Privacy policy

Marpalo (hereinafter, the Controller) is responsible for processing the User's personal data and informs the User that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD). The following information is therefore provided about the processing:

Purpose of processing

To maintain a commercial relationship with the User. The planned processing operations are:

Sending advertising and commercial communications, communications concerning the Services, technical matters or changes to them by email, SMS, WhatsApp, social communities or any other electronic or physical means, present or future, that enables communication. These communications will be sent by the Controller and relate to its Services or those of partners or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.

Data received through any of the contact methods or channels indicated on the website is used to manage requests or incidents reported by the individuals concerned.

Conducting statistical studies.

Processing orders, requests or any other enquiries made by the User through the available contact methods.

Legal basis for processing

Consent of the data subject.

Data retention criteria

Data will be retained for no longer than necessary to fulfil the purpose of processing. When no longer needed for that purpose, it will be deleted with appropriate security measures to ensure pseudonymisation or complete destruction.

In accordance with Spanish Law 25/2007 of 18 October on the retention of data relating to electronic communications and public communications networks, the Rectorate of the Sanctuary of Consolación must retain certain data generated or processed by it so that authorised officers can access it.

Disclosure of data

The Controller expressly informs and guarantees users that their personal data will not be transferred to third parties, except:

Where necessary to provide certain services, including but not limited to domain name registration or transfer, the data subject's personal information may be transferred or disclosed to the competent national or international registration authority responsible for registering the domain name in question.

To suppliers who need access to your data to provide contracted services and with whom the necessary personal data processing agreements required by law have been signed to protect your privacy.

To public authorities and banks to comply with legal obligations.

As required by ICANN, the holder of a contracted Service that includes a domain name authorises publication of domain holder information that must be publicly accessible through WHOIS under the applicable rules.

User rights

The right to withdraw consent at any time.

The rights of access, rectification, portability and erasure, and the right to restrict or object to processing.

The right to lodge a complaint with the supervisory authority (www.aepd.es) if you believe processing does not comply with current legislation.

Contact details for exercising your rights

To exercise any of these rights, please email info@marpalo.com with all your details, including a copy of your identity document, or send a letter to the following address:

Mandatory nature of the data provided

By ticking the relevant boxes and entering data in the contact or purchase form, Users expressly, freely and unequivocally accept that their data is necessary for the Provider to respond to their request. Completing the remaining fields is voluntary. The User guarantees that the personal data provided to the Controller is accurate and undertakes to communicate any changes.

All data requested through the website is mandatory because it is necessary to provide an optimal Service to the User. If all data is not provided, the information and services cannot be guaranteed to fully meet your needs.

Security measures

In accordance with current personal data protection legislation, the Controller complies with all GDPR requirements for processing personal data under its responsibility, particularly the principles set out in Article 5 of the GDPR. Data is processed lawfully, fairly and transparently, and is adequate, relevant and limited to what is necessary for the purposes of processing.

The Controller guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR, protect Users' rights and freedoms, and provide the information needed to exercise those rights.