Information in compliance with personal data protection regulations
In Europe and Spain there are data protection regulations designed to protect your personal information, and our organisation is required to comply with them.
That is why it is very important to us that you fully understand what we are going to do with the personal data we ask you for.
We will therefore be transparent and give you control over your data, using plain language and clear options that allow you to decide what we do with your personal information.
If, after reading this information, you still have any questions, please do not hesitate to ask us.
Thank you very much for your cooperation.
Who are we?
- Company name: ORIGEN WORLD WIDE, S.L.
- Tax ID (CIF / NIF): B86064581
- Main activity: Communication and marketing
- Address: Avenida de Brasil 30 – Escalera 2, 1ª Planta, 28020 – Madrid (Madrid), Spain
- Contact email address: info@origenww.com
- Website: origenww.com
We are at your disposal, please do not hesitate to contact us.
Contact our Data Protection Officer
Did you know that our organisation has a Data Protection Officer to whom you can send any complaints, questions and suggestions about the use of your personal information?
Our Data Protection Officer is AUDIDAT 3.0, S.L. and these are their contact details:
- Contact email address: ftrujillo@audidat.com
What will we use your data for?
As a general rule, your personal data will be used so that we can interact with you and provide our services.
They may also be used for other activities, such as sending you advertising or promoting our activities.
Why do we need to use your data?
Your personal data are necessary for us to interact with you and provide our services. To this end, we will provide you with a series of checkboxes that allow you to decide clearly and simply on the use of your personal information.
Who will know the information we ask you for?
As a general rule, only duly authorised staff of our organisation will have access to the information we ask you for.
Likewise, entities that need access to your personal information in order for us to provide our services may also know it. For example, our bank will know your data if payment for our services is made by card or bank transfer.
Public or private entities to which we are legally required to provide your personal data will also have access to it. For example, Spanish tax law requires certain information on financial transactions above a given amount to be provided to the Tax Agency.
If, beyond the cases mentioned above, we need to disclose your personal information to other entities, we will ask for your permission beforehand through clear options that allow you to decide on the matter.
How will we protect your data?
We will protect your data with effective security measures according to the risks involved in the use of your information.
To this end, our organisation has approved a Data Protection Policy, and annual checks and audits are carried out to verify that your personal data are secure at all times.
Will we send your data to other countries?
Some countries in the world are safe for your data and others are less so. The European Union, for example, is a safe environment for your data. Our policy is not to send your personal information to any country that is not safe from a data protection point of view.
If, in order to provide the service, it is essential to send your data to a country that is not as safe as Spain, we will always ask for your permission beforehand and apply effective security measures to reduce the risks of sending your personal information to another country.
How long will we keep your data?
We will keep your data for the duration of our relationship and for as long as the law requires. Once the applicable legal periods have ended, we will delete them securely and in an environmentally friendly way.
What are your data protection rights?
You may contact us at any time to find out what information we hold about you, rectify it if it is incorrect, and delete it once our relationship has ended, where legally possible.
You also have the right to request the transfer of your information to another entity. This right is called “portability” and may be useful in certain situations.
To exercise any of these rights, you must submit a written request to our address so that we can identify you.
At our offices we have specific forms for exercising these rights and we offer you our help in completing them.
To find out more about your data protection rights, you can visit the website of the Spanish Data Protection Agency (AEPD) (www.aepd.es).
Can you withdraw your consent if you change your mind later?
You may withdraw your consent at any time if you change your mind about the use of your data.
For example, if you were once interested in receiving advertising about our products or services but no longer wish to receive it, you can let us know using the objection-to-processing form available at our offices.
If you believe your rights have not been respected, where can you file a complaint?
If you believe that our organisation has not respected your rights, you can file a complaint with the Spanish Data Protection Agency (AEPD) through any of the following channels:
- Electronic office: sede.aepd.gob.es / www.aepd.es
- Postal address:
Agencia Española de Protección de Datos
C/ Jorge Juan, 6
28001 Madrid, Spain - Telephone: 901 100 099 / 91 266 35 17
Filing a complaint with the Spanish Data Protection Agency is free of charge and does not require the assistance of a lawyer or solicitor.
Will we create profiles about you?
Our policy is not to create profiles about the users of our services.
However, there may be situations in which, for service, commercial or other purposes, we need to create information profiles about you. One example could be using your purchase or service history to offer you products or services tailored to your tastes or needs.
In that case, we will apply effective security measures that protect your information at all times from unauthorised persons seeking to use it for their own benefit.
Will we use your data for other purposes?
Our policy is not to use your data for purposes other than those we have explained to you. If, however, we need to use your data for different activities, we will always ask for your permission beforehand through clear options that allow you to decide on the matter.
Our commitment to personal data protection: “Informed people and protected data”
The Management / Governing Body of ORIGEN WORLD WIDE, S.L. (hereinafter, the data controller) assumes maximum responsibility and commitment for the establishment, implementation and maintenance of this Data Protection Policy, ensuring the continuous improvement of the data controller with the aim of achieving excellence in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119/1, 04-05-2016), and with Spanish personal data protection legislation (Organic Law 3/2018, specific sectoral legislation and its implementing regulations).
The Data Protection Policy of ORIGEN WORLD WIDE, S.L. is based on the principle of accountability, according to which the data controller is responsible for compliance with the regulatory and case-law framework governing this Policy, and is able to demonstrate it to the competent supervisory authorities.
Accordingly, the data controller will be governed by the following principles, which must serve all its staff as a guide and frame of reference in the processing of personal data:
- Data protection by design: when determining the means of processing and at the time of the processing itself, the data controller will implement appropriate technical and organisational measures, such as pseudonymisation, designed to implement data protection principles, such as data minimisation, effectively and to integrate the necessary safeguards into the processing.
- Data protection by default: the data controller will implement appropriate technical and organisational measures to ensure that, by default, only personal data necessary for each specific purpose of the processing are processed.
- Data protection throughout the information life cycle: measures ensuring the protection of personal data will apply throughout the entire life cycle of the information.
- Lawfulness, fairness and transparency: personal data will be processed lawfully, fairly and in a transparent manner in relation to the data subject.
- Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes.
- Data minimisation: personal data will be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
- Accuracy: personal data will be accurate and, where necessary, kept up to date; every reasonable step will be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
- Storage limitation: personal data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
- Integrity and confidentiality: personal data will be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
- Information and training: one of the keys to ensuring the protection of personal data is the training and information provided to the staff involved in processing it. Throughout the information life cycle, all staff with access to the data will be properly trained and informed about their obligations regarding compliance with data protection regulations.
The Data Protection Policy of ORIGEN WORLD WIDE, S.L. is communicated to all staff of the data controller and made available to all interested parties.
Consequently, this Data Protection Policy involves all staff of the data controller, who must know and embrace it as their own, each member being responsible for applying it and for checking the data protection rules applicable to their activity, as well as identifying and suggesting any opportunities for improvement they consider appropriate with the aim of achieving excellence in its compliance.
This Policy will be reviewed by the Management / Governing Body of ORIGEN WORLD WIDE, S.L. as often as deemed necessary to ensure it complies at all times with current personal data protection legislation.