Privacy policy

PRIVACY POLICY

BASIC INFORMATION ON DATA PROTECTION
Controller OFFVIEW, S.L.
Purpose We use your data, among other purposes, to manage the contracting of products and services, to respond to your enquiries, and, where applicable, to send you personalised communications.
Legal basis The legal basis for the processing of your data lies mainly in the provision of your consent and in the proper performance of the contractual relationship with OFFVIEW, S.L.
Recipients Your data will be processed by other companies of the Group and by third-party collaborators who work with us.
Rights You have the right to access, rectify, erase, object, restrict and request the portability of your personal data.
Additional information You can consult additional and detailed information on how we manage your personal data and the rights you have by consulting the full text of the Privacy Policy that follows, as well as the Cookie Policy.


ADDITIONAL INFORMATION ON DATA PROTECTION

OFFVIEW, S.L. (hereinafter, “the Company”) undertakes, as Controller of the processing of your personal data, to adopt at all times the technical and organisational measures necessary to ensure that the processing of your data complies with the provisions of Regulation (EU) 2016/679 (hereinafter, “GDPR”) and Organic Law 3/2018.

The Company processes your personal data lawfully and fairly, ensuring that they receive adequate protection and are not subject to improper use. Likewise, it is the Company’s intention to be transparent in the management of the personal data of its customers and users, making available to them all the necessary information about the collection and processing of their data.

The purpose of this Privacy Policy is to inform you about who will process your personal data, why we collect this data, how long we will keep the collected data, to whom we will transfer it and what your rights are in this area.

By providing us with your personal information and using our Website, we understand that you have read and understood the information on the protection of personal data set out in this Privacy Policy and in the Cookie Policy.

WHO IS THE CONTROLLER OF THE PROCESSING OF YOUR DATA?

The Controller of the processing of your personal data is:

  • Company name: OFFVIEW, S.L.
  • Tax Identification Number (N.I.F.): B72903537
  • Telephone: 936 91 54 50
  • Postal address: Calle Bosc Tancat n.º 8, Cerdanyola del Vallès, (08290) Barcelona
  • Email address: dataprotection@gigistudios.com

FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on the products, services or functionalities requested by customers and users, the Company will need to process certain data which, in general, will be the following:

  • Identification and contact data: name, surname, contact telephone number, postal address, email address, among others;
  • Data associated with the performance of a sales or service provision contract with the Company: identification and contact data, payment data, information about purchases, orders and returns, among others;
  • Automatically collected data: when interacting with our Website, certain browsing data is collected automatically. This information is collected through cookies, the regulation of which is detailed in the Company’s Cookie Policy; The information we may collect automatically refers to your use of our Website and the devices you use to access and interact with it. Some of the data we collect are: the IP address of the device you are using, the browser programme you use, your operating system, the date and time of access to the Website, the Internet address of the website through which you accessed our Website, geolocation data, information about the pages visited by the user within the Website and the browsing time on each page;
  • Data about your personal tastes and preferences.

The personal data collected is processed for the following purposes:

  • Managing the contracting of the products and services offered by the Company: being able to provide you with the product or service you request, being able to operate our business internally (in terms of accounting, auditing and other internal functions) and managing the payment of the products and services;
  • Quality analysis: carrying out surveys on the satisfaction of customers and users in relation to the quality of the products and services offered by the Company;
  • Customer and user care: channelling and attending to your requests, enquiries and claims for their management and resolution;
  • Advertising and marketing actions: mainly includes the personalisation of the services we offer and making recommendations based on the interaction with the Company through its website (e.g.: based on the purchase and browsing history). If you give us your consent, your personal data will be used to periodically send you information about new products that may be of interest to you and to offer you promotions;
  • Improving the user experience on the Website: carrying out analytical and statistical studies on how users browse the Company’s Website.

WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR DATA?

The legal basis that allows us to process your personal data depends on the purpose for which we process them, as detailed below:

  • Managing the contracting of the products and services offered by the Company. The processing of your data is necessary for the correct conclusion and proper development of the contractual relationship with the Company. The legitimacy of the processing of your data also resides in your own consent (when deciding to contract our products or services) and in the legitimate interest of the Company to carry out the relevant checks in order to identify and prevent possible fraud, as well as for security reasons;
  • Quality analysis. The legitimacy of the processing of your data resides in the legitimate interest of the Company to analyse the degree of satisfaction of customers and users, in order to be able to offer them products and services of the best quality;
  • Attention to users and customers. The legitimacy of the processing of your data resides in the legitimate interest of the Company to attend to your requests and claims in order to be able to assist you adequately and resolve your petitions. When it comes to claims or incidents related to the product or service acquired, the processing of your data is necessary for the Company to be able to fulfil its contractual obligations. In the case of enquiries related to the exercise of your legally recognised rights in the field of data protection, the Company requires the processing of your data to comply with the legal obligations that bind it in this area;
  • Advertising and marketing actions. The legal basis for processing your data for advertising and marketing purposes is the consent you give us for the sending of commercial communications (which may be personalised) and the legitimate interest of the Company to send you similar communications to those services or products contracted in the past or in which you have shown interest. Remember that if you have given us your consent for the processing of your data for any purpose, you have the right to withdraw it at any time.
  • Improving the user experience on the Website. The legitimacy of the processing of your data resides in the legitimate interest of the Company to know the degree of satisfaction of users and to adopt the appropriate corrective measures to improve the quality of our services.

HOW LONG WILL WE KEEP YOUR DATA?

Your personal data will be duly kept for the time strictly necessary to be used according to the purpose for which they were collected.

Personal data will be stored, applying the appropriate security measures to guarantee their accuracy and integrity, while their processing is necessary for the purpose for which they were collected or until you exercise your right to erasure or restriction of processing.

In such cases, we will keep your personal information blocked, without processing it, for the periods provided for by law to deal with possible liabilities and to be able to prove compliance with our legal and contractual obligations. Subsequently, the Company will permanently delete your personal data.

WITH WHOM CAN WE SHARE YOUR DATA?

Your personal data will be processed by members of the Company acting on behalf of the organisation and in relation to whom the corresponding contracts have been concluded, which include specific obligations of confidentiality and diligent management of personal data in accordance with the legislation in this area.

In certain cases, in order to be able to fulfil the purposes set out in this Privacy Policy, the Company needs to share your personal data with other companies of the Group and with the following third parties:

  • providers and collaborators of logistics, transport and delivery services, and/or collaborating establishments of the same;
  • providers of services related to customer care;
  • providers and collaborators of services related to marketing and advertising;
  • authorities and public bodies: to respond to a court order, summons or investigation, or for any other reason required by law; to deal with possible liabilities arising from the processing of personal data; to prevent illegal uses of our Website or violations of the policies of our Website; to deal with claims by third parties; to contribute to the prevention and investigation of cases of fraud, among others.

These third-party collaborators only have access to the personal information necessary to carry out the corresponding services and are required not to use it for any purpose other than that requested. The Company also requires these third parties to apply the same degree of protection and confidentiality that we apply in the management of your personal information. Likewise, all of them are subject to the obligations provided for in their respective data processing contracts concluded with the Company.

WHAT ARE YOUR RIGHTS?

You are entitled to exercise the following rights in relation to the processing of your personal data:

  • Access (Art. 15 GDPR): allows you to obtain certain information about the purposes for which your data are being processed, the recipients to whom they are communicated or the categories of data that are being processed, among others.
  • Rectification (Art. 16 GDPR): allows you to contact the Controller to modify those personal data that are inaccurate and to complete those that are incomplete.
  • Erasure (Art. 17 GDPR): allows you to request the erasure, without undue delay, of your personal data that are being processed by the Controller, in the following cases:
    • the Controller no longer needs the data for the purposes for which they were initially collected;
    • the processing of the data is based on your consent and you decide to withdraw it, provided that there are no other processing operations based on a legal basis other than consent;
    • you object to the processing of your data and the interests of the Controller do not prevail, provided that there are no other processing operations that do not allow objection;
    • the personal data have been processed unlawfully;
    • the personal data must be erased due to a legal obligation;
    • the data have been obtained in the framework of the offer of information society services.
  • Restriction of processing (Art. 18 GDPR): allows you to obtain from the Controller the restriction of the processing of your data when one of the following conditions is met:
    • when you contest the accuracy of your personal data, for a period enabling the Controller to verify the accuracy of the same;
    • the processing is unlawful and you oppose the erasure of your personal data and request instead the restriction of their use;
    • the Controller no longer needs your personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims;
    • you have objected to the processing, while it is verified whether the legitimate grounds of the Controller override yours.
  • Portability (Art. 20 GDPR): allows you to receive your personal data or have them sent to a third party, in a structured, commonly used and machine-readable format, provided that the following conditions are met cumulatively:
    • when the legitimacy of the Controller for the processing of your data is the provision of your consent or the performance of a contractual relationship;
    • that the processing of the data is carried out by automated means.
  • Objection (Art. 21 GDPR): allows you to object to the processing of your data carried out by the Controller. However, you may only exercise this right against processing based on the legal basis of a public interest or a legitimate interest of the Controller.
  • Objection to automated decision-making (Art. 22 GDPR): allows you not to be subject to decisions based solely on automated processing of your data, including profiling, which produce legal effects concerning you or similarly significantly affect you.

How can I exercise my rights?

In order to exercise your rights in the field of data protection, the Company makes the following means available to you:

  • By written and signed request addressed to the Company (Calle Bosc Tancat n.º 8, Cerdanyola del Vallès, (08290) Barcelona) indicating the reason for your request and the right you wish to exercise, attaching a photocopy of your ID card or equivalent document proving the identity of the applicant;
  • By sending the completed and signed form, attaching a photocopy of your ID card or equivalent document proving the identity of the applicant, to the email address: dataprotection@gigistudios.com.

Below are the forms for exercising the different rights:

Likewise, you have the right to contact the corresponding competent data protection supervisory authority for any claim arising from the processing of your personal data: the Spanish Data Protection Agency (Agencia Española de Protección de Datos – Claims Submission Form).