, the interested party will be informed of this. It will be as easy to withdraw consent as it is to give it.
GET ACTIVE TOSSA SL must include in the forms used to collect personal data, the information to comply with the duty to inform contained in articles 13 and 14 of the General Data Protection Regulation (hereinafter RGPD).
In this sense, and in order to adapt to the applicable and current regulations regarding data protection, when GET ACTIVE TOSSA SL obtains personal data directly from an interested party, it will have to:
1. Provide the identity and contact details of the Data Controller and, where applicable, of its representative, the contact details of the Data Protection Officer, if applicable, and the purposes of the processing for which the personal data are intended, as well as the legal basis for the processing.
2. Specify the legitimate interests of the controller or a third party when the processing is necessary for the satisfaction of those interests. Provided that the interests or fundamental rights and freedoms of the interested party do not prevail over them.
3. Provide the recipients or categories of recipients of the personal data and, where applicable, the intention of the controller to transfer personal data to a third country or international organization and the existence or absence of an adequacy decision by the Commission.
4. Indicate the period for which the personal data will be retained or the criteria used to determine the retention period.
5. Inform of the existence of the right to request from the Data Controller access to the personal data relating to the interested party, its rectification or deletion (“right to be forgotten”), the limitation of its processing or the right to oppose the processing, as well as the portability of its data.
6. Inform about the possibility of withdrawing consent at any time, without this affecting the legality of the treatment based on consent prior to its withdrawal. As well as, inform you of the possibility of filing a claim with a Control Authority.
7. Specify whether the communication of personal data is a legal or contractual requirement, or a necessary requirement to enter into a contract and whether the interested party is obliged to provide the personal data and inform of the possible consequences of not providing such data.
8. Report on the existence of automated decisions, including profiling, and, at least in such cases, report on the logic applied, as well as the significance and envisaged consequences of such processing for the data subject.
When GET ACTIVE TOSSA SL does not obtain the personal data of the interested party, it will have to provide the information described in the previous section. As well as, the categories of personal data processed, the source from which they come and, where applicable, whether they come from publicly accessible sources.
GET ACTIVE TOSSA SL must include in the forms or documents used to collect personal data, including those established on the website owned by GET ACTIVE TOSSA SL, the information to comply with the duty to inform contained in articles 13 and 14 of the General Data Protection Regulation (hereinafter RGPD), and, if necessary, record the consent granted by the interested party.
To make compatible the greater requirement of information that must be provided to the interested party whose personal data is going to be processed, the possibility of presenting the information adopting an information model by layers or levels is established. This must be in line with the fact that the information must be provided with clear, simple language and in a concise, transparent, intelligible and easily accessible manner.
Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), regulates the basic information that is required in a first layer.
The layered information consists of:
Presentation of basic information (1st layer): consists of presenting basic information at a first level, in a summarized manner, at the same time and in the same medium in which the data are collected.
Referral to Additional Information (2nd layer): It consists of presenting the information in a detailed and complete manner, in an appropriate, structured, concise and precise medium. The way this additional information is presented depends on the characteristics of the medium used to report; it may be presented in paper or electronic format.
Updated: July 11, 2024
SOCIAL NETWORKS PRIVACY POLICY
PRIVACY POLICY SOCIAL NETWORKS www.getactivetossa.com
In accordance with the provisions of the current and applicable regulations on the protection of personal data and Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE), GET ACTIVE TOSSA SL informs users that it has proceeded to create a profile on the Social Network(s) Facebook, Instagram, with the main purpose of advertising its products and services.
GET ACTIVE TOSSA SL data:
NIF: B55316129
ADDRESS: SES ARCADES (LOCAL6-7),17320 TOSSA DE MAR(GIRONA) EMAIL:gruposorganizados@gruposorganizados.com
The user has a profile on the same Social Network and has decided to join the page created by GET ACTIVE TOSSA SL, thus showing interest in the information advertised on the Network. By joining our page, you provide us with your consent for the processing of personal data published in your profile.
The user can access the privacy policies of the Social Network itself at any time, as well as configure their profile to guarantee their privacy.
GET ACTIVE TOSSA SL has access to and processes the user's public information, especially their contact name. These data are only used within the Social Network itself. They are not incorporated into any treatment system.
Rights of interested parties
In relation to the rights of access, rectification, limitation of processing, deletion, portability and opposition to the processing of your personal data, which you have and which can be exercised before GET ACTIVE TOSSA SL, in accordance with the RGPD, you must take into account the following nuances:
Right of Access: It is the right of the user to obtain information about their specific personal data and the processing that has been carried out or carried out, as well as the information available about the origin of said data and the communications made or planned for them.
Right to Rectification: It is the right of the affected person to have data modified that turns out to be inaccurate or incomplete. It can only be satisfied in relation to information that is under the control of GET ACTIVE TOSSA SL, for example, eliminating comments published on the page itself, images or web content containing personal data of the user.
Right to Limitation of processing: It is the right to limit the purposes of the processing originally intended by the data controller.
Right of Deletion: It is the right to delete the user's personal data, except as provided in the RGPD itself or in other applicable regulations that determine the obligation to preserve them, in a timely manner.
Right to portability: The right to receive the personal data that the user has provided in a structured, commonly used and machine-readable format, and to transmit it to another person responsible.
Right to Oppose: It is the user's right not to have their personal data processed or to have their processing stopped by GET ACTIVE TOSSA SL.
GET ACTIVE TOSSA SL will carry out the following actions:
Access to public profile information.
Publication in the user profile of all information already published on the GET ACTIVE TOSSA SL page.
Send personal and individual messages through the Social Network channels.
Page status updates to be posted to the user's profile.
The user can always control their connections, delete content that no longer interests them and restrict who they share their connections with, to do so they must access their privacy settings.
Publications
The user, once joined to the GET ACTIVE TOSSA SL page, may publish comments, links, images or photographs or any other type of multimedia content supported by the Social Network on the latter. The user, in all cases, must be the owner thereof, enjoy the copyright and intellectual property rights or have the consent of the affected third parties. Any publication on the page, whether texts, graphics, photographs, videos, etc., is expressly prohibited. that violate or are likely to violate morality, ethics, good taste or decorum, and/or that infringe, violate or violate intellectual or industrial property rights, the right to image or the Law. In these cases, GET ACTIVE TOSSA SL reserves the right to immediately remove the content, and may request the permanent blocking of the user.
GET ACTIVE TOSSA SL will not be responsible for the content freely published by a user.
The user must keep in mind that their publications will be known by other users, so they themselves are primarily responsible for their privacy.
The images that may be published on the page will not be stored in any processing system by GET ACTIVE TOSSA SL, but they will remain on the Social Network.
Contests and promotions
GET ACTIVE TOSSA SL reserves the right to hold contests and promotions, in which the user linked to its page may participate. The bases of each of them, when the Social Network platform is used for this purpose, will be published therein. Always complying with the LSSI-CE and any other applicable standard.
The Social Network does not sponsor, endorse or administer, in any way, any of our promotions, nor is it associated with any of them.
Advertising
GET ACTIVE TOSSA SL will use the Social Network to advertise its products and services. In any case, if it decides to process your contact data to carry out direct commercial prospecting actions, it will always comply with the legal requirements of the regulations on data protection and the LSSI-CE.
Recommending the GET ACTIVE TOSSA SL page to other users so that they can also enjoy the promotions or be informed of its activity will not be considered advertising.
Below, we detail the link to the privacy policy of the Social Network:
Facebook: https://es-es.facebook.com/privacy/explanation
Instagram: http://instagram.com/about/legal/privacy/
