Privacy Policy

The Owner informs you about its Privacy Policy regarding the treatment and protection of personal data of users that may be collected while browsing the Website: https://arrimattt.com In this sense, the Owner guarantees compliance with current regulations regarding the protection of personal data, reflected in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural persons (GDPR). The use of the website implies acceptance of this Privacy Policy.

Identity of the Controller

• Responsible:  PENTA MSI, S.A.
• VAT: ES-A58493867
• Address: carrer de l’actor Morano 8, Àtic, 08017 – Barcelona
• Email:   suport@bct.cat
• Website:   https://bct.cat

Principles applied in data processing

In the processing of your personal data, the Owner will apply the following principles that comply with the requirements of the new European data protection regulation (GDPR):

• Principle of legality, loyalty and transparency: The Owner will always require consent for the processing of personal data, which may be for one or more specific purposes about which the Owner will inform the User in advance with absolute transparency.
• Data minimization principle: The Owner will request only the data strictly necessary for the purpose or purposes for which it is requested.
• Principle of limitation of the conservation period: The Owner will keep the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Owner will inform the User of the corresponding conservation period according to the purpose. In the case of subscriptions, the Owner will periodically review the lists and delete those records that are inactive for a considerable time.
• Principle of integrity and confidentiality: The personal data collected will be treated in such a way that its security, confidentiality and integrity is guaranteed. The Owner takes the necessary precautions to avoid unauthorized access or improper use of its users’ data by third parties.

Obtaining personal data

To browse the website you do not need to provide any personal data.

What data we can collect

We may collect and process personal data such as your name, billing and shipping address, email address, phone number, payment-related information (processed by our payment provider), order history, communications sent through contact forms or email, and technical browsing data collected through cookies or similar technologies.

Rights

The Owner informs you that regarding your personal data you have the right to:

• Request access to stored data.
• Request rectification or deletion.
• Request the limitation of your treatment.
• Oppose treatment.

You cannot exercise the right to data portability. The exercise of these rights is personal and therefore must be exercised directly by the interested party, requesting it directly from the Owner, which means that any client, subscriber or collaborator who has provided their data at any time, can contact the Owner and request information about the data it has stored and how it was obtained, request rectification thereof, oppose the processing, limit its use or request the deletion of said data in the Owner’s files. To exercise your rights you must send your request along with a photocopy of the National Identity Document or equivalent to the email address: maria@arrimattt.com The exercise of these rights does not include any data that the Owner is obliged to keep for administrative, legal or security purposes. You have the right to effective judicial protection and to file a claim with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of personal data that concerns you infringes the Regulation.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability by contacting us at [email address]. If you believe your data protection rights have been infringed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

Purpose of personal data processing

When you connect to the Website to send an email to the Owner, subscribe to its newsletter, you are providing personal information for which the Owner is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, telephone number, and other information. By providing this information, you give your consent for your information to be collected, used, managed and stored by — Hostinger — The personal data and the purpose of processing by the Owner is different depending on the information capture system: There are other purposes for which the Owner processes personal data:

• To guarantee compliance with the conditions contained in the applicable law. This may include the development of tools and algorithms that help the Website ensure the confidentiality of the personal data it collects.
• To support and improve the services offered by this Website.
• To manage and deliver your orders (including shipping and handling)
• To process payments and refunds
• To provide customer service and respond to enquiries
• To manage returns, withdrawals, and complaints
• To comply with legal, tax, accounting, and fraud-prevention obligations
• To send marketing communications where you have given consent or where otherwise permitted by law.

Security of personal data

To protect your personal data, the Owner takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, improper access, disclosure, alteration or destruction thereof. The website is hosted at: Webempresa. The security of the data is guaranteed, since they take all the necessary security measures for this. You can consult their privacy policy for more information. The Owner informs the User that their personal data will not be transferred to third organizations, with the exception that said transfer of data is covered by a legal obligation or when the provision of a service implies the need for a contractual relationship with a person in charge of treatment. In the latter case, the transfer of data to the third party will only be carried out when the Owner has the express consent of the User. However, in some cases collaborations can be carried out with other professionals, in those cases, consent will be required from the User, informing them of the identity of the collaborator and the purpose of the collaboration. It will always be carried out with the strictest safety standards.

Content from other websites

Pages on this website may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly the same as if you had visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction using this code.

Legitimation for data processing

The legal basis for the processing of your data is:

• The consent of the interested party.

Legal bases

We process your personal data on the basis of:

• The performance of a contract or steps prior to entering into a contract, when you place an order or request information
• Compliance with legal obligations applicable to us
• Our legitimate interests, where applicable, such as fraud prevention, customer service improvement, and business administration
• Your consent, where required, for example for non-essential cookies or marketing communications.

Categories of personal data

The categories of personal data processed by the Owner are:

• Identification data.
• No specially protected categories of data are processed.