Privacy policy - Distinctium - Personal Shoper Immobiliari

DISTINCTIUM SL undertakes to protect the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by DISTINCTIUM S.L. implies the acceptance by the user of the provisions contained in this Privacy Policy and that their personal data will be treated as stipulated therein. Please note that although there may be links from our website to other websites, this Privacy Policy does not apply to the websites of other companies or organizations to which the website is redirected. DISTINCTIUM S.L. does not control the content of third party websites nor does it accept any responsibility for the content or privacy policies of these websites.

Information on data processing (Regulation (EU) 2016/679 and LO 3/2018)

Responsible for the treatment	DISTINCTIUM S.L. NIF: B67826768 C/ del quintà, 7 17246-Santa Cristina d’Aro Email: distinctium@gmail.com
Purpose of the treatment	Offer and manage our Real Estate Personal Shopper services
Legitimation	Consent obtained from the interested party.
Recipients	The data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the treatment.
People’s rights	Those interested have the right to exercise their rights of access, rectification, limitation of treatment, deletion, portability and opposition, by sending their request to our address.
Data retention period	As long as the commercial relationship is maintained or during the years necessary to comply with legal obligations.
claim	Those interested can go to the AEPD to submit the claim they deem appropriate.
Additional information	Additional and detailed information can be found below under “Privacy Questions”.

Questions about privacy
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, (RGPD) and Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of rights digitals (LOPDGDD), we offer you the following information about the processing of your personal data:

Who is responsible for the processing of your data?
Identity: DISTINCTIUM S.L.
NIF: B67826768
Address: C/ del quintà, 7 17246-Santa Cristina d’Aro
Phone. 613412636
Email: distinctium@gmail.com

For what purpose do we process your personal data?
 We process the information provided to us to offer and manage our Real Estate Personal Shopper services. In the event that you contact us using the contact form on our website, we will process it to manage your query.
 If you send us a CV, we will process the data in order to manage the CV’s database for personnel selection.

How long will we keep your data?
 The personal data provided will be kept as long as you are a user of our services or want to receive information about them, since you can object to the processing of your data for promotional purposes at any time, and then, during the periods established to comply with our legal obligations, which in the case of accounting and tax documentation for commercial purposes will be 6 years, in accordance with Art. 30 of the Commercial Code, and for tax purposes it will be 4 years, in accordance with articles 66 to 70 of the General Tax Law.
 In the case of CVs, the data will be kept for one year.

What is the legitimacy for the processing of your data?
The legitimacy to treat them is found in the execution of the service contract and in the consents you give us.
Regarding that information that is sent by minors under 16 years of age, it will be an essential requirement that it be done with the consent of the parent, the guardian or the legal representative of the minor so that the personal data can be the subject of treatment If this is not the case, the minor’s legal representative must notify us as soon as he becomes aware of it.

To which recipients will your data be communicated?
The data will not be communicated to third parties, unless required by law or necessary to fulfill the purpose of the treatment.

What are your rights when you provide us with your data?
 Anyone has the right to obtain confirmation as to whether or not we are processing their personal data.
 Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which they were collected.
 In certain circumstances, the interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
 Also, in certain circumstances and for reasons related to their particular situation, interested parties can object to the processing of their data. In this case we will stop processing them, except for compelling legitimate reasons or for the exercise or defense of possible claims.
 Those interested also have the right to the portability of their data.
 Any interested party has the right not to be the subject of a decision based solely on automated processing, including profiling, that produces legal effects that affect him or that significantly affect him in a similar way.
 Finally, interested parties have the right to submit a claim to the competent Control Authority.

How can you exercise your rights?
By sending us a letter attaching a copy of a document that identifies you, to our physical or electronic address.

How did we get your data?
The personal data we process comes from the interested party himself, who guarantees that the personal data provided is true and is responsible for communicating any changes. Data marked with an asterisk are mandatory in order to provide the requested service.

What data do we process?
The categories of data we can process are:
 Identification data
 Postal or electronic addresses
In the case of CVs, also:
 Personal characteristics
 Academic and professional

The data is limited, given that we only process the data necessary for the provision of our services and the management of our activity.

Do we use cookies?
We use cookies during navigation on our website with the user’s consent.
The user can configure his browser to warn him of the use of cookies and to prevent their use. Please visit our cookie policy.

What security measures do we apply?
We apply the security measures established in article 32 of the RGPD, therefore we have adopted the necessary security measures to guarantee a level of security adequate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee confidentiality, integrity, availability and permanent resilience of treatment systems and services.

Some of these measures are:
 Information on data processing policies to staff.
 Realization of periodic backups.
 Data access control.
 Regular verification, evaluation and assessment processes.

How do we process data on behalf of third parties?
When in the provision of our services we process personal data for which our customers are responsible, we do so in the capacity of data processors, in accordance with the provisions of article 28 of the RGPD and, therefore, in these treatments of personal data:

a) We will only process personal data following documented instructions from the controller, even in relation to transfers of personal data to a third country or an international organization, unless we are obliged to do so by virtue of the law of the Union or the member states in which we are subject to. In this case, we will inform the controller of this legal requirement prior to processing, unless this right prohibits it for important reasons of public interest.

b) We guarantee that the persons authorized to process personal data have undertaken to respect their confidentiality.

c) We have adopted all the necessary security measures, in accordance with article 32 of the RGPD, implementing mechanisms in order to:

 Guarantee the confidentiality, integrity, availability and permanent resilience of treatment systems and services.
 Restore availability and access to personal data quickly, in the event of a physical or technical incident.
 Verify, evaluate and evaluate, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the safety of the treatment.
 Pseudonymize and encrypt personal data, if applicable.

d) We will respect the conditions indicated in sections 2 and 4 of article 28 of the RGPD to resort to another person in charge of the treatment.

e) We will assist the person in charge, whenever possible, in accordance with the nature of the treatment and through appropriate technical and organizational measures, so that he can comply with the obligation to respond to requests aimed at the exercise of rights of the interested parties established in Chapter III of the RGPD.

f) We will help the person in charge to ensure compliance with the data security obligations established by articles 32 to 36 of the RGPD, taking into account the nature of the treatment and the information made available to us.

g) At the choice of the person in charge, we will delete or return all personal data once the provision of the processing services has ended and we will delete existing copies unless the retention of personal data is required under the Law of the Union or Member States.

h) We will make available to the person in charge all the information necessary to demonstrate compliance with the obligations established in art. 28 of the RGPD, as well as to allow and contribute to the performance of audits, including inspections, by the manager or another auditor authorized by this manager.

As data processors, the type of data, the category of interested parties and the treatments that we can carry out on behalf of our customers will be the following:

 Types of personal data we can process:
 Identification data
 Postal or electronic addresses
 Commercial information
 Goods and services transactions
 Category of interested parties affected:

 Customers
 Suppliers
 Personal

 Data processing that we can carry out:

 Data acces
 Collection
 Elaboration
 Modification
 Storage.
 Analysis
 Incorporation into documentation
 Conservation
 Communication by transmission