Privacy Policy
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, dated April 27, 2016, MOHEM (hereinafter referred to as “the Data Controller”) with Tax ID No. 13413677P informs the User that their personal data will be processed for the purpose of providing the requested services and sending information about our company that may be of interest to them.
Data Controller
The company responsible for processing your data under this Privacy Policy is:
MOHEM
- Tax ID (NIF): 13413677P
- Address: EMILI POLIT, No. 2, 08328, ALELLA, BARCELONA
- Email: info@mohem.es
- Website: www.mohem.es
- Phone: +34 622933414
Legal Basis for Processing
The Data Controller will process the user's personal data based on the express consent granted after reading this Privacy Policy, in accordance with Article 6.1(a) of Regulation (EU) 2016/679 on the protection of personal data.
Submission and Registration of Personal Data
The submission of personal data is mandatory to contact and receive information about the services provided by the Data Controller. Similarly, failure to provide the requested personal data or to accept this data protection policy makes it impossible to subscribe, register, or receive information about these services.
When personal data is obtained from the individual through electronic communication networks, within the framework of information society services, or in other scenarios explicitly established by law or when authorized by the Spanish Data Protection Agency, the Data Controller may comply with the duty to inform the individual as per Article 13 of Regulation (EU) 2016/679 by providing at least the following basic information:
a) The identity of the Data Controller and their representative, if applicable.
b) The purpose of the processing.
c) How the individual can exercise the rights established in Articles 15 to 22 of Regulation (EU) 2016/679.
However, the Data Controller and processors, or their representatives, must maintain a record of processing activities as required by Article 30 of Regulation (EU) 2016/679 unless the company or organization employs fewer than 250 people, with the exception that the processing may pose a risk to the rights and freedoms of the individuals, is not occasional, or includes special categories of personal data indicated in Article 9(1) or personal data related to criminal convictions and offenses as referred to in Article 10 of Regulation (EU) 2016/679.
Finally, Article 5.1(f) of Regulation (EU) 2016/679 establishes the need to implement appropriate security safeguards against unauthorized or unlawful processing, loss, destruction, or accidental damage to personal data. This includes the implementation of technical and organizational measures to ensure the integrity and confidentiality of personal data, along with the possibility (Article 5.2) of demonstrating that these measures have been implemented (proactive responsibility).
Sharing of Personal Data and International Transfers
The Data Controller will not transfer personal data to third parties. However, if such data is transferred to any third party, prior information and express consent from the affected individual will be sought, in accordance with Article 4.11 of Regulation (EU) 2016/679 of April 27, 2016.
No international transfers of data to third countries are planned.
Accuracy and Veracity of the Data Provided
The User submitting information to the Data Controller is solely responsible for the accuracy and correctness of the data provided, exonerating the Data Controller from any liability in this regard.
Users guarantee and are responsible for the accuracy, validity, and authenticity of the personal data provided and commit to keeping it duly updated. The User agrees to provide complete and correct information in the registration or subscription form.
The Data Controller is not responsible for the accuracy of information not produced by them and which indicates another source. Therefore, they also do not assume responsibility for hypothetical damages that may result from the use of this information. The Data Controller is exonerated from responsibility for any damage or harm the User may suffer as a result of errors, defects, or omissions in the information provided by the Data Controller, provided it comes from external sources.
Data Retention
In any case, the retention period will be necessary and must be maintained at least as follows:
- 4 years: Law on Social Order Infringements and Penalties (obligations regarding affiliation, registration, cancellation, contributions, salary payments, etc.); Arts. 66 and onwards of the General Tax Law (accounting books, etc.).
- 5 years: Art. 1964 Civil Code (personal actions without a special deadline).
- 6 years: Art. 30 Commercial Code (accounting books, invoices, etc.).
- 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
Exercise of Rights: Access, Rectification, Erasure, Restriction, Portability, and Objection
You may address your communications and exercise your rights of access, rectification, erasure, restriction, portability, and objection by sending postal mail to the Data Controller at EMILI POLIT, No. 2, 08328, ALELLA, BARCELONA, or by email to info@mohem.es, along with valid proof under the law, such as a photocopy of your ID, indicating in the subject line "DATA PROTECTION."
Additionally, you can contact the competent Data Protection Authority for additional information or to file a complaint.
Acceptance and Consent
The User declares that they have been informed of the conditions regarding personal data protection, accepting and consenting to their processing by the Data Controller, in the manner and for the purposes indicated in this Personal Data Protection Policy.
Changes to this Privacy Policy
The Data Controller reserves the right to modify this policy to adapt it to legislative or jurisprudential updates, as well as to industry practices. In such cases, the Data Controller will announce the changes on this page with reasonable notice before implementation.
SOCIAL MEDIA PRIVACY POLICY
In compliance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI-CE), MOHEM (hereinafter referred to as "the Data Controller") informs users that a profile has been created on the social network Instagram with the primary purpose of advertising its products and services.
MOHEM's Data:
- Tax ID (NIF): 13413677P
- Address: EMILI POLIT, No. 2, 08328, ALELLA, BARCELONA
- Phone: +34 622933414
- Email: info@mohem.es
- Website: www.mohem.es
The user has a profile on the same social network and has decided to join the page created by the Data Controller, thereby showing interest in the information advertised on the network. By joining our page, the user provides their consent for the processing of any personal data published on their profile.
The user can access the privacy policies of the social network at any time, as well as configure their profile to guarantee their privacy.
The Data Controller has access to and processes public information from the user's profile, specifically their contact name. These data are only used within the social network. They are not incorporated into any file.
Regarding the Rights of Access, Rectification, Erasure, Restriction, Portability, and Objection:
In accordance with Regulation (EU) 2016/679, the user has the following rights, which may be exercised before the Data Controller. Keep the following clarifications in mind:
- Access: Determined by the functionality of the social network and the ability to access information on user profiles.
- Rectification: Can only be fulfilled for information under the Data Controller's control, such as deleting comments published on their page. This right is typically exercised directly with the social network.
- Erasure and/or Objection: As with the previous point, this can only be fulfilled for information under the Data Controller's control, such as unfollowing the profile.
- Portability: It is possible to transmit the data from one controller to another. Therefore, the user has the right for their personal data to be directly transmitted when technically feasible.
- Restriction: A precautionary measure that limits the processing of personal data to storage.
The scenarios in which the user has the right to obtain the restriction of their data processing are outlined by law and include:
- When the user disputes the accuracy of their personal data, for a period that allows the Data Controller to verify its accuracy.
- When the processing is unlawful, and the user objects to the erasure of their personal data and requests instead that their use be restricted.
- When the Data Controller no longer needs the personal data for processing purposes, but the user needs it for the formulation, exercise, or defense of claims.
- When the user has objected to processing, pending verification of whether the legitimate reasons of the Data Controller override those of the user.
The Data Controller Will Undertake the Following Actions:
- Access the public information on the user's profile.
- Publish any information already shared on the Data Controller's page on the user's profile.
- Send personal and individual messages through the social network's channels.
- Publish updates to the page that will appear on the user's profile.
The user can always control their connections, remove content that is no longer of interest, and restrict with whom they share their connections. To do this, the user must adjust their privacy settings.
Publications
Once the user has joined the Data Controller's page, they may post comments, links, images, or photographs, or any other type of multimedia content supported by the social network. The user, in all cases, must own the rights to such content, possess intellectual or copyright ownership, or have obtained consent from affected third parties.
It is expressly prohibited to post content on the page—be it text, graphics, photographs, videos, etc.—that violates or could violate morality, ethics, good taste, or decency and/or infringes, violates, or breaches intellectual or industrial property rights, image rights, or the law.
In such cases, the Data Controller reserves the right to immediately remove the content and may request the permanent blocking of the user.
The Data Controller will not be responsible for content freely posted by a user.
The user should be aware that their posts will be visible to other users, making them solely responsible for their privacy.
Images that may be posted on the page will not be stored in any file by the Data Controller, but they will remain on the social network.
Contests and Promotions
The Data Controller reserves the right to hold contests and promotions in which users following their page may participate. The terms and conditions for each of these, when using the social network's platform, will be published on it. These promotions will always comply with the LSSI-CE and any other applicable regulations.
The social network does not sponsor, endorse, or administer any of our promotions in any way, nor is it associated with any of them.
Advertising
The Data Controller will use the social network to advertise its products and services. If contact data are processed for direct marketing purposes, it will always comply with the legal requirements of Regulation (EU) 2016/679 and the LSSI-CE.
Recommending the Data Controller's page to other users so they can also enjoy promotions or stay informed about activities will not be considered advertising.
Below are links to the privacy policies of the social networks:
- Instagram: http://instagram.com/about/legal/privacy/