LINDIS, S.L., as the controller responsible for this website, processes personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (the General Data Protection Regulation or “GDPR”), Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD), and Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
LINDIS, S.L. has implemented appropriate technical and organisational measures to protect the confidentiality, integrity and availability of the personal data it processes.
IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
Controller: LINDIS, S.L.
Tax Identification Number (NIF): B25316712
Address: Polígon Industrial Golparc, Av. Europa, 18–20, 25241 Golmés, Lleida, Spain
Telephone: (+34) 973 711 884
Email: lopd@lindis.es
PURPOSES OF PROCESSING
The personal data that you voluntarily provide through this website will be incorporated into the information systems of LINDIS, S.L. and may be processed for the following purposes:
• responding to enquiries and requests for information submitted by Users;
• managing commercial and administrative relationships with customers and Users;
• providing the products or services requested, purchased or subscribed to by the User;
• taking steps at the User’s request before entering into a contract;
• managing registrations, subscriptions and communications submitted through the website;
• complying with legal, accounting, tax and administrative obligations; and
• sending newsletters or commercial communications where the User has expressly consented to receive them or where another lawful basis permits such communications.
The User guarantees that the personal data provided are accurate, complete and up to date and agrees to notify LINDIS, S.L. of any changes.
Fields marked with an asterisk (*) on website forms are mandatory. If the User does not provide the required information, LINDIS, S.L. may be unable to process the request, provide the relevant service, complete a registration or send the requested information.
Providing personal data through a form does not constitute consent for every possible processing activity. Where consent is the applicable legal basis, it will be requested through a specific, informed and unambiguous affirmative action.
LEGAL BASIS FOR PROCESSING
Depending on the purpose and circumstances, LINDIS, S.L. may process personal data on one or more of the following legal bases:
• Consent: where the User has given consent for one or more specific purposes, in accordance with Article 6(1)(a) of the GDPR;
• Performance of a contract: where processing is necessary to perform a contract with the User or to take steps at the User’s request before entering into a contract, in accordance with Article 6(1)(b) of the GDPR;
• Compliance with a legal obligation: where processing is necessary to comply with a legal obligation to which LINDIS, S.L. is subject, in accordance with Article 6(1)(c) of the GDPR; and
• Legitimate interests: where processing is necessary for the legitimate interests pursued by LINDIS, S.L. or a third party, provided that those interests are not overridden by the interests, fundamental rights or freedoms of the data subject, in accordance with Article 6(1)(f) of the GDPR.
Personal data will be processed lawfully, fairly and transparently. The data collected will be adequate, relevant and limited to what is necessary for the purposes for which they are processed, in accordance with the principles established in Article 5 of the GDPR.
RETENTION OF PERSONAL DATA
Personal data will be retained only for as long as necessary to fulfil the purposes for which they were collected and, where applicable, for the duration of the contractual or commercial relationship.
Once the relevant purpose or relationship has ended, the data may be securely restricted and retained for the periods required by applicable legal, tax, accounting or administrative obligations and for the establishment, exercise or defence of legal claims. The data will then be securely deleted or anonymised, as appropriate.
Where processing is based on consent, the data may be processed until the data subject withdraws that consent, without affecting the lawfulness of processing carried out before its withdrawal.
DATA SUBJECT RIGHTS
Data subjects may exercise the following rights in relation to their personal data:
• the right to obtain confirmation as to whether their personal data are being processed and, where applicable, to access those data;
• the right to request the rectification of inaccurate or incomplete personal data;
• the right to request the erasure of their personal data where the applicable legal requirements are met;
• the right to request the restriction of processing;
• the right to object to processing based on legitimate interests or carried out for direct marketing purposes;
• the right to data portability where processing is based on consent or a contract and is carried out by automated means;
• the right not to be subject to a decision based solely on automated processing, including profiling, where such a decision produces legal effects or similarly significantly affects the data subject; and
• the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
These rights may be exercised by sending a written request to:
LINDIS, S.L.
Polígon Industrial Golparc, Av. Europa, 18–20
25241 Golmés, Lleida, Spain
Alternatively, requests may be submitted by email to lopd@lindis.es, using the subject line “GDPR – Data Protection Rights”.
The request should identify the right being exercised and include sufficient information to allow LINDIS, S.L. to verify the identity of the applicant. Where there are reasonable doubts concerning the applicant’s identity, additional information necessary to confirm their identity may be requested.
Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos or “AEPD”) if they believe that the processing of their personal data infringes applicable data protection legislation. Further information is available at https://www.aepd.es/.
CONFIDENTIALITY, SECURITY AND DISCLOSURE TO THIRD PARTIES
Personal data provided by Users will be treated confidentially. LINDIS, S.L. has adopted appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the state of the art, implementation costs, the nature of the data and the risks associated with processing.
Personal data will not be sold or disclosed to third parties except where:
• disclosure is necessary to comply with a legal obligation or a request from a competent public authority;
• disclosure is necessary for the performance of a contract or the provision of a requested service;
• the data subject has expressly consented to the disclosure; or
• a service provider processes personal data on behalf of LINDIS, S.L. under a data processing agreement and in accordance with documented instructions.
Employees, representatives, service providers and other parties involved in processing personal data are subject to appropriate confidentiality and security obligations.
Where personal data are transferred outside the European Economic Area, LINDIS, S.L. will ensure that an appropriate legal transfer mechanism and the safeguards required by applicable data protection legislation are in place.
INFORMATION AND CONSENT
By reading this Privacy Policy, the User acknowledges having been informed about how LINDIS, S.L. processes personal data. Acceptance of this Privacy Policy does not itself constitute consent to processing activities that require specific consent.
Where consent is required, it will be requested separately through a clear affirmative action. The User may withdraw that consent at any time using the contact details provided in this Privacy Policy.
Photographs and other visual content published on the website are owned by LINDIS, S.L., its collaborating companies or their respective rights holders and are used with the relevant authorisation where required.
ACCURACY OF PERSONAL DATA
The User is responsible for ensuring that the personal data provided to LINDIS, S.L. are accurate, complete, authentic and up to date.
The User agrees to provide complete and correct information through registration, subscription, contact and other website forms and to notify LINDIS, S.L. of any changes affecting the information supplied.
The User may be responsible for any loss or damage resulting from the provision of false, inaccurate, incomplete or outdated information, subject to applicable law.
WEBSITE CONTENT AND THIRD-PARTY LINKS
LINDIS, S.L. reserves the right to update, modify or remove information appearing on the website and may restrict or suspend access to such information where reasonably necessary.
The website may contain links to websites operated by third parties. LINDIS, S.L. does not control and accepts no responsibility for the content, privacy practices or data processing activities of those third-party websites.
The inclusion of a third-party link is for information purposes only and does not imply that LINDIS, S.L. endorses, recommends or has any commercial or other relationship with the linked website or its operator.
Users should review the privacy policy of each third-party website before providing any personal data.
CHANGES TO THIS PRIVACY POLICY
LINDIS, S.L. reserves the right to amend this Privacy Policy to reflect legislative, regulatory or case-law developments, changes to guidance issued by supervisory authorities, or changes to its personal data processing activities.
Where appropriate, Users will be informed of material changes through the website or by other suitable means. Users are encouraged to review this Privacy Policy periodically.
COMMERCIAL COMMUNICATIONS
In accordance with the LSSI-CE, LINDIS, S.L. does not send unsolicited commercial communications by email or other equivalent electronic means unless permitted by applicable law.
Where required, Users will be given the opportunity to provide their express consent to receive newsletters or commercial communications independently of any specific information they have requested.
Every commercial communication will provide a simple and free method for withdrawing consent or unsubscribing from future communications. The withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
APPLICABLE LAW AND JURISDICTION
This Privacy Policy and the processing of personal data by LINDIS, S.L. shall be governed by applicable European Union and Spanish legislation.
Any dispute relating to the use of this website shall be submitted to the competent courts in accordance with applicable procedural and consumer protection legislation. Where legally permitted, the parties expressly submit to the jurisdiction of the Courts of Lleida.