PRIVACY POLICY

The Data Controller informs you about its Privacy Policy regarding the processing and protection of the personal data of users and customers that may be collected while browsing the Website, purchasing a product, or contracting a service through the Website: https://digimodeltrains.com

In this regard, the Data Controller guarantees compliance with the applicable regulations on the protection of personal data, as set out in Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR).

Use of the Website implies acceptance of this Privacy Policy, as well as the terms and conditions set out in the Legal Notice.

Identity of the Data Controller

Data Controller: Oriol Farran de la Paz.
Tax ID (NIF): 41012066F
Address: Barcelona – Spain.
Email: digimodeltrains@gmail.com
Contact Phone: +34610728062
Website: https://digimodeltrains.com

Principles Applied to Data Processing

In processing your personal data, the Data Controller will apply the following principles, in accordance with the requirements of the new European General Data Protection Regulation (GDPR):

– Principle of lawfulness, fairness, and transparency: The Data Controller will always require consent for the processing of personal data, which may be given for one or more specific purposes, about which the Data Controller will inform the User in advance with complete transparency.
– Principle of data minimization: The Data Controller will only request data that is strictly necessary for the purpose or purposes for which it is collected.
– Principle of storage limitation: The Data Controller will retain the personal data collected for the time strictly necessary for the purpose or purposes of the processing. The Data Controller will inform the User of the applicable retention period according to the purpose. In the case of subscriptions, the Data Controller will periodically review the lists and delete records that have remained inactive for a considerable period of time.
– Principle of integrity and confidentiality: The personal data collected will be processed in such a way that its security, confidentiality, and integrity are guaranteed.

The Data Controller takes the necessary precautions to prevent unauthorized access to or misuse of users’ data by third parties.

Collection of Personal Data

You are not required to provide any personal data to browse the Website.

You provide personal data in the following cases:

– When contacting us through the contact forms or by email.
– When purchasing a product or booking a service.

Rights

The Data Controller informs you that you have the following rights regarding your personal data:

– To request access to the stored data.
– To request its rectification or erasure.
– To request the restriction of its processing.
– To object to its processing.

You cannot exercise the right to data portability.

The exercise of these rights is personal and must therefore be carried out directly by the data subject by contacting the Data Controller. This means that any customer, subscriber, or collaborator who has provided their data at any time may contact the Data Controller and request information about the data stored and how it was obtained, request its rectification, object to its processing, restrict its use, or request the deletion of such data from the Data Controller’s records.

To exercise your rights, you must send your request together with a copy of your National Identity Document or equivalent to the following email address: digimodeltrains@gmail.com

The exercise of these rights does not include any data that the Data Controller is required to retain for administrative, legal, or security purposes.

You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (AEPD), if you consider that the processing of your personal data infringes the Regulation.

Purpose of Processing Personal Data

When you connect to the Website to send an email to the Data Controller, subscribe to the newsletter, or purchase a product or service, you are providing personal information for which the Data Controller is responsible. This information may include personal data such as your IP address, first and last name, physical address, email address, telephone number, and other information. By providing this information, you consent to your information being collected, used, managed, and stored by — Oriol Farran de la Paz — only as described on the following pages:

– Legal Notice
– Privacy Policy

The personal data and the purpose of its processing by the Data Controller vary depending on the information collection method:

– Contact forms: The Data Controller requests personal data which may include: first and last name, email address, telephone number, and website address, for the purpose of responding to Users’ inquiries, providing information and demonstrations of the Data Controller’s products and services, including quotations.
For example, the Data Controller uses this information to respond to messages, questions, complaints, comments, or concerns that Users may have regarding the information contained on the Website, the products and services provided through the Website, the processing of personal data, matters relating to the legal texts included on the Website, as well as any other inquiry that the User may have that is not subject to the Website’s terms or the terms and conditions of purchase.
– Product or service purchase forms: The Data Controller requests personal data which may include: first and last name, identification document (tax identification number, foreigner’s identification number, passport, or residence permit), email address, postal address, telephone number, and payment details (payment methods or bank details), for the purpose of maintaining a business relationship with the User, shipping orders, providing the contracted services, and carrying out the invoicing and collection of payment for the purchased products or services.

There are other purposes for which the Data Controller processes personal data:

– To ensure compliance with the terms and conditions set out on the Legal Notice page and with applicable law. This may include the development of tools and algorithms that help the Website ensure the confidentiality of the personal data it collects.
– To support and improve the services offered by this Website.
– To analyze Users’ browsing activity. The Data Controller collects other non-identifying data obtained through the use of cookies that are downloaded to the User’s computer when browsing the Website, whose characteristics and purpose are detailed on the Cookie Policy page.
– To manage social media. The Data Controller has a presence on social media. If you follow the Data Controller on social media, the processing of personal data will be governed by this section, as well as by the terms of use, privacy policies, and access regulations applicable to the relevant social network in each case, which you have previously accepted.
You can consult the privacy policies of the main social networks through the following links:

YouTube
Instagram

The Data Controller will process your personal data for the purpose of properly managing its presence on social media, informing you about its activities, products, or services, as well as for any other purpose permitted by the regulations governing social media platforms.

Under no circumstances will the Data Controller use social media follower profiles to send individualized advertising.

Security of Personal Data

To protect your personal data, the Data Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Your data may be included in a mailing list file, for which the Data Controller is responsible for its management and processing. The security of your data is guaranteed, as the Data Controller takes all necessary security measures and guarantees that personal data will only be used for the purposes specified.

The Data Controller informs the User that their personal data will not be disclosed to third-party organizations, except where such disclosure is supported by a legal obligation or where the provision of a service requires a contractual relationship with a data processor. In the latter case, data will only be transferred to the third party when the Data Controller has obtained the User’s express consent.

However, in some cases, collaborations with other professionals may take place. In such cases, the User’s consent will be required, providing information about the identity of the collaborator and the purpose of the collaboration. This will always be carried out in accordance with the strictest security standards.

Content from Other Websites

The pages on this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction with this code.

Cookie Policy

For this Website to function properly, it needs to use cookies, which are pieces of information stored in your web browser.

You can find all the information regarding the cookie collection and processing policy on the Cookie Policy page: Cookie Policy.

Legal Basis for Data Processing

The legal basis for processing your data is:

– The consent of the data subject.
– Performance of the contract or the implementation of pre-contractual measures with the data subject, for the purpose of providing a product or service purchased from the Data Controller.
– Compliance with legal obligations.

Categories of Personal Data

The categories of personal data processed by the Data Controller are:

– Identification data.
– No specially protected categories of data are processed.

Retention of Personal Data

The personal data provided to the Data Controller will be retained until you request its deletion.

Recipients of Personal Data

– Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose principal office is located at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States (“Google”).

Google Analytics uses “cookies”, which are text files stored on your computer, to help the Data Controller analyze how Users use the Website. The information generated by the cookie about your use of the Website (including your IP address) will be directly transmitted to and stored by Google on servers located in the United States.

More information: https://analytics.google.com

You can find out how Google manages privacy regarding the use of cookies and other information on Google’s Privacy Policy page: Google Privacy Policy

You can also view a list of the types of cookies used by Google and its partners, as well as all information regarding the use of advertising cookies, at:

– Types of cookies used by Google
– How Google uses cookies for advertising

Web Browsing

When browsing the Website, non-identifying data may be collected, which may include the IP address, geolocation, a record of how the services and websites are used, browsing habits, and other data that cannot be used to identify you.

The Website uses the following third-party analytics service:

– Google Analytics.

The Data Controller uses the information obtained to collect statistical data, analyze trends, manage the Website, study browsing patterns, and gather demographic information.

The Data Controller is not responsible for the processing of personal data carried out by websites that you may access through the various links contained on the Website.

Changes to the Privacy Policy

The Data Controller reserves the right to modify this Privacy Policy in order to adapt it to changes in legislation or case law, as well as to industry practices.

These policies will remain in effect until they are replaced by other policies that are duly published.

Accuracy and Truthfulness of Personal Data

You undertake to ensure that the data provided to the Data Controller is correct, complete, accurate, and up to date, and to keep it duly updated.

As a User of the Website, you are solely responsible for the truthfulness and accuracy of the data submitted to the Website, releasing the Data Controller from any liability in this regard.

Accuracy and Truthfulness of Personal Data

You undertake to ensure that the data provided to the Data Controller is correct, complete, accurate, and up to date, and to keep it duly updated.

As a User of the Website, you are solely responsible for the truthfulness and accuracy of the data submitted to the Website, releasing the Data Controller from any liability in this regard.