PRIVACY POLICY

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, DACACO Design Studio (hereinafter also the Website) commits to adopting the necessary technical and organizational measures according to the appropriate level of security for the risk of the collected data.


Laws Incorporated in This Privacy Policy

This privacy policy complies with current Spanish and European regulations regarding the protection of personal data on the internet, specifically:

  • Regulation (EU) 2016/679 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data.
  • Organic Law 3/2018 (LOPD-GDD) on the Protection of Personal Data and Guarantee of Digital Rights.
  • Royal Decree 1720/2007 (RDLOPD) implementing Organic Law 15/1999.
  • Law 34/2002 (LSSI-CE) on Information Society Services and Electronic Commerce.

Identity of the Data Controller

The data controller for personal data collected on DACACO Design Studio is:

Tibor Miglinci
Tax ID: Y8285849K
Address: Carrer de Ali Bei 37, 4-1
Phone: 611601023
Email: tibormig@gmail.com


Personal Data Registry

In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected through Website forms will be incorporated and processed in our files to facilitate, expedite, and fulfill the commitments between DACACO Design Studio and the User, or to manage requests and inquiries.

Unless Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying the processing activities and their purposes.


Principles Applicable to the Processing of Personal Data

Personal data processing will adhere to the principles established in Article 5 of the GDPR and Article 4 of Organic Law 3/2018:

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimization
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality
  • Proactive accountability

Categories of Personal Data

The categories of data processed are identifying data only.

No special categories of personal data (as defined in Article 9 GDPR) are processed.

Special categories include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, genetic or biometric data, health data, or data related to sex life or sexual orientation.

Processing such data requires explicit User consent.


Legal Basis for Processing Personal Data

The legal basis is consent. DACACO Design Studio commits to obtaining express and verifiable consent for one or more specific purposes.

The User may withdraw consent at any time, with the same ease as it was given. Withdrawal will not affect the use of the Website.

If data is required to submit forms or perform actions, the User will be informed whether such data is mandatory.


Purposes of Processing Personal Data

Personal data is collected to:

  • Facilitate, expedite, and carry out commitments between the Website and the User.
  • Maintain relationships established through forms.
  • Respond to requests or inquiries.
  • Personalization, statistical, operational, and commercial purposes.
  • Data extraction, storage, marketing studies, and service improvement.

At the time of data collection, Users will be informed of the specific purposes of processing.


Retention Periods for Personal Data

Personal data will be retained for the minimum time necessary and, in any case, for 18 months, unless the User requests deletion earlier.

If not possible to specify duration, we will indicate the criteria used to determine the period.


Recipients of Personal Data

Personal data will not be shared with third parties.

If data is transferred internationally, Users will be informed of the destination country or international organization, as well as the existence of adequacy decisions.


Personal Data of Minors

Only Users over 14 years of age may consent to personal data processing.

For Users under 14, parental or guardian consent is required.


Confidentiality and Security of Personal Data

DACACO Design Studio commits to adopting appropriate security measures to prevent destruction, loss, alteration, unauthorized access, or disclosure of personal data.

The Website includes an SSL certificate to ensure encrypted, secure data transmission.

In case of a data security breach that may pose a high risk to users’ rights and freedoms, the User will be informed without undue delay.

All personnel accessing personal data are legally or contractually obligated to maintain confidentiality.


User Rights

Users may exercise the following rights according to GDPR and Organic Law 3/2018:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right not to be subject to automated individual decision-making, including profiling.

To exercise these rights, Users must submit written communication with reference “GDPR-www.dacaco.studio”, including:

  • Name, surname, and ID copy.
  • Request details.
  • Notification address.
  • Date and signature.
  • Supporting documents (if applicable).

Send requests to:

Postal address: Carrer de Ali Bei 37, 4-1
Email: tibormig@gmail.com


Links to Third-Party Websites

The Website may contain links to third-party sites, each with its own privacy policy. DACACO Design Studio is not responsible for their practices or content.


Complaints to Supervisory Authority

Users may file complaints with the relevant supervisory authority, particularly where they reside, work, or where the alleged infringement occurred.
In Spain, the authority is the Spanish Data Protection Agency.


II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agree with this Privacy Policy to allow processing of their personal data.

DACACO Design Studio reserves the right to modify this Policy according to legislative or doctrinal updates. Users are encouraged to check this page periodically.

This Policy is updated in compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018.