PRIVACY POLICY

I. DATA CONTROLLER

Data Controller: TINA ETINA ENERGY SYSTEMS S.L. (Registro Mercantil de Madrid al Tomo 30.096, Folio 188, Sección 8ª, Hoja M-541.784, Inscripción 1ª)
Tax Identification Number: B86493566
Registered address: Polígono Veinte, 27 Parc. Bajo, 40150 Villacastín, Segovia, Spain
Email: pblach@tinahywo.com
Website: https://tinahywo.com(opens in new tab)

There is no legal obligation to appoint a Data Protection Officer (DPO) for the processing activities described herein. The Data Controller personally assumes responsibility for ensuring compliance with the applicable regulations.

II. APPLICABLE LEGISLATION

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, known as the General Data Protection Regulation (GDPR).
  • Spanish Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
  • Spanish Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).

III. PERSONAL DATA PROCESSED AND PURPOSES

3.1 Contact form

Data: first name, surname, email address, telephone number (optional) and the content of the message.

Purpose: To manage and respond to enquiries submitted by the user.

Legal basis: The data subject’s express consent pursuant to Article 6(1)(a) of the GDPR.

Retention period: Until the enquiry has been resolved and thereafter for the applicable statutory limitation periods.

3.2 Contracting of services

Data: first name, surname, NIF/NIE identification number, address, email address, telephone number and payment details.

Purpose: To manage the service agreement, billing and the post-contractual relationship.

Legal basis: Performance of a contract pursuant to Article 6(1)(b) of the GDPR and compliance with legal obligations pursuant to Article 6(1)(c) of the GDPR.

Retention period: For the duration of the contractual relationship and thereafter for the applicable statutory limitation periods, including a minimum of five years for tax obligations and six years for commercial documentation.

3.3 Cookies and statistical analysis

Please refer to the Cookie Policy available at:

https://tinahywo.com/politica-de-cookies/(opens in new tab)

IV. RECIPIENTS OF THE DATA

Personal data will not be disclosed to third parties unless required by law or shared with the following data processors:

FastComet Inc.
Purpose: Website hosting.
Country / Safeguards: United States — Standard Contractual Clauses pursuant to Commission Implementing Decision (EU) 2021/914.

Complianz BV
Purpose: Management of cookie consent.
Country / Safeguards: Netherlands, European Union — GDPR applicable.

WPForms (Awesome Motive)
Purpose: Management of contact forms.
Country / Safeguards: United States — Standard Contractual Clauses.

For international transfers to the United States, the Standard Contractual Clauses approved by the European Commission under Commission Implementing Decision (EU) 2021/914 have been entered into in accordance with Article 46(2)(c) of the GDPR.

V. RIGHTS OF DATA SUBJECTS

In accordance with Articles 15 to 22 of the GDPR, users may exercise the following rights:

  • Access: to obtain confirmation as to whether their personal data is being processed and to access that data.
  • Rectification: to request the correction of inaccurate or incomplete personal data.
  • Erasure (“right to be forgotten”): to request the deletion of personal data when it is no longer necessary.
  • Restriction of processing: to request the suspension or restriction of processing in certain circumstances.
  • Data portability: to receive personal data in a structured, commonly used and machine-readable format.
  • Objection: to object to the processing of personal data in certain circumstances.
  • Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, the user must submit a written request accompanied by a copy of their national identity document to:

Email address: info@tinahywo.com
Subject: EXERCISE OF GDPR RIGHTS

Postal address:
TINA ETINA ENERGY SYSTEMS S.L.
Polígono Veinte, 27 Parc. Bajo
40150 Villacastín, Segovia, Spain

The Data Controller will respond within a maximum period of one month from receipt of the request, pursuant to Article 12 of the GDPR. This period may be extended by up to two additional months in particularly complex cases.

The user has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

https://www.aepd.es(opens in new tab)

VI. MINORS

The Website is not intended for children under the age of 14 and does not knowingly collect their personal data without the consent of their parents or legal guardians, in accordance with Article 8 of the GDPR and Article 7 of the LOPD-GDD.

VII. SECURITY MEASURES

  • HTTPS protocol with an SSL/TLS certificate to encrypt communications.
  • Restricted access controls for personal data.
  • Procedures for notifying personal data breaches to the Spanish Data Protection Agency within a maximum period of 72 hours where legally required, pursuant to Article 33 of the GDPR.
  • Periodic review of the security measures implemented.

VIII. AMENDMENTS

TINA ETINA ENERGY SYSTEMS S.L. reserves the right to amend this Privacy Policy in order to adapt it to legislative developments, guidance issued by the Spanish Data Protection Agency or changes to the services offered through the Website.