LEGAL NOTICE AND PRIVACY POLICY

1. Legal Notice.

Identification of the website owner.

These provisions regulate the use of the website www.thepapeleo.com, domain owned by PAPELEO SIN JALEO, S.L., with Spanish tax ID code (CIF) B67807826, address at Calle López de Hoyos nº 5, 2º Izquierda, Madrid, email address hello@thepapeleo.com and telephone number 608560151. 

The company makes this website available to Internet users, which entails your use of this site and acceptance of the conditions of use provided in this Notice. 

The owner warns that both the content and services of this website, as well as the conditions of use, may be modified without prior notice. The owner also informs that it may terminate, suspend or interrupt access to the content of the web page at any time without prior notice, without users being able to claim any compensation whatsoever.

If you do not accept the clauses set out in this Legal Notice, you must refrain from accessing and/or using the services and/or content made available to you on this site, and you must leave it.

Intellectual property.

All the contents of this website, including texts, photographs, graphics, images, icons, technology, software, links and other audiovisual or sound content, as well as its graphic design and source codes, belong to the owner or to third parties. No right of use over the same provided for in current intellectual property legislation may be understood to have been granted to the user, except as strictly necessary to use this site.

The trademarks, trade names or distinctive marks belong to the owner or to third parties. Access to the site may not be construed as granting any rights over such trademarks, trade names or distinctive marks.

The owner does not warrant that the content is accurate or error-free or that its free use by the user will not infringe the rights of third parties. Use or misuse of this site and its content shall be at the user’s own risk.

Likewise, reproducing, retransmitting, copying, transferring or rebroadcasting the information contained on this site, in whole or in part, without the owner’s prior authorisation, for whatever purpose and by whatever means, is prohibited.

Terms of use of the website.

1. General.

You must not use the website to carry out activities that are illegal, immoral or disrupt public order and, in general, must use the site properly in accordance with legal provisions and the clauses of this Legal Notice. You shall be held liable to the owner for any damages that may arise from a failure to comply with this obligation.

• Content.

You must use the content of this website in accordance with this Legal Notice, refraining from reproducing, copying, distributing, making available, publicly disclosing, transforming or modifying the content except where authorised by law or expressly consented to by the owner.

The content of the services offered and its use is restricted to users over 18 years of age. Users of legal age who are responsible for minors are reminded that it is their sole responsibility to determine which services and/or content are not age-appropriate. If a minor were to access and register on the site, this shall be presumed to have been done with the prior and express authorisation of their parents, guardians or legal representatives. The owner reserves the right to carry out as many checks and verifications as it deems appropriate in this regard.

• Data collection forms.

Without prejudice to the provisions of the data protection clause, all information provided through the forms on the website must be true, ensuring the authenticity of all such data. You shall be solely liable for any false or inaccurate statements made and for any damages that may arise from these.

• Links.

This web page may include links to third-party sites. We stress that the pages belonging to these third parties have not been reviewed and are not subject to monitoring by the owner of this website. Thus, the owner cannot be held liable for their content, nor for any measures taken in relation to your privacy or the processing of your personal or other data by such parties.

If you wish to insert links from your own web page, you must obtain express consent and comply with the terms set out below:

The link must only direct to the home page of the website, which may not be reproduced in any form.

In accordance with the applicable legislation, establishing frames of any kind that allow content from other websites to be displayed is prohibited, and in any case, when third-party content is displayed jointly in such a way that it: 

• Leads or may lead to error, confusion or deception in users as to the actual provenance of the service.
• Constitutes an unfair comparison or imitation.
• Aims to leverage the brand reputation and prestige of the company or professional.

However, the owner reserves the right to object to links being set up to its website.

Exclusion of liability.

The owner of this site is acting exclusively as the party responsible for the page as the provider of information and content, either on its own services or on the services of third parties with which it has signed agreements. The owner shall not be held liable for content that users may send or publish against these terms, them being solely liable for the veracity and lawfulness of the same. Neither shall it be held liable for decisions taken on the basis of information provided on the site, nor for any damages caused by users or third parties as a result of actions based entirely on information obtained on this site.

Specifically, the owner shall also not be held liable for:

• The quality of the service, the speed of access and the correct operation, availability and continuity of the website.
• Damage that may be caused to equipment by using this site.
• Third-party access to messages or their use to spread computer viruses, in breach of established security measures.
• Faults and defects of any kind in the content published, disseminated, stored or made available.
• The lawfulness, reliability and usefulness of content disseminated by users when using the website or the services offered therein, as well as its veracity or accuracy. 

By way of example and without limitation, you shall be liable for:

• Content added by you, especially data and information entered and sent via the website.
• Any actions on third-party web pages, or actions that infringe rights or are unlawful, harmful and/or damaging.

Failure to comply with any of the above obligations may lead to the adoption of legal measures. The company, in exercising its rights or obligations, may delete or block the offending user’s account, without being able to claim any compensation for damages.

Legislation.

This Legal Notice is governed by each and every one of its provisions, and where not specified therein, by current Spanish legislation.

2. Privacy and data protection policy.

In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR) and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (Ley Orgánica de Protección de Datos Personales y Garantía de los Derechos Digitales – hereinafter LOPDGDD), the data controller informs that users’ personal data collected through the website will be added to and processed in an automated filing system owned by the data controller and registered in its Record of Processing Activities, which will be handled exclusively for the purpose of managing its relationship with data subjects. 

By clicking the ‘send’ button (or equivalent) you consent to the processing of your data by the owner and declare that the information and data provided are true, accurate, complete and up to date, being liable for any damage or loss that may arise as a result of non-compliance with this obligation. In order to ensure that the information provided is always up to date and error-free, you must notify of any changes to your personal data, as well as any amendments to incorrect data you may notice.

The owner warrants that the personal data requested will be that which is strictly necessary to carry out the requested service. Likewise, as the party responsible for the filing system, it undertakes to keep any personal data provided to it secret and confidential, adopting all the necessary security measures to avoid their loss, modification without consent or unauthorised access, in accordance with the aforementioned regulations.

On the basis of the provisions of Spanish Law 34/2002 of 11 July on Information Society Services and E-commerce (Ley de Servicios de la Sociedad de la Información y Comercio Electrónico), the owner undertakes not to send advertising by email without first obtaining the recipient’s express consent. 

This privacy policy applies to the processing of user data from the website www.thepapeleo.com.

Data controller: PAPELEO SIN JALEO, S.L.

Tax ID code (CIF): B67807826. 

Postal address: Calle López de Hoyos nº 5, 2º Izquierda, Madrid (Spain).

Telephone: 608560151.

Email: hello@thepapeleo.com.

Legal basis and purpose of the processing.

Depending on the form or section that you access and the information provided, this information will be used for the purposes described below. You hereby expressly, freely and unequivocally accept the processing of your data for the following purposes:

1. To inform you about services provided by the company.
2. To communicate with the company through the ‘Contact’ and ‘Get in touch’ sections.

If the controller intends to further process personal data for a purpose other than that for which they were collected, the controller shall provide the data subject with information on the new purpose for which their personal data will be processed and any relevant statement, requesting their consent prior to such processing.

In addition, if the controller were to obtain personal data by any means other than disclosure by the data subject, the data subject shall be informed of the provenance of such data, the type of data concerned and the source.

Third-party data.

If you provide personal data of third parties, you hereby declare to have previously informed said persons of the content of the data provided, their origin, the existence and purpose of the filing system containing their data, the recipients of said information and the possibility to exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, as well as identifying the owner of this website. In this sense, it is your sole responsibility to inform the third parties whose data you are going to provide of the above, and the data controller shall not assume any liability for your failure to comply.

Recipients.

The personal data of data subjects will be disclosed to the recipients listed below:

1. Data processors who carry out certain services such as IT and comprehensive consultancy services.
2. Competent authorities and bodies, to the extent required to fulfil any legal obligations. These bodies are or may be tax authorities, social security authorities, banks and financial institutions and law enforcement agencies. 

Rights.

Likewise, you are hereby informed that you may exercise your rights of access, rectification, erasure, restriction of processing, portability and objection as provided in the regulations at any time by notifying the owner, whose details are set out above.

1. Right of access (art. 15 GDPR and art. 13 LOPDGDD): the right to obtain information on the processing of personal data, its purpose and origin. 
2. Right to rectification (art. 16 GDPR and art. 14 LOPDGDD): the right to request incorrect or incomplete personal data to modified. 
3. Right to erasure or ‘right to be forgotten’ (art. 17 GDPR and art. 15 LOPDGDD): the right to request excessive or inappropriate personal data to be permanently deleted. Specifically, you may revoke your consent to receive commercial communications by sending an email to the controller’s address set out above, specifying Unsubscribe.
4. Right to restriction (Art. 18 GDPR and Art. 16 LOPDGDD): the right to have data marked in such a way as to prevent future processing by the data controller. Processing may be restricted where the accuracy of data is contested, the processing is unlawful and the data subject opposes its erasure, or where the data are no longer needed for the purposes of the processing but are required by the data subject for the establishment, exercise or defence of legal claims. 
5. Right to data portability (art. 20 GDPR and art. 17 LOPDGDD): the right to have personal data assigned or transferred to another company or professional specified by the data subject in a structured, intelligible and automated format. If a copy of the data is requested, the controller must process the data in an automated manner in a ‘structured and commonly used format’. If the data is requested to be transferred to another controller, the data must be processed by the controller by automated means, the data must have been provided by the data subject or the processing must be based on consent or on a contract. 
6. Right to object (art. 21 GDPR and art. 18 LOPDGDD): the right to request that your personal data not be used or that the processing cease in the event of commercial prospecting. 

• Not to be subject to automated individual decision-making (art. 22 GDPR and art. 18 LOPDGDD): the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effects concerning them or similarly significantly affects them.

Time limit for exercising these rights: one month or three months in more complex cases, but informing of the reasons for the delay within the first month.

In addition to all these rights, the data subject has the right to lodge a complaint with the Supervisory Authority of any EU member state, if they consider that the processing of their personal data does not comply with the provisions of the GDPR or the LOPDGDD.

Storage periods.

As a general rule, personal data shall be kept until the end of the relationship between the controller and the data subject, unless the data subject requests the data to be erased beforehand. 

Once the relationship has ended, insofar as the personal data of the data subject may be relevant for the purposes of the company’s liability to data processors, such data shall be held during the limitation period, duly blocked, at the disposal of the competent judicial authorities or public administrations, for the purpose of enforcing any liabilities arising from the processing.

Security measures.

The data controller has adopted all the technical and organisational measures needed to ensure the security and integrity of the personal data it processes, as well as to prevent their loss, alteration and/or access by unauthorised third parties. Notwithstanding the foregoing, you acknowledge and accept that security measures on the Internet are not infallible.

Transfers to third countries.

No international transfers are made outside the European Union.