Privacy policy

I. PRIVACY POLICY AND DATA PROTECTION
‍
In compliance with current legislation, Mar Design (hereinafter also referred to as the Website) is committed to adopting the necessary technical and organizational measures according to the appropriate level of security for the risk of the data collected.
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations.

Laws incorporated into this privacy policy

- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
- Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
- Royal Decree 1720/2007, of 21 December, which approves the Regulation for the development of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).
- Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller for the personal data collected on Mar Design is: MARDESIGN ESTUDIO S.L., with NIF: B72824998,, represented by Mar Design (hereinafter referred to as the Data Controller).

Contact details are as follows:

- Address: C/PADRE JOSE VERA N2 PORTAL 3 Marbella (29602), Málaga, Spain
- Contact telephone: 655568743  
- Contact email: Joaquin@mardesign.es
‍
Personal Data Register
‍
In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by Mar Design via forms on its pages will be incorporated and processed in our file in order to facilitate, expedite, and fulfill the commitments established between Mar Design and the User or to maintain the relationship established in the forms completed by the User or to respond to a request or inquiry. Likewise, in accordance with the provisions of the GDPR and the LOPD-GDD, unless an exception under Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other circumstances established by the GDPR.

Principles applicable to the processing of personal data
‍
The processing of the User's personal data will be subject to the following principles as set out in Article 5 of the GDPR and Article 4 and subsequent articles of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights:- Principle of lawfulness, fairness, and transparency: the User's consent will be required at all times, after fully transparent information on the purposes for which personal data is collected.
‍
- Principle of purpose limitation: personal data will be collected for specific, explicit, and legitimate purposes.
- Principle of data minimization: personal data collected will only be the minimum necessary in relation to the purposes for which they are processed.
- Principle of accuracy: personal data must be accurate and always kept up to date.
- Principle of storage limitation: personal data will only be kept in a form that permits the identification of the User for the time necessary for the purposes of processing.
- Principle of integrity and confidentiality: personal data will be processed in a manner that ensures their security and confidentiality.
- Principle of proactive accountability: the Data Controller will be responsible for ensuring compliance with the above principles.

Legal basis for the processing of personal data
‍
The legal basis for the processing of personal data is consent. Mar Design undertakes to obtain the User's express and verifiable consent for the processing of their personal data for one or more specific purposes.The User will have the right to withdraw their consent at any time. It will be as easy to withdraw consent as it is to give it. As a general rule, withdrawal of consent will not affect the use of the Website.In cases where the User must or may provide their data through forms to make inquiries, request information, or for purposes related to the content of the Website, they will be informed if the completion of any of these forms is mandatory, as these may be essential for the proper execution of the requested operation.

Purposes of the processing for which personal data is used
‍
Personal data is collected and managed by Mar Design to facilitate, expedite, and fulfill the commitments established between the Website and the User, or to maintain the relationship established in the forms completed by the User, or to respond to a request or inquiry.Additionally, data may be used for commercial purposes, operational and statistical customization, and activities related to Mar Design’s social purpose, as well as for data extraction, storage, and marketing studies to tailor the Content offered to the User and improve the quality, functionality, and navigation of the Website.At the time the personal data is obtained, the User will be informed about the specific purpose(s) for which the data will be processed, i.e., the intended use(s) of the collected information.

Retention periods for personal data
 
Personal data will only be retained for the minimum time necessary for the purposes of its processing, and in any case, only for the following period: 12 months, or until the User requests its deletion.At the time personal data is obtained, the User will be informed about the retention period or, when that is not possible, the criteria used to determine this period.

Recipients of personal data
‍
The User's personal data will not be shared with third parties.In any case, at the time the personal data is obtained, the User will be informed about the recipients or categories of recipients of the personal data.

Personal data of minors
‍
In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, only individuals over the age of 14 may lawfully give their consent for the processing of their personal data by Mar Design. In the case of minors under the age of 14, the consent of their parents or guardians will be required, and processing will only be considered lawful if authorized by them.

Confidentiality and security of personal data
‍
Mar Design is committed to adopting the necessary technical and organizational measures according to the appropriate level of security for the data collected, ensuring the confidentiality and security of personal data to prevent its destruction, loss, or accidental or unlawful alteration, and to prevent unauthorized access or disclosure. However, Mar Design cannot guarantee the total invulnerability of the internet nor the absence of hackers or other parties who might fraudulently access personal data. The Data Controller agrees to notify the User without undue delay in the event of a personal data security breach likely to result in a high risk to the rights and freedoms of individuals.Personal data will be treated confidentially by the Data Controller, who undertakes to ensure that such confidentiality is respected by employees, partners, and anyone who accesses the information.

Rights deriving from the processing of personal data
‍
The User has the following rights over Mar Design concerning their personal data, which they can exercise with the Data Controller in accordance with the GDPR and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights:

- Right of access: The User has the right to obtain confirmation as to whether Mar Design is processing their personal data and, if so, to access that data and information about the processing.
- Right of rectification: The User has the right to have inaccurate or incomplete personal data corrected.
-Right of erasure ("right to be forgotten"): The User has the right, unless otherwise provided by law, to have their personal data deleted when it is no longer necessary for the purposes for which it was collected or processed.
- Right to restriction of processing: The User has the right to restrict the processing of their personal data.
-Right to data portability: Where processing is carried out by automated means, the User has the right to receive their personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller, where technically feasible.
- Right to object: The User has the right to object to the processing of their personal data by Mar Design.
- Right not to be subject to automated decision-making, including profiling.

The User has the right not to be subject to a decision based solely on automated processing, including profiling.The User may exercise their rights by sending a written request to the Data Controller with the reference "GDPR-www.mardesign.com," specifying:

- Name, surname(s), and a copy of the User's ID. In cases where representation is admitted, the same form of identification will also be required from the representative and the document accrediting representation. The ID copy may be replaced by any other valid means in law that establishes identity.
- Specific reasons for the request or the information being sought.
- Notification address.
- Date and signature of the applicant.
- Any document that supports the request.

This request and any accompanying documents may be sent to the following postal and/or email addresses:

- Postal address: C/PADRE JOSE VERA N2 PORTAL 3 Marbella (29602), Málaga, Spain
- Email address: Joaquin@mardesign.es

Links to third-party websites
‍
The Website may include hyperlinks or links that provide access to third-party websites not operated by Mar Design. The owners of such websites are responsible for their own privacy policies and data practices.

Complaints to the supervisory authority
‍
If the User believes that there is an issue or violation of current regulations regarding the processing of their personal data, they have the right to effective judicial protection and the right to file a complaint with a supervisory authority. In Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
‍
The User must have read and agreed to the terms regarding the protection of personal data contained in this Privacy Policy and must consent to the processing of their personal data for the purposes and timeframes specified herein. The use of the Website implies acceptance of this Privacy Policy.Mar Design reserves the right to modify its Privacy Policy at its own discretion or as required by changes in legislation, jurisprudence, or doctrine from the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is encouraged to periodically review this page to stay informed of any changes or updates.This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 of the European Parliament and Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.