PRIVACY POLICY

1. Introduction

WE RECOMMEND THAT YOU READ AND UNDERSTAND OUR PRIVACY POLICY BEFORE PROVIDING YOUR PERSONAL DATA AND GIVING CONSENT FOR ITS PROCESSING.

The purpose of this PRIVACY POLICY (hereinafter “POLICY”) is to communicate our commitment to the protection and security of the personal data that you may provide us, to duly inform you about the processing of personal data carried out by us that may be collected through forms on our website (liberux.net). All this, in accordance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.

Your personal data is very important to THE COMPANY, so we are committed to treating it with the utmost confidentiality and discretion, as well as implementing all those security measures that are considered appropriate and reasonable.

This POLICY applies only to this website, liberux.net.

2. Identification and contact details of the responsible party

LIBERUX LABS S. L., with NIF B75389189. (Hereinafter “THE COMPANY”)

Email address: info@liberux.net

3. Data we collect

THE COMPANY will process the following data that USERS will have previously provided voluntarily through some form on our WEBSITE, purchase registration, call to the Customer Service, etc.

Identification data. Information concerning a natural person that allows differentiating them from others in a group (for example: name, surname, tax identification number, date of birth – verification that only adults access the service, etc.)
Contact data. Information that allows maintaining or getting in touch to properly manage the shipments of our products purchased through our WEBSITE, among others (for example: address, email, landline, mobile phone, city, province, country)
Economic and transactional information (for example: your payment or card data, information about your purchases, orders, returns, etc.)
Commercial information (for example: if you are subscribed to our newsletter)

When we ask you to fill in your personal data to give you access to some functionality or service, we will mark some fields as mandatory*, since they are data that will be necessary to provide you with the service or give you access to the functionality in question. Please note that if you decide not to provide us with those data, it is possible that you may not be able to complete your registration as a customer or finalize a purchase or simply enjoy our services and functionalities.

4. Purpose of personal data processing

THE COMPANY collects your data to manage your requests and offer you services and products that may be of interest to you:

Attend to inquiries, complaints, requests, or incidents made through our contact channels and be able to contact you to send the requested information or necessary solution.
Attend to inquiries made through the Chat on our WEBSITE.
Allow you to make purchases through our WEBSITE.
Development, fulfillment, and execution of the sales contract, which includes order preparation and delivery management, payment management, and, if applicable, return, invoicing, and sending the invoice for purchases made on our WEBSITE.
Manage billing for accounting compliance and tax obligations.
Process the warranty of the products purchased.
Send personalized commercial communications (promotions and offers, invitations to special events, loyalty programs, raffles, Newsletter) by any electronic means of remote communication.
Comply with our legal obligations that apply to us and regulate our activity.

5. Legitimacy of personal data processing

THE COMPANY, following current regulations both in terms of data protection and information society services and electronic commerce, informs you that it will collect those personal data that you have provided or voluntarily provided for your access to any of the services provided on our WEBSITE, and they will be incorporated into files owned by THE COMPANY.

The processing of personal data is also legitimized from the moment you make a purchase through our WEBSITE, initiating with this act a contractual or pre-contractual relationship, if you contact us to request a specific product, or customization of a product, or request a quote.

For the sending of commercial communications by means of remote electronic communication, you will have previously authorized it by checking the box that authorizes us to do so, in the form(s) on our WEBSITE.

6. Duration of processing and data retention period

The personal data provided will be retained in accordance with the periods established in the current regulations:

THE CIVIL CODE. It will be five years from the new wording of article 1964.
THE COMMERCIAL CODE. It will be six years, according to the provisions of its article 30.
THE GENERAL TAX LAW. It will be four years according to the provisions of articles 66 to 70.

In any case, and even if you request the deletion of your personal data, THE COMPANY will have the right to retain and maintain them, under due blocking, for the necessary period to comply with the legal obligations that correspond to it, as well as to make them available to the competent Authorities in the various applicable matters.

7. Sending commercial communications

If you have authorized us through our form(s), THE COMPANY will send you information about its products, activities, and personalized services, etc.

For the sending of commercial communications, the retention periods will be maintained as long as you do not request your withdrawal, since we will understand that until that moment you are still interested in receiving our communications.

You can revoke your consent to receive commercial communications at any time, communicating your will to revoke through the following channels:

Email to the following address: info@liberux.net
In the commercial communication itself that we send you by electronic means, a link – UNSUBSCRIBE will be enabled.

The processing time for this withdrawal will be 48 to 72 hours from the receipt of the request, so it is possible that during that time you will continue to receive some commercial communication.

8. Automated decisions and profiling

Our website does not make automated decisions or create profiles.

9. International data transfers

THE COMPANY does not carry out any International Data Transfer.

10. Recipients

During the period of processing your personal data, THE COMPANY may transfer your data to third parties, being the following recipients:

Accounting and/or Tax Advisory, for the correct preparation of THE COMPANY’s accounting and tax obligations.
Public Bodies and Entities with competence in the matter.
Judges and Courts.
State Security Forces and Bodies.
The various competent authorities, when there is a legal obligation to provide personal data.

11. Social networks

Social Networks are part of the daily life of many Internet users, and for them, THE COMPANY has created different profiles on some of them.

All users who visit our website have the opportunity to join our social networks or groups.

However, they should keep in mind that, unless we request their data directly on them (for example, through marketing actions, contests, promotions, or any other valid form), their data will belong to the corresponding Social Network.

Therefore, we recommend that you read their terms of use and privacy policies carefully, as well as ensure that you configure your preferences regarding data processing.

12. Accuracy of data

The interested party guarantees that the personal data provided to us is true, accurate, complete, and up-to-date; committing to inform of any change regarding the data provided, through the channels enabled for this purpose and indicated in point 2 of this POLICY.

If not, they will be responsible for any damage or harm, both direct and indirect, that may be caused as a result of the breach of this obligation.

In the event that the interested party provides data of third parties, they declare that they have the express consent of these and undertake to transfer the information contained in this clause, exempting THE COMPANY from any responsibility derived from the lack of compliance with this obligation.

13. Exercise of rights and claims before the AEPD

As a result of the processing of your personal data by THE COMPANY, the current legislation grants you a series of rights.

The exercise of your rights is free, except if the requests are manifestly unfounded or excessive (for example: repetitive in nature), then THE COMPANY, as the data controller, may charge a fee proportional to the administrative costs incurred.

Requests will be responded to within ONE MONTH, although, considering the complexity and number of requests, the period may be extended by another TWO MONTHS (which will be communicated to you within one month of receiving your request).

You can exercise your rights of access, rectification, deletion, opposition, portability, and limitation of processing through any of the following means, always accompanying a copy of your ID or EQUIVALENT IDENTIFICATION DOCUMENT along with the corresponding form:

Email to the following address: info@liberux.net
Postal mail addressed to: Avenida de Betanzos, 91 1ºD 28034 Madrid

If the request is submitted electronically, the information will be provided by the same means, unless the interested party requests otherwise.

We offer a summarized explanation of each of these rights to facilitate their exercise:

RIGHT OF ACCESS: The right of access will provide the interested parties with a copy of the personal data held, along with the purpose for which they have been collected, the identity of the data recipients, the expected retention periods or the criteria used to determine it, the existence of the right to request the rectification or deletion of personal data as well as the limitation or opposition to their processing, the right to file a complaint with the Spanish Data Protection Agency and if the data has not been obtained from the interested party, any available information about its origin. The right to obtain a copy of the data cannot negatively affect the rights and freedoms of other interested parties. DOWNLOAD HERE THE FORM FOR EXERCISING THE RIGHT OF ACCESS.
RIGHT OF RECTIFICATION: The right of rectification will proceed to modify the data of the interested parties that were inaccurate or incomplete considering the purposes of the processing. The interested party must indicate in the request which data is referred to and the correction to be made, providing, when necessary, the documentation justifying the inaccuracy or incomplete nature of the data being processed. If the data has been communicated by the controller to other controllers, they must be notified of the rectification unless it is impossible or requires a disproportionate effort, providing the interested party with information about these recipients if requested. DOWNLOAD HERE THE FORM FOR EXERCISING THE RIGHT OF RECTIFICATION.
RIGHT OF DELETION: The right of deletion will eliminate the data of the interested parties when they express their refusal to the processing and there is no legal basis that prevents it, they are not necessary in relation to the purposes for which they were collected, they withdraw the consent given and there is no other legal basis that legitimizes the processing or it is unlawful. If the deletion derives from the exercise of the interested party’s right to object to the processing of their data for marketing purposes, the identifying data of the interested party may be retained to prevent future processing. If the data has been communicated by the controller to other controllers, they must be notified of the deletion unless it is impossible or requires a disproportionate effort, providing the interested party with information about these recipients if requested. DOWNLOAD HERE THE FORM FOR EXERCISING THE RIGHT OF DELETION.
RIGHT OF OPPOSITION: In the right of opposition, when the interested parties express their refusal to the processing of their personal data to the controller, the controller will stop processing them as long as there is no legal obligation that prevents it. When the processing is based on a mission of public interest or the legitimate interest of the controller, upon a request to exercise the right of opposition, the controller will stop processing the data unless there are compelling legitimate grounds that prevail over the interests, rights, and freedoms of the interested party or are necessary for the formulation, exercise, or defense of claims. If the interested party opposes the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. DOWNLOAD HERE THE FORM FOR EXERCISING THE RIGHT OF OPPOSITION.
RIGHT OF PORTABILITY: In the right of portability, if the processing is carried out by automated means and is based on consent or is carried out within the framework of a contract, the interested parties can request to receive a copy of their personal data in a structured, commonly used, and machine-readable format. They also have the right to request that they be transmitted directly to a new controller, whose identity must be communicated, when technically possible. DOWNLOAD HERE THE FORM FOR EXERCISING THE RIGHT OF PORTABILITY.
RIGHT TO LIMIT PROCESSING: In the right to limit processing, the interested parties can request the suspension of the processing of their data to challenge its accuracy while the controller carries out the necessary verifications or in the case that the processing is carried out based on the legitimate interest of the controller or in compliance with a mission of public interest, while it is verified whether these grounds prevail over the interests, rights, and freedoms of the interested party. The interested party can also request the retention of the data if they consider that the processing is unlawful and, instead of deletion, request the limitation of processing, or if the controller no longer needs them for the purposes for which they were collected, the interested party needs them for the formulation, exercise, or defense of claims. The fact that the processing of the interested party’s data is limited must be clearly stated in the controller’s systems. If the data has been communicated by the controller to other controllers, they must be notified of the limitation of processing unless it is impossible or requires a disproportionate effort, providing the interested party with information about these recipients if requested. DOWNLOAD HERE THE FORM FOR EXERCISING THE RIGHT TO LIMIT PROCESSING.

WHEN APPLICABLE, you can also exercise your right not to be subject to a decision based solely on automated processing. This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, that produces legal effects on you or significantly affects you in a similar way.

Regarding this profiling, it is any form of processing of your personal data that evaluates personal aspects, in particular analyzing or predicting aspects related to your work performance, economic situation, health, personal preferences or interests, reliability, or behavior.

However, as indicated in point 8 of this POLICY, our WEBSITE does not make automated decisions or create profiles.

14. Modifications and Updates

This PRIVACY POLICY may be modified/updated based on the legal requirements established or to adapt this POLICY to the instructions issued by the Spanish Data Protection Agency or changes on our WEBSITE.

For this reason, we advise our USERS to periodically visit our POLICY.