PRIVACY POLICY

1. Website Controller
Passerat Bussiness, S.L
Domain: www.serlim.net
Address: C/ Sant Gaieta, 127, 08221 Terrassa (Barcelona), Spain
Phone: 634 725 440
E-mail: info@serlim.net
Tax ID (CIF): B-65050197

In compliance with current data protection regulations, we inform users that we have created a secure and trustworthy environment and share our principles regarding your privacy:
* We never request personal information unless it is truly necessary to provide the requested services or information.
* We never share personal information with anyone, except to comply with the law or with your explicit authorization.
* We never use personal data for purposes other than those expressed in this Privacy Policy.
Please note that this Privacy Policy may vary depending on legislative or self-regulatory requirements. Therefore, users are advised to review it periodically. It will apply whenever users decide to complete any of the contact forms where personal data are collected.
This website complies with the requirements of Organic Law 15/1999, of December 13, on the Protection of Personal Data (LOPD), and Royal Decree 1720/2007, of December 21, known as the Regulation implementing the LOPD. It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), as well as Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSICE or LSSI).
The Controller of this website, as well as the party responsible for processing personal data, is identified in the Legal Notice section of this website.
For the purposes set out in the aforementioned General Data Protection Regulation, the personal data sent to us through the website forms will be processed under the category of “Website Users and Subscribers.”
For the processing of our users’ data, we implement all technical and organizational security measures established in current legislation.

2. Principles we will apply to your personal information
When processing your personal data, we will apply the following principles in accordance with the requirements of the new European data protection regulation:
* Principle of lawfulness, fairness, and transparency: We will always request your consent for the processing of your personal data for one or more specific purposes, which will be clearly informed in advance with full transparency.
* Principle of data minimization: We will only request data that are strictly necessary in relation to the purposes for which they are required, and only the minimum amount possible.
* Principle of storage limitation: Data will be kept for no longer than necessary for the purposes of the processing. Depending on the purpose, we will inform you of the corresponding retention period. In the case of subscriptions, we will periodically review our lists and delete inactive records whenever possible, either physically or digitally.
* Principle of integrity and confidentiality: Your data will be processed in a way that ensures appropriate security and confidentiality. You should know that we take all necessary precautions to prevent unauthorized access to or improper use of our users’ data by third parties.

3. How have we obtained your data?
The personal data we process on this website come from the contact form, subscription form, appointment reminder form, “Would you like us to call you?” form, and any other contact forms that may be added in the future. There is no user or client registration, nor any tracking of users by any means.

4. What are your rights when you provide us with your data?
Any individual has the right to obtain confirmation as to whether or not this entity is processing personal data concerning them, and also has the right to:
* Request access to the personal data concerning the data subject
* Request rectification or erasure of their data
* Request restriction of processing
* Object to the processing
* Request data portability
Data subjects may access their personal data and request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case the data will only be retained for the exercise or defense of legal claims or to comply with legal obligations required by public authorities or applicable law.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. The Controller of this website will cease processing the data, except for compelling legitimate grounds or for the exercise or defense of possible legal claims. As a data subject, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit those data to another controller when:
* The processing is based on consent
* The data have been provided by the data subject
* The processing is carried out by automated means
When exercising the right to data portability, you will have the right to have the personal data transmitted directly from one controller to another, where technically feasible. Data subjects also have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them infringes the Regulation.

5. For what purpose do we process your personal data?
When a user connects to the website, for example to contact the owner, subscribe, or make a request or contract a service, they are providing personal information for which our company is responsible. This information may include personal data such as IP address, name, postal address, email address, phone number, and other relevant information. By providing this information, the user gives their consent for their data to be collected, used, managed, and stored by the Controller, solely as described in the Legal Notice and in this Privacy Policy.
This website has different systems for collecting personal information (fully transparent, voluntary, and consent-based), and we process the information provided by users for the following purposes according to each data collection system (forms):
* Contact forms: We request the following personal data: Name and Email, in order to respond to users’ inquiries. For example, we may use these data to reply to your request and address any questions, complaints, comments, or concerns you may have regarding the information provided on the website, the services offered, the products advertised through the website, the processing of your personal data, matters relating to the legal texts included on the website, or any other inquiries that are not subject to contractual conditions. We inform you that the data you provide will be stored on servers located within the European Union.
There are other purposes for which we process your personal data:
* To ensure compliance with the terms of use and applicable law. This may include the development of tools and algorithms that help this website guarantee the confidentiality of the personal data it collects.
* To support and improve the services offered by this website.
* To collect other non-identifying data obtained through certain cookies that are downloaded to the user’s device when browsing this website, as detailed in the Cookie Policy.
* To manage social media. Our company may have a presence on social networks. The processing of data of individuals who become followers on the company’s official social media pages will be governed by this section, as well as by the terms of use, privacy policies, and access regulations of the respective social network, previously accepted by the system administrator. Your data will be processed for the purpose of properly managing our presence on social media, informing you about the company’s activities, products, or services, as well as for any other purposes permitted by the applicable social media regulations. Under no circumstances will follower profiles on social media be used to send individual advertising.

In accordance with the provisions of the European General Data Protection Regulation (GDPR) 2016/679, our company (see Legal Notice) will be responsible for processing the data corresponding to website users and subscribers.
Our company does not sell, rent, or transfer personal data that may identify the user to third parties, nor will it do so in the future without prior consent. However, in certain cases, collaborations with other professionals may take place; in such cases, users’ consent will be requested, informing them of the collaborator’s identity and the purpose of the collaboration. This will always be carried out under the strictest security standards.

6. Legal basis for the processing of your data
The legal basis for processing your data is consent. In order to contact us or submit comments through this website, acceptance of this Privacy Policy is required. Any prospective or commercial offers of products and services are based on the consent requested from you, and the withdrawal of such consent will not, under any circumstances, affect the execution of a subscription contract.

7. Data category
The categories of data processed are non-sensitive data. No specially protected categories of data are processed.

8. How long will we retain your data?
The personal data provided will be retained until the data subject requests their deletion. If a contractual relationship exists, the data will be retained for the duration of the contract and, once it has ended, for the legally required retention periods in order to address any potential legal liabilities.
Commercial communications: until the user requests to unsubscribe from such communications.

9. To which recipients will your data be disclosed?
Personal data will not be disclosed to third parties.

10. Data secrecy and security
The Controller undertakes to use and process users’ personal data while respecting their confidentiality and to use them in accordance with their intended purpose, as well as to comply with its obligation to safeguard them and implement all necessary measures to prevent alteration, loss, unauthorized processing, or access, in accordance with current data protection regulations. This website includes an SSL certificate. This is a security protocol that ensures your data are transmitted completely and securely, meaning that the transmission of data between the server and the web user, and any feedback, is fully encrypted. The Controller cannot guarantee the absolute invulnerability of the Internet network and, therefore, cannot rule out the possibility of data breaches resulting from fraudulent access by third parties. Regarding the confidentiality of processing, the Controller will ensure that any person authorized by the company to process customer data (including staff, collaborators, and service providers) will be bound by an appropriate obligation of confidentiality, whether contractual or legal. In the event of any security incident, once the Controller becomes aware of it, the Client will be notified without undue delay and provided with timely information related to the Security Incident as it becomes known or when reasonably requested by the user.

11. Accuracy and truthfulness of the data
As a user, you are solely responsible for the accuracy and correctness of the data you provide to our website, thereby releasing the Controller from any liability in this regard.
Users guarantee and are, in all cases, responsible for the accuracy, validity, and authenticity of the personal data provided and undertake to keep them duly updated. The user agrees to provide complete and accurate information in the forms where it is requested.

12. Acceptance and consent
The user declares that they have been informed of the conditions regarding the protection of personal data, accepting and consenting to their processing by the Controller in the manner and for the purposes indicated in this Privacy Policy.

13. Revocability
The consent given, both for the processing and the transfer of the data of the data subjects, may be revoked at any time by notifying the Controller under the terms established in this Policy for exercising the rights of access, rectification, erasure, and portability of data, restriction of processing, objection to processing, or withdrawal of consent, as provided for in GDPR 2016/679. Such revocation shall not have retroactive effect in any case.

14. Changes to the privacy policy
The Controller reserves the right to modify this policy in order to adapt it to legislative or jurisprudential developments, as well as to industry practices. In such cases, the Controller will announce the changes introduced on this page with reasonable notice prior to their implementation.

15. Commercial emails and Newsletter
In accordance with LSSICE, the company does not engage in SPAM practices and therefore does not send commercial emails by electronic means that have not been previously requested or authorized by the user. Consequently, in each of the forms available on the website, users have the possibility to give their express consent to receive the newsletter, regardless of any specific commercial information requested.
In compliance with Law 34/2002 on Information Society Services and Electronic Commerce, the Controller undertakes not to send commercial communications without properly identifying them as such.
Likewise, the company sends a Newsletter in accordance with the strict provisions of current personal data protection regulations and with the full consent of the recipient. At any time, you may stop receiving the newsletter and any communications by revoking your consent or by exercising your rights of access, rectification, erasure, portability, restriction, or objection by contacting us at info@serlim.net.

16. Information, consent, and exercise of rights clause
The personal data collected on this website will be included in an automated file owned by the Controller and will be processed at all times in accordance with GDPR 2016/679 and all applicable data protection regulations. The purpose of the data included in this file is to enable communication and to respond to users’ requests. At any time, you may exercise your rights of access, rectification, cancellation, or objection recognized by law by sending a registered letter or any other means that verifies the identity of the sender and confirms receipt to the Controller at: C/ Sant Gaieta, 127, 08221 Terrassa (Barcelona), Spain, attaching a copy of your ID. These data will not be transferred to third parties without the prior consent of the data subject.