BASIC INFORMATION ON PERSONAL DATA PROTECTION |
|
Who is responsible for the treatment? - Identity: EYSIUS EUROPA, S.L. - VAT NO: B-63230759 - Address: C/Saragossa, nº 6, 08830, Sant Boi de Llobregat (Barcelona) - Telephone: 936545928 - Email: protecciondatos@altima-sfi.com + see more |
What we use personal data for and what is the basis for legitimisation?
Contract execution: Providing services, handling payment, contacting the client. Consent: Consultations, marketing. Legitimate interest: Send commercial information. Legal obligation: Interested applications. + see more |
What data will we process? - Identification data - Contact details - Financial and banking data - Academic and professional data - Browsing history data + see more |
Recipients of personal data Ancillary services are contracted with service providers who, as processors, will have undertaken to comply with the applicable data protection regulations at the time of contracting. + see more |
When and how do we collect your data? We collect information about you when you request information through forms. of the website. + see more |
What rights can you exercise and how? You have the right to access, rectify or delete your personal data. In some cases, you also have other rights, for example, to object to our use or transfer of your data. + see more |
ELYSIUS EUROPA, S.L., with its commercial brand SERVEIS FUNERARIS MALLORCA (hereinafter, "SFM"), respects current legislation on the protection of personal data, the privacy of users and the secrecy and security of data in accordance with the provisions of the applicable legislation on data protection, and applies the appropriate technical and organisational measures in order to guarantee and be able to demonstrate that the processing of data for which SFM is responsible complies with the aforementioned regulations.
- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
The party responsible for the processing of personal data is ELYSIUS EUROPA, S.L. (hereinafter, SFM), with registered office at C/Saragossa, nº 6, 08830, Sant Boi de Llobregat (Barcelona) and tax identification number B-63230759.
Email: protecciondatos@altima-sfi.com
- WHAT PERSONAL DATA WILL WE PROCESS?
SFM only processes personal data that are relevant for the purposes mentioned in Section 4. In particular, it processes the following categories of personal data of the data subject (indicative, non-exhaustive list), regardless of the legitimacy of the processing and regardless of whether the data are obtained from third party sources or directly from the data subject:
- Identification data: name, surname and identity/passport number.
- Contact details: e-mail address, postal address and telephone number
- Economic and bank details, necessary for the correct provision of the service.
- Contracted service data. These data are necessary for the correct provision of the service.
- Other data provided voluntarily by the data subject or third party when contacting us for any reason (making a complaint or enquiry, etc.) and providing a response. If you are a customer, they will be included in the contract file and will be used for the proper provision of the service (contact details of a third party for notifications, details of third parties who are authorised by the customer to carry out various formalities on their behalf in connection with their contract).
- Academic and professional data: training/qualifications, professional experience, and all those data that are included in the CV, in the case of selection processes.
- Browsing history data: IP address, websites visited and country of connection.
In general, personal data of minors will only be processed if their parents or legal guardians have given their consent for the processing which is necessary for the performance of the relevant contract/service, the fulfilment of a legal obligation and/or in our legitimate interest.
- WHEN AND HOW DO WE GET THE DATA?
The submission of personal data through the forms on the website is completely voluntary, although failure to provide certain data may make it impossible to obtain a response.
Similarly, there will be personal data required for the provision of contracted services that it will be essential to provide, in which case we will inform you of the mandatory and/or necessary nature of providing personal data for the operation of the service.
In this sense, the concept of "client" includes any data subject who has the status of: declarant, contracting party, deceased, designated, relatives of the deceased or rightful claimant, who establishes a contractual or service relationship. In the event that personal data is provided by a person other than the data subject, the data provider shall be obliged to provide this information to the data subject beforehand, as well as to obtain the consent of the data subject when it is necessary for us to process the data.
- WHAT DO WE USE PERSONAL DATA FOR AND WHAT IS THE BASIS OF LEGITIMACY?
We use personal data for the following purposes and with the following legitimate basis as the case may be:
PURPOSE |
LEGAL BASIS |
To execute and maintain the existing contractual relationship between SFM and the data subjects, including the communication to the financial institutions of the personal data strictly necessary to make the agreed payments. This purpose includes the processing of your data for, principally: - Management of family and deceased data for the provision of funeral services. - Contact you in relation to informative communications related to the products or services contracted, relating to funeral services/products or floral products (online sales), if applicable. - Manage possible changes or refunds once funeral services/products and/or floral products (if applicable) have been contracted, and manage requests for information on availability depending on whether they are available at any given time and place. - Manage the payment of contracted services and/or purchased products, regardless of the means of payment used. - For billing purposes, as well as to make available to the user the tickets and invoices for the services and/or products contracted.
|
Execution of a contract (Art. 6.1. b) GDPR): Refusal to provide the personal data requested by SFM may result in the impossibility to conclude or maintain such a contract. |
- Attention to queries and requests made by users or potential customers. They will be processed for the purpose of managing or resolving the query, request or request made. The user is informed that, if he/she chooses to contact SFM through the telephone customer service, his/her call may be recorded in order to process the query, request or application made by the user. - Marketing. Personal data will be processed to manage the sending of information, advertising and commercial promotion of products, services and activities of interest to you related to funeral services, including by electronic means (e-mail or SMS). - Create profiles of data subjects based on their personal preferences and interests, which are obtained from information provided by the data subjects themselves and from the analysis of their behaviour when receiving communications from SFM or when browsing the internet. SFM will use these profiles to send communications that are tailored to the preferences, interests and behaviour shown by the data subjects. No automated individual decisions will be made on the basis of these profiles. Data subjects may exercise their right to object and revoke consent to the processing of their personal data for direct marketing purposes, including the right to object to profiling activities when these are carried out for direct marketing purposes. - To personalise certain functionalities of the web pages (for example, the language in which the content is displayed) according to the browsing preferences expressed by the interested parties and to analyse their browsing behaviour (for example, sections that attract a greater or lesser number of visits) with the aim of improving the services offered through the website. There is more information about this in the Cookies Policy of the website.
|
Consent (art. 6.1.a) GDPR): Data subjects can give their consent through data collection forms, by clicking on acceptance buttons or ticking boxes, replying to e-mails or taking any other clear affirmative action. Data subjects may withdraw their consent at any time, as detailed in Section 8. In any case, the withdrawal of consent shall not affect the lawfulness of the processing previously carried out. |
- Contact when there is a contractual relationship, by any means, including electronic means, for quality surveys and similar, to help us improve the service or design new features, also to analyse satisfaction with the quality of care received in response to a query; for this purpose we may contact you by telephone and / or email. - Send commercial information by any means, including electronic means, when there is a contractual relationship with the data subject and the information is about products and services similar to those contracted. Data subjects may exercise their right to object to the processing of their personal data for direct marketing purposes. - Respond to customer requests for information and suggestions. - Perform website maintenance tasks to provide a secure environment for its users. |
Legitimate interest of SFM and/or third parties (art. 6.1.f) GDPR): SFM considers that the legitimate interest on which it bases the processing of personal data overrides the fundamental rights and freedoms of data subjects, and we understand, on the other hand, that our clients can reasonably expect their personal information to be processed for these purposes, as the processing:
In any case, data subjects may request further information regarding legitimate interest or exercise their right of objection by sending such a request to protecciondatos@altima-sfi.com . |
To attend to the requests of the interested or affected parties in the exercise of the rights established in the RGPD. |
Legal obligation (art. 6.1.c) RGPD) SFM needs to process the personal data requested in order to comply with legal obligations. |
- HOW LONG DO WE KEEP THE DATA?
Data arising from the performance of a contract will be retained for as long as the contractual relationship we have established is maintained, so that it can be properly managed. Once the contractual relationship has ended, we must keep the data duly blocked for an additional period during which any legal liabilities arising from services provided or processing carried out may exist.
The personal data provided for other procedures other than the contractual relationship, such as queries, requests for quotations, etc., will be kept for the time necessary to process your request, plus an additional period for the purpose of attending to possible legal responsibilities deriving from the same.
If you have given us permission to send you commercial communications, we will retain your data until such time as you tell us that you no longer wish to receive offers, even if you have terminated your contractual relationship with us.
For compliance with legal obligations and the formulation, exercise and defence of claims, once the authorisations to use your data have been revoked by withdrawing your consent, or the contractual or business relations you have established with us have ended, we will retain your data only to comply with legal obligations and to allow the formulation, exercise or defence of claims during the limitation period for actions arising from the contractual relations.
We will process these data by applying the necessary technical and organisational measures to ensure that they are only used for these purposes.
We will destroy your data when the retention periods imposed by the regulations governing SFM's activity and the statute of limitations for administrative or legal actions arising from the established relationships have elapsed.
- RECIPIENTS OF PERSONAL DATA
(i) Group entities: We may share your personal data with entities belonging to the Altima Group, parent companies and/or subsidiaries, for the purposes set out in this Privacy Policy.
We also specifically inform you that the Entities of the Áltima Group share, with varying degrees of integration, common IT services and accounting, personnel management and payroll services, among others, in order to take advantage of existing synergies, optimise resources and offer a better service to customers.
(ii) Other Entities: Personal data may also be communicated to other companies related to funeral services, such as insurers or mutual insurance companies, collaborators and service providers, such as, but not limited to: cemeteries, undertakers, marble workers, press or any other physical or digital means of communication of obituaries, experts, lawyers, auditors, consultants, specialists in administrative procedures, financial institutions, and other suppliers and professionals, who will process the personal data as data processors in the name and on behalf of the data controller, for the purpose of guaranteeing the services provided by said data controller in the execution of the contract or service, complying with the obligations derived from the applicable regulations, in legitimate interest and/or in accordance with the consent provided where applicable.
SFM follows strict criteria for the selection of service providers in order to comply with its data protection obligations and undertakes to enter into a data processing contract with them, imposing, among others, the following obligations: to implement appropriate technical and organisational measures; to process the personal data for the agreed purposes and only in accordance with SFM's documented instructions; and to delete or return the data to SFM upon termination of the provision of the services.
(iii) Official Bodies and Authorities: Personal data will be provided to all those recipients to whom it is obliged to communicate such information in compliance with legal obligations, including, but not limited to: Competent Public Bodies and Administrations, such as the Spanish Tax Administration Agency or the Regional Tax Authorities, the personal data protection control authorities, Health and Environmental Control Authorities, the Courts and Tribunals, the Public Prosecutor's Office and/or the State Security Forces and Corps. As well as Customs and the agency responsible for dealing with Customs when a deceased person is transferred to a non-EU country.
- INTERNATIONAL DATA TRANSFERS OUTSIDE THE EEA
SFM processes your data within the European Economic Area and, in general, we engage service providers who are also located within the European Economic Area (EEA) or in countries that have been declared to have an adequate level of protection.
However, when a family requests the transfer of a deceased person to a country outside the EEA. In such a case, we will provide the data of the deceased and the family representative to the competent authorities and public bodies in accordance with the relevant official procedures and regulations in each country. To safeguard personal data, the security measures set out in the GDPR and the Data Protection Act are applied in addition to the data protection regulations of the country of destination.
If, in addition to the above, we need to use service providers who process data outside the EEA or in countries that have not been declared as having an adequate level of protection, we will ensure that we guarantee the security and lawfulness of the data processing.
- WHAT RIGHTS CAN YOU EXERCISE AND HOW?
The regulations recognise the following data protection rights, which are applicable to all data subjects:
LAW |
CONTENTS |
Access |
You have the right to obtain confirmation from SFM as to whether they are whether or not SFM is processing personal data concerning him/her, as well as to access the personal data held by SFM. |
Correction |
You may modify your personal data if it is inaccurate or incomplete. |
Suppression |
You may request that we delete personal data concerning you when, among other reasons, the data is no longer necessary for the purpose for which it was collected. |
Opposition |
You may request that we do not process the personal data if they are processed on the basis of public or legitimate interest. SFM will no longer process the data, except for compelling legitimate reasons or for the exercise/defence of possible claims. |
Limitation of the treatment |
You may request the restriction of the processing of your data in the following cases: (i) While the contestability of the accuracy of your data is being checked; (ii)Where the processing is unlawful, but the data subject objects to the erasure of your data; (iii) Where SFM does not need to process your data, but the data subject needs it for the exercise or defence of claims; (iv) Where the data subject has objected to the processing of your data for the performance of a task carried out in the public interest or for the satisfaction of a legitimate interest, while it is being verified whether the legitimate grounds for processing outweigh your legitimate grounds for processing. |
Portability |
Receive in a structured, commonly used and machine-readable format the personal data provided, as well as transmit them to another controller where the processing is based on consent or a contract and is carried out by automated means. |
Submit a complaint |
In any case, as a data subject or interested party, you have the right to present a complaint to the Spanish Data Protection Agency. |
The user may exercise the aforementioned rights through the following postal address: C/ Saragossa, 6, 08830 - Sant Boi de Llobregat (Barcelona) to ATT. DEPARTMENT RESPONSIBLE FOR RGPD. Communication made by the user to the following e-mail address will also be valid: protecciondatos@altima-sfi.com. In both cases, a photocopy of the DNI or equivalent document that accredits identity and is considered valid in law must be provided. In the event of acting through legal representation, the ID card of the representative and a document accrediting representation must also be provided.
- ARE PERSONAL DATA SECURE?
SFM assures you of the confidentiality of your personal data and guarantees the security of the same, adopting the necessary measures to avoid its alteration, loss, processing or unauthorised access.
- CHANGES TO THE PRIVACY POLICY
We will review this Privacy Policy from time to time in order to keep you informed, for example, when new rules or criteria are published or new processing operations are carried out. In order to allow you to consider objecting to the processing of personal data or to unsubscribe from any service or functionality.
We will notify you through the usual communication channels whenever there are material or important changes to this privacy policy.
This Privacy Policy has been revised and posted on 11:31.