INTERNATIONAL TRANSFERS

We do not and we do not intend to carry out international transfers. However, as usual today, some IT/technology providers have their servers outside the European Economic Area (“EEA”), for instance un the US. In the case that one of our providers is located outside the EEA (e.g., Google), we will enter into as many documents as necessary to ensure that they offer appropriate safeguards for the data subjects equivalent to those of the EU to carry out such international transfers.

RIGHTS

Which rights do you have?

As provided by the GDPR (“GDPR”) and the Spanish Personal Data Protection and guarantee of digital rights Law (“LOPDgdd”), we inform you of your right to:

Access: you have the right to access your data in order to find out what personal data we process that concerns you.

Rectification or erasure: under certain circumstances, you will have the right to rectify inaccurate personal data relating to you that is processed by us, or even to request its erasure.

Restriction: under certain circumstances, you will have the right to request the restriction of the processing of your data by us, in which case, we wish to inform you that we will only retain the data for the exercise or defence of legal claims.

Portability: under certain circumstances, you will have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly-used and machine-readable format, and the right to transmit this data to another controller.

Object: under certain circumstances and on grounds relating to your particular situation, you will have the right to object to the processing of your data, in which case we will no longer process it unless compelling legitimate grounds exist, or for the exercise or defence of possible legal claims. At any time, you may object to receiving commercial communications. At any time, you may object to the receipt of commercial communications.

How can you exercise your rights?

You may exercise the above-mentioned rights by contacting us as set out in Section 1, indicating “Privacy Rights” as the subject matter. In order to verify your identity, we may require you to send us certain additional information or documentation, such as a copy of your national identification document or passport.

The exercise of these rights is free. Please note, however, that a fee may be charged when requests are unfounded, excessive, or repetitive.

Do you have the right to withdraw your consent?

Yes. You may, at any moment, withdraw your consent regarding the processing of your data for one, several or all of the purposes referred to above. Be aware that, should that happen, our rendering of the Services could be altered or even discontinued completely.

Do you have the right to appeal?

Yes, you can appeal to the competent supervisory authority in your place of residence. You may obtain information on how to contact the different EU supervisory authorities by contacting us at the following email address hello@croma.legal. For instance, in Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD). In any event, before starting any appeal, please contact us by email (hello@croma.legal) so that we can settle any discrepancies or disputes in an amicable manner.

When will we reply to you?

We will reply to your queries as soon as possible and, in any event, within one month. Should we not meet this deadline, please excuse us and contact us again so that we can deal with and rectify any possible technical error, which may have caused our late reply.