WEBSITE PRIVACY POLICY www.invitacionesdepapel.com/

This privacy policy describes the ways in which we collect information, for what purposes we use it and how we manage it. Your privacy is important to us and we attach great importance to it, which is why we wish to express the maximum commitment to the protection of the personal data of our Users. We have implemented the necessary technical and organizational measures indicated by the data protection regulations to ensure the confidentiality of your data, in compliance with the General Data Protection Regulation approved by the European Union (RGPD) and Organic Law 3/2018 of 5 December (LOPDGDD). However, we cannot assume any responsibility for damages resulting from alterations that third parties may cause to the User's computer systems, electronic documents or files.

WHO IS RESPONSIBLE FOR THE TREATMENT?

Company Name: MOSSUN CREATION, SL (hereinafter, the “Company” or the “Responsible”).
CIF: B02592202
Address: AVDA. VIRGEN DE GRACIA, 57- 2ºA- 02660 – CAUDETE- ALBACETE
Telephone: 634585254
Email for communications regarding data protection: consents@invitacionesdepapel.com

Consent to the use of cookies.

For our website to function correctly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document it, we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands. Website: https://cookiefirst.com called CookieFirst.

When you access our website, a connection is established with the CookieFirst server to give us the possibility of obtaining your valid consent for the use of certain cookies. CookieFirst then stores a cookie in your browser so that it can activate only those cookies to which you have given your consent and to document this appropriately. The processed data is stored until the predefined storage period expires or until you request deletion of the data. Notwithstanding the above, certain mandatory legal storage periods may apply.

CookieFirst is used to obtain legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have entered into a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that the data of visitors to our website is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

• Your consent status or withdrawal thereof
• Your anonymous IP address
• Information about your browser
• Information about your device
• The date and time you visited our website
• The url of the web page where you saved or updated your consent preferences
• The approximate location of the user who saved their consent preferences
• A universal unique identifier (UUID) of the website visitor who clicked on the cookie banner

WHAT ARE THE PURPOSES OF THE TREATMENT? WHAT IS THE LEGITIMATION OF THE TREATMENT?

The personal data of the interested parties will be processed by MOSSUN CREATION, SL in accordance with the following purposes, depending on the moment in which said information is provided:

1. In order to respond to your queries or send you information related to your request, it may be necessary for us to obtain information from you, in which case we will ask you to expressly provide it to us voluntarily. You should only send us the data of which you are the owner, or of third parties, if you are their legal representative or have obtained their unequivocal consent. The legal basis of the treatment corresponds to art. 6.1 a) RGPD (consent of the interested party).
2. For the processing of client registrations, updating of data and management of the commercial relationship that may exist. The data will be collected through the corresponding registration form, initially, and through commercial transactions, subsequently. Specifically, the following actions are included:

• Creation of the account as a client through the website, using the different links enabled by MOSSUN CREATION, SL in this regard. To do this, the legal basis contemplated in art. 6.1 a) RPGD (consent of the interested party).
• Administration and management of the existing contractual relationship with the client, in accordance with art. 6.1 b) GDPR.
• Analysis of clients, in order to be able to carry out market studies and opinion surveys, justified by legitimate interest, in accordance with article 6.1 f) RGPD.
• Whenever you wish, we can periodically send you commercial information about our products and/or services, including newsletters. The legitimate basis of this treatment being art. 6.1 a) RGPD (consent of the interested party).
• Comply with our contractual obligations in the event that you have decided to purchase any of our products and/or services, as well as carry out the administrative, fiscal and accounting management derived from the work we have carried out. This purpose is based on article 6.1 c) of the GDPR: compliance with a legal obligation applicable to the company.

3. Manage subscriptions to receive commercial information about MOSSUN CREATION, SL, for which the consent of the interested party is obtained in our newsletter, through the mechanisms enabled in this regard on the website. The treatment is based on art. 6.1 a) RGPD (consent of the interested party), which can be withdrawn at any time without affecting the legality of the processing prior to its withdrawal.

WHAT ARE THE DATA CONSERVATION CRITERIA?

The data will be kept for the time strictly essential to fulfill the purpose for which it was collected. In the event that you have decided to purchase our products, they will be kept for the time necessary to comply with legal obligations and during the prescription period of the corresponding legal responsibilities that may arise.

Likewise, if you have decided to register on our website, they will be kept as long as you do not revoke your consent.

Conservation period for your data to send commercial communications:

• If you have expressly authorized us, we will retain your data until you decide to withdraw your consent.
• If you have maintained a contractual relationship with us and we send you commercial communications, we will retain your data until you decide to object to such processing.

HOW SHOULD I UPDATE MY PERSONAL DATA?

The User guarantees that the personal data provided to us through this website are true, correct, current and complete. The User must notify us of any modification or update thereof, by sending a communication to the postal or electronic addresses indicated in the section Where can you exercise your rights?

WHO ARE THE RECIPIENTS OF THE INFORMATION?

We will not transfer information to third parties except under legal obligation and those necessary to provide the services, or in the event that you give your express and unequivocal consent.

The data required by the Courts, Tribunals and Public Administrations may also be transferred when required by law.

Likewise, you are informed that MOSSUN CREATION, SL has service providers to whom it entrusts the processing of personal data. To do this, in compliance with the obligations regarding the protection of personal data, the corresponding contract is signed that subjects the person in charge to the information protection obligations.

For more information about the recipients of your data, you can contact by email at contacto@invitacionesdepapel.com , indicating the use of whose recipients information is requested.

WHAT RIGHTS DO INTERESTED PARTIES HAVE?

Anyone has the right to obtain confirmation as to whether we are processing personal data that concerns them or not. Interested persons have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. .

In certain circumstances, interested parties may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims. In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data. In this case we will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. They will also have the right to withdraw consent to the processing of their data at any time when the legitimate basis for such consent is obtaining the interested party's own consent.

They may file a claim with the competent Data Protection Control Authority, such as the Spanish Data Protection Agency, especially when they have not obtained satisfaction in the exercise of their rights or believe that the data processing is not appropriate with the current legality.

WHERE CAN YOU EXERCISE THE RIGHTS?

Through written communication addressed to MOSSUN CREATION, SL, AVDA. VIRGEN DE GRACIA, 57- 2ºA, CAUDETE, 02660 (ALBACETE) or by sending an email to support@invitacionesdepapel.com, identifying yourself and specifying your request.

In commercial communications, including newsletters, you may revoke the consent granted by sending an email to our address support@invitacionesdepapel.com indicating in the message the phrase “Unsubscribe from the Communications Service”, or by clicking on the unsubscribe link. if this is indicated in the email message. MOSSUN CREATION, SL. may use cookies during the provision of website services. And you can read our cookie policy.

SECURITY MEASURES

That in accordance with the provisions of current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GENERAL DATA PROTECTION REGULATION (RGPD) for the processing of personal data under his responsibility, and manifestly with the principles described in article 5, by which they are treated in a lawful, fair and transparent manner in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. The CONTROLLER guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the RGPD in order to protect the rights and freedoms of Users and has communicated the appropriate information to them so that they can exercise them.

ACCEPTANCE AND CONSENT

The user states that they have been informed about our data protection policy and consent to their processing for the purposes expressed above. Please note that some of the services provided on the Website may have particular conditions, in which case users will be duly informed.