Data protection policy
In accordance with the Regulation (EU) 2016/679 of the Parliament and the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and with the Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights, the Management of this VALESKA HASSE informs clients, users and the general public of the following aspects:
For any question in this matter, the customer can contact the Data Protection Officer with a postal address in the PLAZA DOCTOR LANDETE, Nº 1 PTA.35, 46006- VALENCIA.
You can also contact the Data Protection Officer by e-mail at the following address: firstname.lastname@example.org
Who is responsible for processing your data?
A) If you are a user of VALESKA HASSE, the person responsible for processing your data is:
|VALESKA HASSE CIF X2213368D PLAZA DOCTOR LANDETE, Nº 1 PTA.35, 46006- VALENCIA.||PLAZA DOCTOR LANDETE, Nº 1 PTA.35, 46006- VALENCIA.|
B) In case we have your data because you have requested information about any of the services and/or products offered through the web pages of VALESKA HASSE, the responsible for the processing of your data is VALESKA HASSE, with address in PLAZA DOCTOR LANDETE, Nº 1 PTA.35, 46006- VALENCIA.
What personal data do we process and where do they come from?
The following categories of personal data can be processed during your relationship with us:
- Identification and contact data of clients (including signature, image,)
- Personal characteristics, social circumstances
- Transactional data (payments, receipts, transfers, debits)
The data come from the interested party himself.
For what purpose do we process your personal data?
Personal data may be processed by the persons responsible for processing for the following purposes
1.- Provision of the service: your personal data are processed in order to provide you with the required service, for example:
- Attend any communication with VALESKA HASSE
- Manage any incident or complaint filed by the client
- To carry out surveys in order to know your opinion about the attention received and that will be used only to improve and develop our services
2.- Attention to requests for information, complaints, suggestions, claims, exercise of data protection rights, etc.: In these cases your data will be processed for the purpose of managing and processing the request, by any means, including telephone and/or electronic communications.
3.- Compliance with legal obligations: it may be necessary to process personal data in order to comply with the corresponding legal requirements. Specifically, to comply with data protection, tax, labor, etc., legislation.
4.- Formalization and execution of the contract: the patient’s personal data are processed for the purpose of managing the contractual relationship with the client.
5.- Sending of commercial communications by any means in case of additional consent: if you explicitly consent, your data may be transferred for the purpose of informing you by any means for promotional and advertising purposes about restaurants, services, products or events related to VALESKA HASSE (in no case will your data be used to send you advertising content outside VALESKA HASSE).
The data collected will be treated for the specified purposes and in no case in a way incompatible with those purposes.
In any case, we treat your data to always serve you with the same level of quality, regardless of the channel you use to communicate with us (website, mobile applications either in person, by phone or telematics).
What is the legitimacy for the processing of your data?
|Purpose||Base for Treatment|
|Service provision||Processing necessary for the performance of a service to which the data subject is a party; processing based on the consent of the data subject.|
|Attention of requests||Processing based on the consent of the data subject and/or the legitimate interest of the data controller|
|Fulfilment of legal obligations||Treatment necessary for compliance with a legal obligation applicable to the data controller|
|Contract formalization and execution||Treatment necessary for the execution of a contract to which the interested party is a party|
|Sending commercial communications||Treatment based on the consent of the interested party|
How long will we keep your data?
In general, your data will only be kept for the time strictly necessary for the purpose for which they were collected.
The personal data provided, as well as those derived from the commercial relationship will be kept for the appropriate time in each case, and at least five years from the date of service, unless the regional and/or specific regulations establish a minimum retention period greater than that indicated, in which case the provisions of the applicable regulations will be taken into account.
Once the above-mentioned minimum period has passed, and the commercial and contractual relationship has ended, the person responsible will keep his or her data duly blocked and pseudo-anonymised, for the duration of the periods corresponding to the legal prescription.
The personal data provided for the purpose of managing any request for information, complaint, suggestion, claim, exercise of data protection rights, etc., shall be kept for the time necessary to process the request, and in any case for the time legally established, as well as for the period necessary for the formulation, exercise or defence of claims.
The data processed for the fulfilment of legal obligations will be kept for the time established by the applicable legislation.
The data collected for the formalization and execution of the contract shall be kept for the duration of the contractual relationship and for the period necessary for the formulation, exercise or defense of claims, at least five years.
The data processed for the sending of commercial communications will be kept until the interested party revokes the consent and/or exercises his/her rights of opposition and/or suppression.
To which recipients will your data be communicated?
In order to guarantee an adequate provision of the service, it is necessary that certain service providers and/or entities of the group that process data on behalf of the person responsible and as those in charge of the processing, process their personal data. These entities may be, for example, auditing, physical security, archiving, storage or digitalization of information, destruction of documentation, legal advisory services, computer services, etc.
Your personal data will not be disclosed to third parties unless you are legally obliged to do so, have a vital interest or have given your consent.
All information provided to us will be treated confidentially and in strict compliance with the necessary security obligations to prevent access by unauthorized third parties.
What are your rights when you give us your data?
You may exercise your rights of access; rectification of inaccurate data; request for deletion, when, among other reasons, the data are no longer necessary for the purposes for which they were collected; in certain circumstances you may also request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims; finally, and for reasons related to your particular situation, you may also exercise the right to oppose and the portability. Likewise, you may revoke, at any time, the consent given for the processing of your data.
The exercise of the rights as well as the revocation of the consent for the treatment of their data are free, except in the cases of art. 12.5 of Regulation (EU) 679/2016.
If you are a customer of VALESKA HASSE, you can exercise your rights in person before the customer service, by mail addressed to “Customer Service” of your VALESKA HASSE, with the reference “data protection rights”, providing a photocopy of your ID card or equivalent document and indicating the right you want to exercise.
We also inform you of the possibility of lodging a complaint with the competent supervisory authority, in accordance with the procedure applicable to the specific case.