1. WHO IS THE DATA CONTROLLER?
The Data Controller is NORTH COMPANY, S.A., a company with registered office at Eibar (Gipuzkoa), C/ Barrena, nº 11 registered in the Business Register of Gipuzkoa, volume 1069, folio 193, sheet SS-1736 and with Tax ID Code (CIF) No. A-20144317.
NORTH COMPANY has appointed a Data Protection Office (DPO), responsible for the management and control of privacy at the company, who can be contacted through email: email@example.com.
2. HOW HAVE WE OBTAINED YOUR DATA?
The data processed at NORTH COMPANY have been obtained from you (i) by submitting emails and/or forms available on the WEBSITE, where applicable.
3. WHAT TYPE OF DATA DO WE PROCESS?
The data processed at NORTH COMPANY is provided by you either by email and/or through forms available on the WEBSITE.
Specifically, NORTH COMPANY processes the following data categories:
Identification and contact details (e.g. name, surnames, postal address and email, etc.).
Username and Password
Internet browsing details (e.g. IP address, website visits, WiFi network connections, etc.).
Details of financial transactions (purchases).
4. WHY DO WE PROCESS YOUR DATA AND UNDER WHAT GROUNDS OF LEGITIMATE INTEREST?
The processing of your personal data is for the following purposes:
Manage your access to and use of the contents and services that NORTH COMPANY makes available to you through the WEBSITE or any other functionalities that may be accessible from the WEBSITE at any given time.
Process and manage the purchase of products or services which you may order from NORTH COMPANY through its WEBSITE, manage the dispatch of the said products and, in general, maintain, manage and control any contractual agreement that you may establish with us, as the purchaser of our products or services.
Process and manage any requests for information, suggestions, complaints or claims that you may make by email.
To send you, by different means, including electronic, business and advertising communications from NORTH COMPANY and other entities forming part of the business group of which NORTH COMPANY is part, with regard to products, services, offers, promotions and any other relevant information regarding the said entities, provided that you have given your consent to this.
The processing of your personal data by NORTH COMPANY, in compliance with the applicable regulations, is based (i) on your consent, granted at the time when you voluntarily provide us with your personal data; and/or (ii) on the relations established with us in the event that you contract our products or services.
We would remind you that, in those cases in which the data processing is based on your consent, you have the right to withdraw your consent freely and free of charge, at any time, in the terms indicated in Section 7 hereof.
5. WHO DO WE DISCLOSE YOUR DATA TO?
Apart from those cases in which NORTH COMPANY is legally obliged to do so (e.g. Tax Authorities, Administration of Justice or other Public Administrations), your data will not be disclosed to third parties.
There are no provisions for making international transfers of your Da
6. HOW LONG WILL WE STORE YOUR DATA?
In general, your personal data will be stored as long as they are necessary in order to maintain the business relationship established between you and NORTH COMPANY, as a result of your registration as a user of the WEBSITE and/or the purchase of our products through the WEBSITE, until you either withdraw your consent to the processing or request the erasure of the data, or until you request erasure at an earlier time, as well as the additional time required to comply with the legal obligations that NORTH COMPANY must observe.
When the data processing is based on your consent, the data will be stored until you either withdraw your consent or request the deletion of the data.
In any case, we would inform you that NORTH COMPANY has established internal data cleansing policies directed at controlling the storage times for the personal data it holds. Therefore such data can be erased when no longer necessary and/or relevant to the purposes for which they were collected.
7. WHAT ARE YOUR RIGHTS?
The applicable data protection legislation grants you a series of rights relating to your personal data, which you may exercise during the processing of your data. These rights are indicated below:
Access to your data: you have the right to access your data in order to find out what personal data concerning you are being processed by us.
Request the rectification or erasure of your data: in certain circumstances, you have the right to rectify any inaccurate personal data concerning you and that are being processed by us, or even to request us to erase such data when, among other reasons, the data are no longer necessary in relation to the purpose for which they were collected..
Request a restriction on the processing of your data: in certain circumstances, you have the right to ask us for a restriction on the processing of your data, in which case we can inform you that such data will only be kept for the exercise or defence of legal claims, as provided for in the applicable data protection regulations.
To the portability of your data: in certain circumstances, you have the right to receive the personal data concerning you and that you have provided to us, in a structured, commonly used and machine-readable format and to transmit such data to another data controller
To object to the processing of your data: in certain circumstances and on grounds relating to your particular situation, you have the right to object to the processing of your data. In this case we would stop processing such data unless, due to compelling legitimate grounds, or the exercise or defence of possible legal claims, the data must be retained.
Likewise, you have the right to withdraw consent at any time, without this affecting the lawfulness of processing based on consent prior to withdrawal.
You can exercise your rights either by sending a written request to NORTH COMPANY, to the postal address indicated in Section or by sending an email addressed to firstname.lastname@example.org.
Finally, we would mention that you can lodge a complaint with the competent Supervisory Authority (in Spain, the Spanish Data Protection Agency), particularly when you have not obtained satisfaction in the exercise of your rights. You can contact the aforementioned Supervisory Authority through its website: www.aepd.es.
8. SECURITY MEASURES
NORTH COMPANY will process your data at all times with absolute confidentiality and maintaining the obligation of secrecy with regard to the same, in accordance with the provisions in the applicable legislation on data protection. For this purpose it has implemented the appropriate technical and organisational security measures to guarantee the security of your personal data and to prevent alteration, loss, unauthorised processing and/or access, taking into consideration the state of the art, the nature of the data stored and the risks to which it is exposed.
9. COOKIES POLICY
Additionally, we would inform you that NORTH COMPANY has a Cookies Policy that can be accessed through the following link