Privacy Policy

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Diloenespañol S.L. (Centro Internacional Antonio Machado – CIAM) (hereinafter, also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, appropriate to the level of security of the risk associated with the collected data.

Laws included in this privacy policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the Internet. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
• Organic Law 3/2018, of 5 December (LOPD-GDD).
• Royal Decree 1720/2007, of 21 December (RDLOPD).
• Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

Entity name: Diloenespañol S.L. (Centro Internacional Antonio Machado – CIAM)

Address: Calle Santo Tomé, 6

City: Soria

Province: Soria

Postal Code: 42004

Country: Spain

Phone: +34 975 229 911

Email: info@ciantoniomachado.com

Website: https://ciantoniomachado.com

Tax ID (NIF): B42206961L

Personal data record

In accordance with the GDPR and LOPD-GDD, we inform you that the personal data collected through the forms on this website will be incorporated into a data file and processed by Diloenespañol S.L., in order to manage, streamline, and fulfill the commitments established between the Website and the User, or to maintain the relationship created by the forms completed, or to respond to a request or inquiry.

Likewise, in accordance with the GDPR and LOPD-GDD, and unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, depending on their purposes, the processing activities carried out and other circumstances established in the GDPR.

Principles applicable to personal data processing

The processing of the User's personal data shall be subject to the following principles as set out in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability

Categories of personal data

The categories of data processed are solely identifying data. No special categories of personal data are processed within the meaning of Article 9 of the GDPR.

Legal basis for data processing

The legal basis for processing personal data is consent. Diloenespañol S.L. undertakes to obtain the User's express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawal of consent shall be as easy as granting it and shall not affect the lawfulness of processing based on prior consent.

Where the User is required or able to provide their data through forms to make inquiries, request information, or for matters related to the Website content, they will be informed if the completion of any of them is mandatory due to being essential for the proper development of the requested operation.

Purpose of processing personal data

Personal data is collected and managed by Diloenespañol S.L. to facilitate, manage, and fulfill the commitments established between the Website and the User or to maintain the relationship established in the forms completed, or to respond to a request or inquiry.

Additionally, the data may be used for commercial purposes, customization, operations, statistics, or activities related to Diloenespañol S.L.'s social purpose, as well as for data extraction, storage, and marketing studies to improve content and Website quality and navigation.

Data retention periods

Personal data will only be retained for the minimum time necessary for the purposes of its processing, and in any case, for a maximum period of 24 months or until the User requests its deletion.

Recipients of personal data

User data may be shared with the following recipients or categories of recipients:

• Google, Google Analytics

If the data controller intends to transfer personal data to a third country or international organization, the User will be informed in advance, including the existence or absence of an adequacy decision by the European Commission.

Personal data of minors

Only Users over the age of 14 may lawfully give their consent for the processing of their personal data by Diloenespañol S.L. If the User is under the age of 14, the consent of parents or legal guardians will be required, and such processing will only be considered lawful if they have authorized it.

Secrecy and security of personal data

Diloenespañol S.L. undertakes to implement the necessary technical and organizational measures to ensure the security of personal data and to prevent its destruction, loss, alteration, or unauthorized access.

The Website has an SSL (Secure Socket Layer) certificate to guarantee that data is transmitted securely and confidentially.

However, as Internet security cannot be guaranteed entirely, Diloenespañol S.L. will notify the User without undue delay of any data breach that may involve a high risk to their rights and freedoms.

Rights of the User

The User may exercise the following rights under the GDPR and Organic Law 3/2018:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object
• Right not to be subject to automated decisions, including profiling

To exercise these rights, the User must send a written request with the reference “GDPR - https://ciantoniomachado.com” to:

Diloenespañol S.L. (Centro Internacional Antonio Machado – CIAM)

Calle Santo Tomé, 6 – 42004, Soria, Spain

Email: info@ciantoniomachado.com

Links to third-party websites

The Website may contain links to third-party websites not operated by Diloenespañol S.L. These websites have their own privacy policies, for which the Website is not responsible.

Complaints to the supervisory authority

If the User believes that their personal data is being mishandled or that their rights under the applicable regulations are being violated, they have the right to file a complaint with the competent supervisory authority, namely the Spanish Data Protection Agency (www.aepd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees with the conditions regarding the protection of personal data contained in this Privacy Policy and consents to the processing of their data by Diloenespañol S.L. in the manner and for the purposes indicated.

Diloenespañol S.L. reserves the right to modify this Privacy Policy based on its own criteria or due to legislative, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency. Updates or changes to this Privacy Policy will not be explicitly notified to the User. The User is advised to review this page periodically.

This Privacy Policy has been updated to comply with Regulation (EU) 2016/679 and Organic Law 3/2018.