Privacy Policy | Giftcampaign.co.uk

This privacy policy outlines the basis on which the company processes the personal data that our users voluntarily provide through the website. This Policy will always be applicable when data is provided to the company, which will be responsible for your data (Data Controller), and through any contact or subscription forms where personal data (name, email, etc.) is collected.

Our Commitments

• To respect our users' privacy and process their personal data with their consent.
• To process only the personal data necessary to provide the requested service and to handle it securely and confidentially, taking necessary measures to prevent unauthorized access and misuse.
• Not to use personal data for purposes in which we have not obtained prior consent.
• Not to share personal data with third parties.
• To retain personal data only for as long as necessary for the specific purpose for which it was provided.

Who is responsible for your personal data?

Company Name: GIFT CAMPAIGN, SL

Tax ID: B66221490

Address: C/Pallars 99, 2nd floor, offices 24 and 27, 08018, Barcelona.

What is personal data and personal data processing?

Personal data is any information about an identified or identifiable natural person. An identifiable natural person is someone who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

Personal data processing involves any operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

What data processing do we perform and for what purposes?

• Request for information: Managing user information requests through the contact form and/or provided email address, postal address, and/or phone number on the website.
• Newsletter subscription: Managing newsletter subscriptions.
• Working with us via CV submission: Managing received CVs through the website form.
• User profile registration and access: Managing user registration and access to the user portal using a corresponding username and password.
• Blog comments management: Managing the submission and reception of user comments on the blog.

What personal data do we collect?

Through our website, we can collect personal data for various purposes:

• Request for information: We collect the personal data provided for the query.
• Newsletter subscription: We collect your email address.
• Working with us via CV submission: We collect the information contained in the CV you provide.
• User profile registration and access: We collect the username and password, as well as any other data provided to create the account or profile.
• Blog comments management: We collect any data provided when posting the comment.

Depending on the purpose for which the data is provided, the necessary data will be required. It is important that the user is aware of the data provided and its purpose, as by providing it, you are accepting that we collect, store, and use such data for the required purpose. You may withdraw your consent at any time through the appropriate channels. The user's consent is the legal basis and justification for processing their personal data.

What is the legal basis for processing personal data?

In accordance with current data protection regulations, we need a legal basis to process your personal data. The legal basis is your consent.

What rights do you have over your personal data?

As a user, you can exercise the following rights:

• Right of access: You have the right to obtain confirmation from the company as to whether or not your personal data is being processed, and if so, what data is being processed.
• Right of rectification: You have the right to obtain the correction of inaccurate personal data concerning you from GIFT CAMPAIGN, SL. The rectification request must indicate the data to be modified.
• Right of opposition: You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you based on the company's legitimate interest. In such a case, the company will stop processing the personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
• Right of erasure: You have the right to obtain the erasure of your personal data from GIFT CAMPAIGN, SL.
• Right to data portability: You have the right to have your personal data transferred to another data controller. This right can only be exercised when the processing is based on the execution of a contract or your consent and the processing is carried out by automated means.
• Right to restriction of processing: You have the right to request the suspension of processing your data when: you contest the accuracy of the data while GIFT CAMPAIGN, SL verifies such accuracy; you have exercised your right to object to data processing while it is verified whether the legitimate grounds of GIFT CAMPAIGN, SL override yours as the data subject.

You can exercise these rights at any time by writing and providing proof of your identity to the data controller at the address mentioned above or via email at magdalena.lizarralde@giftcampaign.com. Additionally, you can file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you believe that the processing of your personal data violates applicable law.

Data Security and Storage

We will retain the data for the time strictly necessary to provide the requested service and while the data subject does not request its deletion. We adopt appropriate technical and organizational measures against unauthorized or unlawful processing and against accidental loss, destruction, or damage, making every effort to protect and securely store the data.

What personal data do we share with third parties?

Data sharing is not anticipated except in cases where there is a legal obligation or communication necessary to adequately provide the requested service. There is no provision for international data transfers.