The purpose of this Privacy Policy is to inform users about the collection and processing of personal data obtained through the website elgarworks.com (hereinafter referred to as “the Website”).

ELGARWORKS S.L. complies with the guidelines of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), ensuring at all times the proper use and processing of the user’s personal data.

WHAT DATA DO WE COLLECT THROUGH THE WEBSITE?

You can visit and use the Website’s services without identifying yourself or revealing any personal information about yourself. We may process your IP address, the operating system or browser you use, and even the duration of your visit anonymously.

The only personal data to which ELGARWORKS S.L. will have access are those that the user voluntarily provides when contacting ELGARWORKS S.L. via email or any other method provided on the website.

Specifically, ELGARWORKS S.L. will record the following information:

  • Data provided by sending emails to the addresses identified on the website
  • Data provided by completing forms or using the functionalities offered on the website at any given time

WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis for processing is the consent granted by users through the acceptance of this Privacy Policy and the corresponding checkboxes, and it implies that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy.

FOR WHAT PURPOSE WILL WE PROCESS YOUR PERSONAL DATA?

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you that the personal data you voluntarily provide us through the various input forms provided for this purpose on the Website or through any other collection channel, will be incorporated into the processing records under the responsibility of ELGARWORKS S.L. for the management of the collected data with the following purposes:

  • To resolve any query, request, or petition made
  • To manage the requested service, answer your request, or process your petition
  • To maintain informative communications that the entity deems of interest to you through any voluntarily provided means concerning products and/or services similar to those requested. In such cases, only for the purposes and uses exclusively necessary for which their services were required, and they cannot be used for a different purpose. For any transfer other than those specified above, you will be duly informed, and you may exercise your right to object at any time.
  • To perform analysis and improvements on the website regarding new services
  • To unsubscribe from our services
  • Any other purpose referred to in the forms and functionalities offered at any given time through the Portal

TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

The collected data are adequate, relevant, and not excessive in relation to the scope and purposes described. Your data will be processed and stored in compliance with the security measures described in current regulations, ensuring their integrity and confidentiality at all times.

Your data will not be transferred to third parties, except for legal obligations, nor will they be shared with companies or entities outside of ELGARWORKS S.L. You are informed of the following possible transfers of your data:

  • to public and private bodies necessary for compliance with legal obligations under current regulations
  • to financial entities for the management of collections and payments
  • to legal advisory, consulting, and/or auditing professionals and companies
  • to data processors necessary for the execution of the corresponding service provision contract
  • to companies responsible for our website support and maintenance
  • to companies responsible for our IT system support and maintenance
  • to companies responsible for our management software support and maintenance
  • to companies responsible for our server and cloud service support and maintenance
  • in case of any international data transfer when using applications, it would be carried out in strict compliance and with all necessary guarantees for compliance with European data protection policies regarding privacy
  • to other companies, entities, and collaborators for administrative and/or commercial management, for the management of the purposes described above, for the provision of services, and the proper management of the entity and its different activities

In such cases, only for the purposes and uses exclusively necessary for the development of their activity for which their services were required, and they cannot be used for a different purpose. For any transfer other than those specified above, you will be duly informed, and you may exercise your right to object at any time.

Consent will be understood as given unless you expressly communicate to us the revocation of said consent for any of the aforementioned processing activities.

By providing us with your email and/or phone number, you expressly consent that we may contact you through these means.

The user of the Website will be solely responsible for the veracity and accuracy of the data provided, with ELGARWORKS S.L. acting in good faith as a mere service provider. In the event of having provided false data or data of third parties without their consent, ELGARWORKS S.L. reserves the right to immediately destroy said data in order to protect the rights of the owner(s) thereof, exempting ELGARWORKS S.L. from any responsibility for non-compliance with this requirement.

ELGARWORKS S.L. undertakes to comply with its obligation of secrecy regarding personal data and its duty to safeguard them, and will adopt all technical and organizational measures to guarantee the security of personal data and prevent their alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed, all in accordance with the provisions of the regulations.

DATA OF MINORS?

We do not process data of minors under 14 years of age. Therefore, please refrain from providing such data if you are not of that age or, where applicable, from providing data of third parties who are not of that age. ELGARWORKS S.L. disclaims any responsibility for non-compliance with this provision.

WHAT RIGHTS DO YOU HAVE?

  • To know whether or not we are processing your data
  • To access your personal data
  • To request the rectification of your data if they are inaccurate
  • To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent given to us
  • To request the limitation of the processing of your data, in some cases, in which case we will only retain them in accordance with current regulations
  • To data portability, which will be provided to you in a structured, commonly used, and machine-readable format. If you prefer, we can send them to the new controller you designate. This is only valid in certain cases.
  • To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe we have not handled your request correctly
  • To revoke consent for any processing for which you have consented, at any time.

If you modify any data, we appreciate you informing us to keep them updated.

The user of the Website may at any time exercise these rights under the terms established in current regulations, by contacting the data controller:

  • In writing to the entity’s address: San Bartolome Kalea, 22, 01170 Goiain, Araba
  • By email to elgar@elgarworks.com

DO YOU WANT A FORM TO EXERCISE YOUR RIGHTS?

We have forms for exercising your rights; please request them by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties. These forms must be electronically signed or accompanied by a photocopy of your ID. If you are representing someone, you must attach a copy of their ID, or have them sign with their electronic signature.

HOW LONG DO WE TAKE TO RESPOND TO RIGHTS EXERCISES?

It depends on the right, but a maximum of one month from your request, and two months if the matter is very complex and we notify you that we need more time.

HOW LONG WILL WE RETAIN YOUR PERSONAL DATA?

  • Personal data will be retained as long as you remain linked with us.
  • Once you are no longer linked, the personal data processed for each purpose will be retained for the legally stipulated periods, including the period during which a Judge or Court may require them, taking into account the statute of limitations for legal actions.
  • The processed data will be retained as long as the aforementioned legal periods do not expire, if there is a legal obligation to retain them, or if no such legal period exists, until the data subject requests their deletion or revokes the granted consent.
  • We will retain all information and communications related to the provision of our service for the duration of the service guarantees to address potential claims.
  • After the aforementioned periods, users’ personal data may be blocked and retained by ELGARWORKS S.L. to address any potential liabilities arising from the processing and only for the statute of limitations period for such liabilities. After this period, personal data will be deleted by ELGARWORKS S.L.

SECURITY, COOKIES, AND IP ADDRESSES?

The Website uses generally accepted information security techniques in the industry, such as firewalls, access control procedures, and cryptographic mechanisms, all with the aim of preventing unauthorized access to data. To achieve these purposes, the user accepts that the provider obtains data for the purpose of corresponding authentication of access controls.

NOTIFICATION OF PERSONAL DATA BREACHES

In the event of a personal data breach, unless it is unlikely to result in a risk to the rights and freedoms of natural persons, ELGARWORKS S.L. will notify the Spanish Data Protection Agency within 72 hours of becoming aware of the incident, describing the nature of the breach, the possible consequences that may arise, and the measures adopted or proposed to remedy the security breach; and if possible, will indicate the categories and approximate number of data subjects and data affected.

Likewise, ELGARWORKS S.L. will notify the data subjects as soon as possible when the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, describing the possible consequences that may arise and the measures adopted or proposed to remedy the security breach.

USE OF COOKIES AND ACTIVITY FILE

If we use other types of cookies that are not strictly necessary, you can consult the cookie policy via the corresponding link from the beginning of our website.

The provider, on its own behalf or that of a third party contracted to provide measurement services, may use cookies when a user browses the Website. Cookies are files sent to the browser by means of a web server with the purpose of recording the user’s activities during their browsing time. The cookies used by the Website are associated only with an anonymous user and their computer, and do not themselves provide the user’s personal data. Through the use of cookies, it is possible for the server where the website is located to recognize the web browser used by the user, making navigation easier, allowing, for example, access to users who have previously registered, to access areas, services, promotions, or contests reserved exclusively for them without having to register on each visit. They are also used to measure audience and traffic parameters, control progress, and the number of entries. The user has the possibility to configure their browser to be notified of the reception of cookies and to prevent their installation on their computer. Please consult the instructions and manuals of your browser for more information. To use the Website, it is not necessary for the user to allow the installation of cookies sent by the Website, or the third party acting on its behalf, without prejudice to the need for the user to log in as such in each of the services whose provision requires prior registration or login. The cookies used on this Website are, in any case, temporary, with the sole purpose of making their subsequent transmission more efficient. Under no circumstances will cookies be used to collect personal information.

IP ADDRESSES

The Website servers may automatically detect the IP address and domain name used by the user. An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity file that allows the subsequent processing of the data for the purpose of obtaining solely statistical measurements that allow knowing the number of page impressions, the number of visits made to web services, the order of visits, the access point, etc.