Source: https://www.naypalad.com/privacy
Timestamp: 2019-04-22 08:17:15+00:00

Document:
Nay Palad S.L, Calle San Jaime, 49, Planta 1, STA Eularia Des Riu (Illes Balears), (hereafter "Nay Palad") takes the requirements of the Data Protection Act quite seriously and wants to ensure that your sphere of privacy as a user of the Nay Palad offers will be protected. For this reason, Nay Palad has issued a declaration of data protection, in which the treatment of your personal data is explained for customers of Nay Palad. Nay Palad retains the right to change the content of this declaration of data protection from time to time. For that reason, the declaration of data protection should be reviewed at periodic intervals for new knowledge.
Nay Palad shall be obligated to comply with applicable data protection law, in particular the stipulations of the European General Data Protection Regulation (GDPR) 2016/679, hereafter “GDPR”) as well as any applicable national legislation. Nay Palad shall process and use your personal data only if you have presented your consent or a legal guideline permits the acquisition, processing or usage. Only that data will be process or used that is required for the performance of our services and the use of our web pages or data that you have freely shared with us.
Transmission of information material in the context of the contractual relationship (customer relationship); this does not include sending information material to non-customers as part of advertising campaigns. A customer relationship is to be assumed over the entire term of a contract.
Data will be transmitted to third countries (countries outside the European Economic Area - EEA) if this is necessary or reasonable for the execution of an order or contractual relationship, if you have given us your consent or if this is otherwise legally permissible. In this case we take measures to ensure the protection of your data, e.g. through contractual regulations. We only transmit to recipients who ensure the protection of your data in accordance with the regulations of the EU-GDPR for the transfer to third countries.
Your personal data will be stored by us for the duration of the contractual relationship and thereafter for a maximum of three years, unless there are longer legal retention regulations. If the data is required for tax/commercial purposes, the retention period is ten years. The start of the period is the end of the contractual relationship or the process at the latest. We will delete your data after this retention period has expired.
You have the right to access certain information when we process your personal data in accordance with Art. 15 EU-GDPR. In particular, you can obtain information about the purpose of the processing, the recipient of the data, the planned storage period or the existence of a right of appeal.
You have a right to correction and completion if your personal data is stored incorrectly or incompletely with us, in accordance with Art. 16 EU-GDPR.
You may have the right to have your personal data deleted in accordance with Art. 17 EU-GDPR. Unless the processing is necessary for the exercise of the right to freedom of expression and information; for the fulfilment of a legal obligation; for reasons of public interest or for the exercise or defence of legal claims.
You may have a right to limited processing of your personal data in accordance with Art. 18 EU-GDPR. This is the case if you dispute the accuracy of your personal data; the processing is unlawful and you request the restriction of the processing instead of deletion; we no longer need the data for our processing or you object to the processing, pursuant to Art. 21 EU-GDPR.
You have the right to transfer your data in a structured, common and machine-readable format, in accordance with Art. 20 EU-GDPR.
If the processing of your personal data is based on your consent, you have the right to revoke this consent at any time, in accordance with Art. 7 Para. 3 EU-GDPR. In the event of revocation, we will stop processing the data for the purposes to which the revocation relates. The legality of the data processing before the revocation remains unaffected. An informal communication to us, e.g. by e-mail, stating which data processing you object to, is sufficient for exercising the revocation.
You have a right of appeal to the supervisory authority if you believe that our handling of your personal data violates the EU-GDPR, pursuant to Art. 77 EU-GDPR. The complaint may be lodged with the supervisory authority at the place of your habitual residence, your place of work or the alleged infringement.
If we process your personal data to safeguard legitimate interests within the meaning of Art. 6 para. 1 subparagraph 1 letter f EU-GDPR, you have the right under Art. 21 para. 1 EU-GDPR to object to such processing for reasons arising from your particular situation. You can object to the processing for direct advertising purposes at any time without giving reasons pursuant to Art. 21 para. 2 EU-GDPR. In order to exercise your right of objection, it is sufficient to inform us informally, e.g. by e-mail to us, stating which data processing you object to.

References: Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20
 Art. 7
 Art. 77
 Art. 6
 Art. 21
 Art. 21