At INKIELE SL, we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe we must be transparent about it.

Therefore, and in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (hereinafter, “GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and LAW 34/2002, of July 11, on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), INKIELE SL informs the user that, as the data controller, it will incorporate the personal data provided by users into an automated file.

Our commitment starts with explaining the following:

We collect your data to improve your user experience, addressing your interests and needs.

We are transparent about the data we obtain about you and the reasons why we do so.

Our intention is to offer you the best possible experience. Therefore, when we use your personal information, we will always comply with the regulations, and when necessary, we will request your consent.

We understand that your data belongs to you. Therefore, if you decide not to authorize us to process it, you can request that we stop processing it.

Our priority is to ensure your security and handle your data in accordance with European regulations.

If you want more information about the processing of your data, please check the sections of our privacy policy below:

Who is responsible for processing your personal data?

• Identity: INKIELE SL
• Registered office: Industrial Park “El Llano” Calle España nº2 13630 SOCUÉLLAMOS. Ciudad Real – Spain
• VAT nº: B13357702
• Email: contabilidad@kiele.es

INKIELE SL has designated a Data Protection Officer or an internal contact person within the organization. If you wish to make an inquiry about the processing of your personal data, you can contact them at contabilidad@kiele.es.

What personal data do we collect?

The personal data that the user may provide include:

• Name, address, and date of birth.
• Phone number and email address.
• Location.
• Information related to payments and refunds.
• IP address, date and time of access to our services, browser used, and data about the device’s operating system.
• Any other information or data that you choose to share with us.

In some cases, filling out the registration form is mandatory to access and enjoy certain services offered on the website; also, not providing the requested personal data or not accepting this data protection policy means that you cannot subscribe, register, or participate in any promotions requiring personal data.

Why and for what purpose do we process your data?

INKIELE SL processes the information provided by interested parties for the following purposes:

• Manage orders or contract any of our services, either online or in physical stores.
• Manage the sending of information requested by the user.
• Develop commercial actions and maintain and manage the relationship with the user, as well as manage the services offered through the website and information tasks, which may involve automated assessments, profile creation, and customer segmentation to personalize service according to their characteristics and needs, improving the online customer experience.
• Develop and manage contests, raffles, or other promotional activities.
• In some cases, it will be necessary to provide information to authorities or third-party companies for auditing purposes, as well as handle personal data from invoices, contracts, and documents to respond to customer complaints or public authorities.

We inform you that the personal data obtained as a result of your registration as a user will be included in the Register of Activities and Processing Operations (RAT), which will be updated periodically according to the GDPR.

What is the legal basis for processing your data?

The processing of your data may be based on the following legal grounds:

• Consent of the interested party for the contracting of services and products, contact forms, requests for information, or newsletter subscriptions.
• Legitimate interest for processing customer data in direct marketing actions and explicit consent for all matters related to automated assessments and profile creation.
• Compliance with legal obligations for fraud prevention, communication with public authorities, and third-party claims.

How long do we retain your data?

The processing of data for the described purposes will be maintained for the time necessary to fulfill the purpose of its collection (e.g., as long as the commercial relationship lasts), as well as to comply with legal obligations arising from the data processing.

To whom do we disclose your data?

In some cases, only when necessary, INKIELE SL will provide user data to third parties. However, data will never be sold to third parties. External service providers (such as payment providers or delivery companies) with whom INKIELE SL works may use the data to provide the corresponding services; however, they will not use this information for their own purposes or for transfer to third parties.

INKIELE SL strives to ensure the security of personal data when sent outside the company and ensures that third-party service providers respect confidentiality and have the appropriate measures in place to protect personal data. These third parties are obligated to ensure that the information is processed in compliance with data privacy regulations.

In some cases, the law may require the disclosure of personal data to public authorities or other parties, but only the strictly necessary information will be revealed to fulfill such legal obligations.

Personal data obtained may also be shared with other companies within the group.

Where is your data stored?

Generally, data is stored within the EU. Data sent to third parties outside the EU will be ensured to have adequate protection, either by adhering to Binding Corporate Rules (BCR) or the “Privacy Shield.”

What rights do you have and how can you exercise them?

You can send your communications and exercise your rights through a request to the following email: contabilidad@kiele.es.

According to the GDPR, you can request:

• Right of access: You can request information about the personal data we hold about you.
• Right of rectification: You can inform us of any changes to your personal data.
• Right of deletion and the right to be forgotten: You can request the deletion, after blocking, of personal data.
• Right to restrict processing: This means limiting the processing of your personal data.
• Right to object: You can withdraw consent for data processing, opposing further processing.
• Right to data portability: In some cases, you can request a copy of personal data in a structured, commonly used, and machine-readable format for transmission to another controller.
• Right not to be subject to automated individual decisions: You can request that no decisions based solely on automated processing, including profiling, be made that have legal effects or significantly affect you.

In some cases, the request may be denied if you ask for the deletion of data necessary to comply with legal obligations.

Also, if you have any complaints about the processing of your data, you can file a complaint with the data protection authority.

Who is responsible for the accuracy and truthfulness of the data provided?

The user is solely responsible for the accuracy and correctness of the data provided, releasing INKIELE SL from any liability in this regard. Users guarantee and are responsible for the accuracy, validity, and authenticity of the personal data provided and agree to keep it updated. The user agrees to provide complete and correct information in the registration or subscription form. INKIELE SL reserves the right to terminate the contracted services if the data provided by the user is false, incomplete, inaccurate, or outdated.

INKIELE SL is not responsible for the truthfulness of information that is not its own and where another source is indicated, and it does not assume any responsibility for potential harm caused by the use of such information.

INKIELE SL reserves the right to update, modify, or delete information on its websites, and even limit or prevent access to it. INKIELE SL is not liable for any damage or harm caused to the user due to errors, defects, or omissions in the information provided by INKIELE SL, provided that it comes from external sources.

The user also certifies that they are over 14 years old and have the legal capacity to give consent for the processing of their personal data.

How do we handle the data of minors?

In principle, our services are not specifically directed at minors. However, if any service is directed at children under fourteen years old, in accordance with Article 8 of the GDPR and Article 7 of the LO3/2018 of December 5 (LOPDGDD), INKIELE SL will require valid, free, unequivocal, specific, and informed consent from their legal guardians to process the personal data of minors. In such cases, the DNI or another form of identification of the person giving consent will be required.

For users over fourteen, data processing may proceed with the user’s consent, except in cases where the law requires the involvement of legal guardians.

What security measures do we apply to protect your personal data?

INKIELE SL has adopted the legally required levels of personal data protection security and seeks to install additional technical measures to prevent loss, misuse, alteration, unauthorized access, and theft of the personal data provided to INKIELE SL.

INKIELE SL is not responsible for any potential damage caused by interference, omissions, interruptions, computer viruses, phone failures, or disconnections in the electronic system’s operation, caused by reasons outside INKIELE SL; delays or blocks in using the electronic system due to deficiencies or overloads of phone lines, overloads in the Data Processing Center, the internet system, or other electronic systems, as well as damages caused by third parties through illegal intrusions outside INKIELE SL’s control. However, users should be aware that online security measures are not impregnable.

Links to other websites

On the website https://www.kiele.es/en/ there may be links to other websites. By clicking on one of these links and accessing an external website, the visit will be subject to that website’s privacy policy, with INKIELE SL being disconnected from any responsibility regarding its privacy policy.

How do we use cookies?

The INKIELE SL website uses cookies to optimize and personalize your navigation. Cookies are physical information files stored on the user’s device, and the information collected through cookies helps facilitate navigation and optimize the browsing experience. The data collected through cookies may be shared with their creators, but the information will not be associated with personal data or identifiable user data.

However, if the user does not want cookies to be installed on their hard drive, they can configure their browser to prevent the installation of these files. For more information, check our Cookie Policy at https://www.kiele.es/en/privacy-policy/.

Can the privacy policy be modified?

This privacy policy may be modified. We recommend that you periodically review the privacy policy.