Thank you for visiting our website www.mireiaserra.com, and for your interest in our products. To make you feel safe and comfortable when you visit our website, we take the protection of your personal data and its confidential treatment very seriously.
With this information on data protection we would therefore like to inform you when we store which data and for what purpose we use it – naturally in compliance with the applicable data protection regulations.
Unless otherwise stated in the following sections, no personal data is collected, processed or used when using our websites.
When you access our internet pages, our web servers automatically collect general information. This includes the type of web browser, the operating system used, the domain name of the Internet service provider, the IP address of the computer used, the website from which you visit us, the pages you visit on our site and the date and duration of your visit.
This data cannot be used by us to identify the individual user. We only evaluate the information statistically and use it exclusively to improve the attractiveness, contents and functionalities of our websites.
Definition of personal data
In the EU General Data Protection Regulation (GDPR), personal data is defined as follows:
Any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Legal basis for the collection of personal data
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. A GDPR serves as the legal basis for the processing of your personal data.
When processing your personal data to fulfil a contract between you and Mireia Serra, Art. 6 para. 1 lit. B GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. C GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. F GDPR serves as the legal basis for the processing.
Data erasure and storage period
The personal data of the data subject will be erased or the processing restricted blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be restricted or deleted if a storage period prescribed by the aforementioned legal provisions expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Collection and processing of personal data
Personal data is only collected if you provide it voluntarily, for example to subscribe to a newsletter. There you will be informed about the intended purpose of processing and, if necessary, asked for your consent to storage.
Only with your consent will your data be used in a centrally managed customer and prospective customer database administered under the responsibility of Mireia Serra The use of this data is limited to the purposes of advertising and market and opinion research and is only accessible by Mireia Serra. You can revoke your consent at any time with effect for the future.
Your data is encrypted before transmission and processing in order to protect it from access by unauthorized persons. Please note that unencrypted e-mails are transmitted without access protection.
Your data will not be sold, rented or made available to third parties in any other way than described here. Personal data will only be transferred to state institutions and authorities within the framework of mandatory national legislation. Our employees, agencies and dealers are bound by us to the strictest confidentiality.
You can contact us via our e-mail address or by telephone. The personal data transmitted to us in this way will of course only be used for the purpose for which you made them available to us when contacting us.
If you use our contact form and we request information that is not required to establish contact, we have always marked it as optional. These details serve us to substantiate your inquiry and to improve the processing of your request. Providing this information takes place expressly on voluntary basis and with your consent. If this involves information on communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request.
You can of course revoke this consent at any time with effect for the future. For this, please contact our data protection officer, whose contact details you will find below.
Data transmission to external service providers (Processor)
Your data will be passed on to service partners, provided that they work on our behalf and support Mireia Serra, in providing its services.
Processing of your personal data by contracted service providers takes place within the scope of order processing in accordance with Art. 28 GDPR.
The aforementioned service providers only have access to such personal information as is necessary for the performance of their respective activities. These service providers are prohibited from disclosing your personal information or using it for other purposes, in particular for their own advertising purposes.
Where external service providers come into contact with your personal data, we have taken legal, technical and organizational measures and carried out regular checks to ensure that they also comply with the applicable data protection regulations.
Your personal data will not be disclosed commercially to other companies.
Website optimization tools
Mireia Serra, use technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved according to technological developments.
Rights of the Data Subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights:
– Right of Access, Art. 15 GDPR
You can ask us to confirm whether or not we process your personal data. If we have processed your data, you have further rights to information as set out in Article 15 of the GDPR.
– Right to Rectification
If the information we have collected from you is incorrect or incomplete, you may immediately request us to correct it in accordance with Article 16 of the GDPR.
– Right to restriction of processing
Under the requirements of Art. 18 GDPR, you may also request that the processing of personal data concerning you be restricted.
After the restriction, your data may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims, or for the protection of the rights of another natural or legal person, or on grounds of an important public interest of the Union or a Member State. We will inform you before the restriction is removed.
– Right to Erasure
If one of the reasons in Art. 17 para. 1 GDPR applies, you can request us to delete your personal data immediately, unless there is an exception to the deletion obligation in accordance with Art. 17 para. 3 GDPR.
– Right to Notification
If you have exercised your right to rectification, erasure or restriction of processing, we are obliged under Article 19 GDPR to inform all recipients of your personal data of this, unless the notification is impossible or involves disproportionate effort. You also have the right to be informed of the recipients. The person responsible shall have the right to be informed of such recipients.
– Right to Data Portability
In addition, according to Article 20 GDPR, you have the right to receive personal data concerning you from us in a machine-readable format and to transmit the data to another controller without hindrance, provided that the requirements of Article 20 para. 1 lit. A GDPR are met, or to obtain that your personal data are transmitted directly by us to another controller, provided that this is technically feasible and no freedoms and rights of other persons are impaired thereby. This right shall not apply to the processing of personal data necessary for the performance of a task in the public interest or for the exercise of official authority.
– Right to object
You have the right to object to the processing of personal data by Mireia Serra, concerning you pursuant to Art. 6 para. 1 lit. F GDPR at any time.
We will no longer process your personal data, unless there are grounds for processing worthy of protection overriding your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
– Right to revoke the data protection declaration of consent
You have the right to revoke your data protection declaration of consent with a statement to Mireia Serra, at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
– Right to lodge a complaint with a supervisory authority
You have the right, at all times, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, of work or of the place of suspected infringement, if you consider that the processing of personal data concerning them is contrary to this regulation.