GDPR & privacy Policy

Legal basis for the processing of personal data:

Implementation of a contract and consent.

In case of disagreement, the user has the right to submit a complaint to the supervisory authority of their country.

All data requested through the website are mandatory and required to enter into a contract, as they are necessary for providing optimal service to the user. The user is obliged to provide the requested personal data. If not all data are provided, there is no guarantee that the information and services offered will be fully tailored to their needs.

In compliance with the current legislation, including Organic Law 15/1999, of December 13, on the Protection of Personal Data (LOPD), which aims to guarantee and protect, with regard to the processing of personal data, the freedoms and fundamental rights of individuals, particularly their honor and personal privacy, we inform you of the existence of a file containing personal data.

Additionally, under the General Data Protection Regulation (GDPR), European users acquire a series of new rights concerning the protection and privacy of their data, the most important of which are as follows:

Right to Access (Art. 15):

The user can request confirmation from the data controller on whether personal data concerning them is being processed, such as:
• The purpose of the processing
• Categories of personal data processed
• Recipients or categories of recipients to whom such data has been disclosed
• The existence of automated decision-making, including profiling, the logic applied, and its consequences.

Right to Rectification (Art. 16):

The data subject has the right to obtain the rectification of inaccurate personal data concerning them, considering the purposes of the processing. The data subject also has the right to complete any incomplete personal data.

Right to Erasure or the Right to be Forgotten (Art. 17):

The user has the right to obtain, without undue delay, the erasure of personal data concerning them from the data controller, if one of the following applies: when the data subject objects to the processing, when the personal data have been unlawfully processed, or when the data is no longer necessary for the purposes for which it was collected.

Right to Portability (Art. 20):

The user has the right to receive the personal data that concerns them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.

Right to Object (Art. 21):

The data subject has the right to object, at any time, to the processing of their personal data, including profiling, for reasons related to their particular situation.

Right to Restriction of Processing:

The data subject has the right to obtain from the controller the restriction of processing of their personal data. When processing is restricted, the data can only be stored, with the consent of the data subject, for the formulation, exercise, or defense of claims, for the protection of the rights of another natural or legal person, or for reasons of public interest. All data subjects who have obtained the restriction of processing will be informed by the controller before the restriction is lifted.

Right to Withdraw Consent at Any Time:

The right to object and the right to data portability are also established. The data subject has the right to obtain all personal data that concerns them and that they have provided to a data controller, provided that the processing is based on consent or is necessary for the execution of a contract and is carried out by automated means.

Purpose of Processing:

The personal data provided by the user are necessary for the following purposes:

- To process and send your order

- To issue the corresponding invoices

- To send transactional emails informing you of each stage in the processing of your order

- To send, via email, through the company "Opinions Verified," a quality survey about our services and products

- To send our newsletter (if requested by the user), keeping you informed via email about news, promotions, and tips that may be of interest to you

- To process orders, requests, or any type of inquiry made by the user through any of the contact forms available

- To conduct statistical studies

By registering at Mundo-surf.com, the user agrees to provide valid personal data, allowing Padang-Padang SL to fulfill the service offered and send tracking information for their order. At any time, the user may update or change their data in my personal data and my addresses within their customer account.

Data Communication:

Padang-Padang SL holds the personal data of its users, which are stored in a file owned by Padang-Padang SL, and complies with current data protection and e-commerce regulations. We also have a RAPIDSSL security certificate:

This ensures the protection of information sent from your computer to our server. It is encrypted with 256-bit strength, preventing security issues and protecting your data from falling into the wrong hands.

Your personal data will be transferred to:

- The transport company for order delivery

- Our tax advisor for tax processing

- Website developers and the company providing our server hosting

All of them have a formal agreement with us for access to this data, solely for the purposes described here. They will not share it with any third party for processing, except as required by law.

Data Retention Criteria:

The data will be kept for as long as there is a mutual interest in retaining the purpose of the processing. Once the data is no longer needed for such purposes, it will be deleted using appropriate security measures to ensure the pseudonymization of the data or its complete destruction.

Contact Information to Exercise Your Rights:

The controller of this file and its processing is Padang-Padang SL, with its registered address at Parque Tecnológico CITEC, Calle Manuel Trillo de Leyva, 27, 41120 Gelves, Spain.

Any registered user can, at any time, exercise the right to access, rectify, or cancel their personal data provided for shipping, and to object to its processing. You can do so by sending a written request, signed and accompanied by a photocopy of your ID card, to:

Padang-Padang SL

Parque Industrial GUADALQUIVIR

Calle Tecnologia, 22

41120 Gelves, Spain

or by email to the DPO (Data Protection Officer) Sébastien Rault: [email protected]