I. PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, personalHOME (hereinafter also referred to as the “Website”) is committed to adopting the necessary technical and organizational measures, according to the appropriate level of security for the risk associated with the collected data.
Laws Incorporated into this Privacy Policy
This Privacy Policy is adapted to the current Spanish and European regulations regarding the protection of personal data on the Internet. Specifically, it complies with the following laws:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018 of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
- Royal Decree 1720/2007 of December 21, which approves the Regulation for the development of Organic Law 15/1999 of December 13, on the Protection of Personal Data (RDLOPD).
- Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Controller of Personal Data Processing
The controller of the personal data collected on personalHOME is Karts Building Restoration S.L., with NIF/CIF: B54769740. Contact details:
Address: C/ Pintor Agrasot, 10 · 03001 Alicante · SPAIN
Phone: +34 966 287 068
Email: hola@personalhome.es
Record of Personal Data
In compliance with the GDPR and LOPD-GDD, you are informed that the personal data collected by personalHOME through forms on its pages will be incorporated into and processed in our file for the purpose of facilitating, streamlining, and fulfilling the commitments established between personalHOME and the User, or maintaining the relationship established in the forms filled out by the User, or to respond to a request or inquiry from the User. Likewise, and unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying the processing activities carried out according to their purposes, along with the other circumstances established in the GDPR.
Principles Applicable to Personal Data Processing
The processing of the User’s personal data shall be subject to the following principles as set out in Article 5 of the GDPR and Article 4 et seq. of Organic Law 3/2018:
- Lawfulness, fairness, and transparency: Consent will always be required with full transparency regarding the purposes for collecting personal data.
- Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.
- Data minimization: Only data strictly necessary for the purposes will be collected.
- Accuracy: Data must be accurate and up to date.
- Storage limitation: Data will be retained only as long as necessary for processing purposes.
- Integrity and confidentiality: Data will be processed securely and confidentially.
- Proactive accountability: The Controller shall ensure compliance with these principles.
Categories of Personal Data
The only categories of data processed by personalHOME are identifying data. Under no circumstances are special categories of personal data, as defined in Article 9 of the GDPR, processed.
Legal Basis for Personal Data Processing
The legal basis for processing personal data is consent. personalHOME commits to obtaining explicit and verifiable consent from the User for the processing of their personal data for one or more specific purposes.
The User has the right to withdraw their consent at any time. Withdrawing consent shall be as easy as giving it. As a general rule, withdrawal will not affect the use of the Website.
Where data is provided via forms for inquiries, requests for information, or Website-related purposes, the User will be informed if the completion of certain fields is mandatory due to their necessity for the operation in question.
Purposes of Personal Data Processing
The personal data collected by personalHOME is used to facilitate, streamline, and fulfill commitments established between the Website and the User, to maintain the relationship established in the forms filled out by the User, or to respond to a request or inquiry.
Data may also be used for commercial, operational, and statistical purposes, and for activities related to personalHOME’s corporate purpose, including data extraction, storage, and marketing studies, in order to tailor content to the User and improve the Website’s quality and functionality.
At the time of data collection, the User will be informed of the specific purposes of processing, i.e., how the collected data will be used.
Personal Data Retention Periods
Personal data will be retained only for the minimum time necessary for processing purposes and, in all cases, for the following period: the minimum legal time, or until the User requests its deletion.
At the time of data collection, the User will be informed of the data retention period or, where not possible, the criteria used to determine that period.
Recipients of Personal Data
The User’s personal data will not be shared with third parties.
In any event, at the time of data collection, the User will be informed of the recipients or categories of recipients of the personal data.
Personal Data of Minors
In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only persons over 14 years of age may lawfully consent to the processing of their personal data by personalHOME. If the User is under 14, the consent of a parent or guardian is required, and such processing will only be considered lawful to the extent that the parent or guardian has authorized it.
Secrecy and Security of Personal Data
personalHOME commits to implementing the technical and organizational security measures appropriate to the level of risk, in order to ensure the security of personal data and prevent its accidental or unlawful destruction, loss, or alteration, or unauthorized access or disclosure.
The Website uses an SSL (Secure Socket Layer) certificate, ensuring personal data is transmitted securely and confidentially, fully encrypted between the server and the User.
Nevertheless, personalHOME cannot guarantee complete security on the internet or the absence of hackers or others who fraudulently access data. Therefore, the Controller will notify the User without undue delay if a personal data breach occurs that is likely to pose a high risk to their rights and freedoms. A data breach is defined in Article 4 of the GDPR as a breach of security leading to the accidental or unlawful destruction, loss, or alteration of personal data, or unauthorized access or disclosure.
The Controller considers all personal data confidential and commits to ensuring, through a legal or contractual obligation, that employees, partners, and any persons accessing the information respect this confidentiality.
Rights Derived from Personal Data Processing
Users may exercise the following rights recognized in the GDPR and Organic Law 3/2018 before the Controller:
- Right of access: To confirm whether their data is being processed and obtain related information.
- Right to rectification: To correct inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”): To delete personal data under certain conditions (e.g., data no longer necessary, consent withdrawn, unlawful processing). The Controller must also notify other controllers processing the data.
- Right to restriction of processing: To restrict data use in specific cases (e.g., contesting accuracy, legal claims).
- Right to data portability: To receive and transfer personal data in a commonly used format.
- Right to object: To object to processing under justified grounds.
- Right not to be subject to automated decisions, including profiling: Unless legally allowed, Users cannot be subject to decisions based solely on automated processing.
The User may exercise these rights by written request addressed to the Controller with the reference “RGPD-personalhome.es,” specifying:
- Full name and a copy of a valid ID (or equivalent documentation if represented).
- The reason for the request or information sought.
- Notification address.
- Date and signature.
- Supporting documents, if applicable.
This request may be submitted to:
Postal address: C/ Pintor Agrasot, 10 · 03001 Alicante · SPAIN
Email: hola@personalhome.es
Links to Third-Party Websites
The Website may include links to third-party websites not operated by personalHOME. These sites are responsible for their own privacy policies and data processing practices.
Complaints to the Supervisory Authority
If the User believes that their data is being misused or that there is a breach of applicable regulations, they may file a complaint with the appropriate data protection authority. In Spain, this is the Spanish Data Protection Agency: https://www.aepd.es.
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
It is necessary for the User to have read and agreed to the conditions on personal data protection outlined in this Privacy Policy and to accept the processing of their data so that the Controller can proceed accordingly. Use of the Website implies acceptance of this Privacy Policy.
personalHOME reserves the right to modify this Privacy Policy at any time according to its own criteria, or as a result of legislative, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency. Changes will not be explicitly notified to Users, who are encouraged to review this page regularly to stay informed.
This Privacy Policy was updated to comply with Regulation (EU) 2016/679 and Organic Law 3/2018, on the protection of natural persons and the guarantee of digital rights.
This Privacy Policy was last updated on 2/11/2023.