PRIVACY POLICY

Elvira Fotógrafa's Privacy Policy

Your information is protected in accordance with our privacy policy and the following terms of service:

Data Protection

ELVIRA PHOTOGRAPHER has implemented the measures and levels of security for the protection of personal data required by Regulation (EU) 679/2016. Personal data collected through this website is subject to automated processing and is incorporated into a file owned by the company that owns the website, which is also responsible for the mentioned file.

To ensure the privacy and protection of the personal data of our clients and users, the GDPR grants individuals 8 fundamental rights. ELVIRA PHOTOGRAPHER is committed to providing all individuals with proper attention and a timely response in the event they exercise one or more of their rights. They can send an email to the following address: elvifoto@gmail.com

  1. Right to Information: Any individual can know at any time what data is being handled/stored about them, the reasons or purposes for its collection, as well as its possible transfer or data transfer to third parties.

  2. Right of Access: The possibility of being provided with a copy of all the data we handle or store about them.

  3. Right of Rectification: In case they detect that their data is not up-to-date or incorrect, they can request that the necessary and appropriate changes be made to correct it.

  4. Right to Erasure/Cancellation or “Right to be Forgotten”: At any time, they can request the cancellation/deletion of all data we process about them, removing all their personal information from our databases. Likewise, if deletion is not possible for legal reasons (e.g., retention of invoices for legal periods), the data will be blocked, and only essential data will be deleted. In any case, the individual will be duly informed in response to their request of any of the situations we encounter.

  5. Right to Object: They can object to one or more data processing activities at any time and without any justification (e.g., cancel the sending of informative emails).

  6. Right to Withdraw Consent: Similar to the previous right, they can withdraw the consent previously given for us to process their data for a specific purpose. This does not, a priori, imply a limitation on the use of products or services. In the case of sending commercial communications, the user or client can revoke consent either through the email elvifoto@gmail.com or through the link included in each communication for this purpose.

  7. Right to Data Portability: They can request that we send them a copy of the personal data that concerns them in a commonly used and machine-readable format, or we can transfer their personal data to a third party.

  8. Right Not to be Subject to Automated Individual Decisions (including profiling): ELVIRA PHOTOGRAPHER does not make automated individual decisions with the data obtained from you on our websites. Therefore, no decision affecting you or your rights will be made without the intervention of our employees to provide a service with the express acceptance of all conditions.

Data Collection

The collection of personal data is carried out solely through the form published in the CONTACT section of our website, commercial contacts of any kind, and emails that clients may send to ELVIRA PHOTOGRAPHER when requesting our services.

According to the GDPR, it is necessary to properly and explicitly substantiate the legal basis that legitimizes the processing of personal data. The most important legal bases are:

  • Contractual Compliance: The processed data must be necessary and relevant for the execution of the contracted service or product and must be clearly defined in the contract.

  • Consent:

    • Specific, informed, and unequivocal consent is required, expressed freely through an affirmative and clear act (pre-checked boxes are not allowed).
    • The option to refuse consent must be provided.
    • The capacity to contract must be available (legal age, legal capacity to act, etc.), or, if not, the parent or legal guardian must grant consent. Our services are not directed at minors, so by subscribing to the contract, the client declares and guarantees that they are of legal age or have the legal capacity to contract.
    • In the case of processing sensitive or special data, explicit consent is also required.
  • Legitimate Interests: There must be a legitimate interest that does not conflict with the rights or interests of individuals.

Retention Periods

ELVIRA PHOTOGRAPHER will keep client data for the duration of their contractual relationship and subsequently for compliance with legal obligations. Also, both the data of former clients and clients or users will be retained for promotional activities for a period of 5 years, not kept longer than necessary for the purposes indicated above, without prejudice to the conservation that may be necessary for the formulation, exercise, or defense of potential claims and/or as long as permitted or required by applicable law. Data for the management of inquiries and requests will be kept for the time necessary to respond to them and for a maximum period of 5 years.

CV data for selection processes, IF CARRIED OUT, will be kept during the selection process and up to 2 years after its completion unless explicitly requested earlier by the applicant.

Implemented Security Measures

ELVIRA PHOTOGRAPHER undertakes to fulfill the duty of care and custody of data and its obligation of secrecy. To this end, it will adopt all necessary measures to prevent alteration, loss, processing, or unauthorized access in accordance with applicable regulations, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed (whether natural risks, industrial risks, unintended risks, or intentional risks arising from human action).

For this purpose, continuous monitoring, control, and evaluation of all processes are maintained to ensure respect for privacy and information security according to international standards.

Professional Secrecy

All private communications between ELVIRA PHOTOGRAPHER and clients/users will be considered confidential.

Transfer to Third Parties

ELVIRA PHOTOGRAPHER does not sell, transfer, lease, or transmit in any way information or personal data of its Clients/Users to third parties. This data will only be transferred to entities that are necessary for the sole purpose of fulfilling the aforementioned purpose, of which the interested party will always be informed.

Changes to the Security and Data Protection Policy

ELVIRA PHOTOGRAPHER reserves the right to modify its security and data protection policy at its discretion, at any time and without prior notice, always in accordance with current Spanish data protection legislation.