1. INFORMATION FOR USERS

EXOTICOS MALAGA S.L.U, hereinafter the CONTROLLER, is the controller responsible for processing the User’s personal data and informs the User that these data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD). The following information about the processing is therefore provided:

Purpose of processing: to maintain a commercial relationship with the User. The planned processing operations are:

• Sending advertising and commercial communications by email, fax, SMS, MMS, social networks or any other present or future electronic or physical medium that enables commercial communications. These communications will be sent by the CONTROLLER and will relate to its products and services, or those of its partners or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
• Carrying out statistical studies.
• Processing orders, applications or any other request made by the User through any of the contact methods made available.
• Sending the website newsletter.

Legal basis for processing: the data subject’s consent.

Data retention criteria: data will be retained for no longer than necessary to fulfil the purpose of processing. When no longer needed for that purpose, they will be erased using appropriate security measures to ensure pseudonymisation or complete destruction.

Disclosure of data: data will not be disclosed to third parties unless required by law.

The User’s rights:

• The right to withdraw consent at any time.
• The right of access, rectification, portability and erasure of personal data, and to restrict or object to their processing.
• The right to lodge a complaint with the supervisory authority (agpd.es) if the User considers that the processing does not comply with applicable regulations.

Contact details for exercising your rights:
Postal address: EXOTICOS MALAGA SLU. CALLE SAINT EXUPERY, 10 LOCAL 2, 29007 MALAGA (MALAGA). Email: info@orisylva.es
Email address: info@orisylva.es

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

By ticking the boxes and entering data in fields marked with an asterisk (*) in the contact form or in download forms, Users expressly, freely and unequivocally accept that their data are necessary for the provider to deal with their request. Completing the remaining fields is voluntary. The User guarantees that the personal data provided to the CONTROLLER are accurate and accepts responsibility for notifying any changes.

The CONTROLLER expressly informs and guarantees Users that their personal data will never be disclosed to third parties and that, whenever any disclosure of personal data is contemplated, Users’ express, informed and unequivocal consent will be requested beforehand. All data requested through the website are mandatory because they are necessary to provide an optimal service to the User. If not all data are provided, it cannot be guaranteed that the information and services supplied will fully meet the User’s needs.

3. SECURITY MEASURES

In accordance with current personal data protection regulations, the CONTROLLER complies with all GDPR provisions governing the processing of personal data for which it is responsible, and specifically with the principles described in Article 5 of the GDPR. Data are processed lawfully, fairly and transparently in relation to the data subject, and are adequate, relevant and limited to what is necessary for the purposes for which they are processed.
The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures required by the GDPR, in order to protect Users’ rights and freedoms, and has provided the information they need to exercise those rights.