Privacy Policy of Laboratorio de Forja
Laboratorio de Forja is committed to protecting its users’ privacy and ensuring that personal information is handled with confidentiality, in accordance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679) and Organic Law 3/2018, of December 5, on Personal Data Protection and the guarantee of digital rights.
Data Controller
The entity responsible for processing personal data collected through the Laboratorio de Forja website is:
- Name or Legal Entity: Laboratorio de Forja
- Address: Camino de Valdehornos s/n – San Martín de Valdeiglesias, Madrid, Spain
- Email: aparicio@laboratoriodeforja.com
Principles Applicable to Personal Data Processing
Personal data processing on the Laboratorio de Forja website is conducted in accordance with the following principles, as outlined in Article 5 of the GDPR and Articles 4+ of Organic Law 3/2018:
- Lawfulness, Fairness, and Transparency: The user’s consent will be obtained, providing clear information about the purposes of data collection.
- Purpose Limitation: Data will be collected for specific and legitimate purposes.
- Data Minimization: Only the necessary data for the intended purposes will be collected.
- Accuracy: Personal data will be kept accurate and updated.
- Storage Limitation: Data will be kept only for as long as necessary to fulfill the purposes for which it was collected.
- Integrity and Confidentiality: Appropriate security measures will be taken to protect data confidentiality.
- Accountability: The Data Controller ensures compliance with these principles.
Categories of Personal Data
Laboratorio de Forja only processes identifying data. It does not handle special categories of data, as defined in Article 9 of the GDPR.
Legal Basis for Data Processing
The legal basis for processing personal data is the user’s consent. This consent is explicitly obtained and can be withdrawn at any time without affecting the user’s experience on the website.
When users provide their personal data through forms for inquiries or requests, they will be informed if there are mandatory fields necessary for the proper processing of their request.
Purposes of Data Processing
Personal data is collected for the following purposes:
- Fulfilling commitments between Laboratorio de Forja and the user.
- Commercial, operational, and statistical purposes.
- Personalization and improvement of content and user experience on the website.
At the time of collection, users will be informed about the specific purposes for which their data is being processed.
Data Retention Periods
Data will be retained only for as long as necessary to fulfill the purposes of processing or until the user requests its deletion. Users will also be informed of the retention criteria at the time of data collection.
Recipients of Personal Data
Personal data will not be shared with third parties unless explicitly stated at the time of collection.
Minors’ Data
In accordance with Article 8 of the GDPR and Organic Law 3/2018, minors under 14 years old must obtain consent from their parents or guardians to process their data.
Data Security and Confidentiality
Laboratorio de Forja implements technical and organizational measures to ensure data security. All data transmissions are protected with an SSL certificate. However, since online systems are not infallible, users will be informed of any potential security breaches that may pose a risk to their rights.
Users’ Rights
Users can exercise their rights under the GDPR and Organic Law 3/2018:
- Right of Access: Obtain confirmation as to whether their data is being processed and access relevant information.
- Right of Rectification: Correct inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request the deletion of personal data under certain conditions.
- Right to Restrict Processing: Temporarily limit the use of their data in certain cases.
- Right to Data Portability: Obtain and transfer personal data to another data controller.
- Right to Object: Object to the processing of their data.
- Right Not to Be Subject to Automated Decisions: Exclude profiling or fully automated decisions unless legally required.
To exercise these rights, users must submit a written request that includes:
- Full name and proof of identity.
- Address for notifications.
- Date and signature.
- Documentation supporting the request.
Requests should be sent to:
- Address: Camino de Valdehornos s/n – San Martín de Valdeiglesias, Madrid, Spain
- Email: aparicio@laboratoriodeforja.com
Links to Third-Party Websites
The Laboratorio de Forja website may contain links to external websites. Third parties have their own privacy policies, and Laboratorio de Forja is not responsible for the practices of these sites.
Complaints to the Supervisory Authority
Users may file complaints with the relevant supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD): https://www.aepd.es.
Acceptance and Modifications of this Policy
By using the website, users accept this Privacy Policy. Laboratorio de Forja reserves the right to modify it due to legislative or operational changes. Users are encouraged to review this page periodically for possible updates.
This policy complies with the GDPR (EU Regulation 2016/679) and Organic Law 3/2018 on Personal Data Protection.