Data protection policy

In accordance with Regulation (EU) 2016/679 of the Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of their personal data and the free movement of such data, and with Organic Law 3/2018, of 5 December, on the protection of personal data and guarantee of digital rights, the Management of this ELEVEN600, S.L.U. informs customers, users and the general public, of the following aspects:

Introduction

This document constitutes the privacy policy of ELEVEN600, S.L.U with respect to the processing of personal data of its customers.

For any question in this matter, the client can contact the Data Protection Officer with postal address at C/ SOR PILAR LINARES, 26, 11600 UBRIQUE (CÁDIZ).

You may also contact the Data Protection Officer by sending an e-mail to the following address: info@crushleathergoods.com

Who is responsible for the processing of your data?

If you are a user of ELEVEN600, S.L.U., the person responsible for the processing of your data is:

Data Controller

ELEVEN600, S.L.U. B-72310162C/ SOR PILAR LINARES, 26 11600 UBRIQUE (CÁDIZ).

In the event that we have your data because you have requested information about any of the services and/or products offered through the web pages of ELEVEN600, S.L.U, the person responsible for the processing of your data is ELEVEN600, S.LU., with address at C/ SOR PILAR LINARES, 26, 11600 UBRIQUE (CÁDIZ).

What personal data do we process and where do they come from?

The following categories of personal data may be processed in the course of your relationship with us:

Customer identification and contact details (including signature, image,);
Personal characteristics, social circumstances;
Transactional data (payments, receipts, transfers, debits) The data originate from the data subject himself/herself.

For what purposes do we process your personal data?

Personal data may be processed by data controllers for the following purposes:

1.- Provision of the service: your personal data are processed in order to provide you with the requested service, for example:

To deal with any communication with ELEVEN600, S.L.U.;
Manage any incident or complaint filed by the customer;
To carry out surveys with the aim of finding out your opinion about the service you receive, which will be used solely to improve and develop our services;

2.- Attention of requests for information, complaints, suggestions, claims, exercise of data protection rights, etc.: in these cases, your data will be processed in order to manage and process the request, by any means, including telephone and/or electronic communications.

Compliance with legal obligations: it may be necessary to process personal data in order to comply with the corresponding legal requirements. In particular, in order to comply with legislation on data protection, tax, labour, etc.

Formalisation and execution of the contract: the patient’s personal data are processed for the purpose of managing the contractual relationship with the client.

5.- Sending of commercial communications by any means in case of additional consent: if you explicitly consent, your data may be transferred for the purpose of informing you by any means for promotional and advertising purposes about the restaurants, services, products or events related to ELEVEN600, S.L.U. (in no case will your data be used to send you advertising content unrelated to ELEVEN600, S.L.U.).

The data collected will be processed for the purposes specified and in no way incompatible with those purposes.

In any case, we process your data in order to serve you with the same level of quality, regardless of the channel you use to communicate with us (website, mobile applications, whether in person, by telephone or telematically).

What is the legitimacy for the processing of your data?

Purpose	Basis for Treatment
Service provision	Processing necessary for the performance of a service to data subject’s consent.
Attention to requests	Processing based on the consent of the data subject and
Compliance with legal obligations	Processing necessary for compliance with a legal obligati
Formalisation and execution of the contract	Processing necessary for the performance of a contract t
Sending commercial communications	Processing based on the data subject’s consent

How long will we keep your data?

In general, your data will only be kept for the time strictly necessary for the purpose for which they were collected.

The personal data provided, as well as those derived from the commercial relationship, shall be kept for the appropriate period of time in each case, and at least five years from the date the service is provided, unless the autonomous and/or specific regulations establish a minimum period of conservation longer than that indicated, in which case the provisions of the applicable regulations shall be complied with.

Once the aforementioned minimum period has elapsed, and the commercial and contractual relationship has ended, the data controller shall keep your data duly blocked and pseudo-anonymised for the term of the periods corresponding to the legal prescription.

The personal data provided for the purpose of managing any request for information, complaint, suggestion, claim, exercise of data protection rights, etc., will

be kept for the time necessary to process the request, and in any case for the time legally established, as well as for the period necessary for the formulation, exercise or defence of claims.

The data processed for compliance with legal obligations will be kept for the period of time established in the applicable legislation.

The data collected for the formalisation and execution of the contract will be kept for the duration of the contractual relationship, as well as for the period necessary for the formulation, exercise or defence of claims, at least five years.

The data processed for the sending of commercial communications will be kept until the interested party revokes consent and/or exercises their rights of opposition and/or deletion.

To which recipients will your data be communicated?

In order to ensure an adequate provision of the service, it is necessary that certain service providers and/or entities of the group that process data on behalf of the controller and process personal data as processors of personal data. These entities may be, for example, audit, physical security, archiving, storage or digitisation of information, destruction of documentation, legal consultancy services, IT services, etc.

Your personal data will not be disclosed to third parties unless required by law, in the vital interest of the data subject or with the prior consent of the data subject.

All information provided to us will be treated confidentially and in strict compliance with the security obligations necessary to prevent access by unauthorised third parties.

What are your rights when you provide us with your data?

You may exercise your rights of access; rectification of inaccurate data; request deletion, when, among other reasons, the data are no longer necessary for the purposes for which they were collected; in certain circumstances you may also request the limitation of the processing of your data, in which case we will only keep them for the exercise or defence of claims; finally, and for reasons related to your particular situation, you may also exercise the right of opposition and portability. You may also revoke, at any time, your consent to the processing of your data.

The exercise of the rights as well as the revocation of consent to the processing of your data are free of charge, except in the cases of art. 12.5 of Regulation (EU) 679/2016.

If you are a customer of ELEVEN600, S.L.U., you can exercise your rights in person at the customer service department, by post addressed to “Customer Service” of your ELEVEN600, S.L.U., with the reference “data protection rights”, providing a photocopy of your ID card or equivalent document and indicating the right you wish to exercise.

In addition, we inform you of the possibility of lodging a complaint with the competent supervisory authority, in accordance with the procedure applicable to the specific case.