Data PROTECTION POLICY

1. Who is the Data Controller?

The data processing manager for the different processes with regard to customer, supplier and user management is MULTIÓPTICAS , S.C.L., with registered office at Avda. de los Reyes, s/n P.I. la Mina, 28770 Colmenar Viejo (Madrid) and Tax ID F28465193.

Please be informed that, in accordance with the provisions of current regulations, MULTIÓPTICAS, S.C.L. You have designated a Data Protection Officer (DPO) to whom you will address any query related to the processing of your personal data. To do this, you can send an email to: dpo@multiopticas.com

We also inform you that, in the processing of data on the management of users, customers, potential customers, collaborators and suppliers, there are no entities that are the Data Controller.

For the purposes of our data protection policy, the contact phone number is 918 357 302 and the email address of Contact It is dpo@multiopticas.com.

2. What type of data do we have about your person and how have we obtained them?

The categories of personal data that MULTIÓPTICAS, S.C.L. It deals with its customers and suppliers:

  • Identification details.
  • Postal or electronic addresses.
  • Commercial information.
  • Economic and transaction data.
  • Image (Virtual website tests)
  • Professional details

We also inform you that, due to the nature of the data processing on our users, customers and/or suppliers, we process the following special category data: Health data (visual and auditory graduations). In these cases, we would previously lose your express consent before starting the treatment.

All the above data have been obtained or directly from you by submitting a commercial offer, contractual proposal, etc. Or through your company, providing us with the identification details and other information necessary to carry out the purpose of the contractual relationship between the parties. Your company or your company will be required to provide us with the updated data in the event of modification. With regard to the data on candidates for employment, we have obtained your data by submitting a CV or obtaining your candidacy through the services of a job portal. In the latter case, you have authorized this transfer of your data to our company by inserting your CV details in the employment portal.

3. How long will we keep your data?

Personal data relating to individuals linked to potential customers, customers and suppliers that MULTIÓPTICAS, S.C.L. Collect it through the different contact and/or information collection forms will be kept until they are requested to be deleted by the data subject. The data provided by our customers and suppliers will be kept while the commercial relationship between the parties remains in line with the minimum legal storage periods in each case.

In any case, MULTIÓPTICAS, S.C.L. It will store your personal data for the period of time that is reasonably necessary, taking into account our needs to respond to issues that arise or resolve problems, make improvements, activate new services and meet the requirements required by applicable law. This means that we can keep your personal data for a reasonable period of time even after you have stopped using our products or have stopped using this website. After this period, your personal data will be deleted from all the MULTIÓPTICAS, S.C.L. systems

4. For what purpose and on what legal basis do we process your data?

In MULTIÓPTICAS, S.C.L. We process the data provided by the people concerned in order to manage different activities derived from specific procedures carried out in the area of sales, post sale service, supplier management, candidate management, quality of services, etc. This way, we will use your data to carry out some of the following actions based on the respective legal basis:

Purpose OF PROCESSING

Basis OF LEGITIMATION

Accounting, tax, administrative and commercial management of shareholders and collaborators

Execution (pre) contract

Management of incidents and claims through the customer service line.

Consent of the affected party

Processing of legal matters created between partners and collaborators

Legitimate interest of the person responsible; Regulatory obligation

Candidate search, assessment and selection processes

Consent of the affected party

Accounting, tax, administrative and commercial management of customers as individuals

Execution (pre) contract

Management of contact details of the suppliers'reference individuals

Legitimate interest of the person responsible

Management of advertising and marketing operations for customer loyalty

Free and unequivocal consent of the interested party

Tax, accounting and administrative management with suppliers

Execution (pre) contract

Advertising operations via electronic means

Consent of the person concerned/legitimate interest of the person responsible

Operations in advertising through physical media

Consent of the person concerned/legitimate interest of the person responsible

Management of customer contracting data as a legal entity

Execution (pre) contract

Accounting, tax, administrative and commercial management of customers

Execution (pre) contract

Management of customer data for the return of products.

Consent of the affected party; Execution (pre) contract

Transactions in processing the rights of data protection data subjects.

Regulatory obligation

Management of own customers through the online store on the website

Consent of the affected party; Execution (pre) contract

Management of supplier debt requirements.

Regulatory obligation

Management of requests for information that are sent via web forms or social networks

Consent of the affected party

Comprehensive management of the foundation

Execution (pre) contract; Regulatory obligation

Resolve issues, channel incidents through the relevant department, resolve queries and answer customers'questions, as well as attending the partner/collaborator

Consent of the affected party; Execution (pre) contract

Management of customers'visual and auditory graduations for online store service.

Consent of the affected party; Execution (pre) contract

Processing of website users'images when doing the virtual test

Consent of the affected party

Management and registration of the recipients of the mó gift cards

Execution (pre) contract

Collection of the data of employees of the network's opticians to have direct communication with them on the cooperative's internal functioning

Consent of the affected party

As for the reverted legal basis, you are obliged to provide personal data, in the event that you do not provide your personal data, you will not be able to execute your contract, comply with legal obligations or obligations derived from the public authorities.

We are not going to develop commercial profiles based on the information provided, and therefore we will not make automated decisions on you based on a commercial profile.

5. To which recipients will their data be communicated?

Multiópticas, S.C.L. Never share your personal data with any third company that intends to use them in its direct marketing actions, except in the event that you have expressly authorised us to do so.

Your data may be communicated to you at the point of your choice for the management of the e-commerce service and/or for the conclusion of your online appointment.

We inform you that we can provide your personal data to public administration bodies and competent authorities in cases where MULTI-POLICIES, S.C.L. Receive a legal requirement from these authorities or in cases where, acting in good faith, we believe that such action is reasonably necessary to comply with a judicial process; To answer any legal claim or claim; Or to protect the rights of MULTIÓPTICAS, S.C.L. Or its customers and the general public.

Your data may be communicated to you at the point of your choice for the management of the e-commerce service and/or for the conclusion of your online appointment.

Multiópticas, S.C.L. You can provide your personal data to third parties (e.g. Internet service providers that help us manage our website or carry out the contracted services, IT support and maintenance companies, logistics companies, management companies and tax and accounting advice, etc.). In any case, these third parties must at all times maintain the same levels of security as MULTI-POLICIES, S.C.L. With regard to your personal data and, where necessary, they will be linked by legal commitments in order to store your personal data in a private and secure manner, and in order to use only the information following specific instructions from MULTIÓPTICAS, S.C.L. .

We inform you that MULTIÓPTICAS, S.C.L. You can communicate your data, according to the purpose of the service provided, to the following recipients located outside the EU, with this data flow being considered as an international data transfer in accordance with the current regulations:

List of recipients of international transfers of MULTI-POLICIES, S.C.L. In the area of User, Customer and Supplier management

Name of the Recipient

Destination country

Purpose of the data transfer

International transfer enable

Recipient profile ¹

SALESFORCE.COM EMEA LIMITED

USA

Mandatory for the provision of service

Standard contractual clauses relating to transfers of Personal Data, approved by the European Commission

Data Processor

ORDERGROVE, INC

USA

Mandatory for service provision

Standard contractual clauses relating to transfers of Personal Data, approved by the European Commission

Data Processor

6. What are your rights as affected or interested parties?

Any person has the right to obtain confirmation as to whether MULTIÓPTICAS, S.C.L. You are processing personal data that concern you or not.

Specifically, interested parties may request the right to access their personal data, as well as receive them in a common format and machine reading if the processing is carried out by electronic means (right to portability).

Similarly, interested parties may request the right to rectify inaccurate data or, if applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes that were collected.

Additionally, in certain circumstances, interested parties may request the limitation of processing their data, or in certain circumstances and for reasons related to their particular situation, interested parties may exercise their right to object to the processing of their data. Multiópticas, S.C.L. It will cease to process the data, except for compelling legitimate reasons, or to exercise or defend possible claims or exceptions established in the applicable regulations.

We also inform you that you have the right to withdraw your consent at any time, without this affecting the legality of the processing based on your consent prior to your withdrawal.

Likewise, the User is informed that they can exercise the aforementioned rights at any time by writing to us using the contact details that appear in Section 1, "Data Controller" of this MULTIPOTIC Data Protection and Privacy Policy, S.C.L., attaching a copy of your DNI. You can also send us an email to dpo@multiopticas.com.

You will also have the right to file a claim with the Spanish Data Protection Agency, especially when you have not obtained satisfaction in exercising your rights.

Spanish Data Protection Agency.

C/Jorge Juan, 6

28001-Madrid

Tel. 901 100 099/912 663 517

7. Data protection for website users.

In accordance with current Regulation (EU) 2016/679, MULTIÓPTICAS, S.C.L. You inform that the personal data of the Users of the website will be processed for the processing activity indicated in each data collection form on our website by MULTIÓPTICAS, S.C.L. This processing of your data will be covered by your own consent. By clicking on the “SEND” button, the User consents to the processing of his/her data by MULTIÓPTICAS, S.C.L.

We also inform you that, unless legally required or expressly consented by MULTIÓPTICAS, S.C.L. You are not going to transfer your data to third parties.

Similarly, the User is informed that they can exercise their rights of access, rectification or deletion of data at any time, as well as have other rights recognised in this document and regulated in Regulation (EU) 2016/679, notifying MULTIÓPTICAS, S. C.L., Avda. de los Reyes, s/n P.I. la Mina 28770 Colmenar Viejo (Madrid), 918 357 302, e-mail: Dpo@multiopticas.com.

In addition, in accordance with the provisions of Law 34/2002, of 11 July, on Information Society and E-Commerce Services, MULTI-POLICIES, S.C.L. You agree not to send advertising via email without first obtaining the express authorisation of the recipient. The User may object to the sending of advertising by checking the corresponding box.

Multiópticas, S.C.L., as the Data Controller, will process your data in order to manage the purchase of gift cards and send it to the recipient you indicate. You can access your personal data, rectify inaccurate data, request its deletion, and exercise the other rights set out in Regulation (EU) 2016/679 and/or request information about our data protection policy by sending an email to: dpo@multiopticas.com

8. Other useful information on our privacy policy

8,1. Security Measures

Multiópticas, S.C.L. Adopts the security levels required by the current European and Spanish regulations on data protection, taking into account the state of the technique, the application costs and the nature, scope, context and purposes of the treatment described, as well as the risks of probability and severity that vary for your rights and freedoms as a person.

8,2 Processing of minor data

For MULTIÓPTICAS, S. COOP. it is of great importance to protect the privacy of minors. Under GDPR EU 679/2016 and Royal Decree 1720/2007, children under 14 years old can give their consent to the contracting of information society services, such as registration in a forum, completion of a contact form, etc. However, it will be the responsibility of MULTIÓPTICAS, S. COOP. to check the veracity of the age indicated by the child.

For the processing of data for children under 14 years of age, this data collection will always be carried out under the express consent of parents or legal guardians.

8,3. Modifications to our Data Protection and Privacy Policy

Occasionally, MULTIÓPTICAS, S.C.L. You can make modifications and corrections in this section of Data Protection Policy for Customers, Suppliers and Users. Please check this section regularly to see any changes that may have occurred and how they may affect you.

8,4. Why is it necessary to accept this Data Protection and Privacy Policy?

This section of Data Protection Policy for Customers, Suppliers and Users provides you with all the information you need in an easily accessible way so that you can find out the type of data that MULTIÓPTICAS, S.C.L. It maintains on its potential customers, customers and/or suppliers the purposes pursued, the rights that data protection regulations recognise you as an affected person and how to exercise these rights. Therefore, by deliberately sending your personal data through our means of contact and/or the start of the business relationship with our company, we consider that you acknowledge and accept the processing of your personal data as described in this policy. This personal information will only be used for the purposes for which you have provided it to us or certain national or regional regulations enable us to do so.

In any case, we must warn you that a refusal by you to provide us with certain requested data could hinder the development of the contractual relationship between the parties with possible serious consequences when providing the various benefits contemplated within the commercial contract concluded with the contracting party.

If you have any questions regarding this section on Data Protection Policy for Potential Clients, Customers and MULTI-ÓMICO Providers PTICAS, S.C.L., please contact the company using the address provided in the first section "Head of treatment "and we will be happy to help you and answer any additional questions you may have.

9. Applicable legislation

These Terms and Conditions shall be governed at all times by Spanish and European law on personal and privacy data protection.