Privacy Policy
When does this Privacy Notice apply?
This Privacy Notice describes how we, as a controller, collect, use and share your personal data. It applies to personal data you voluntarily provide to Marshalls Spain, or is automatically collected by Marshalls Spain.
Who we are
The company operating marshallsspain.com, its associated websites and social media accounts is I.PI. COSTA SPAIN S.L., Calle Blanca 1, 03170 Ciudad Quesada (Rojales), Spain (“Marshalls Spain”, “we”, “us”, “our”). Any data protection related questions you might have about how we handle your personal data or if you wish to exercise your data subject rights, please contact us at info@marshallsspain.com.
What data we collect and for what purpose
Marshalls Spain collects data voluntarily provided to Marshalls Spain by clients and website visitors. Marshalls Spain processes Personal Data as described below:
- Statistical data
Marshalls Spain collects anonymous statistical data about the use of its website to optimize its online presence and for marketing and sales purposes. You may further opt-out of tracking by enabling the Do-Not-Track option in your browser. Visit http://donottrack.us/ to learn how.
- Information provided by you through web forms, through voice conversations such as phone, videoconferencing and during in-person meetings.
Through web forms on our contact page and on in-page ‘call to action’ forms, we collect your first name, last name, email address and phone number. We process this information for the purpose of the performance of a contract, or in the preparatory stage of entering into a contract as laid out in Art 6(1)(b) of the GDPR. As you actively request us to contact you for more information about our products and services, we will need to record this data to be able to effectively communicate with you for this purpose. This information is submitted to a server operated by Marshalls Spain, from which it will be deleted 12 months after the last contact we had with you, unless you become a client and we will need to retain your information for other reasons. This information is not shared outside of our organization, and is stored on servers within the European Union.
- Keeping you informed about privacy and GDPR in technology.
When filling out a webform or through other methods and communication you also have the choice to sign up for our marketing communication by selecting the appropriate, optional tick box for this purpose. We only add you to our mailing list once you have passed the double-opt in. The processing of your name and email for this particular purpose are based on your consent Art 6(1)(a) GDPR, which you can revoke at any time. We will continue to process your personal data for this purpose until you revoke this consent by either clicking the ‘unsubscribe’ button, or contact us at info@marshallsspain.com to revoke your consent or request we unsubscribe you.
- Server administration
Your IP address and your page requests are stored in log files for a duration of maximum 14 days on our servers for the reason of preventing fraud, abuse, and security incidents, as well as monitoring the performance of our servers. After 14 days, these log files will be automatically deleted. We carry out this processing and data retention in our legitimate interest as laid out in Art 6(1)(f) for the GDPR.
- Internal communication required to deliver services
Internally, we use Google Workspace for our email service, calendar and internal document management. We also use it to communicate and provide our services to our clients, we then collect the client’s name, title and email address.
Data processed on Google Workspace is deleted within 25 months after the end of our engagement with you.
More information around data transfers out of the EEA or to non adequate countries can be found below in the section Security and International Data Transfers.
Ensuring compliance
Marshalls Spain is under obligation to comply with all applicable laws and regulations, including, but not limited to those of the European Union. For this reason we may have to collect, process and retain your details for an extended period of time as a legal obligation (Art 6(1)(c) GDPR).
Information required to track your choices and consent regarding the processing (or use) of your Personal Data or reception of marketing materials is stored to ensure compliance with the GDPR.
Security and international data transfers
We use third party software across several countries, personal data may therefore be transferred to a country outside the EU/EEA. To protect your personal data, we enter into data protection agreements and maintain both technical and organizational safeguards around the processing of your data.
Why am I required to provide Personal Data?
As a general principle, providing personal information and granting consent for our use of this information is done entirely on a voluntary basis. Choosing not to consent or provide personal data is generally not detrimental. However, there are circumstances in which Marshalls Spain cannot take action without specific data. This is the case, for instance, when data is required to fulfil a contact request, or provide you with access to a service or newsletter.
Who your data is made accessible to
Marshalls Spain hosts the majority of its services and systems itself on servers within the EU. We use a transactional email provider and a mailing list service, both located in the EU to deal with our mailing needs.
Your rights as a data subject
At any time, you can request from Marshalls Spain to receive information about which personal data Marshalls Spain processes about you. You can also request the correction or deletion of such personal data. Please note, however, that Marshalls Spain can delete your personal data only if there is no statutory obligation or prevailing obligation on Marshalls Spain to retain it.
If Marshalls Spain uses your personal data based on consent, you may also request a copy of the personal data that you have provided to Marshalls Spain. To do so, please contact us at info@marshallsspain.com and specify the information or processing activities to which your request relates.
Furthermore, you can request that we restrict your personal data from any further processing if:
- You are contesting the accuracy of the data we hold about your, for as long as we need to verify this claim.
- If you believe the processing of the data is unlawful, but you oppose the erasure of the data and request restriction of processing instead.
- If we no longer need your data for the original purpose, but you need them for the establishment, exercise or defense of legal claims.
- If you have objected to the use of your data, while we evaluate if our legitimate grounds for processing your data override yours, as required by Art 21 of the GDPR.
Please direct any such request to info@marshallsspain.com
Your right to lodge a complaint
We encourage you to contact us at info@marshallsspain.com if you have any privacy related concern. Should you disapprove of the response we have provide you, you have the right to lodge a complaint with the data protection authority of the European member state you live or work in.
Use of this website by children
This website is not intended for anyone under the age of 16 years. If you are younger than 16, you may not register with or use this website.
Links to other websites
This website may contain links to external websites(i.e. non-Marshalls Spain companies and organisation). Marshalls Spain is not responsible for the privacy practices or the content of those websites. We therefore recommend that you familiarize yourself with privacy practices of these organizations by reading their privacy notices.
Changes to this Privacy Policy
We may modify this privacy policy at any time to comply with legal requirements as well as developments within our organization. When we do, we will revise the date and version at the bottom of this page. Each visit or interaction with our Services will be subject to the new privacy policy. We encourage you to regularly review our privacy policy to stay informed about our data protection policy. Unless, we implement profound changes that we proactively notify you about, you acknowledge that it is your responsibility to review our privacy policy to be aware of modifications.
This version is valid from: March 1st, 2022
