I.- DATA CONTROLLER
- IDENTITY: SIMEONOV PETROV TIHOMIR
- TAX ID / NIE: Y7262062X
- REGISTERED ADDRESS: CALLE PATRICIO FERRANDIZ NUM 2 Esc. D Planta 07 Pta. 26 (03700), DÉNIA (ALICANTE), Spain
- E-MAIL: info@instelson.com
II.- RECIPIENTS OF PERSONAL DATA
The personal data provided will not be transferred to third parties unless specified in processing activities or required by legal obligation.
Optionally, for hosting, cloud services, and IT/email communication services, personal data may be:
- Disclosed to IT service providers located within the European Economic Area (EEA).
- Transferred to IT service providers located outside the EEA providing appropriate safeguards compliant with the GDPR (such as European Commission adequacy decisions or Standard Contractual Clauses).
- Disclosed to public administrations, courts, or legal authorities when required to comply with statutory obligations.
III.- LEGAL BASIS FOR PROCESSING
In each processing activity, we inform you of the legal basis that legitimates it. Primarily, processing relies on the user’s explicit consent granted when making a request or sending an inquiry, as well as the Controller’s legitimate interest in serving users and maintaining website security.
IV.- RIGHTS
4.1. RIGHT OF ACCESS
The right to obtain from the data controller confirmation as to whether or not personal data concerning you is being processed, and access to personal data and the following information: purposes of processing, categories of data concerned, recipients or categories of recipients, retention period or criteria used to determine it, existence of the right to request rectification or erasure or restriction of processing or object to such processing, right to lodge a complaint with the supervisory authority (AEPD), existence of automated decision-making, and safeguards applied if data is transferred to a third country.
4.2. RIGHT TO RECTIFICATION
The right to request the rectification of inaccurate personal data, as well as completing incomplete data. By providing personal data, you guarantee its accuracy and commit to notifying any changes. Any damage caused by providing false, inaccurate, or incomplete information will be your sole responsibility.
4.3. RIGHT TO ERASURE (“RIGHT TO BE FORGOTTEN”)
The right to request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected, or when consent is withdrawn. Erasure shall not apply where processing is necessary for compliance with legal obligations or for the establishment, exercise, or defense of legal claims.
4.4. RIGHT TO RESTRICTION OF PROCESSING
The right to request the restriction of processing of your personal data, meaning that in certain cases we will temporarily suspend processing or retain data beyond the necessary time upon your request for legal claims.
4.5. RIGHT TO WITHDRAW CONSENT
The right to withdraw consent given by checking “I have read and accept the Privacy Policy” at any time. Withdrawal does not affect processing carried out prior to withdrawal or processing necessary under legal obligations.
4.6. RIGHT TO DATA PORTABILITY
The right to receive personal data concerning you in a structured, commonly used, and machine-readable format and transmit it to another controller, provided processing is based on consent and carried out by automated means.
4.7. RIGHT TO OBJECT
The right to object to the processing of your personal data based on legitimate interest. We will cease processing unless we demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms.
4.8. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe your personal data is being processed incorrectly, you can contact us or lodge a complaint with the Spanish Data Protection Agency (AEPD) at https://www.aepd.es.
4.9. EXERCISING YOUR RIGHTS
You can exercise your rights by sending a written request to the postal address above or by email to info@instelson.com, attaching a copy of your identity document (DNI/NIE/Passport).
V.- SECURITY MEASURES
The Controller implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, safeguarding data confidentiality, integrity, availability, and resilience.
VI.- PERSONAL DATA PROCESSING ACTIVITIES
6.1. GENERAL PROVISIONS
Data requested is adequate, relevant, and limited to what is necessary for the processing purposes (data minimization). Failure to provide mandatory data prevents fulfilling your request.
6.2. CONTACT FORM AND EMAIL PROCESSING
- Purpose: Processed solely to answer inquiries and manage communication with the user.
- Legal Basis: Explicit consent granted when checking the acceptance box and submitting the form.
- Recipients: No data transfers to third parties except under legal obligations or essential IT infrastructure maintenance.
- Retention: Data will be stored for two years from the last contact, without prejudice to exercising data subject rights or statutory retention requirements.