Privacy Policy - Marfri Ecoprint

At Marfri Ecoprint, we are committed to the personal data we process and to the strict compliance with current data protection regulations, including Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, which repeals Directive 95/46/EC, as well as Organic Law 3/2018 of December 5, on Personal Data Protection and the guarantee of digital rights.

Accordingly, the following information is provided regarding the processing of personal data we carry out at Marfri Ecoprint:

Who is responsible for the processing of your personal data?

Identity: Mari Mar Frias Sanchez
Tax Identification Number (NIF): 16257324G
Postal Address: 01470
Email: info@marfriecoprint.com

Principles related to the processing

In the processing of personal data carried out, the principles required by Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of such data, which repeals Directive 95/46/EC (hereinafter, the GDPR), are respected:

Principle of lawfulness, fairness, and transparency: The data we collect is processed lawfully, fairly, and transparently, with the prior consent of the data subjects when required or, where applicable, for the performance of a contract in which the data subject is a party or for the application at their request of pre-contractual measures, or if processing is necessary for compliance with a legal obligation or for the satisfaction of legitimate interests pursued by the controller or a third party, provided that such interests do not override the interests or fundamental rights and freedoms of the data subject, particularly when the data subject is a child.
Principle of purpose limitation: The personal data we process is used for the purposes specified in the section “What do we use your personal data for?”
Principle of data minimization: According to this principle, the only personal data we collect from users is the strictly necessary for managing orders, contractual relationships, subscribing to our newsletter, or addressing inquiries or requests made to us.
Principle of accuracy: The personal data we collect will be kept accurate and, if necessary, updated. Therefore, if there are any changes in personal data, the user must inform us so we can update the data accordingly.
Principle of storage limitation: The personal data we process will be retained for the periods specified in the section “How long will we keep your personal data?”
Principle of integrity and confidentiality: To respect this principle, personal data will be processed in a manner that ensures adequate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by applying appropriate technical and organizational measures.

What categories of personal data do we process?

The categories of data we process through this website are:

Data collected through the registration and purchase form: Name, surname, postal address, email address, phone number, payment method.
Data collected through the contact form: Email address and message sent by the user.
Data collected through the newsletter subscription form: Email address.

All personal data requested in the forms is mandatory. If the user does not provide any of this data, we will not be able to process the purchases, newsletter subscription requests, or address any inquiries or requests made.

Additionally, through cookies, we collect information about the use that users make of the website, pages visited, origin, geographical location, IP addresses, although this information is collected in an aggregated form, meaning it does not identify users individually. You can consult the information about the cookies we use in the “Cookie Policy.”

How have we obtained your personal data?

All the personal data we process at Marfri Ecoprint is provided by the data subjects themselves or their legal representatives.

The personal data we collect through this website has been obtained via the various forms available, through the contact email address, or by phone.

What do we use your personal data for?

Customer data: The personal data provided by users is used to manage their registration in order to make purchases on our website and, accordingly, to manage and handle the orders they place and the services they request.

Moreover, if you grant us your consent by checking the appropriate box, we will use your identifying and contact data to send you newsletters, news, or commercial information about offers, promotions, discounts, and our products and services.

In this regard, we inform you that to manage communications more efficiently, dynamically, and operationally and to better control the commercial communications we send via email, we use MailChimp, a platform developed by The Rocket Science Group LLC. This service involves the installation of tracking devices in email campaigns to monitor the opening of emails and the clicking of links, enabling us to generate reports on the campaigns based on the collected data.

Supplier data: We use personal data for the proper maintenance, development, compliance, and control of the contractual relationship with our suppliers and the services they provide to us.
Data collected through the contact form: The personal data provided by users is used to manage and respond to inquiries or requests made.
Data collected through the newsletter subscription form: The personal data provided by users is used to manage their subscription to our newsletter and, therefore, to send them electronic information of interest about offers, promotions, discounts, and our products and services.

Data of users of our social media profiles: We interact with our users, mainly responding to comments made on posts on our profiles in various social media platforms.

What is the legal basis for processing your personal data?

Customer data: The legal basis that legitimizes the processing of the personal data provided by the data subjects is its necessity for the performance of the contract to which they are a party.

Regarding the sending of commercial information, the legal basis that legitimizes the processing of the personal data provided by the data subjects is the consent they give by checking the relevant box, although they may withdraw this consent at any time, and, in any case, in each communication we send, they will find an easy and free way to unsubscribe.

Supplier data: The legal basis that legitimizes the processing of their personal data is that it is necessary for the execution of the contract to which they are a party.
Data collected through the contact form: The legal basis that legitimizes the processing of the personal data provided by the data subjects is its necessity for the execution of the legal relationship arising from completing this form, and therefore, to manage the inquiries or requests they make.
Data collected through the newsletter subscription form: The legal basis that legitimizes the processing of the personal data provided by the data subjects when completing the form is the consent given when subscribing to our newsletter. They may withdraw their consent at any time, and in any case, in each communication we send, they will find an easy and free way to unsubscribe.
Data of users of our social media profiles: The legal basis that legitimizes the processing of the personal data of our followers and users of our social media profiles is the consent they give by following us on these platforms, although they may stop following us at any time.

To which recipients will your personal data be communicated?

The personal data of customers and suppliers will be communicated, where applicable, to the tax administration to comply with legal and tax obligations, as well as to the financial entities through which Marfri Ecoprint manages collections (in the case of customers) and payments (in the case of suppliers).

In other cases, we do not communicate personal data to third parties unless it is necessary for the fulfillment of legal obligations.

However, for certain matters, we use third-party services, which act as data processors, with whom we have signed the corresponding data processing agreement in accordance with Article 28.3 of the GDPR.

Transfers of data to third countries

To manage more efficiently, dynamically, and operationally and to better control the commercial communications we send via email, we use MailChimp, a platform developed by The Rocket Science Group LLC, which also acts as a data processor. Although it is outside the European Union and the European Economic Area, the international data transfer involved in using this service also has the appropriate safeguards as outlined in Article 46.2 c) of the General Data Protection Regulation (standard contractual clauses adopted by the European Commission).

MailChimp Privacy Policy
MailChimp Standard Contractual Clauses

It is important to note that the use of this platform involves the installation of tracking devices by the service provider in the emails, in order to monitor email opens and clicks on the links within the emails, and to generate reports on the campaigns using the collected data.

Lastly, since we use Google Analytics analytical cookies, their use also implies international data transfers. You can consult more information about this in our Cookie Policy.

How long will we keep your personal data?

Customer and supplier data: Personal data will be retained for the duration of the contractual relationship and, once it ends, for the necessary periods to comply with legal obligations.

However, regarding the sending of information to customers, their identifying and contact personal data will be retained until they revoke the consent they provided. They can do this at any time, and in each commercial communication we send, they will find an easy and free way to unsubscribe.

Data collected through the contact form: The personal data provided by users when completing this form will be kept only during the management of the inquiries or requests they make and, afterward, for the necessary periods to comply with legal obligations.
Data collected through the newsletter subscription form: The personal data provided will be kept as long as the data subjects do not revoke their consent by unsubscribing from the subscription. They can do this at any time, and in each communication we send, they will find an easy and free way to unsubscribe.
Data of users of our social media profiles: We will retain personal data in the respective social media platform until the followers stop following us.

What are your rights when you provide us with your personal data?

Right to request access to your personal data: In order to know and verify the lawfulness of the processing, you may request at any time confirmation as to whether Marfri Ecoprint is processing your personal data. If so, we will inform you, among other things, about the data we are processing, its purpose, the origin of the data, the expected data retention period, and, if applicable, the recipients or categories of recipients.
Right to request rectification: You may request us to rectify any inaccurate personal data or complete any incomplete data, including through an additional statement. In such cases, you must specify in your request which data you are referring to and the correction to be made, and if necessary, provide supporting documentation to justify the inaccuracy or incompleteness of the data being processed.
Right to request erasure (“right to be forgotten”): You may request that your personal data be erased and no longer processed if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent, if it has been processed unlawfully, or if it must be erased in order to comply with a legal obligation.
Right to request restriction of processing: In this case, Marfri Ecoprint will only retain your personal data for the formulation, exercise, or defense of claims, for the protection of another person’s rights, or for important public interest reasons.
Right to data portability: You may request that we provide your personal data to you or another controller you specify, in a structured, commonly used, and machine-readable format.
Right to object to processing: Marfri Ecoprint will stop processing your personal data in the manner you indicate, unless we must continue processing it for overriding legitimate reasons or for the formulation, exercise, or defense of potential claims.

How to exercise your data protection rights: To exercise your rights, you must send a written request to Mari Mar Frias Sanchez (Marfri Ecoprint), Plaza Armurulanda Street, Nº1 Bajo, 01470, Amurrio, Álava, or by sending an email to info@marfriecoprint.com. In any case, we may request a copy of your ID if necessary to verify your identity.

Marfri Ecoprint will respond to all requests within the timeframes and conditions required by current data protection regulations.

How to file a complaint with the Spanish Data Protection Agency: If you believe that we have not properly processed your personal data or have not properly attended to the exercise of your data protection rights, you can file a complaint with the Spanish Data Protection Agency, either through its electronic headquarters or at its address: Calle Jorge Juan, nº 6, C.P. 28001, Madrid.

More information about data protection rights and complaints to the control authority can be found at www.aepd.es.

Security

In accordance with Article 32 of the GDPR, Marfri Ecoprint has adopted appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

To assess the adequacy of the security level, particular attention has been paid to the risks presented by the processing of data, especially the risks of accidental or unlawful destruction, loss, or alteration of personal data, or unauthorized communication or access to such data.

Confidentiality Obligation

Marfri Ecoprint has adopted measures to ensure that any person acting under its authority and having access to the personal data provided by users can only process such data following the company’s instructions, and must also maintain professional secrecy regarding the data, which will have an indefinite duration.

To this end, our employees have signed a confidentiality and secrecy agreement regarding the information and personal data they handle in connection with their employment with the company.

Use of the Website by Minors

We ask users to read the policies for the use of the website by minors published in the “Legal Notice” section of our website.

Social Media

Social Media Profiles: Marfri Ecoprint has profiles on some of the main social networks currently in existence. As a result, the personal data of our followers, people appearing in posts we make (e.g., photos), and individuals who send us private messages may be processed.

Data Processing and Purpose: The data processing carried out by Marfri Ecoprint is limited and conditioned to the policies and functionalities of each social network.

When a user follows us on a social network, they authorize us to use their personal data solely within the scope of the respective social network to manage our page or profile and for communication with our followers through chats, messages, or other means of communication provided by the social network, both currently and in the future. This implies that we will have access to the information in their profile that appears in comments, such as their username, image (if the user has uploaded a photo to their profile), and comments made.

We also want to inform users that when they follow us, our posts may also appear on their wall, and if they comment on ours, both their comment and their profile name, and if applicable, their photo will be visible to other followers. In any case, it is the responsibility of the user to use the social network.

We will not use the personal data of users for purposes other than those stated above or send them information via any platform outside the social network.

Unless the user gives consent or requests it to address a request, we will not extract their personal data from the social network environment.

Data Protection Rights: Regarding the rights to access, rectification, or erasure, restriction of processing, objection, and portability of personal data, we can only act according to the capabilities each social network allows. Marfri Ecoprint will provide all possible assistance to the user to exercise these rights.

In any case, any follower can unsubscribe from our page or profile at any time, and we will no longer have access to their personal data, although the social network may retain comments previously made on our wall.

In any case, it is the responsibility of the user to use the social network, and Marfri Ecoprint assumes no responsibility for this.

You can find the privacy policy of each social network where Marfri Ecoprint has a page or profile below:

Facebook: Privacy Policy
Instagram: Privacy Policy

Cookies

Cookies are small text files stored on the hard drive or memory of the computer that accesses or visits the pages of certain websites, allowing the site to recognize the user’s preferences when reconnecting. The cookies stored on the user’s hard drive cannot read the data contained in it, access personal information, or read cookies created by other providers.

For more information about the cookies used on this website, see the “Cookie Policy.”

Text date: April 11, 2023.