Privacy Policy
INTRODUCTION
Your privacy is important to us. Through this document, we explain what data we collect from users, how we use it and for what purposes, among other indications.
For your information, we will never request more information than we actually need for the services required; we will never share it with third parties, except by legal obligation or with your prior authorisation; and we will never use your data for any purpose not previously stated.
As a User, you must read this Privacy Policy carefully on a regular basis and whenever you enter your personal data, as it may be subject to modification. The provider has the right to make changes to the information contained on the website in order to comply with regulations or to update this Policy. The provider is not obligated to give prior notice to Users of any changes made; publication on the website is sufficient.
DATA CONTROLLER
Company Name: VOLCANIC DIGITAL TOOLS, S.L.U.
Registered Address: Surita, 40, 17179, Riudaura, Girona
Tax ID (NIF): B16352163
Registry Details: This company is registered in the Commercial Registry of Girona, Volume 3477, folio 213, sheet GI 75003, Entry 1.
Company Name: VOLCANIC INTERNET, S.L.
Registered Address: Avenida Bisaroques, 21, 17800 Olot, La Garrotxa, Girona
Tax ID (NIF): B55027106
Registry Details: This company is registered in the Commercial Registry of Girona, Volume 2718, folio 81, Sheet 48147.
Hereinafter, VOLCANIC or the provider
Email: rgpd@volcanicinternet.com
VOLCANIC, as the entity responsible for the website in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and other applicable personal data protection regulations, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organisational security measures to guarantee and protect the confidentiality, integrity, and availability of the data entered.
DATA COLLECTION METHODS, WHAT DATA WE COLLECT AND ITS PURPOSE
The data we collect, how we obtain it, and the purpose of processing are as follows:
Contact form and/or information request:
Data required: name, email, phone number, company.
Purpose: to respond to queries and/or provide information requested by the User.
Legal basis: User's consent.
Newsletter subscription form:
Data required: email address.
Purpose: to send the User commercial information of interest about our products and/or services via email, SMS, social communities, or any other electronic or physical means, provided the User has expressly consented.
Legal basis: User's consent.
Management of the contractual relationship and related administrative, tax, and accounting matters:
Data required: full name, phone number, address, national ID number, email, signature.
Purpose: to carry out internal commercial, tax, and administrative management.
Legal basis: data subject's consent and contractual relationship.
You may revoke your consent at any time by sending a written request with the subject line "Unsubscribe" to the email address provided.
In accordance with the LSSICE, VOLCANIC does not engage in SPAM practices and therefore does not send commercial communications by email that have not been previously requested or authorised by the User. Accordingly, in all communications received from the provider, the User has the option to revoke their express consent to receive our communications.
We will not process your personal data for any purpose other than those described, except by legal obligation or court order.
Your personal data will not be used for automated decision-making.
DATA RETENTION PERIOD
Your data will be retained for as long as the purpose for which it was collected remains valid, or as required by legal obligation or court order, and until you withdraw your consent or exercise your right of erasure, objection, or restriction of processing. However, we will retain your data for the legally prescribed periods set out in applicable regulations.
RECIPIENTS OF TRANSFERS OR DISCLOSURES
VOLCANIC will only provide information to law enforcement agencies under a court order or legal obligation, without prejudice to the ability to block or cancel your account if there are indications that the User may have committed an offence. The information provided will be limited to what the provider holds at that time.
The information you provide through this website will be hosted on VOLCANIC's servers, contracted from the company providing the web hosting service. The processing of the entity's data is governed by a data processing agreement between the provider and this company.
Additionally, the provider uses certain tools to provide services necessary for the development of its activity, which may store your data. These tools are as follows:
Google Analytics: used to analyse and measure how users interact with the website through cookies. The information generated and collected by these cookies regarding usage (including IP address) will be directly transmitted to and stored by Google, Inc., located in Delaware, 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, United States, on its servers. Google, Inc. adheres to the EU–US Privacy Framework approved by the European Commission.
Email Marketing: the service used for email marketing is PIPEDRIVE INC., a company based in the USA and adhering to the Data Privacy Framework approved by the European Commission.
Live Chat: the live chat service used is provided by Text Inc., a company based in the USA and adhering to the Data Privacy Framework approved by the European Commission.
Appointment Management: the appointment management service used is Calendly, LLC, a company based in the USA and adhering to the Data Privacy Framework approved by the European Commission.
Enginy.ai (Enginy Technologies S.L.): web behaviour analytics tool. It collects the visited URL, the referring page (referrer) and the timestamp of the visit in order to generate usage metrics. Data is transmitted to Enginy.ai's servers via an HTTP request at the time the page loads. It does not use cookies; storage is temporary on the user's device (sessionStorage) and does not persist between sessions. The legal basis for processing is the legitimate interest of the data controller (Art. 6.1.f GDPR).
RIGHTS OF DATA SUBJECTS
As a User-Data Subject, you may request the exercise of the following rights with VOLCANIC by submitting a written request to the postal address in the header or by sending an email to rgpd@volcanicinternet.com, with the subject line: "DATA PROTECTION: RIGHTS OF DATA SUBJECTS".
Rights:
- Right of access: allows the data subject to know and obtain information about their personal data being processed.
- Right of rectification: allows the correction of errors and modification of data that is inaccurate or incomplete.
- Right of erasure: allows the deletion of data that is inadequate or excessive.
- Right to object: the right of the data subject to prevent or cease the processing of their personal data.
- Restriction of processing: involves marking retained personal data to limit its future processing, for the establishment, exercise, or defence of legal claims.
- Data portability: the provision of data being processed to the data subject, so that they may transfer it to another controller without hindrance.
- Right not to be subject to automated individual decisions (including profiling): the right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects the individual.
As a User, you have the right to withdraw consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.
You also have the right to lodge a complaint with the supervisory authority if you consider that your data protection rights may have been violated (aepd.es).
ADDITIONAL INFORMATION
SECURITY MEASURES
The data you provide will be treated confidentially. The provider has adopted all technical and organisational measures and all levels of protection necessary to ensure the security of data processing and to prevent its alteration, loss, theft, processing, or unauthorised access, in accordance with the state of technology and the nature of the data stored. It is also guaranteed that the processing and recording of data in files, programmes, systems, or equipment, premises and centres, complies with the integrity and security requirements established in current regulations.
LANGUAGE
The language applicable to this privacy policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version shall prevail.
SOCIAL MEDIA
We inform you that VOLCANIC may have a presence on social media. The processing of data of individuals who follow VOLCANIC's official pages on social media (and/or carry out any connection link or action through social media) will be governed by this section, as well as by the terms of use, privacy policies, and access regulations of the relevant social network, which the user has previously accepted.
VOLCANIC will process your data for the purposes of properly managing its presence on the social network, providing information about the provider's activities, products, or services, as well as for any other purpose permitted by the social network's regulations.
The publication of the following content is prohibited:
- Content that is allegedly unlawful under national, EU, or international regulations, or that carries out allegedly unlawful activities or violates the principles of good faith.
- Content that infringes upon the fundamental rights of individuals, is discourteous online, is offensive, or may generate negative opinions among our users or third parties, and in general any content that VOLCANIC considers inappropriate.
- Content that in general violates the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of private life, consumer protection, and intellectual and industrial property rights.
VOLCANIC also reserves the right to remove, without prior notice, any content from the website or corporate social media that is deemed inappropriate.
In any case, if you submit personal information through a social network, VOLCANIC shall be exempt from liability regarding the security measures applicable to that platform; and the User, if they wish to know them, should consult the specific terms and conditions of the relevant network.
REMARKETING AND RETARGETING
Remarketing is a system that allows the creation of tailored or personalised advertisements for users who have previously visited a website — in this case, ours. It is a solution associated with Google AdWords with the aim of achieving a better return on investment (ROI). Remarketing places a cookie on the user's device, and banner ads from the provider are displayed on sites affiliated with Google AdSense.
Retargeting is the technique used to display graphic advertisements on other websites — via a tracking system — to a user who has left our site without completing a desired process (registration, purchase, request, etc.). These ads should be primarily aimed at converting the objective of our website.
The information we collect through these functions is gathered by cookies from Facebook, "X", Doubleclick, and Google AdWords. You can learn about the data these cookies collect in the privacy policies of each service: Facebook, "X", Doubleclick, and Google AdWords.
If you do not want this information to be collected by these cookies, you can disable the use of Google cookies through Google's ad settings. You can also disable third-party provider cookies through the Network Advertising Initiative opt-out page.
FACEBOOK ADS
The provider's website uses Facebook Ads, which is Facebook's advertising platform. It allows the creation of campaigns and advertisements. When generating an ad, the audience can be segmented by: location, demographic data (age, gender, etc.), interests (activities, hobbies, etc.), what they buy online and through other channels, etc.
From the moment the user provides their data in the form set up to join the subscription newsletter, the data obtained through Facebook Ads is subject to this privacy policy. The information obtained from Facebook will not be used for any other purpose under any circumstances.
"X" ADS
The provider's website uses "X" Ads, which is the advertising platform of "X". It allows the creation of campaigns and advertisements. When generating an ad, the audience can be segmented by: location, demographic data (age, gender, etc.), interests (activities, hobbies, etc.), what they buy online and through other channels, etc.
From the moment the user provides their data in the form set up to join the subscription newsletter, the data obtained through "X" Ads is subject to this privacy policy. The information obtained from "X" will not be used for any other purpose under any circumstances.
GOOGLE ADWORDS
AdWords is a Google platform aimed at ADVERTISERS who want to advertise on GOOGLE. The provider uses Google AdWords, Google's advertising platform, which allows the creation of campaigns and ads to be displayed on other websites. When generating an ad, the audience can be segmented by: location, demographic data (age, gender, etc.), interests (activities, hobbies, etc.), what they buy online and through other channels, etc.
From the moment the user provides their data in the form set up to join the subscription newsletter, the data obtained through Google AdWords is subject to this privacy policy. The information obtained from Google will not be used for any other purpose under any circumstances.
The provider may select and publish client testimonials about the Services. These testimonials may contain personal identification information, such as the individual's name and/or city, state, or country of residence. If you wish to have your name or testimonial removed or deleted from the website, you should contact the provider using the contact details provided above.
PINTEREST ADS
Pinterest Ads is a social media advertising system that allows the use of Pinterest to launch promoted content to attract the attention of our target audience. However, due to the characteristics of the network in which it operates, advertising on Pinterest has much in common with search engine advertising, rather than traditional social ads.
Pinterest is a social network based on collecting ideas around different user interests. Users use the network to save the ideas that interest them most, but also to search for images that may be of interest using keywords. This is where Pinterest functions as a search engine, as it is in our interest as a brand to appear at the top of search results to increase our visibility. You can control how Pinterest uses this information to personalise your user experience and ads in the privacy and data settings.
GOOGLE SIGNALS
Google Signals is a remarketing application developed by Google that, in its operation, links to Google Analytics in such a way that visit information collected on the website is associated with users who have logged in and have expressly consented to this functionality for the purpose of personalising advertisements.
The ad personalisation provided by Google Signals consists of the ability to locate end users, record their search history and requests within the website, and record whether the user has accessed the YouTube platform.
This application also helps us obtain aggregated and anonymised statistics about user behaviour across the different devices through which they access our websites, and to provide appropriate advertising.
CHANGES TO THIS PRIVACY POLICY
VOLCANIC reserves the right to modify this policy to adapt it to legislative or case law developments.
REVOCABILITY
The consent given, both for the processing and for the transfer of data subjects' data, may be revoked at any time by notifying VOLCANIC in the terms established in this Policy for the exercise of rights. Such revocation shall not have retroactive effect under any circumstances.
LEGISLATION
In general, the relationship between VOLCANIC and the Users of its telematic services, present on this website, is subject to Spanish legislation and jurisdiction, to which the parties expressly submit. The Courts and Tribunals of Girona shall have jurisdiction over all disputes arising from or related to its use.