Data protection
Data Protection Officer
SIRA Centre, located at Calle Pinos Baja 41, is responsible for the personal data collected through browsing and use of this website in accordance with the requirements established by REGULATION (EU) 2016/679 on the protection of data of natural persons and in accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE). .
By using this website we understand that you have read and understood the information set out in relation to the processing of your personal data.
Data protection policy
The controller applies the principle of active responsibility in the processing of personal data, maintaining a constant updating and promotion of the continuous improvement of the data protection system in accordance with the applicable legal requirements, guaranteeing in all cases:
- Respect for the fundamental rights and freedoms of natural persons.
- That the data are processed lawfully, fairly and transparently
- That the data processed are accurate, adequate, relevant and limited in relation to the purposes for which they are collected
- That the purposes for which they are collected are explicit and legitimate and that they are not processed in a way incompatible with those purposes.
The purpose of this document is to inform users about what we do with their personal data, how it is collected, what it is used for, the rights they have and all the necessary legal information established by current legislation.
Data collected, purpose and lawfulness
The personal data processed are those provided by users through the forms available on this website and are the minimum required to be able to:
- Send you information about our products / services
- Attending to consultations.
- To process orders, as well as to be able to prepare the corresponding invoices, report on the status of orders, deal with complaints and any other management derived from the provision of the service carried out through this website.
These purposes are based on legal principles for processing data collected under current legislation: for the performance of a contract or the provision of a service to users, for the fulfilment of legal obligations, for legitimate interest and with the consent of users.
Web forms
Personal data collected through the contact web form are used to deal with any queries made by the user through the same. The personal data collected in the ORDER FORM are intended to process the data necessary for the correct management of your orders.
The processing of the data is legitimised by the consent that you give us by expressly accepting the conditions of the processing informed through this privacy policy.
Data recipients
The personal data obtained through the web forms are recorded and stored on electronic media controlled and supervised by the data controller.
Your personal data will not be communicated to third parties, with the exception that such communication of data is covered by a legal obligation or when for the proper provision of the service or the execution of the contract is necessary to communicate your data to third parties to make the payment (payment gateways) and manage the delivery of products (carriers) covered such transfer in the needs of the service. Payment through other payment gateways, we recommend the user to read the privacy policy to understand how it handles personal information, for example:
Redsys Servicios de Procesamiento, S.L. (“Redsys”), with registered address in Madrid, calle Francisco Sancha, number 12, and C.I.F. number B-85955367, which fully complies with current legislation on the protection of personal data and with the confidentiality commitments inherent to its activity. Redsys has adopted the necessary technical measures to maintain the required level of security. You can view its privacy policy at REDSYS.EN
PayPal (Europe) S.à.r.l. et Cie, S.C.A. (R.C.S. Luxembourg B 118 349), whose privacy policy establishes the appropriate security measures for the correct processing of users' personal data. You can view its privacy policy at PAYPAL.COM
In those cases in which the communication of data to third parties is not covered by the legal bases established in the previous section, the communication of data to other recipients will only take place if the user has given his or her express consent.
Strict criteria are maintained for the selection of data processors and the contractual commitment to each of them to comply with and enforce compliance with data protection obligations.
In the case of international transfers of data to Sir[a] shall ensure that the transfer of your personal data is carried out in accordance with the applicable privacy laws and, in particular, that the necessary contractual, technical and organisational measures, such as the standard contractual clauses approved by the European Commission, are implemented.
You can obtain more information about the processing of personal data from our organisation by requesting it by e-mail: SIRA@REDSIRA.NET.
Technical and organisational data protection measures
The supports have the necessary technical and organisational measures to guarantee the confidentiality and conservation of the personal data obtained through the website.
The personal data collected from the website are processed using HTML protocol with a valid SSL certificate.
The staff involved in data processing operations: access, editing, deletion, etc... are qualified, trained and committed to this data protection policy.
Data retention
The personal data obtained through the contact form will be kept for the time necessary to deal with the request/query made.
Personal data obtained through the order form will be kept for as long as there is a contractual and/or commercial relationship with you or as long as you do not exercise your right to delete, cancel and/or limit the processing of your data.
Once the contractual relationship has expired, we will keep the information duly blocked, without making any use of it, for as long as it may be necessary for the exercise or defence of claims, or for any type of judicial, legal or contractual liability that may arise from its processing, which must be attended to and for which its recovery is necessary.
If you have expressly agreed to receive marketing information from us, we will retain your contact details until you have informed us of your decision to opt out of receiving marketing information from us.
Information on the existence of automated decisions (including profiling)
We do not normally make automatic decisions, but when we do we will make it clear that such a decision is being made. However, Sir[a] has several sections dedicated to the personalisation of services in order to display personalised advertising when accessing its website and also for the sending of personalised communications.
Sir[a] acknowledges the possibility of profiling in order to improve its product offering or to personalise the delivery of commercial offers or to provide a more personalised service to the customer.
Opposition to the processing of data for advertising purposes
If you have given your consent for your data to be used for advertising purposes and you no longer wish to receive advertising, you can revoke your consent at any time by sending an e-mail to the e-mail address of the person in charge. SIRA@REDSIRA.NET.
Changes to the Privacy Policy
We may change the information contained in this Privacy and Cookie Policy from time to time. If we do so, we will notify you in a variety of ways through the Platform (for example, through a banner, pop-up or push notification), or we will notify you at your email address when the change in question is significant to your privacy, so that you can review the changes, assess them and, if appropriate, object or unsubscribe to any service or functionality. In any event, we encourage you to review this Privacy and Cookie Policy from time to time for any minor changes or interactive enhancements.
Confidentiality
In accordance with the provisions of Regulation (EU) 2016/679, of 27 April (RGPD) and the Organic Law 3/2018, of 5 December, on Data Protection and Guarantee of Digital Rights (LOPDGDD), by means of this Privacy Policy (https://centrosira.org/politicas-privacidad), we inform you that your data will be processed in order to inform you about the management, development and sending of general and commercial information.
We also inform you of the possibility of exercising your rights of access, rectification, opposition, deletion, limitation and portability of your data before SIRA, by contacting the email address sira@redsira.net or sending a letter to SIRA (Calle Pinos Baja, 41. Esc. 2. Ground Floor, Local 1. 28029 Madrid). Our Data Protection Officer responds to the email address sira@redsira.net while the person responsible for our website is Centro Sira.
You also have the right to lodge a complaint with the Supervisory Authority (www.aepd.es) if it considers that the treatment does not comply with the regulations in force.