Skip to content

Norba Studio | Architecture, painting, and professional photography

Data protection policy

THE OWNER is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by THE OWNER involves the acceptance by the user of the provisions contained in this Privacy Policy and that your personal data are treated as stipulated in it. Please, keep in mind that despite the fact that there may be links from our website to other websites and social networks, this Privacy Policy does not apply to websites of other companies or organizations to which the website is redirected. THE OWNER does not control the content of third party sites, nor accept any responsibility for the content or the privacy policies of these websites.

 

Basic information on data processing (Regulation (EU) 2016/679 and WHAT 3/2018)

Responsible for the treatmentTHE HOLDER.
Our data is contained in the legal notice of this website.
Purpose of the treatmentOffer and manage our products and/or services.
LegitimationObtained consent of the interested party. Execution of the service agreement.
RecipientsThe data will not be communicated to third parties, unless required to do so by Law or is necessary to fulfill the purpose of the treatment.
Rights of personsThe interested parties have the right to exercise the rights of access, rectification, limitation of treatment, deletion, portability and opposition by sending your request to our address.
Period of conservation of dataAs long as the commercial relationship or during the years necessary to comply with the legal obligations.
ClaimInterested parties can contact the AEPD to present the claim that you consider appropriate.
Additional informationYou can consult the additional and detailed information below in the “Questions about privacy”.

 

Questions about privacy

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, (RGPD), and the Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPDGDD we offer you the following information about the processing of your personal data:

 

Who is the responsible for the processing of your data?

THE HOLDER.
Our data is contained in the legal notice of this website.

What purpose we treat your personal data?

  • We treat the information that you provide to us to provide and bill our services and products.
  • If you give us your consent we can also process your data to send you information about our activities, services and products.
  • If you participate in any of our sweepstakes and/or contests we will publish your name and surnames, and your image, in the different spaces and means of communication and dissemination that we use, including social networks, with the purpose of promoting our activities, services and products.

 

How long will we keep your data?

The personal data provided will be kept while you are a user of our services or want to receive information, and if you participate in a promotion while you are active, and then, during the periods established to comply with our legal obligations.

 

What is the legitimation for the processing of your data?

The legal basis for the treatment of your data are the consents that you give us.

With respect to the information that is sent by children under the age of 16 years, it will be understood that what has been, with the consent of their legal representatives. If not, the legal representative of a minor has to notify us as soon as it has knowledge.

 

What recipients will communicate your data to?

The data will not be communicated to third parties, unless required to do so by Law or is necessary to fulfill the purpose of the treatment.

 

What are your rights when you provide us with your data?

  • Any person has the right to obtain confirmation about whether we are trying to or not their personal data.
  • The interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, data are no longer necessary for the purposes for which they were collected.
  • In certain circumstances the interested parties may request the limitation of the processing of their data, in this case only retain it for the exercise or defense of claims.
  • Also, in certain circumstances and for reasons related to your particular situation, the interested parties can oppose the processing of their data.
  • The interested parties also have the right to the portability of your data.
  • Finally, the interested parties have the right to lodge a complaint with the competent supervisory Authority.

 

How can you exercise your rights?

By writing and enclosing a copy of a document that identifies you, to our physical address or electronic.

 

How have we obtained your data?

The personal data that we originate from the interested party. The interested party guarantees that the personal data provided is true and is responsible for communicating any modification of these. The data are marked with an asterisk will be mandatory to be able to give the requested service.

 

What data do we treat?

The categories of data that we treat in the provision of our services are:

  • Character data identification
  • Postal or electronic addresses
  • Other data requested in our forms

The data are limited, given that only treat the data necessary for the provision of our services and the management of our activity.

 

Do we use cookies?

We use cookies during the navigation in our website with the informed consent of the user. The user can configure his browser to be warned of the use of cookies and to prevent their use. For more information please visit our cookies policy.

 

What security measures do we apply?

We apply the security measures established in article 32 of the RGPD, therefore, we have adopted the necessary security measures to ensure a level of security appropriate to the risk of the data processing we perform, with mechanisms that allow us to ensure the confidentiality, integrity, availability and resilience of the permanent systems and treatment services.

Some of these measures are:

  • Information policy data processing staff.
  • Performing regular backups.
  • Control access to the data.
  • Processes of verification, evaluation and assessment on regular basis.