{"id":3567,"date":"2025-09-18T11:16:03","date_gmt":"2025-09-18T09:16:03","guid":{"rendered":"https:\/\/candelasol.com\/privacy-policy\/"},"modified":"2025-12-09T14:59:56","modified_gmt":"2025-12-09T13:59:56","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/candelasol.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Privacy policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
I. PRIVACY AND DATA PROTECTION POLICY<\/strong><\/h5><\/header>

In compliance with current legislation, (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected.<\/p>

Laws incorporated into this privacy policy<\/strong><\/h6>

This privacy policy complies with current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations: <\/p>

  • Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).<\/li>
  • Organic Law 3\/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).<\/li>
  • Royal Decree 1720\/2007, of 21 December, approving the Regulations implementing Organic Law 15\/1999, of 13 December, on the Protection of Personal Data (RDLOPD).<\/li>
  • Law 34\/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).<\/li><\/ul>
    Identity of the person responsible for processing personal data<\/strong><\/h6>

    The data controller responsible for processing the personal data collected is: , with Tax Identification Number: (hereinafter, Data Controller). Their contact details are as follows: <\/p>

    Address: <\/p>

    Contact telephone number: <\/p>

    Contact email: <\/p>

    Registration of Personal Data<\/strong><\/h6>

    In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by , through the forms on its pages, will be incorporated and processed in our file in order to facilitate, expedite and fulfil the commitments established between and the User or to maintain the relationship established in the forms that the User fills in, or to respond to a request or query from the User. Likewise, in accordance with the provisions of the GDPR and the LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is kept which specifies, according to their purposes, the processing activities carried out and the other circumstances established in the GDPR. <\/p>

    Principles applicable to the processing of personal data<\/strong><\/h6>

    The processing of the User’s personal data will be subject to the following principles set out in Article 5 of the GDPR and in Article 4 et seq. of Organic Law 3\/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights:<\/p>

    • Principle of lawfulness, fairness and transparency: the User’s consent will be required at all times, following fully transparent information about the purposes for which the personal data is collected.<\/li>
    • Purpose limitation principle: personal data shall be collected for specified, explicit and legitimate purposes.<\/li>
    • Principle of data minimisation: personal data collected will only be that which is strictly necessary in relation to the purposes for which it is processed.<\/li>
    • Accuracy principle: personal data must be accurate and kept up to date.<\/li>
    • Principle of storage limitation: personal data will only be kept in a form that allows the User to be identified for as long as is necessary for the purposes of its processing.<\/li>
    • Principle of integrity and confidentiality: personal data shall be processed in a manner that ensures its security and confidentiality.<\/li>
    • Principle of proactive responsibility: the data controller shall be responsible for ensuring that the above principles are complied with.<\/li><\/ul>
      Categories of personal data<\/strong><\/h6>

      The categories of data processed are solely identifying data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR. <\/p>

      Legal basis for the processing of personal data<\/strong><\/h6>

      The legal basis for the processing of personal data is consent. undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or more specific purposes. <\/p>

      The User shall have the right to withdraw their consent at any time. Withdrawing consent shall be as easy as giving it. As a general rule, withdrawing consent shall not condition the use of the Website. <\/p>

      On occasions when the User must or may provide their data through forms to make enquiries, request information or for reasons related to the content of the Website, they will be informed if the completion of any of these forms is mandatory because they are essential for the correct performance of the operation carried out.<\/p>

      Purposes of the processing for which personal data are intended<\/strong><\/h6>

      Personal data is collected and managed for the purpose of facilitating, expediting and fulfilling the commitments established between the Website and the User or maintaining the relationship established in the forms that the latter fills in or to respond to a request or query.<\/p>

      Similarly, the data may be used for commercial purposes of personalisation, operation and statistics, and activities related to the corporate purpose of , as well as for data extraction, storage and marketing studies to tailor the Content offered to the User, and to improve the quality, functioning and navigation of the Website.<\/p>

      At the time the personal data is obtained, the User will be informed of the specific purpose or purposes for which the personal data will be processed; that is, the use or uses that will be made of the information collected.<\/p>

      Retention periods for personal data<\/strong><\/h6>

      Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, only for the following period: , or until the User requests its deletion.<\/p>

      At the time the personal data is obtained, the User will be informed of the period during which the personal data will be stored or, where that is not possible, the criteria used to determine this period.<\/p>

      Recipients of personal data<\/strong><\/h6>

      The User’s personal data will be shared with the following recipients or categories of recipients:<\/p>

      If the Data Controller intends to transfer personal data to a third country or international organisation, at the time the personal data is obtained, the User will be informed of the third country or international organisation to which the data is intended to be transferred, as well as the existence or absence of an adequacy decision by the Commission.<\/p>

      Personal data of minors<\/strong><\/h6>

      In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3\/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, only persons aged 14 or over may give their consent to the lawful processing of their personal data by . In the case of minors under the age of 14, the consent of their parents or guardians will be required for the processing, and this will only be considered lawful to the extent that they have authorised it. <\/p>

      Confidentiality and security of personal data<\/strong><\/h6>

      undertakes to adopt the necessary technical and organisational measures, in accordance with the level of security appropriate to the risk of the data collected, in order to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised communication or access to such data.<\/p>

      However, as it cannot guarantee the impregnability of the internet or the total absence of hackers or others who fraudulently access personal data, the Data Controller undertakes to notify the User without undue delay when a breach of personal data security occurs that is likely to pose a high risk to the rights and freedoms of natural persons. In accordance with Article 4 of the GDPR, a personal data breach is understood to be any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed. <\/p>

      Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure, by means of a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.<\/p>

      Rights arising from the processing of personal data<\/strong><\/h6>

      The User has and may therefore exercise the following rights recognised in the GDPR and Organic Law 3\/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, against the Data Controller:<\/p>