OKUTAMA INVEST, S.L. is a company with its registered office at Calle Don Juan de Austria 30, 9º – 46002 Valencia, with Tax Identification Number B-16.718.793, registered in the Mercantile Register of Valencia in volume 11,034, page 165, sheet number V-199.871, hereinafter “OKUTAMA”.
Who is responsible for the processing of your personal data?
Identity: OKUTAMA INVEST S.L.
CALLE DON JUAN DE AUSTRIA 30 – 5º. 46002 VALENCIA
NIF nº : B16718793
OKUTAMA has appointed a Data Protection Officer or an internal contact person within its organisation. If you have any queries regarding the processing of your personal data, you can contact the Data Protection Officer or internal contact person, at email@example.com
The data provided by users of the website may be processed by OKUTAMA for the following purposes: provision of online services, web-user management, marketing communications related to our services, depending on the type of data provided the user, as well as any interactions with OKUTAMA initiated by the user.
Legitimate interest, the fulfilling of legal obligations on our part and your express consent authorise us to process data.
Data protection regulations guarantee the following rights to users:
- Access: This authorises the User to know what information is held, where it was obtained from, who it has been shared with and for what purposes it has been processed.
- Rectification: This authorises the User to have any inaccurate or out-of-date data rectified.
- Erasure: This authorises the User to request the deletion of their data.
As well as other rights, as explained in the additional information.
You can consult the additional and detailed information on Data Protection in the annexed clauses found at https://grupoelaia.com/politica-privacidad/
At OKUTAMA we work to offer you the best possible experience through our products and services. In order to achieve this, in some cases it is necessary to collect information. We care about your privacy and believe we should be transparent about it.
Therefore, and for the purposes of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and LAW 34/2002, of 11 July, on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), OKUTAMA informs the user that, as data controller, it will incorporate the personal data provided by users in an automated file.
Our commitment starts by explaining the following:
Your data is collected to improve the user experience, based on your interests and needs.
We are transparent about what data we collect about you and why we collect it.
Our intention is to offer you the best possible experience. Therefore, when we use your personal information, we will always do so in a compliant manner, and where necessary, we will seek your consent.
We understand that your data belongs to you. Therefore, if you decide not to authorise us to process your data, you can ask us to stop.
Our priority is to ensure your security and to treat your data in accordance with European regulations.
What personal data do we collect?
The personal data that the user may provide:
Name, address and date of birth.
Telephone number and e-mail address.
Information on payments and refunds.
IP address, date and time that you accessed our services, the internet browser you are using and the details of your device’s operating system.
Any other information or data you choose to share with us.
In some cases, it is compulsory to complete the registration form in order to access and enjoy certain services offered on the website; likewise, failure to provide the personal data requested or failure to accept this data protection policy means that you will not be able to subscribe, register or participate in any of the promotions in which personal data is requested.
Why and for what purpose do we process your data?
OKUTAMA processes the information provided by persons concerned for the following purposes:
Manage orders or contract any of our services, either online or at the company’s physical premises.
Manage the sending of the information that you request from us.
Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and information tasks, being able to carry out automatic assessments, profiling and customer segmentation tasks with the aim of personalising data processing in accordance with its characteristics and needs and improving the customer’s online experience.
Develop and manage any competitions, prize draws or other promotional activities that may be organised.
In some cases it will be necessary to provide information to authorities or third-party companies for auditing purposes, as well as to handle personal data from invoices, contracts and documents in order to respond to customer or government requests.
We inform you that the personal data obtained as a result of your registration as a user will form part of the Record of Processing Activities and Operations (RAT, Spanish acronym), which will be updated periodically in accordance with the provisions of the GDPR.
What are the legal grounds for the processing of your data?
The processing of your data can be based on the following legal grounds:
Consent of the data subject for the contracting of services and products, for contact forms, requests for information or registration in e-newsletters.
Legitimate interest for the processing of our customers’ data for direct marketing purposes and the express consent of the data subject for all matters relating to automatic assessments and profiling.
Compliance with legal obligations for fraud prevention, communication with public authorities and third-party requests.
The data processed for the purposes described will be kept for the time necessary to fulfil the purpose for which it was collected (for example, for the duration of the commercial relationship), as well as for the fulfilment of the legal obligations arising from the processing of the data.
OKUTAMA does not intend to share your personal data with any third party, except in circumstances where it is required by law.
In some cases, only when necessary, OKUTAMA will provide user data to third parties, with the exception of the other companies in the group. However, the data will never be sold to third parties. External service providers (e.g. payment providers or delivery companies) with whom OKUTAMA works, may use the data to provide the relevant services, however, they will not use such information for their own purposes or transfer it to third parties.
OKUTAMA seeks to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have adequate measures in place to protect personal data. These third parties are obliged to ensure that the information is processed in accordance with data privacy regulations.
In some cases, personal data may be required by law to be disclosed to public bodies or other parties, but it will only be disclosed where such disclosure is strictly necessary for the fulfilment of said legal obligations.
The personal data obtained may also be shared with other companies of the group.
Where is your data stored?
In general, the data are stored within the EU. For data sent to third parties outside the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCRs) or because they have signed up to the Privacy Shield.
What rights do you have and how can you exercise them?
You can send your communications and exercise your rights by sending a request to the following e-mail address: firstname.lastname@example.org
Under the provisions of the GDPR, you can request:
- Right of access: you may request information about the personal data we hold about you.
- Right of rectification: you can communicate any change in your personal data.
- Right to erasure and the right to be forgotten: you can request the deletion of your personal data after it has been blocked.
- Right to restrict processing: this entails the restriction of the processing of personal data.
- Right to object: you can withdraw your consent to the processing of your data by objecting to further processing.