- Requesting information, applying for employment and/or contracting our services and/or purchasing products.
Elaboration of profiles
We do not create profiles using your personal data, but if you do, you will be informed and asked for permission to do so.
Similarly, you have the right to object to this type of processing at any time.
Transfer of data
Your personal data will not be transferred to other countries or third parties except in cases where there is a legal obligation.
In case of purchase of products or hiring of services, your personal data may be transferred to those entities necessary to deliver the products purchased or provide our services.
Our bank will know your data to manage the collection of products or services, as well as those in charge of processing necessary for the execution of contracts and / or purchases.
In the case of transfers to other entities or to other countries, we will inform you and request your prior consent.
From our website, you can access our social media profiles, such as Facebook, which are open to all users. Users can register on these websites and follow us free of charge. On these social media, users can find out about our activities, opinions and access photos and videos. Users of these social media should be aware that they are independent of the website sanchoboots.online and are open, that is to say, visible to all users, and the privacy policies applicable to that content are those laid down by Facebook. Sancho Boots does not own social media.
Corporate Commitment to Data Protection
Scope of application
This Code of Conduct shall be binding on all departments, employees of our entity and those acting on our behalf.
We have established protocols for the processing of personal data, in accordance with the provisions of Spanish and European data protection regulations, so as to guarantee the security and confidentiality of such data at all times.
Lawfulness, Loyalty, Transparency, Minimization of data, Accuracy, Limitation of conservation period, Integrity, Confidentiality and active Responsibility.
Special category of data
The processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, the processing of genetic data or biometrics, data concerning health or data concerning sexual orientation shall be prohibited, except in the case of legally authorised exceptions and with the prior consent of the data subject.
Rights of the data subjects
Data subjects shall have the right of access to their personal data, as well as the right to rectify them when they are inaccurate, erase them when their processing is no longer necessary or not desired, limit them to certain processing, have the possibility to receive their data easily and in structured formats commonly used by the controller, and have their data used for profiling purposes and to object to their processing at any time.
Activity Log, Impact Assessment and Security Measures
Our entity will carry out a register of processing activities and will analyse the purposes of the processing, categories of data subjects and data, recipients, international transfers, storage periods, etc., in order to assess the risks of the processing and to implement the necessary security measures to safeguard personal data under the principles of confidentiality and secrecy. Likewise, we have analyzed the need to appoint a Data Protection Delegate, establishing if necessary that the person appointed to this position will have sufficient knowledge and experience in accordance with the provisions of current regulations.
We have hired the services of an external consultant to carry out a periodic audit to evaluate compliance with this commitment and all legal obligations in this area.