Privacy Policy - Mário Sousa.

Updated Date: 3 June, 2018

Controller identification

We inform you that the provided data, will be processed by Mario Rodrigo de Abreu e Preza De Castro e Sousa with registered office in Madrid (28027), Calle Virgen del Luc 34 Local B and Tax ID number Y6016630-M, (hereinafter as the “Controller”) with the following purposes:
You can contact with the Controller through the following email address: privacy@mariosousa.com and telephone number: +34 610040959.

Processing purposes

Manage the purchase of items requested by the user through our website.
Retention period: the data shall be kept during five (5) years.
Legal basis: Execution of a contract.
Keep in touch with the data subject and inform him or her about the activities, services and products of the Controller through email.
Retention period: the data shall be kept for as long as the data subject does not request their deletion.
Legal basis: Data subject contentment.

Data receipts

The Controller recruits third parties in order to offer its services. In this regard, he/or she recruits:
Its newsletter service via: The Rocket Science Group LLC covered by the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
Its hosting service via: Go Daddy Operating Company, LLC covered by the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt0000000TN9xAAG&status=Active
No other data will be provided to third parties. If the abovementioned third parties need the data, you will be previously informed of the communication purposes and the identity of the third party and you will be asked to consent
.
All of the above without prejudice of any legal requirement that demand us to communicate data to any authority or third party.

Rights

The people who provide us their data enjoy the following rights:

Right of access: The data subjects shall have the right to obtain from the Controller confirmation that their data are processed properly and they shall have the right of access their personal data.
Right to rectification: The data subject shall have the right to obtain from the Controller without undue delay the rectification of inaccurate personal data concerning his or her.
Right to erasure: The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her.
Right to restriction of processing: The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims;
Right to data portability: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided. Please have in mind that this right will not be enforceable to:
The third parties’ data that you have provided to the Controller.
The data that concern you, but have been provided to the Controller by third parties.
Right to object: The data subject shall have the right to object at any time to processing of personal data concerning him or her. You shall be able to object to the commercial communications submitting.

You can exercise this right by sending us an e-mail to the following address: info@mariosousa.com or by sending us a letter to Controller’s address hereto. To exercise any right, you shall provide us with a copy of your ID card (DNI) and clearly express the right you want to exercise.

See the Spanish Data Protection Agency website for more details about your rights.

Additionally, we inform you about the possibility make a claim before the competent control authority, in this case, the Agencia Española de Protección de Datos, especially in case the exercise of your rights was not satisfactory. You can contact the control authority via their telephone numbers 901 100 099 y 912 663 517 or visiting their office at C/ Jorge Juan, 6. 28001 – Madrid.