WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?
Company Name: Monika Aranda Castellanos
Tax ID: 44626995A
Registered Address: Iturrama, 43 bis bajo, 31007 Pamplona, Spain
Telephone: +34 667 033 961
Email: monika_aranda@hotmail.com
WHAT IS THE PURPOSE OF PROCESSING YOUR PERSONAL DATA?
In accordance with EU Regulation 679/2026 and Spanish Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, we inform you that the personal data you provide, and that generated during our relationship with you, are processed for the following purposes:
To respond to your requests.
To provide you with information about Monika Aranda Castellanos products, and by doing so, you consent to receiving commercial communications by email or any other equivalent electronic means you have provided.
To allow your participation in raffles and/or promotional offers.
If you send us a CV, to consider your application in our recruitment processes.
To send you communications by any means you have provided, related to the activities carried out by the company that may be of interest to you.
To respond to inquiries, complaints, and suggestions, and to carry out all types of communication.
The processing of sales transactions for the items offered on our website, payment management, and delivery of purchased products.
The accounting, tax, and administrative management of the entity.
HOW LONG WILL WE KEEP YOUR DATA?
The personal data provided will be kept until its deletion is requested by the data subject, or their legal representative, and as long as it is necessary—including the need to retain it during applicable limitation periods—or relevant for the purpose for which it was collected or recorded.
Data retention will be subject to the legal obligation of Monika Aranda Castellanos to retain it. Once these periods have expired, the data will be destroyed or erased, with the deletion, removal, or destruction being carried out in such a way that the information contained on the storage media is unrecoverable.
Legal Basis
The legal basis for processing your data is the consent given by the data subject. This consent is obtained expressly and unequivocally through the completion and, where applicable, submission of paper or electronic documents and forms that collect your data. All documents of the entity used to collect data for various purposes include information clauses in accordance with data protection regulations, and consent is expressly given by the data subject’s signature or by submitting the forms available on the website.
Processing is also a legitimate basis for processing when necessary for the performance of a contract or the provision of a service to which the data subject is a party, or for taking steps at their request prior to entering into a contract (Art. 6.I.a and b GDPR).
Monika Aranda Castellanos is also authorized to process your data to comply with its legal obligations and to pursue legitimate interests, provided that these interests do not override the interests or fundamental rights of the data subject.
Regardless of the legal basis for processing, consent may be withdrawn at any time.
WHO WILL RECEIVE YOUR DATA?
Your data will not be transferred to any entity without your consent, except for legally required transfers. In this regard, your express consent will be requested for the transfer of your data to any other entity.
As a result of managing the authorized purposes, your data may be communicated to entities or individuals directly related to Monika Aranda Castellanos and the services she provides. Likewise, your personal information will be available to Public Administrations, Judges, and Courts to address any potential liabilities arising from the processing, provided that such transfers are permitted by law.
Your data may also be transferred to companies that provide us with services such as consulting, IT maintenance, marketing, training, or auditing. These entities only have access to the personal information necessary to perform these services, and are required, through a “data processing agreement,” to maintain confidentiality, not use the information for other purposes, and adopt measures to guarantee its integrity and availability.
No international data transfers are planned outside the European Union or to entities that do not comply with the data protection standards established by EU Regulation 679/2016.
WHERE DOES YOUR DATA COME FROM?
The personal data processed by Monika Aranda Castellanos is provided by the data subject or obtained from publicly accessible sources.
WHAT CATEGORIES OF DATA DOES Monika Aranda Castellanos PROCESS?
Monika Aranda Castellanos will process the data you provide, which may fall into the following categories:
Identification or contact information
What are your rights?
Everyone has the right to obtain confirmation as to whether or not Monika Aranda Castellanos processes personal data concerning them.
Interested parties have the right to access their personal data and obtain a copy of the personal data being processed, to update it, and to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, and for reasons related to their particular situation, interested parties may object to the processing of their data. Monika Aranda Castellanos will cease processing the data, except for compelling legitimate grounds, or for the establishment, exercise, or defense of legal claims.
Also in certain circumstances, provided for in Article 18 of the GDPR, interested parties may request the restriction of the processing of their data, in which case Monika Aranda Castellanos will process it, with the exception of its storage, with the consent of the interested party, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, for reasons of important public interest of the Union or of a particular Member State.
Where applicable, as a consequence of exercising the right to erasure or objection to the processing of personal data in the online environment, data subjects have the right to be forgotten, according to the case law of the Court of Justice of the EU.
Under the right to data portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, except for the exceptions provided for in Article 22(1) GDPR.
Data subjects have the right to erasure of their data when the purpose for which it was collected or processed no longer exists, when they withdraw their consent where consent is the basis for processing, or for any of the other reasons set out in Article 17 GDPR. The deletion will be carried out by performing a high-level erasure of the data contained on automated media and by physically destroying non-automated media.
How can I exercise my rights?
By submitting a written request, always accompanied by a copy of my National Identity Document (DNI) or other document that proves my identity, to the addresses indicated in the header.
What avenues for complaint are available?
If you believe that your rights have not been properly addressed, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), whose contact details are: Telephone: 901 100 099 / 912 663 517. Postal address: C/Jorge Juan, 6 (Madrid).