Contact Privacy Policy

BASIC DATA PROTECTION INFORMATION

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD); SMILEAT, S.L. (SMILEAT and/or data controller) makes available to you the Basic Information regarding the processing of personal data it carries out, so that you always know how we process your data and the rights you have as the data subject.

Controller. SMILEAT, S.L (hereinafter, SMILEAT) Purpose. Management and resolution of inquiries. Legal basis. Consent of the data subject. Recipients. No data communications to third parties are foreseen, except legal obligation. Rights. You may exercise the rights of access, rectification, deletion, limitation, opposition, and portability, as well as other rights explained in the Additional Information, which is accessible at: Privacy policy

Data controller

Data controller: SMILEAT, S.L. (hereinafter, SMILEAT)

Tax ID: B-87.144.622

Postal address: Calle Gran Vía, 62, 5º D – 28013 Madrid

Email: info@smileat.com

Purposes of the processing

SMILEAT will process your personal data when you contact us through different means made available to you, with the purpose of managing the issues you raise and resolving them through the same or another means that SMILEAT considers most appropriate.

Legal basis for processing your data

The legal basis for the processing of your personal data by SMILEAT regarding the purpose contained in the previous section is your consent, in accordance with the provisions of art. 6.1. a) of the GDPR.

Recipients

SMILEAT does not foresee data communications to third parties, except those required by legal obligation, which will be carried out in any case, complying with all legally established guarantees. In other cases, SMILEAT will request your explicit consent or another legal basis.

Without prejudice to the above, SMILEAT informs you that, exceptionally, your data may be processed by it or by third-party companies contracted by SMILEAT. In such cases, the corresponding contract will be signed between the parties, with the indispensable requirement for formalizing this contract being that the service provider is aware of the existing regulations on personal data protection and guarantees compliance during the contract's execution.

Data Processed

The personal data processed by SMILEAT has been provided by you: contact data such as email, as well as the content of the message.

International Data Transfers

No international data transfers are planned. However, if SMILEAT’s activity requires transferring your data to a third country outside the European Union or to a country without an adequate level of protection as declared by the European Commission, it will adopt appropriate safeguards to carry out such international transfers in accordance with applicable current legislation.

Data Accuracy

You guarantee that the data provided is true, accurate, complete, and up to date, being responsible for any direct or indirect damage or harm that may result from failure to comply with this obligation.

Rights

You may exercise the rights granted by applicable current regulations: right of access, rectification, deletion, and objection, restriction of processing, data portability, and not to be subject to automated individual decisions.

  • Access: allows the data subject to obtain information about whether SMILEAT processes personal data concerning them or not and, if so, the right to obtain information about their personal data being processed.
  • Rectification: allows correcting errors and modifying data that is inaccurate or incomplete.
  • Deletion : allows data to be deleted and no longer processed by SMILEAT unless there is a legal obligation to retain it and/or other legitimate reasons for its processing by SMILEAT prevail according to current regulations.
  • Restriction : under legally established conditions, allows the processing of data to be halted, so that SMILEAT avoids processing it in the future, retaining it only for the exercise or defense of claims.
  • Objection : allows the data subject, under certain circumstances and for reasons related to their particular situation, to object to the processing of their data. SMILEAT will stop processing the data, except for legal reasons or the exercise or defense of possible claims.
  • Portability : allows the data subject to receive their personal data and to transmit it directly to another controller in a structured, commonly used, and machine-readable format. To exercise this right, the data subject must provide a valid email address.

You can exercise your rights by any means that allows proof of sending and receipt of your request. The request must be addressed to SMILEAT through the contact details included in the “Data Controller” section, indicating the reference “Data Protection.” The request must include: name, surname, the specific request, and address for notification purposes. If there are doubts about your identity, any procedure that allows verification of the person should be used, but without requiring a copy of the ID.

If you are not satisfied with SMILEAT’s response to the exercise of your rights, you have the right to file a complaint with the Supervisory Authority, the Spanish Data Protection Agency, for their protection.

Without prejudice to the above, anyone has the right to obtain confirmation as to whether SMILEAT is processing personal data concerning them or not.

Retention of your data

SMILEAT informs you that it will process and store your data as long as necessary according to the purpose and legal basis of the processing for which they were collected, and provided that you do not object or expressly revoke your consent if that was the basis of legitimacy.

We also process your data to comply with legal requirements, prevent unlawful actions, resolve disputes, solve problems, execute our contract, and other actions permitted by law.

We will keep your personal data during the legal retention periods, in accordance with the applicable current legislation and the general and sector-specific regulations applicable to SMILEAT.

Once the processing of your data is no longer necessary and the legal retention periods have expired, we will delete and/or block them in accordance with our data retention and deletion policy.

In accordance with industry standards, SMILEAT informs you that it maintains technical and organizational measures against accidental or illegal destruction, accidental loss or alteration, unauthorized disclosure or access, and other illegal forms or procedures.

In this regard, SMILEAT will adopt the appropriate security measures to prevent alteration, loss, processing, or unauthorized access to data. Likewise, it will inform those who have access to your data about their security, confidentiality obligations, and duty of secrecy.