In compliance with the General Data Protection Regulation, GDPR (EU) 2016/679 of 27 April 2016 and the Organic Law 3/2018, of December 5, on Protection of Personal Data and Guarantee of Digital Rights, we want to inform our users about the most relevant aspects of our privacy policy. Do not hesitate to contact us if you require any further information. 

The Data Controller, LOGISIETE S.L., identified with N.I.F. no. B31649437, with address registered to Río Ebro Street, no. 2, 31230 – Viana (Navarre) and contact email address central@logisiete.es, as holder of the website www.cocinas.com, informs you that all personal data that is collected on this website is handled in compliance with the current regulations on personal data protection of Spain and the European Union.

The data provided by the user must be exact and up to date. The user that provides the data is the sole and ultimate responsable party for the veracity of the information provided on our website.

What personal information is collected on this website?

For the purposes of this Privacy Policy, the Data Controller collects and processes the following personal information which willl depend on which of our products and services you interact with. 

• Identifiers: name.
• Contact details: email address, phone number, zip code, locality, province, country.
• Navigation data: IP address, device type and identifier, type of browser, domain, navigation data, website activity. 

Purpose and lawfulness of processing

1. Contact form and email address: we process your data in order to attend to your queries. The data subject has given consent to the processing of his or her personal data for one or more specific purposes, Article 6.1.a) GDPR.
2. Trade of products and/or services: we process your data to provide products and services contracted. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, Article 6.1.b) GDPR.
3. Creation of a user account: we handle your data to help create a user account for distributors. The data subject has given consent to the processing of his or her personal data for one or more specific purposes, Article 6.1.a) GDPR.  
4. Commercial communications: we process your data for commercial and promotional purposes. The legitimacy is the data subject’s explicit consent to establish commercial communications by email, Article 6.1.a) GDPR, and the legitimate interest when Article 21 of the Law 34/2002 applies, Article 6.1. f) GDPR. 

Automated decision-making and profiling are not part of our procedures. 

How long do we store your personal data?

Your personal data is stored for as long as needed based on the purpose for which it was provided or collected, without prejudice to your right to erasure, which would lead to the blocking of your data for as long as the legal obligations persist, or until you withdraw consent for the processing of your data for commercial purposes. We may keep storing your personal data to comply with legal obligations once the contractual relationship has ended.

Recipients

The Data Controller does not transfer personal data to third parties except for legal obligation or in the event that the data subject explicitly consents to it after having been fully informed.  

How do we protect your data?

The Data Controller provides appropriate safeguards to the confidentiality, integrity and availability of your data through administrative, organizational and technical controls in order to protect your data from third parties.

Your data will only be processed by those parties that are essential for the processing of your data and it will be stored on physical servers in the European Union through an SSL certificate. SSL is a protocol for securing communication on the Internet that provides a way to encrypt data before sending it to users.

What are your rights?

According to that established in Articles 15 to 22 of GDPR 2016/679, before the Data Controller, through the postal and/or email addresses indicated above, the user rights are as follows:

• The right of access. Data subjects have the right to know what data is held about them, for what purpose or with what retention period, among other information.
• The right to rectification. Data subjects have the right to have any inaccurate or incomplete personal data rectified.
• The right to erasure. Data subjects have the right to request companies delete their data and stop processing it. 
• The right to restrict processing. Data subjects have the right to restrict personal data processing. 
• The right to object. Data subjects have the right to object to processing of their data, in which case, the Data Controller would only continue to process their data if in the case of processing based on legitimate interests or the exercise or defense of potential claims.
• The right to data portability. Data subjects have the right to copy, transfer or move personal data to a different company.
• The data subject shall have the right to withdraw his or her consent at any time, without it affecting the lawfulness of processing based on the consent given prior to withdrawal.

• The right to claim before the Supervisory Authority: if the data subject considers that the processing of his/her personal data infringes the GDPR they can lodge a complaint with the supervisory authority in Spain, the Spanish Data Protection Authority. 

Updates and changes to the Privacy Policy

The information that appears on this website is accurate as of its latest update. The Data Controller reserves the right to modify the present policy to adapt it to future changes to the legislations, and to future uses of your personal data. In the event that this modification affects the processing of your data, we will inform you about it.