Privacy Policy.

PRIVACY AND DATA PROTECTION POLICY

In compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter, GDPR), of Law 34/2002 of 11 July, on information society services and electronic commerce (hereinafter, LSSI-CE) and of Organic Law 3/2018, on the Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDDD), TAPAS&BIKES guarantees the protection and confidentiality of personal data of any kind provided by our customers, in accordance with the provisions of the General Regulation on the Protection of Personal Data.

The data provided will be processed in accordance with the terms established in the RGPDin this regard TAPAS&BIKES has adopted the legally required levels of protection, and has installed all the technical measures available to prevent loss, misuse, alteration, unauthorized access by third parties, as described below. However, the user should be aware that security measures on the Internet are not impregnable.

PERSON IN CHARGE OF THE TREATMENT

Denomination: TAPAS&BIKES

Phone number: (+34) 673 299 065

E-mail: tapasandbikes@gmail.com

PURPOSE OF TREATMENT

All the data provided by our customers and/or visitors to the website of TAPAS&BIKES or its personnel, will be included in the register of personal data processing activities, created and maintained under the responsibility of TAPAS&BIKES. We use the information we collect to provide the services requested by users, or to resolve any doubts or questions raised by our visitors. It is our policy not to profile users of our services.

Personal Data is also collected for the following purposes and using the following services:

• Handling of payments
  Unless otherwise specified, this website processes all payments by credit card or by any other means through third party payment service providers. In general and unless otherwise indicated, Users shall provide their payment details and personal information directly to such payment service providers. This website is not involved in the collection and processing of such information; instead, you will only receive a notification from the relevant payment service provider indicating whether the payment has been successfully completed.
• Stripe ( Stripe Technology Europe Ltd) is a payment service provided by Stripe Technology Europe Ltd.
• Personal Data processed by Stripe: different kinds of Data, as specified in the Privacy Policy of the service –
  Privacy Policy.
  
• PayPal is a payment service provided by PayPal Inc. that allows Users to make online payments.
• Personal Data processed by Paypal: Usage Data; different kinds of Data, as specified in the Privacy Policy of the service –
  Privacy Policy
  .

LEGITIMACY OF THE TREATMENT

1. Contractual relationship:
   It is the one that applies when you purchase one of our products or contract any of our services.
2. Legitimate interest:
   To attend to the queries and claims you raise with us and to manage the collection of the amounts owed.
3. Your consent: If you are a user of our website, by checking the box on the contact form, you authorize us to send you the necessary communications to respond to the query or request for information raised.

TARGET

We do not disclose your personal data to anyone, except for those public or private entities to which we are obliged to provide your personal data in order to comply with any law.

In the event that, apart from the aforementioned cases, we need to disclose your personal information to other entities, we will request your prior permission through clear options that will allow you to decide in this regard.

COMMUNICATION

We will not make international transfers of your personal data for any of the above purposes.

CONSERVATION

We will only retain your personal information for as long as necessary to achieve the purposes for which it was collected. In determining the appropriate retention period, we consider the risks involved in the processing, as well as our contractual, legal and regulatory obligations, internal data retention policies, and our legitimate business interests as described in this Privacy Notice and our Cookie Policy.

In this sense, TAPAS&BIKES will keep the personal data once its relationship with you has ended, duly blocked, during the period of prescription of the actions that could derive from the relationship maintained with the interested party.

Once locked, your data will become inaccessible to TAPAS&BIKES and will not be treated except to make them available to public administrations, judges and courts, for the attention of possible liabilities arising from the processing, as well as for the exercise and defense of claims before the Spanish Data Protection Agency.

SECURITY

We use all reasonable efforts to maintain the confidentiality of personal information processed on our systems. We maintain strict levels of security to protect the personal data we process against accidental loss and against unauthorized access, processing or disclosure, taking into account the state of technology, nature and risks to which the data is exposed. However, we cannot be held responsible for the use you make of the data (including username and password) you use on our website. Our staff follows strict privacy standards and in the event that we contract with third parties to provide support services, we require them to abide by the same standards and allow us to audit them for compliance.

YOUR RIGHTS

We inform you that you may exercise the following rights:

1. Right of access to your personal data, to know which are being processed and the processing operations carried out with them.
2. Right to rectify any inaccurate personal data.
3. Right to erasure of your personal data, where this is possible (e.g., by law).
4. The right to limit the processing of your personal data when the accuracy, lawfulness or necessity of the data processing is in doubt, in which case, we may retain the data for the exercise or defense of claims.
5. Right of opposition to the processing of your personal data, when the legal basis that enables us to process the indicated data is our legitimate interest. TAPAS&BIKES will stop processing your data unless it has a legitimate interest or it is necessary for the defense of claims.
6. Right to data portability, when the legal basis that enables us to process your data is the existence of a contractual relationship or your consent.
7. Right to revoke the consent given to TAPAS&BIKES.

To exercise your rights, you may do so free of charge and at any time by contacting us at the address below, always attaching your national identity document:

• E-Mail: tapasandbikes@gmail.com
• Whatsapp: (+34) 673 299 065

PROTECTION OF RIGHTS

In case you understand that your rights have been disregarded by our entity, you can file a complaint with the Spanish Data Protection Agency, through any of the following means:

• Electronic headquarters: https://www.aepd.es
• Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid, Spain.
• Phone: 901.100.099 and 912.663.517

Filing a complaint with the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or solicitor is not required.

UPDATES

TAPAS&BIKES reserves the right to modify this policy to adapt it to new legislation or jurisprudence that may affect its compliance.

By accepting the checkbox in the contact form of this Web I give my express and voluntary consent so that tapasandbikes.com may use the data provided by you for this specific purpose, undertaking to treat the personal data provided as confidential and not to communicate or transfer such information to third parties.