Basic information on data protection
| Controller | GestiSport C.B. |
| Purpose | Manage the sending of sports equipment and related advertising |
| Legal basis | Consent of the data subject |
| Recipient | GestiSport C.B. |
| Rights | Access, rectify and erase data, as well as other rights, as explained in the additional information |
| Data we hold | First name, last name, ID number, date of birth and address (both shipping and billing) |
GestiSport C.B., in accordance with the current legislation on Personal Data Protection, informs users of the website www.centrodeldeporte.com (hereinafter, the Website) of the Privacy and Data Protection Policy that will apply to the processing of personal data that the User voluntarily provides when accessing the website or the corresponding mobile application. By providing GestiSport C.B. with their personal data through the electronic forms on the Website, contact section, and, where applicable, by checking the corresponding acceptance box, the User expressly consents to GestiSport C.B. processing such data under the terms of this Privacy and Data Protection Policy clause and for the purposes stated herein. GestiSport C.B. informs users of the Website that their personal data will only be collected for processing when it is adequate, relevant, and not excessive in relation to the specific, explicit, and legitimate purposes for which it has been obtained. The data will be deleted when it is no longer necessary or relevant for that purpose, or when requested by the data subject in the exercise of their right to erasure. GestiSport C.B. declares its commitment to complying at all times with current data protection legislation, specifically Organic Law 15/1999 of December 13 on the Protection of Personal Data; Royal Decree 1720/2007 of December 21, approving the implementing regulation of Organic Law 15/1999; Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016; and other applicable legislation. The personal data provided will be included in manual or automated files registered with the Spanish Data Protection Agency, under the ownership of the Company, and will be used in accordance with the following.
The user shall be solely responsible for the accuracy of the data provided to GestiSport C.B.
We want you to be able to exercise your Rights. Therefore, data subjects may exercise their rights of access, rectification, erasure, portability, and restriction or objection by writing to the Controller’s address, indicating “exercise of data protection rights,” or by email at: info@centrodeldeporte.com. Data subjects have the right to withdraw the consent given.
Data subjects have the right to lodge a complaint with the Supervisory Authority (Spanish Data Protection Agency www.agpd.es).
Fields marked with an asterisk (*) in the forms available on the Website are mandatory, and failure to complete any of them will prevent submission. GestiSport C.B. properly manages its server environment and maintains a strictly compliant firewall infrastructure. It continuously uses up-to-date technologies to ensure that the confidentiality and privacy of information are not compromised. The Website uses the SSL (Secure Socket Layer) protocol to enhance security. SSL is the industry standard technology used to protect and maintain the security of message transmissions over the Internet. When accessing your accounts or sending information from secure web pages, encryption encodes your data into an unreadable format to prevent unauthorized users from accessing it. To this end, the necessary technical and organizational measures are adopted to ensure the security of personal data contained therein and to prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the data, and the risks to which it is exposed. Any changes made to the Privacy Policy and information management practices will be reflected in a timely manner, and GestiSport C.B. may add, modify, or delete this Privacy Policy when deemed necessary.
In any case, GestiSport C.B. will never modify policies or practices to make them less effective in protecting the personal data of our previously stored customers without the prior consent of the affected customers.
YOUR DATA IS NOT TRANSFERRED OR SOLD
WE ARE TRANSPARENT ABOUT THE INFORMATION THAT CONCERNS YOU
YOU CHOOSE YOUR PREFERENCES, FOR EXAMPLE ADVERTISING
Data subjects may exercise their rights of access, rectification, erasure, portability, and restriction or objection by writing to the Controller’s address, indicating “exercise of data protection rights,” or by email at: info@centrodeldeporte.com.
Data subjects have the right to withdraw the consent given.
Data subjects have the right to lodge a complaint with the Supervisory Authority (Spanish Data Protection Agency www.agpd.es).
How do we keep your data protected?
To ensure protection and maintain the security, integrity, and availability of your data, we use various security measures.
Although it is not possible to guarantee absolute protection against intrusions in data transmissions over the Internet or from a website, both we and our subcontractors and business partners make every effort to maintain physical, electronic, and procedural safeguards to ensure the protection of your data in accordance with applicable legal requirements in this area. The measures we use include the following:
- - limiting access to your data only to those persons who need to know it for the performance of their duties;
- - as a general rule, transferring collected data in encrypted format;
- - installing perimeter protection systems for IT infrastructures (“firewalls”) to prevent unauthorized access, for example by “hackers”; and
- - regularly monitoring access to IT systems to detect and stop any misuse of personal data.
In cases where we have provided you (or you have chosen) a password that allows you to access certain parts of our websites or any other portal, application, or service under our control, you are responsible for keeping it confidential and for complying with all other security procedures that we notify you of. You may not share your password with anyone.
How long do we retain your data?
The personal data provided will be retained until its deletion is requested by the data subject.
Data will not be transferred to third parties except where there is a legal obligation to do so.
Our data retention periods are based on business needs. Therefore, with regard to personal data that is no longer necessary, access will either be restricted solely to compliance with strictly legal obligations or it will be securely destroyed.
If you have any questions about how we use your personal data, you may contact our data protection officer at any time at the following email address: info@centrodeldeporte.com.
