Privacy Policy

Thank you for visiting this website.

Please read the Terms and Conditions contained in this document carefully, as use of this website implies the express and full acceptance of them, in the version published at the time you access the website. We recommend that you read this document carefully each time you access the website to check whether there have been changes to the terms of use, and that you leave the website if you do not agree with those changes. If we consider certain modifications to be important, we will update the “Last updated” date at the top of this page. You are responsible for reviewing and becoming familiar with any changes made.

LAWS INCLUDED IN THIS PRIVACY POLICY

This policy is adapted to the following rules currently in force in Spain and Europe:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
  • Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

1. IDENTIFICATION

In compliance with the information duty set out in Article 10 of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, and with current legislation on data protection, in particular Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, which fully implements Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, we provide the following information:

Data Controller: HOLAOLIVE EXPERIENCE SLU (hereinafter, THE COMPANY)

Trade name: HOLAOLIVE EXPERIENCE

Tax ID (CIF): B16480428

2. COMMUNICATION

To contact us regarding any matter relating to the processing of personal data, we provide the following contact methods:

  • Telephone: +34 692 85 98 01
  • Email: andre@holaolive.com
  • Registered office: CALLE SICILIA, NUM 380 PLANTA BJ, PUERTA 2 – 08025 – BARCELONA
  • Website: https://holaolive.com/

All notices and communications made through any of the methods listed above will be considered effective for all purposes.

We understand that the privacy and security of your personal information are extremely important. For this reason, this policy explains what we do with your information and how we keep it secure. It also explains where and how we collect your personal information, as well as your rights in relation to any personal information we hold about you.

Principles applicable to the processing of personal data

The processing of the user’s personal data will be subject to the principles set out in Article 5 of the GDPR and in Article 4 et seq. of Organic Law 3/2018:

  • Lawfulness, fairness and transparency: the user’s consent will be required at all times after fully transparent information has been provided about the purposes for which personal data are collected.
  • Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.
  • Data minimisation: the personal data collected will be only those strictly necessary in relation to the purposes for which they are processed.
  • Accuracy: personal data must be accurate and kept up to date at all times.
  • Storage limitation: personal data will be kept in a form that allows identification of the user only for as long as necessary for the purposes of processing.
  • Integrity and confidentiality: personal data will be processed in a way that ensures appropriate security and confidentiality.
  • Accountability: the Data Controller will be responsible for ensuring that the above principles are complied with.

Measures adopted to ensure confidentiality, integrity and security

  • We request only the minimum amount of information necessary, collecting only what we consider essential to conduct business or carry out the specific transaction.
  • We have established confidentiality agreements with our suppliers, staff and collaborators.
  • We have specialised advisers who will provide ongoing assistance in this area and carry out periodic checks to ensure correct compliance with the regulations.
  • We have implemented IT security measures to protect us against possible external attacks.
  • We have reviewed all our documentation to ensure that it is appropriate under the new regulation.
  • We have assessed the impact that our procedures may have on the protection of personal data.
  • We have trained our staff so that everyone can act diligently and ethically, complying with the requirements laid down in the new regulation.

LEGAL BASES FOR THE COLLECTION AND USE OF INFORMATION

If you are an individual in the European Economic Area (EEA), our legal basis for collecting and using information depends on the personal information concerned and the context in which we collect it. Most of our information collection and processing activities are generally based on: 1) contractual necessity; 2) one or more legitimate interests of THE COMPANY or a third party that are not overridden by your data protection interests; or 3) your consent. Sometimes we will have a legal obligation to collect your information or will need your personal information to protect your vital interests or those of another person.

PROCESSING ACTIVITIES

We explain below how we collect, use, disclose, transfer and store your information. This Privacy Policy applies to personal information collected through our website. It is important that you consult the Privacy Policy frequently in case it has been updated.

All users who access our website may view all its content without having to provide any personal information. Your personal data will only be collected when you voluntarily complete our form(s). In such cases, the user guarantees the authenticity, accuracy and truthfulness of the information provided and undertakes to keep their personal data updated so that it always reflects their real situation. The user will be solely responsible for any false or inaccurate statements and for any damage that they may cause.

The consent given for the processing and transfer of the data of the data subjects may be withdrawn at any time by contacting andre@holaolive.com, under the terms set out in this Policy for exercising rights. Such withdrawal will not have retroactive effect.

How we use your data

We may use your personal data in the following ways: the information you provide may help us make decisions, respond to requests, improve services, detect new needs, generate promotions, understand your expectations and provide you with better service. We may also use your data for the following purposes:

Processing your order and providing products and services

  • Process the order for the products and services you have purchased and keep you informed of its progress.
  • Provide you with the relevant product or service.

Billing and customer service

  • Invoice you or charge you for the use of our products and services.
  • Contact you if the billing information you provided is not up to date, is about to expire or we cannot accept payment.
  • Respond to any questions or concerns you may have about our products or services.

Service information messages

We will contact you to keep you updated with information about the products and services you have with us.

Other purposes

Specific purpose: if you provide personal data for a specific purpose, we will use it for matters related to the purpose for which it was provided. For example, if you contact us by email, we will use the personal data you provide to answer your question or resolve the issue, and we will reply to the email address from which the message was sent.

Internal purposes: we may use your personal data for internal purposes, such as improving the content and functionality of the services, better understanding customer needs, improving services, protecting, identifying or addressing fraudulent activities, enforcing our terms of service, managing your account, providing customer support and generally managing our services and business activity.

Commercial communications: provided that we have your express consent, obtained through an exclusive checkbox in our forms, we may use your personal data to contact you in the future for commercial actions that may be of interest to you and are always related to the products and/or services offered by the company. You will always have the option to unsubscribe in those messages or notify us by writing to andre@holaolive.com.

The following tables explain in more detail the categories of users, purposes, legal bases, data collected, consequences of not providing data, possible disclosures, international transfers and retention periods.

CategoryPurpose
Website visitorUsability and quality analysis to improve our services.
User who contacts usRespond to user requests, queries, complaints, comments or concerns relating to the information on the website, the services provided through the website, the processing of personal data, legal texts on the website and any other enquiries not subject to contracting conditions.
CategoryLegal basis
Website visitorConsent given by accepting cookies or continuing to browse our website (GDPR Art. 6(1)(a)).
User who contacts usOur legitimate interest in responding to the enquiries and requests of the data subject, justified by the interest shown in contacting and receiving information, with minimal intrusion into privacy and use of limited data provided by the user.
CategoryData collected
Website visitorBasic data: IP address and browsing data.
User who contacts usBasic data: name, surname, email address and telephone number.
CategoryConsequences
Website visitorNo consequences.
User who contacts usIf the user does not provide their data, we will not be able to respond properly to their enquiry.
CategoryPossible disclosures
Website visitorNo visitor data are collected.
User who contacts usWe will not disclose personal data relating to this type of user to third parties without their consent.
CategoryInternational transfers
Website visitorNo visitor data are collected.
User who contacts usNo transfer of personal data to a third country or international organisation is carried out.
CategoryRetention periods
Website visitorVisitor data are not stored.
User who contacts usKept for the time necessary to fulfil the purpose for which they were collected.

OTHER ASPECTS RELATING TO THE LEGAL BASIS

We may process your data on one or more of the following legal bases: consent of the data subject; performance of a contract or pre-contractual measures; legal obligation; legitimate interest; public interest; and, exceptionally, vital interests where processing is necessary to protect your vital interests or those of another natural person.

OTHER ASPECTS RELATING TO DATA DISCLOSURE

As a general rule, the data you provide are not disclosed to third parties without your consent, except where legally required, for example in the event of a court summons or a request from a government body, or where we believe in good faith that such action is necessary to comply with a legal obligation, protect or defend our rights, interests or property or those of a third party, prevent or investigate potential unlawful acts, act in urgent circumstances to protect personal safety, or safeguard against legal liability.

STORAGE

We may store your data or transfer it to a third party that will store it in accordance with this Privacy Policy. We take measures we consider reasonable to protect personal data against loss, misuse, unauthorised use, unauthorised access, accidental disclosure, alteration and destruction. However, no networks, servers, databases or Internet or email transmissions are completely secure or error-free. In the event of a security breach affecting data under our custody, we will take the necessary measures to mitigate its consequences and notify the Supervisory Authority together with the relevant information for documenting and communicating the incident.

CONSENTS

Under data protection regulations, the data subject’s consent is a freely given communication by which the data subject accepts the processing of their data for a specific purpose under certain conditions, of which they must have been previously informed. You may modify or withdraw your consent at any time through our email address. You may also unsubscribe from our database at any time by sending us an email to: andre@holaolive.com.

AUTOMATED DECISIONS

THE COMPANY does not make any decisions based solely on automated processing of your data.

STATISTICAL STUDIES

THE COMPANY does not conduct studies for scientific, historical or statistical purposes. Where applicable, data will be dissociated from the study object to preserve confidentiality.

PERSONAL DATA BREACH NOTICE

A personal data breach is a security breach of THE COMPANY’s information systems that causes or may cause the destruction, alteration, loss, unauthorised disclosure of or access to personal data transmitted, stored or processed in connection with the provision of our services. If the personal data that we store and/or process are compromised in any way, we will notify the affected parties in due time and in accordance with Article 33 of the GDPR.

DATA PROTECTION RIGHTS

Users may send a written communication to THE COMPANY’s registered office or to the email address indicated in this policy to request the exercise of the following rights:

  • Right to rectification of personal data.
  • Right of access to personal data.
  • Right to data portability.
  • Right to object to the use of personal data.
  • Right to erasure or cancellation.
  • Right to restriction of processing.

In addition to the specific means established for each right, you may exercise your rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw any consent given, by writing with the reference “Data Protection” to the postal or electronic address stated at the beginning of this Policy. These rights are personal and will be exercised by the data subject, subject only to the limits provided by applicable law. The Data Controller will respond within thirty days following receipt of the request. If the Data Controller considers that the request should not be granted, it will provide reasons within the same period.

COLLECTION OF DATA FROM MINORS

Our website is not intended for persons under 16 years of age. We do not intentionally collect information, including personal data, about children or other persons who cannot legally use our services. If we become aware that we have collected personal data from a child under 16, we will delete it as soon as possible unless we are legally required to retain it. Please contact us at andre@holaolive.com if you believe that we have collected information from a minor under 16 by mistake or unintentionally.

SPECIAL CATEGORIES OF PERSONAL DATA AND DATA RELATING TO CRIMINAL CONVICTIONS AND OFFENCES

The entry of personal information in free-text fields that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, health data, data concerning a person’s sex life or sexual orientation, or personal data relating to criminal convictions and offences is not permitted. If any information of this type is entered in our forms or by email, it will be deleted immediately from our information systems and the enquiry cannot be processed, as such data are not necessary or relevant for the purposes of the processing carried out on this website.

COMPLAINT TO THE SUPERVISORY AUTHORITY

If you believe that your rights have not been properly addressed by our entity, you may lodge a complaint with the Spanish Data Protection Agency through the following means: website/electronic office: www.agpd.es; postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001 Madrid; telephone: 901 100 099 / 91 266 35 17. Filing a complaint with the Spanish Data Protection Agency is free of charge and does not require a lawyer or court representative.

HOLAOLIVE EXPERIENCE SLU has adapted this website to the requirements of Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002 on Information Society Services and Electronic Commerce.

© All rights reserved: HOLAOLIVE EXPERIENCE SLU

V7.0