Privacy Policy

1. Identification of the Data Controller In accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter RGPD) we inform you that the personal data will be processed by the following Data Controller:
  • Hijos de Evaristo González, S.L.
  • CIF B73717076
  • Address: Camino Salabosque, 13 – 30152 Aljucer (Murcia-Spain)
  • Email address for exercising rights: carmy@carmy.es
2. General privacy principles When we collect and process your personal information, we are guided by the following practical principles:
  • Personal data is treated fairly, lawfully and in a transparent manner.

  • Personal data is collected for specified, explicit and legitimate purposes and is not processed in a manner that is incompatible with those purposes.

  • The personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which the processing is carried out.

  • The personal data must be accurate and up-to-date. Inaccurate data will be updated or deleted.

  • The personal data must be kept in an identifiable format and only for what is strictly necessary.

  • Personal data is kept secure through appropriate and effective technical and organisational measures against unauthorised or unlawful processing and against accidental loss, destruction or damage, by applying appropriate technical or organisational measures (“integrity and confidentiality”).

  • We are committed to the principles of data protection by design and data protection by default.

3. Purposes of the collection of personal data The purposes according to the treatments are the following:

  • Contact with customers and users: either by telephone or email, to respond to their requests, suggestions and complaints.

  • Marketing, including by electronic means, promotions, contests, raffles: sending news and special offers on services, including by electronic means, to customers and those who sign up for our Newsletter and our contests and raffles.

4. Legitimacy for the processing of personal data
  • Users who have used any means of contact: consent of the interested party.

  • Marketing, including by electronic means: consent of the interested party.

5. Recipients and international data transfers Communication to third parties is not planned, except for legal obligation, and except to our Data Processor suppliers. International data transfers will not be made, since all data is processed within the European Economic Area. In the case of necessary transfers, these may be made to banking entities, Tax Administration, collections, among others, and depending on the type of treatment. 6. Data retention periods

  • Users who have used any means of contact: as long as the data is necessary to manage your request.

  • Marketing, including by electronic means: the data will be retained as long as the interested party has not unsubscribed and for a maximum period of 3 years from the last interaction. Interested parties are reminded that they can unsubscribe from commercial communications at any time. In the case of raffles and contests, the data will be processed while their management remains in force, except for the data of the winners, to comply with tax purposes and until their expiration.

7. Rights of the Interested Party As an interested party, you may direct your communications and exercise your rights following the formalities imposed by REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and the free circulation of these data.

In all our operations related to your privacy, we strive to comply with current regulations, which contain a series of rights for the interested party that we list below:

Your rights

What does it mean?

Right to information

You have the right to be presented with clear, concise, transparent and easy-to-understand information about the way in which we use your personal data and about your rights.

Right of access

You have the right to access the personal data we hold about you (within certain limits). Manifestly unfounded, excessive or repetitive requests may not be attended to.

Right of rectification

You have the right to have your personal data rectified when it is inaccurate or no longer valid or to have it completed when it is incomplete.< /p>

Right to erasure / right to be forgotten

In certain cases, you have the right to request that your personal data be deleted or removed. It should be noted that this is not a right absolute, since we may have legal or legitimate reasons to keep them.

Right to object to receiving advertising

You can unsubscribe from our marketing communications at any time. The easiest way to unsubscribe is to unsubscribe from our marketing communications. is by clicking on the “unsubscribe” link in any email or communication we send you. You can also email us at carmy@carmy.es< /p>

Right to withdraw consent at any time when data processing is based on consent

In the event that consent has been granted for any of the purposes reported and determined in the treatments to which we refer, we inform you that you have the right to withdraw consent at any time, without affecting the legality of the processing based on consent prior to its withdrawal.

Right to object to processing based on the satisfaction of legitimate interests

You may object at any time to our processing of your data when the treatment is based on the satisfaction of legitimate interests.

Right to lodge a complaint with a supervisory authority

We also inform you that if you have not obtained satisfaction in the exercise of your rights or the way of exercising them, you may file a complaint with the Supervisory Authority. If you want to know more information about this right and how to exercise it, you can contact the Spanish Data Protection Agency: www.aepd.es Tel. 901 100 099 and 91.266.35.17 C/Jorge Juan,6 28001-Madrid.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, in order to transmit it to another data controller, where the processing is based on the execution of a contract or on your consent and the processing is carried out by automated means.

Right to restriction of processing

You have the right to obtain a restriction on the processing of your data, although this can be exercised in two ways:

You may request that the processing of your data be suspended:
  • When you contest the accuracy of your personal data, for a period that allows the controller to verify it.
  • When you have objected to the processing of your personal data carried out by the controller on the basis of legitimate interest or a mission of public interest, while the controller verifies whether these reasons prevail over yours.

Request the controller to retain your data:

  • When the processing is unlawful and you have opposed the deletion of your data and instead request the limitation of its use.
  • When the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the formulation, exercise or defence of claims.
How can you exercise your data protection rights? To exercise your rights, you can contact carmy@carmy.es indicating in the subject “RGPD. RIGHTS” or similar. You must specify which of the rights you request to be fulfilled. You can use an official form from the Spanish Data Protection Agency: https://www.aepd.es/reglamento/derechos/index.html 8. Security The security measures adopted are those required, in accordance with the provisions of article 32 of the RGPD. In this regard, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the risks of varying probability and severity for the rights and freedoms of natural persons, the Controller has established appropriate technical and organizational measures to ensure the level of security appropriate to the existing risk. The Data Controller has implemented sufficient mechanisms to:
  • Ensure the permanent confidentiality, integrity, availability and resilience of the processing systems and services.
  • Restore the availability and access to personal data quickly, in the event of a physical or technical incident.
  • Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
  • Pseudonymize and encrypt personal data, where appropriate.
9. Social Networks Fans or followers on the various social networks and in the context of this treatment must consider that the Data Controller can consult or delete their data in a restricted manner by having a specific profile. Any rectification of their data or restriction of information or publications must be carried out through the configuration of their profile or user in the social network itself. Therefore, fans/followers consent to:

  • The processing of their personal data in the environment of said social network and in accordance with its own Privacy policies.

  • Access by the Data Controller to the data contained in your profile or biography, depending on your privacy settings on each network.

  • That the news published about our events, news or our comments may appear on your wall or biography.

  • If a form specifically created for promotional actions or for other purposes is used, the data collected will be processed in accordance with the data protection policy of the Data Controller.

If you want to stop following us, just click the option “Stop being a fan” or “stop following” or similar.