PRIVACY POLICY

Through this notice, “Ocean Brotherhood SL” (hereinafter “OCEAN 52®”), informs the users  of the http://ocean52.com Website, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (General Data Protection Regulation), the LOPDGDD 3/2018 of December 5 and other applicable regulations,  of its personal data protection policy with the purpose that they decide expressly, freely and voluntarily, to provide “OCEAN 52®” with the personal data that are requested on the occasion of the request for information for the contracting of the different products and services offered in the field of food and beverage products.

Unless specifically stated otherwise, it is considered necessary to complete all the data required in the form or similar form in a truthful, accurate, complete and up-to-date manner. Otherwise, “OCEAN 52®” may, depending on the case, not proceed with the registration of the user, or deny the specific service requested. All data provided by the user/interested party will be processed lawfully in accordance with the characteristics detailed below.

Information regarding the processing of personal data

Identification of the person responsible: “Ocean Brotherhood SL”, with address at c/ Calvet 36, mezzanine 2ª 08021 Barcelona, with NIF number: B66764952, Email mariana@ocean52.com

Purpose of processing:

All the data provided will be processed for the following purposes:

• Respond to requests made by the interested party.
• Respond to orders related to products.
• Maintenance of the relationship that may be established.
• Management, administration, information, provision and improvement of the services that are decided to be contracted.
• Commercial communications related to our products, goods and services, with express consent.
• Improve our services and develop new products.
• Analyze website traffic to optimize the website and/or personalize the experience. The data is kept as long as the user does not revoke their consent by deleting the cookies and for the time established by law, with a minimum duration of 3 years. The legal basis for improving your experience when browsing the website is the consent given by the user when accepting cookies. The user may revoke his/her consent at any time.
• General business support purposes such as procurement, tax and financial management, risk management, and reporting for our legitimate interests or legal purposes.

The personal data provided will be kept as long as the commercial relationship is maintained, the interested party does not request its deletion or are necessary for the purposes of the processing. The destruction of the data will not proceed when there is a legal provision that extinguishes its storage. In this case, the data will be blocked, and will only be kept at the disposal of the Public Administrations, Judges and Courts, for the attention of any possible liabilities arising from the processing, during the statute of limitations.

At present, no automated decision-making, including profiling, is carried out on the basis of your personal data. In the event that this type of automated decision is to be made in the future, your prior consent will be collected.

Legitimacy of the processing:

Any processing of your personal data has been previously and expressly consented to by you. You are previously informed of all the points required by law so that you can give informed consent.

You may revoke this consent at any time as detailed later in this document.

Recipients, assignments and transfers of data:

They will only be shared when there is a certain legal obligation or to our service providers who comply with data protection regulations.

If it is necessary to use external service providers that require the transfer of personal data outside the European Union or in countries that have not been declared to have an adequate level of protection, they will provide the appropriate guarantees for the international transfer of data.

Rights of data subjects:

You may exercise the rights detailed below at any time by sending a letter to “OCEAN 52®”, with registered address at c/ Calvet 36, mezzanine 2ª 08008 Barcelona, or by e-mail to mariana@ocean52.com. The application must contain the name, surname(s) and documentation that proves the identity of the interested party or his/her legal representative, as well as a document accrediting the representation, the request in which the request is specified, address for the purposes of notifications, the date and signature of the applicant and documents accrediting the request made. If the application does not meet the specified requirements, it will be required to be corrected.

The rights of the interested parties are: access, rectification, limitation, portability, opposition and deletion; Its definition is as follows:

Right of access:

The data subject shall have the right to obtain confirmation from the controller as to whether or not personal data concerning him or her is being processed and, if so, the right of access to the personal data and to the following information:

a) The purposes of the processing

b) the categories of personal data processed

c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations

d) if possible, the intended term for which the personal data will be retained or, if this is not possible, the criteria used to determine this term

i) the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data relating to the data subject, or to object to such processing

f) the right to lodge a complaint with a supervisory authority

g) where the personal data has not been obtained from the data subject, any information available on the origin of the data subject

h) the existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4), and at least, in these cases, meaningful information on the logic applied, as well as the significance and expected consequences of such processing for the data subject.

When personal data is transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards under Article 46 relating to the transfer. The controller shall provide a copy of the personal data being processed. The controller may charge, for any other copy requested by the interested party, a reasonable fee based on administrative costs. When the interested party submits the request through electronic means, and unless he/she requests that it be provided in another way, the information will be provided in a commonly used electronic format.

Right to rectification:

The data subject shall have the right to obtain without undue delay from the controller the rectification of inaccurate personal data concerning him/her. Taking into account the purposes of the processing, the data subject has the right to have his/her personal data completed if it is incomplete, including by making use of an additional declaration.

Right to erasure:

The data subject shall have the right to obtain without undue delay from the controller the erasure of the personal data concerning him/her, and the latter shall be obliged to erase the personal data without undue delay in the following circumstances:

a) The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed

b) the data subject withdraws the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) and the processing is not based on another legal basis

c) the data subject objects to the processing pursuant to Article 21(1) and there are no other legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2)

d) the personal data has been processed unlawfully

i) the personal data must be erased in order to comply with a legal obligation laid down in Union or Member State law that applies to the controller

f) the personal data have been obtained in connection with the provision of information society services referred to in Article 8(1)

When the controller has made public the personal data for which the data subject has exercised his/her right to erasure, the controller must take, taking into account the available technology and the cost of its application, reasonable measures to communicate to third parties who are processing this information of the request for deletion of the data,  as well as any link to this data or to any copy or replica thereof.

This right will be limited by other rights such as the right to freedom of expression and information, by compliance with a legal obligation, or when there are reasons of public interest.

Right to restriction of processing:

The data subject shall have the right to obtain from the data controller the restriction of the processing of the data when any of the following conditions are met:

a) The data subject contests the accuracy of the personal data, for a period that allows the controller to verify the accuracy of the data

b) the processing is unlawful and the data subject opposes the erasure of the personal data and instead requests the restriction of its use

c) The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims

d) the data subject has objected to the processing pursuant to Article 21(1), while it is being verified whether the legitimate grounds of the controller prevail over those of the data subject

Where the processing of personal data has been restricted pursuant to paragraph 1, such data may only be processed, with the exception of storage, with the consent of the data subject or for the establishment, exercise or defence of legal claims, or for the purpose of protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

Any data subject who has obtained the restriction of processing pursuant to paragraph 1 shall be informed by the controller prior to the lifting of this restriction.

Right to object:

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the fact that personal data concerning him/her is subject to processing on the basis of Article 6(1)(i) or (f), including profiling on the basis of these provisions.

The controller will cease to process the personal data, unless it proves compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

Where the processing of personal data is for the purpose of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning him/her, including profiling insofar as it is related to such marketing.

When the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Where personal data is processed for scientific or historical research purposes or statistical purposes in accordance with Article 89(1), the data subject shall have the right, for reasons relating to his or her particular situation, to object to the processing of personal data concerning him/her, unless this is necessary for the performance of a task carried out for reasons of public interest.

Right to data portability:

The data subject shall have the right to receive the personal data concerning him/her, which he/she has provided to a data controller, in a structured, commonly used and machine-readable format, and to transmit it to another controller without hindrance from the controller to whom he/she has provided it, when:

a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b), and

b) The processing is carried out by automated means.

2. When exercising his/her right to data portability in accordance with paragraph 1, the data subject shall have the right to have the personal data transmitted directly from controller to controller where technically feasible.

The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. Such a right shall not apply to processing that is necessary for the performance of a task carried out in or in the exercise of official authority vested in the controller.

The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Articles 16, 17(1) and 18 to each of the recipients to whom the personal data have been disclosed, unless this is impossible or requires a disproportionate effort. The controller will inform the interested party about these recipients, if the latter so requests.

Revocation of consent: The interested party who at the time has given consent to process his/her personal data, may also withdraw it with equal ease. The withdrawal of consent does not entail the illegality of the processing carried out previously.

The interested party shall have the right to lodge a complaint with the competent Supervisory Authority.

When personal data is subsequently to be processed for different purposes, the controller shall inform the data subject thereof.

Security measures: The Data Controller declares that it has adopted the necessary technical and organisational measures to guarantee the security of the data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.  whether they come from human action or from the physical or natural environment.

The Website http://ocean52.com contains links to other websites that may be of interest to users. “OCEAN 52®” does not assume any responsibility for these links, and no guarantee can be given in compliance with appropriate privacy policies, so that the user can access the content of the aforementioned websites under the conditions of use established therein and under his/her sole responsibility.

If you have any questions, questions or recommendations about our Privacy Policy, you can contact us by email at the following address: mariana@ocean52.com

“OCEAN 52®”

All Rights Reserved