LEGAL NOTICE:

This website is owned by: CARMENCITA FILM LAB SL, a company registered in the Mercantile Registry of SPAIN. Spanish VAT: B98702855. Our registered office is located at: C/ Luis de Santangel 16 Bajo, 46005, València (VALENCIA).

You can also contact us via phone +34 963 041 987 (teléfono) o or via e-mail: dataprotection@carmencitafilmlab.com or with this contact form.

Intellectual property
Website design, source code, logos, and trademarks are owned by CARMENCITA FILM LAB SL and are protected by intellectual property law.

Content disclaimer
CARMENCITA FILM LAB SL is not liable for any content in other websites with links to our website, nor the content in other websites that can be linked from our website.
We are entitled to change any content of our website, in order to keep updated all the information that we publish.

So we are free to add, edit, modify or delete published content or website design without previous notice.
 CARMENCITA FILM LAB SL will not be liable for your losses if you take any action on our published info.

Content copy
You are not allowed to copy any of our content without our previous written consent.

Among the types of Personal Data that Carmencita Film Lab collects, by itself or through third parties, there are: email address, Cookies, Usage Data, password, first name, last name and Email.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using Carmencita Film Lab.

Unless specified otherwise, all Data requested by Carmencita Film Lab is mandatory and failure to provide this Data may make it impossible for Carmencita Film Lab to provide its services. In cases where Carmencita Film Lab specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.

Users who are uncertain about which Personal Data is mandatory are welcome to contact us via carmencita@carmencitafilmlab.com.

Any use of Cookies – or of other tracking tools – by Carmencita Film Lab or by the owners of third-party services used by Carmencita Film Lab serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy, if available.

Users are responsible for any third-party Personal Data obtained, published or shared through Carmencita Film Lab and confirm that they have the third party’s consent to provide the Data to the Owner.

DATA CONTROLLER

Data controller is CARMENCITA FILM LAB SL, C/ Luis de Santangel 16 bajo, 46005, Valencia (VALENCIA).
Privacy principles
We are commited to work continuosly to guarantee your privacy in all our processing activities, and to offer you the most complete and clear information we can provide. We encourage you to read this section carefully before providing us with your personal data.
If you are under fourteen years of age, please do not provide us with your data without the consent of your parents.

In this section, we inform you on how we process personal data of people involved with our organization. Starting with our privacy principles:

– We do not request any personal data, unless is needed to fulfill any service you require from us.
– We never share your personal data with third parties unless we are forced by law, or you have granted us your express consent.
– We will never use your personal data for other purposes than those stated in this privacy policy.
– We will process your personal data always with an appropiate level of protection, according with data privacy regulations, and we will not execute automated decision-making without your express consent.

We have written this privacy policy taking into account the requirements of current data protection regulations:
– REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GPDR).
– Spanish Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos de Carácter Personal y garantía de los derechos digitales (LOPD).
- Spanish Real Decreto 1720/2007, de 21 de diciembre (RLOPD).

This privacy policy is written on December 6, 2018.
We may modify this privacy policy in the future in order to facilitate its understanding or to adapt it to changes in legislation, or changes in our processing activities. We will update its date, so that you can check its validity.

Methods of processing
We take appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to Carmencita Film Lab, in some cases, the Data may be accessible to certain types of external parties (such as third-party technical service providers, mail carriers, hosting providers) appointed, if necessary, as Data Processors by Carmencita Film Lab. The updated list of these parties may be requested from us at any time.

Legal basis of processing
We may process Personal Data relating to Users if one of the following applies:

• Provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which Carmencita Film Lab is subject;
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in Carmencita Film Lab;

In any case, Carmencita Film Lab will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Place
The Data is processed at Carmencita Film Lab’s operating offices and in any other places where the parties involved in the processing are located.

Retention time
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.

Therefore:

• Personal Data collected for purposes related to the performance of the services contracted by the User shall be retained until such services has been fully satisfied.
• Personal Data collected for the purposes of Carmencita Film Lab’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by Carmencita Film Lab within the relevant sections of this document or by contacting us.

Carmencita Film Lab may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Carmencita Film Lab may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

EMPLOYEES PROCESSING

Lawful basis for processing: GPDR: 6.1.b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
GPDR: 6.1.c) processing is necessary for compliance with a legal obligation to which the controller is subject.
Spanish job regulation: Real Decreto Legislativo 2/2015, de 23 de octubre, por el que se aprueba el texto refundido de la Ley del Estatuto de los Trabajadores.
Purposes of the processing: – Management of contracted personnel.
– Personal file. Time control. Training. Pension plans. Prevention of occupational hazards.
– Issuance of staff payroll.
– Management of union activity.
Categories of individuals: Employees


Categories of personal data:
– Name and surname, DNI / CIF / Identification document, personnel registration number, Social Security / Mutuality number, address, signature and telephone number.
– Special categories of data: health data (sick leave, work-related accidents and degree of disability, excluding diagnoses), union membership, for the exclusive purposes of paying union dues (where appropriate), union representative (where appropriate). case), proof of attendance from own and third parties.
– Personal characteristics data: Sex, marital status, nationality, age, date and place of birth and family data. Data on family circumstances: Date of registration and cancellation, licenses, permits and authorizations.
– Academic and professional data: Qualifications, training and professional experience.
– Details of employment and administrative career. Incompatibilities.
– Presence control data: date / time of entry and exit, reason for absence.
– Economic-financial data: Economic data of payroll, credits, loans, guarantees, tax deductions, loss of assets corresponding to the previous job (if applicable), judicial withholdings (if applicable), other withholdings (if applicable) . Bank data.
Categories of recipients:
– Entity to which we entrust the management of occupational risks.
– Spanish Job Agency (Tesorería General de la Seguridad Social.)
– Trade union organizations.
– Financial entities.
– Spanish Tax Administration Agency.
– Main contractors that we provide services to as subcontractors.
Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: Your personal data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise.
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

CONTACTS PROCESSING



Lawful basis for processing: This processing is lawful because you have given us your consent.
Purposes of the processing: Manage your request, send you information and follow up on your request.
Categories of individuals: Persons who contact us, customers and suppliers
Categories of personal data: Name and surname, phone, email.
Categories of recipients: Your personal data will not be disclosed to third parties without your express consent.
Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: Your personal data data will be kept for an indefinite period, or until you requests its erasure.
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

DATA SUBJECT RIGHT EXERCISING PROCESSING

Lawful basis for processing: GPDR: 6.1.c) processing is necessary for compliance with a legal obligation to which the controller is subject.
Purposes of the processing: Facilitate your rights under GPDR: Right of access, rectification and erasure, restriction of processing, portability, and object to automated
individual decision-making.
Categories of individuals: Individuals who request to exert their rights (employees, clients, suppliers, contact persons)
Categories of personal data: Full name, address, signature and phone.
Categories of recipients: Your personal data may be disclosed to the Supervisory Authority (In Spain: Agencia Española de Protección de Datos) if you lodge a complaint.

Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: Your personal data will be kept for a period of five years
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

CANDIDATES FOR SELECTION PROCESSES (WORK WITH US) PROCESSING


Lawful basis for processing: GPDR: 6.1.a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes
GPDR: 6.1.b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Purposes of the processing: Selection of personnel and provision of jobs.
Categories of individuals: Job applicants.
Categories of personal data:

– Name and surname, ID / CIF / Identification document, personnel registration number, address, signature and telephone number.

– Personal characteristics data: Sex, marital status, nationality, age, date and place of birth and family data.
– Academic and professional data: Qualifications, training and professional experience.
– Job detail data.
Categories of recipients: Your personal data will not be disclosed to third parties without your express consent.
Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: Your personal data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise.
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

SUPPLIERS PROCESSIN
G

Lawful basis for processing: GPDR: 6.1.b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
GPDR: 6.1.c) processing is necessary for compliance with a legal obligation to which the controller is subject.
Purposes of the processing: – Acquisition of products and / or services that we need for the development of our activity.
– Control of subcontractors if applicable.
Categories of individuals: – Suppliers.
– Individuals who work for our suppliers.
Categories of personal data: – Full name, Proof of identity, address, signature and telephone.
– Employee data: job position. prevention of occupational hazards training.
Categories of recipients: – Financial entities. (Invoice Payment)
– Spanish Tax Administration Agency. (Agencia Estatal de Administración Tributaria)
Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: Your personal data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities
that may arise, according to spanish tax law (Ley 58/2003, de 17 de diciembre, General Tributaria)
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

CUSTOMERS (SALES) PROCESSING

Lawful basis for processing: GPDR: 6.1.a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes
GPDR: 6.1.b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
GPDR: 6.1.c) processing is necessary for compliance with a legal obligation to which the controller is subject.
GPDR: 6.1.f)processing is necessary for the purposes of the legitimate interests pursued by the controller.
Purposes of the processing: Supply of our products / services
Categories of individuals: Customers
Categories of personal data:
– Name and surname, DNI / NIF / Identification document, address, signature and telephone.
– Economic, financial and insurance data: Bank details
Categories of recipients:
– Financial entities.
– Spanish Tax Agency (Agencia Estatal de Administración Tributaria).
Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: Your personal data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise.
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

VIDEO SURVEILLANCE PROCESSING


Lawful basis for processing: GPDR: 6.1.f)processing is necessary for the purposes of the legitimate interests pursued by the controller.
Purposes of the processing: Guarantee the safety of people, goods and facilities and labor control.
Categories of individuals: Employees, customers, suppliers, users.
Categories of personal data: Image
Categories of recipients: The recordings may be disclosed to Spanish Police or Spanish Courts and Tribunals if they request them, or if may be useful to pursue crimes and misdemeanors.
Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: We will keep the recordings for a period not exceeding one month, unless they are required to pursue crimes or misdemeanors.
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

PERSONAL DATA BREACH MANAGEMENT PROCESSING


Lawful basis for processing: GPDR: 6.1.c) processing is necessary for compliance with a legal obligation to which the controller is subject.
Regulation (EU) 2016/679, General Data Protection Regulation, articles 33 and 34
Purposes of the processing: Manage Personal Data Breaches that may occur in our organization.
Categories of individuals: Variable: Employees, Clients, Suppliers, Contact Persons (it will depend on the security breach)
Categories of personal data: Variable: (it will depend on the security breach)
Categories of recipients:
– Spanish Supervisory Agency: Agencia Española de Protección de Datos.
– Spanish Police.

Third countries or international organizations that personal data are transferred to: No international transfer of your personal data is planned.
Retention schedule: Your personal data will be kept for the time necessary to fulfill the purpose for which they were collected and to determine the possible responsibilities that may arise.
Security measures: Adapted to the requirements of Regulation (EU) 2016/679, General Data Protection Regulation.

The Data concerning the User is collected to allow Carmencita Film Lab to provide its Services, as well as for the following purposes: Contacting the User, Interaction with external social networks and platforms, Registration and authentication, Handling payments, Infrastructure monitoring, Managing contacts and sending messages, Analytics, Displaying content from external platforms, Commercial affiliation, Interaction with support and feedback platforms, Managing support and contact requests and Hosting and backend infrastructure.

Users can find further detailed information about such purposes of processing and about the specific Personal Data used for each purpose in the respective sections of this document.

Personal Data is collected for the following purposes and using the following services:

ANALYTICS
The services contained in this section enables Carmencita Film Lab to monitor and analyze web traffic and can be used to keep track of User behavior.

Facebook Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on this Application.

Personal Data collected: Cookies and Usage Data.

Place of processing: US – Privacy Policy.

Google Analytics with anonymized IP (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of the Carmencita Services, to prepare reports on its activities and share them with other Google services.

Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

This integration of Google Analytics anonymizes your IP address. It works by shortening Users’ IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.

Personal Data collected: Cookies and Usage Data.

Place of processing: US – Privacy Policy – Opt Out.

CONTACTING THE USER
Mailchimp newsletter distribution
Mailchimp is a marketing platform for the distribution of mass email newsletters. Mailchimp embeds beacons to the body of the newsletter to tracking opening rates and link clicks. By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning Carmencita Services.

Personal Data collected: email address.

Place of processing: US – Privacy Policy.

HANDLING PAYMENTS
Payment processing services enable Carmencita Services to process payments by credit card, bank transfer or other means. To ensure greater security, Carmencita Film Lab shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.

Some of these services may also enable the sending of timed messages to the User, such as emails containing invoices or notifications concerning the payment.

PayPal (PayPal Inc.)
PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments using their PayPal credentials.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Redsys Payment Gateway (Redsys Servicios de Procesamiento, S.L)
Redsys is a payment gateway provided by Redsys Servicios de Procesamiento, S.L

Personal Data collected: various types of Data as specified in the privacy policy of the service.

TRANSFERRING FILES

File transfer enable Carmencita Services to send your scanned files to your mail inbox, access and download them.

WeTransfer (WeTransfer B.V.)

WeTransfer is a file transferring service provided by WeTransfer B.V.

Personal Data collected: Cookies and Usage Data.

Place of processing: Netherlands – Privacy Policy.

INFRASTRUCTURE MONITORING

This type of services allows Carmencita Services to monitor the use and behavior of its components so its performance, operation, maintenance and troubleshooting can be improved.

Pingdom (Pingdom AB)
Pingdom is a monitoring service provided by Pingdom AB.

Personal Data collected: Cookies and Usage Data.

Place of processing: Sweden – Privacy Policy.

REGISTRATION AND AUTHENTICATION

By registering or authenticating, Users allow Carmencita Services to identify them and give them access to dedicated services.

Direct registration
The User registers by filling out the registration form and providing the Personal Data directly to Carmencita Film Lab.

Personal Data collected: email address and password.

HOSTING AND BACKEND INFRASTRUCTURE
This type of service has the purpose of hosting data and files that enable Carmencita Services to run and be distributed as well as to provide a ready-made infrastructure to run specific features or parts of our Services. Some of these services work through geographically distributed servers, making it difficult to determine the actual location where the Personal Data are stored.

MANAGING SUPPORT AND CONTACT REQUESTS
This type of services allows Carmencita Film Lab to manage support and contact requests received via email or by other means, such as the contact form.

The Personal Data processed depend on the information provided by the User in the messages and the means used for communication (e.g. email address).

We don’t sell or rent Users’ Data to any third parties for any purpose. The only uses of Data are those highlighted in this policy. Users are the only owner of their Data and can request modification or deletion at any time.

Data processing outside European Economic Area

Links to third party websites

Our website may contain links to other websites. It is your responsibility to make sure you read the data protection policy and the terms and conditions that apply to each site.

Third parties personal data

If you provide us with data from third parties, you assume the responsibility of providing them with enough information as established in article 14 of the GPDR.

Users may exercise certain rights regarding their Data processed by Carmencita Film Lab.

In particular, Users have the right to do the following:

• Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
• Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
• Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
• Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
• Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
• Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from Carmencita Film Lab.
• Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User’s consent, on a contract which the User is part of or on pre-contractual obligations thereof.
• Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.

Details about the right to object to processing
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in Carmencita Film Lab or for the purposes of the legitimate interests pursued by the Carmencita Film Lab, Users may object to such processing by providing a ground related to their particular situation to justify the objection.

How to exercise these rights
Any requests to exercise User rights can be directed to Carmencita Film Lab through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by Carmencita Film Lab as early as possible.

CONTACT FORM

All personal data that you submit us via this form will be processed by Data Controller CARMENCITA FILM LAB SL and saved into CONTACTS processing activitie, with the purpose of answering your inquiry, via email or phone, and for a later follow up. Processing shall be lawful because you give us your consent for these specific purposes. Your personal data will not be disclosed to third parties unless forced by law. You have right to access to, rectify, or delete your personal data, and other rights as explained in our Privacy Policy: https://www.adelopd.com/privacidad/carmencita-film-lab

NEWSLETTER FORM

All personal data that you submit us via this form will be processed by Data Controller CARMENCITA FILM LAB SL, with the purpose of sending you our newsletter. Processing shall be lawful because you give us your consent for this specific purpose. Your personal data will not be disclosed to third parties unless forced by law. You have right to access to, rectify, or delete your personal data, and other rights as explained in our Privacy Policy: https://www.adelopd.com/privacidad/carmencita-film-lab

CREATE ACCOUNT FORM

All personal data that you submit us via this form will be processed by Data Controller CARMENCITA FILM LAB SL, with the purpose of fulfilling your purchase, créate your account, as well as sending you commercial info that we deem might be of your interest. Processing shall be lawful because is necessary for the performance of a contract and because is necessary for the purposes of the legitimate interests pursued by the controller. Your personal data will not be disclosed to third parties unless forced by law. You have right to access to, rectify, or delete your personal data, and other rights as explained in our Privacy Policy: https://www.adelopd.com/privacidad/carmencita-film-lab

ONLINE PURCHASE FORM

All personal data that you submit us via this form will be processed by Data Controller CARMENCITA FILM LAB SL, with the purpose of fulfilling your purchase, as well as sending you commercial info that we deem might be of your interest. Processing shall be lawful because is necessary for the performance of a contract and because is necessary for the purposes of the legitimate interests pursued by the controller. Your personal data will not be disclosed to third parties unless forced by law. You have right to access to, rectify, or delete your personal data, and other rights as explained in our Privacy Policy: https://www.adelopd.com/privacidad/carmencita-film-lab