Privacy Policy · Strong Forms S.L.

In compliance with Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016 (hereinafter RGPD) STRONG FORMS S.L. (hereinafter STRONG) communicates its Policy regarding the treatment and protection of personal data.

Data of the person responsible for the treatment.

Owner: STRONG FORMS S.L.

CIF: B548411622

Registered office: Calle Xátiva, 5, 03009 – Alicante, Spain

Email: info@strongforms.com

Telephone: 662 23 39 44

Registration data in the commercial registry: Commercial Registry of Alicante, registration number volume 3840, folio 60, section, sheet A-143900

Domain name: www.strongforms.com

Area of ​​application.

This Policy will apply:

To those people who visit the STRONG website, www.strongforms.com (hereinafter the Website).
To those who voluntarily contact STRONG via email or who complete any of the data collection forms published on the STRONG website
To those who request information about STRONG’s services or products or who request to participate in any of STRONG’s commercial actions.
To those who formalize a contractual relationship with STRONG by contracting its services and/or acquiring products through the corresponding commercial management.
To those who use any other service present on the website that involves the communication of data to STRONG or access to data by STRONG for the provision of its services or sale of its products.
To any others who, directly or indirectly, have given their express consent for their data to be processed by STRONG for any of the purposes set out in this Policy.

The use of STRONG services requires express acceptance of this Policy.

STRONG warns that, except for the existence of a legally constituted representation, no user and/or client can use the identity of another person and communicate their personal data, so the data you provide to STRONG must be personal data, corresponding to your own identity, adequate, relevant, current, accurate and true. In this sense, the user and/or client will be solely responsible for any direct or indirect damage caused to third parties or to STRONG due to the use of another person’s data or their own data when they are false, erroneous, not current, inadequate. or not relevant. Likewise, the user and/or client who communicates the personal data of a third party will be responsible for having obtained the corresponding authorization from the interested party, as well as for its consequences if not.

Likewise, the user and/or client who communicates personal data to STRONG declares to be of legal age, in accordance with the provisions of Spanish legislation, otherwise refraining from providing data to STRONG. Any data provided about a minor will require the consent or prior authorization of their parents, guardians or legal representatives, who will be considered responsible for the data provided by the minors in their care.

This Policy will be of subsidiary application with respect to those other conditions on the protection of personal data that are established on a special basis and are communicated, without limitation, through the registration forms, contracts and/or conditions of the particular services, being for both this Policy is complementary to those mentioned in that which is not expressly provided for therein.

Purposes of the collection and processing of personal data.

STRONG, in its capacity as data controller, informs users of the existence of various treatments and files in which the personal data communicated to STRONG are collected and stored.

The purposes of said collection and processing of personal data are the following:

In relation to the “cookies” that STRONG uses when browsing through its aforementioned website, they are stored on the user’s terminal equipment (computer or mobile device) and collect information when visiting said website, with the purpose of improving its usability, knowing the browsing habits or needs of users in order to adapt to them, as well as obtaining information for statistical purposes. In the case of those users who are already STRONG clients, the information collected with cookies will also serve to identify them when accessing the privacy policy and different tools that STRONG makes available to them for the management of services or commercial transactions. In any case, users can configure their browser so that the receipt of all or some of the cookies is disabled or blocked. The fact that you do not wish to receive these cookies does not constitute an impediment to accessing the information on the STRONG website, although the use of some services may be limited. If once consent has been given to receive cookies, you wish to withdraw it, those stored on the user’s computer must be deleted, through the options of the different browsers.

• All information about the cookies used by STRONG is published in its Cookies Policy, available for consultation at www.strongforms.com
  In the case of sending an email to STRONG or communicating personal data through any other means, such as a contact form, the purpose of the collection and processing of said data by STRONG is to provide of queries and requests for information that arise about STRONG services or products.
  In the case of STRONG forms that interested parties complete to participate in any of STRONG’s commercial actions, the purpose will be to enable said participation, as well as the sending of commercial and advertising communications about STRONG’s services unless the interested party expressly states your opposition at the time of collecting your data. Notwithstanding the foregoing, the interested party may modify their decision at any time, as many times as they wish, through the means provided by STRONG for this purpose.
  When contracting the services or products offered by STRONG, only those personal data that are necessary to establish the contractual relationship and enable the provision of services or sale of products and remuneration thereof, as well as by the clients, will be collected. said data being collected and processed for the following purposes:
  The main purpose will consist of maintaining the contractual relationship established with the client, in accordance with the nature and characteristics of the contracted services or products requested, STRONG contacting the client through the e-mail address, telephone or other means indicated by the latter.
  For the sending of documentation and information related to the contracted services, requested products, as well as for the sending of commercial and advertising communications about them or similar ones by STRONG through postal mail, e-mail, telephone, SMS or other means indicated by the client, unless the client expressly expresses his opposition at the time of contracting. Regardless of whether or not the client has chosen to receive commercial information from STRONGSTRONG, the client may modify their decision at any time, as many times as they wish, through the e-mail available for this purpose: info@strongforms.com
  For the maintenance of historical records of commercial relationships during the legally established periods.

1. In those cases in which STRONG must access and/or process personal data for which the client has the status of controller or processor, STRONG will process said data as processor in accordance with the provisions of article 28 of the RGPD. and in accordance with what is indicated in the section called “STRONG” as data processor”, included in this Policy.
   In compliance with the provisions of Law 25/2007, of October 18, on the conservation of data related to electronic communications and public communications networks, STRONG informs the user that certain traffic data generated during the development of communications, as well as, where appropriate, to communicate said data to the competent bodies whenever the legal circumstances provided for in said Law occur.
   For all other purposes, which are expressly included in the Specific Conditions that apply to the corresponding service or products contracted by the client and expressly accepted by the client.Plazo de conservación de los datos personales.

• STRONG will retain personal data for the time strictly necessary to fulfill the purposes detailed above. STRONG may keep said data duly blocked during the period in which responsibilities could arise from its relationship with the client.In the case of the data subject to conservation due to Law 25/2007, of October 18, on the conservation of data related to electronic communications and public communications networks, the conservation period will be as detailed. in said regulations.

  Recipients of personal data.
  The recipients of the personal data collected by STRONG will be the following:
  STRONG’s own employees in the performance of their duties.
  STRONG suppliers involved in the provision of certain services or product management, in the event that this is necessary for their provision.
  The judicial or administrative bodies, as well as the State Security Forces and Corps, in the event that STRONG is required in accordance with current legislation to provide information related to its clients and their services.
  Any others who, due to the nature of the service, must access the data provided with it, as detailed in the Specific Conditions that apply to the corresponding product or service contracted by the client and expressly accepted by the client.

• Rights of users/interested parties and exercise thereof.Users may exercise the following rights recognized by the RGPD at any time:

  Right of access. Users have the right to obtain information from STRONG about whether personal data that concerns them is being processed, to access it and to obtain information about the processing carried out.
  Right to obtain a copy of your personal data.
  Right to rectification. Users have the right to have STRONG rectify their personal data if it is inaccurate or incomplete.
  Right of deletion. Users have the right to have their data deleted when they are no longer necessary for the purpose for which they were provided or when the other legally provided circumstances occur.
  Right to limit treatment. Users have the right to request a limitation in the processing of their personal data, so that the processing operations that must correspond in each case are not applied to them, in those cases provided for in art. 18 of the GDPR.

  Right to portability. Users have the right to receive personal data that concerns them in a structured format, as long as said data concerns exclusively the user and has been provided by them. The first copy will be free. If the interested party requests several without apparent reason or with abuse of this right, a series of costs will be borne by the applicant.

  Users may exercise these rights in the following ways:

  If they are STRONG clients, users will be able to check their personal data at any time through info@strongforms.com. They will also be able to send a message through the “Contact” section of the Website. In both cases they must indicate the right they wish to exercise.
  Whether they are STRONG clients or not, users may exercise their rights by sending an email communication to the address info@strongforms.com or by sending a request accompanied by their ID or valid document in right that proves their identity, addressed to Calle Xátiva, 5, 03009 – Alicante, Spain, specifying the right they wish to exercise.

  In cases of requests that are manifestly unfounded or excessive due to their repetitive nature, STRONG reserves the right to charge a fee for the administrative costs that arise or the right to refuse to act on them, in accordance with the provisions of art. 12.5 GDPR.

  Control authority.

  Users and/or clients may contact the corresponding local control authority if they consider that the processing carried out with respect to their personal data has not been carried out in accordance with current legislation.

  The data protection control authority in Spain is the Spanish Data Protection Agency, whose contact information is available on its website, specifically at:

Agencia Española de Protección de Datos · Canal del Ciudadano

International data transfers.

In those STRONG services in which international transfers are required to enable their provision, this circumstance will be included in the specific conditions that apply to the corresponding service contracted by the client and expressly accepted by the client in advance. to them.

STRONG as data processor.

In accordance with article 28 of the GDPR and related provisions, STRONG will process the personal data for which the client holds the status of data controller or processor, when this is necessary for the adequate provision of the contracted services. In this case, STRONG will act as data processor, in accordance with the terms indicated below:

STRONG will only process the data in accordance with the instructions of the client responsible or in charge of the treatment, not using it for a purpose other than that stated in this Data Protection Policy and/or in the contractual conditions that apply.
Once the provision of the services that motivate the processing of personal data has been completed, these will be destroyed, as will any support or documents containing any personal data or any type of information that has been generated during, for and/or for the provision of the services subject to the corresponding Conditions. Notwithstanding the foregoing, STRONGSTRONG may keep the aforementioned data duly blocked during the period in which responsibilities may arise from its relationship with the client.
In the event that STRONG uses the data for another purpose or communicates or uses it in breach of this Data Protection Policy and/or the corresponding Conditions of Service, it will also be considered responsible for the treatment.

• STRONG is obliged, in accordance with article 28 of the RGPD, to maintain due professional secrecy with respect to the personal data that it must access and/or process in order to comply in each case with the purpose of the Terms of Service that are applicable to you, both during and after their termination, committing to use said information only for the intended purpose in each case and to demand the same level of commitment from any person within your organization who participates in any phase of the treatment. of personal data is the responsibility of the client.
  In accordance with the provisions of the RGPD, the following rules will apply in relation to the form and modalities of access to data for the provision of services:
  In the event that STRONGSTRONG must access the treatment resources located at the client’s facilities, the client will be responsible for establishing and implementing the security policy and measures, as well as communicating them to STRONG STRONG, who undertakes to respect them and demand its compliance to the people in your organization who participate in the provision of services.
  When STRONG remotely accesses the data processing resources under the responsibility of the client, the client must establish and implement the policy and security measures in its remote processing systems, with STRONG being responsible for establishing and implementing the policy and security measures in its own local systems.
  When the service is provided by STRONG in its own premises, STRONG will record in its Activity Log the circumstances relating to the processing of data in the terms required by the RGPD, including the security measures corresponding to said processing.

• Access and/or processing of data by STRONG without prejudice to the specific legal or regulatory provisions in force that may be applicable in each case or those that STRONG adopts on its own initiative will be subject to the necessary security measures to:
  Ensure the ongoing confidentiality, integrity, availability and resilience of treatment systems and services.
  Restore availability and access to personal data quickly, in the event of a physical or technical incident.
  Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the security of the treatment.
  Pseudonymize and encrypt personal data, if applicable.
  The client authorizes STRONG in its capacity as data processor, to subcontract with third parties, in the name and on behalf of the client, the storage services, custody of data backup copies and security, and those that are necessary to enable the provision of the contracted services, respecting in all cases the obligations imposed by the RGPD and its implementing regulations. At any time, the client may contact STRONG to find out the identity of the subcontracted entities for the provision of the indicated services, which will act in accordance with the terms provided in this document and after formalizing a data processing contract with STRONG. according to art. 28.4 of the GDPR.
  The client authorizes STRONG to carry out the actions indicated below, as long as they are necessary for the execution of the provision of the services. Said authorization is limited to the action(s) necessary for the provision of each service and with a maximum duration linked to the validity of the applicable contractual conditions:To carry out the processing of personal data on portable devices only by the users or user profiles assigned to the provision of the services.
  To carry out the treatment outside the premises of the client or STRONG only by the users or user profiles assigned to the provision of the services.
  The entry and exit of media and documents containing personal data, including those included and/or attached to an email, outside the premises under the control of the client responsible for the treatment.
  The execution of the data recovery procedures that STRONG is obliged to carry out.STRONG is not responsible for non-compliance with the obligations derived from the RGPD or the corresponding regulations on data protection by the user and/or client in what corresponds to their activity and which is related to the execution of the contract. or business relationships that link you to STRONG. Each party must face the responsibility arising from its own failure to comply with contractual obligations and the regulations themselves.