Who is responsible for the processing of your data?
XREALITY STUDIOS, S.L.
Registered office: Gran Vía de Colón 12, 3º B – 18010 – Granada.
CIF: B-04927158
For what purposes will we process your personal data? XREALITY STUDIOS, S.L. processes the necessary data provided by filling in the corresponding forms contained in the page, queries or emails received, as well as those data that XREALITY STUDIOS, S.L. accesses as a result of your browsing, for the maintenance of the relationship with the User.
Processing by express consent. Provided that you have given your express consent, we will process your personal data for the following purposes:
– Enquiry form: to manage the enquiries made by the interested party through the web form, as well as by any other means offered.
– Selection processes: to manage the selection processes open on the website.
What is the legal basis for the processing of your data?
The legal basis for the processing of your data is based on obtaining your consent, in accordance with the provisions of article 6.1.a of Regulation (EU) 679/2016 by ticking the box located for this purpose on the data collection forms.
To whom will we disclose your data?
We will not share your personal information with anyone, except to comply with a legal obligation or if we have your express permission. Nor will we use your personal data for any purpose other than that expressed in this privacy policy and in the consent collection forms. Therefore, all data transfers will be carried out under the protection framework indicated by the Spanish Data Protection Agency, or as long as they are expressly consented to by the User and to countries whose security and confidentiality is guaranteed.
Will data be transferred internationally?
XREALITY STUDIOS, S.L. does not plan to carry out international data transfers. If necessary, they will only be made to entities under the USA-European Union Privacy Shield agreement (more information: https://www.privacyshield.gov/welcome), or to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements set out in the current data protection regulations, such as the European Regulation, or when there is legal authorisation to make the international transfer.
For how long will we store your data?
We will process your data, as long as it is necessary for the purpose for which it was collected and for the period of time established by a legal obligation.
What happens if a minor accesses the data?
As a general rule, the WEBSITE will not process personal information, with reliable knowledge, of minors under fourteen (14) years of age. In the event that the WEBSITE, while carrying out any control activity, discovers the involuntary collection of information regarding minors under 14 years of age, it will carry out all the necessary measures that, as a service provider and data controller, it is obliged to take in order to delete such information as soon as possible, except in those cases in which, due to applicable legislation, it is necessary to keep it.
In accordance with the provisions of the European Data Protection Regulation, persons over 14 years of age are entitled to give their consent, except in those cases in which the law requires the assistance of the holders of parental authority or guardianship.
Will I be sent commercial communications and promotions?
The WEBSITE does not engage in SPAM practices, and therefore does not send commercial e-mails by electronic means that have not been previously requested or authorised by the User. Consequently, in each of the forms on the WEBSITE, the User has the possibility of giving their express consent to receive this information, independently of the commercial information specifically requested.
What security measures will we apply?
The WEBSITE guarantees the appropriate level of protection, adopting the technical and organisational measures necessary to guarantee security and which are legally required in order to prevent the loss, deterioration, loss or access to unauthorised third parties of the personal data collected here, thus keeping your data confidential. To this end, we apply security measures designed to protect your data, such as HTTPS. We regularly monitor our systems for vulnerabilities and attacks. However, we cannot guarantee the complete security of the information you submit to us if there is a breach of any of our physical, technical or managerial security measures.
What rights can you exercise?
Once you, as a User of the WEBSITE, have provided us with your personal data, current legislation allows you as a data subject:
– Request access to the personal data relating to the interested party, being able to know if we are processing your personal data and to access your personal data.
– Request the rectification of the data in the event that they are inaccurate.
– Request the deletion of your data insofar as they are no longer necessary for the purpose for which they were communicated, or in the event that we no longer have the necessary legitimacy to continue processing them.
– Request the limitation of its processing, in some cases, so we may suspend the processing temporarily or keep it beyond the established time when you may need it.
– To object to the processing of the information you have provided to us, unless there are compelling legitimate grounds for the processing to take precedence.
– To revoke consent for each specific purpose, without affecting the lawfulness of the processing based on express consent.
– To request data portability, which will be provided in a structured, commonly used or machine-readable format.
– To lodge a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe that we have not attended to you correctly.
How can you exercise your rights?
We have forms for exercising your rights, which you can request by email or by post. If you prefer, you can use the forms prepared by the Spanish Data Protection Agency or the competent authority.
These forms must be signed electronically or be accompanied by a photocopy of a valid ID card.
In the case of representation, a copy of the representative’s valid DNI must be enclosed with your application.
The forms can be submitted in person, or by sending an email to lopd@gruposecuoya.es.
How long does it take to resolve the exercise of rights?
We will inform you of the actions derived from your request within a period of one month, which may be extended by two months in the case of particularly complex requests, and we will notify you of this extension within the first month. In cases where we do not comply with your request, we will inform you of this and give reasons for our refusal within one month of your request.
Can changes be made to the privacy policy?
The WEBSITE reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as to industry practices. In such cases, the Provider will announce on this page the changes introduced reasonably in advance of their implementation.