Data Protection Policy

ESTANTERÍAS SIMÓN S.L, owner of the website www. simonrack.com, informs the users of this website, hereinafter the «website», that ESTANTERÍAS SIMÓN S.L, is responsible for the processing carried out through this website, unless otherwise stated in the processing in question.

ESTANTERÍAS SIMÓN S.L respects the current legislation on the protection of personal data, the privacy of users and the secrecy and security of personal data, in accordance with the provisions of the applicable legislation on data protection, specifically, Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, adopting the necessary technical and organisational measures to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided, taking into account the state of technology, the nature of the data and the risks to which they are exposed.

Specifically, users of the portal are informed that their personal data may only be obtained for processing when they are adequate, relevant and not excessive in relation to the specific, explicit and legitimate scope and purposes for which they have been obtained.

When personal data is collected through the portal, the user will be informed beforehand, clearly and unequivocally, of the following points:

  • Existence of personal data processing.
  • the identity and contact details of the controller of the personal data collected,
  • the contact details of the Data Protection Officer, if appropriate;
  • the purposes of the processing for which the personal data are intended and the legal basis for the processing;
  • the recipients or categories of recipients of the personal data, where applicable.
  • where applicable, the controller's intention to transfer personal data to a third country;
  • the time limit or criteria for the retention of information;
  • the existence of the right to request from the data controller access to personal data relating to the data subject, and their rectification or erasure, or the limitation of their processing, the right to data portability, or to object to the processing. Likewise, the manner of exercising the aforementioned rights.
  • where the processing is based on the data subject's consent, the existence of the right to withdraw consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal; if the processing is not based on consent, their right to exercise the right to object to the processing.
  • the right to lodge a complaint with a supervisory authority;
  • the existence, if any, of automated decisions, including profiling and the exercise of rights associated with such processing.

In particular, where data are collected from children, the processing shall only be considered lawful if the consent was given or authorised by the holder of parental authority or guardianship over the child.

The user shall be solely responsible for the completion of forms with false, inaccurate, incomplete or outdated data.