Cortinas Sol is committed to compliance with the General Data Protection Regulation (GDPR) and respecting your data protection rights. This page provides detailed information about how we handle personal data in accordance with GDPR requirements.
Cortinas Sol acts as the data controller for personal information collected through this website and our services. As data controller, we determine the purposes and means of processing your personal data.
Contact details:
Cortinas Sol
Carrer de Mallorca 285
08037 Barcelona, Spain
[email protected]
We process personal data under the following lawful bases as defined by Article 6 of the GDPR:
Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications or using non-essential cookies.
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as processing your consultation request or providing our curtain services.
Where processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights. This includes improving our services and website functionality.
Where processing is necessary to comply with legal obligations, such as maintaining financial records or responding to lawful requests from authorities.
The GDPR provides you with specific rights regarding your personal data:
You have the right to request a copy of the personal information we hold about you. We will provide this information within one month of receiving your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.
Also known as the right to be forgotten, you may request deletion of your personal data where there is no compelling reason for its continued processing. This right is not absolute and may be subject to legal retention requirements.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Where we process data based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. We will cease processing unless we demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently engage in such automated decision making.
To exercise any of your GDPR rights, please contact us using the details provided above. We may need to verify your identity before processing your request. There is no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with the supervisory authority in your country of residence. In Spain, this is the Agencia Española de Protección de Datos (AEPD).
We retain personal data only for as long as necessary for the purposes it was collected:
We primarily process data within the European Economic Area. Where transfers outside the EEA are necessary, we implement appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We may update this GDPR compliance information periodically. Material changes will be communicated through our website.
Last updated: January 2024