Until now, compliance had been in accordance with Spain’s LOPD (Data Protection Act) regarding data privacy matters, a law which, as of May 25, 2018, is replaced by the European Union’s General Data Protection Regulation (GDPR).
This Privacy Policy applies solely to personal data obtained on the Website and does not apply to information collected by third parties on other websites, even if they are linked by the Website.
With this, the Website reaffirms its commitment to maintaining and ensuring secure business relationships with the User by protecting their personal data and guaranteeing their right to privacy.
To provide our services, we require certain identifying data, depending on the service provided:
For the guestbook/reviews:
For the blog:
For the contact form:
We process your data with your consent, which is a mandatory requirement for you to correctly access the Website’s services.
The User has the “right to be forgotten” if they wish for all their data to be deleted from our databases.
The data collected by the Website are not considered sensitive or protected data.
According to Article 9.1 of the GDPR, sensitive or protected data are personal data that reveal:
We only work with the minimum identifying data necessary to carry out our activities: name, surname, address, telephone, email, tax ID/fiscal code.
Customer data (name, telephone, postal address, email, etc.) will remain in our system for as long as legally and technically required for the normal operation of the Website, unless the User exercises their right to deletion or update.
Applicable Regulations
Since May 25, 2018, the Website complies with the European Union’s General Data Protection Regulation (GDPR).
https://www.boe.es/doue/2016/119/L00001-00088.pdf
The Website is hosted on systems operated by Arcadina Sistemas Informáticos SL (“Arcadina”), which has implemented the necessary technical and organizational security measures to ensure the protection of the User’s personal data and prevent alteration, loss, unauthorized processing, or access—taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed, whether from human action or the physical or natural environment—all in compliance with the GDPR.
Arcadina has also implemented additional measures to reinforce the confidentiality and integrity of the Website’s information, continuously monitoring, controlling, and evaluating processes to ensure respect for data privacy.
Specifically, Arcadina implements the following measures:
Any User who has provided their data to the Website may contact the owner of the site to exercise, free of charge, their right of access, rectification, deletion, restriction, or objection with respect to the data stored.
The method for contacting the Website is through the email address registered in our web service or in writing.
The User may exercise their rights by sending a written communication to the Website, with the reference “Data Protection,” specifying their data, proving their identity, and stating the reasons for their request, to the following address:
sara@sararenart.com
Any information we are required to store due to legal, tax, or contractual obligations will be blocked and used solely for those purposes rather than deleted.
The Website reserves the right to modify this Privacy Policy due to legislative, jurisprudential, or doctrinal changes from the Spanish Data Protection Agency.
Any modification to the Privacy Policy will be published at least ten days before its effective application.
The data file controller is the owner of the Website.
To provide services strictly necessary for its proper functioning, the Website uses the following service providers under their corresponding privacy conditions:
On our Website we offer links and services related to various social networks. If the User is a member of a social network and clicks on the corresponding link, the social network provider may link their profile data with information about their visit to the Website.
Therefore, the User should be aware of the functions and policies regarding the processing of their personal data by each social network—whether they access one of our web pages using their social network profile or share information through it.
The User may access at any time the privacy policies of the various social networks, as well as configure their profile to ensure their privacy.
The User declares that they have been informed of the conditions regarding personal data protection, accepting and consenting to their processing by the Website in the manner and for the purposes indicated in the Legal Notice.
The User may revoke their consent at any time, without retroactive effect—meaning it will not affect actions already carried out in the past.
