Back to home

*This is a translation and may contain errors, so we recommend visiting the Spanish version, which is the official one.

  • Content Privacy policy WEB:

Date last updated: April 2024 In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), KALEIDOSCOPE DESIGN S.L., informs the users of the WEBSITE: www.kaleidoskope.es (hereinafter, THE WEBSITE), about the processing of personal data, which they have voluntarily provided during the registration process, access and use of the service of calculation of budgets/planner, as well as through the WEB forms available through the web address indicated above. We inform you that KALEIDOSCOPE DESIGN S.L.is RESPONSIBLE for the processing of personal data of its USERS and CUSTOMERS, as well as the data that may be collected through the WEBSITE. KALEIDOSCOPE DESIGN S.L. informs the USERS about its policy regarding the processing and protection of personal data of USERS and CUSTOMERS that may be collected by browsing or contracting services through its website.

  1. IDENTIFICATION OF THE DATA CONTROLLER.

KALEIDOSCOPE DESIGN S.L.; CIF B40659898 and address for notification purposes at: C/ Sorní 20, puerta 3, Valencia (hereinafter, the PERSON RESPONSIBLE FOR THE PROCESSING), is the entity responsible for the processing of the data provided by the clients of the WEBSITE (hereinafter, the USER/s). Email: proyectos@kaleidoscope.es Telephone: 645769039 – 961064067

  1. WHAT DATA IS COLLECTED AND THE PURPOSE OF THE DATA PROCESSING.

Data collected for the provision of a service The personal data that you provide us for the provision of a service will be the minimum required to be able to provide you with the requested service or information, prepare the contract, as well as to offer you the services you hire and to comply with legal obligations. The personal data collected for the request for information through the WEB form: name, email, phone, etc. must be provided by you – voluntarily – and will be incorporated into automated supports owned by KALEIDOSCOPE DESIGN S.L. In the case that you wish to provide your phone number and do so as requested by the client when configuring their remodeling wishes through the calculator, the quote and/or offer may be sent via WhatsApp. To proceed with the registration, access, and subsequent use of the website, the USER must provide – voluntarily – personal data (essentially, identifying and contact data), which will be incorporated into automated supports owned by KALEIDOSCOPE DESIGN S.L. The collection, storage, modification, structuring, and, if applicable, deletion of the data provided by USERS will constitute processing operations carried out by the RESPONSIBLE PARTY, with the aim of ensuring the proper functioning of the WEB, maintaining the service and/or commercial relationship with the USER, and for the management, administration, information, provision, and improvement of the service. The personal data provided by the USER -especially the email or e-mail- may also be used to send newsletters (newsletters), as well as commercial communications for promotions and/or advertising of the Application, provided that the User has previously given their express consent for receiving these communications electronically. This consent may be withdrawn at any time.

  1. LEGITIMATION or LEGAL BASIS that legitimizes the processing of personal data

The processing of USER data is carried out under the following legal bases that legitimize it:

  • The request for information and/or the hiring of services from the website, whose terms and conditions will be made available to the USER in any case, prior to their express acceptance.
  • The free, specific, informed, and unequivocal consent of the USER, providing this privacy policy for their acceptance through a declaration or a clear affirmative action, such as checking a box set for that purpose. The processing of data in the case of WEB forms is also legitimized by the express consent you provide by accepting the submission of the information provided through the form.

If the USER does not provide KALEIDOSCOPE DESIGN S.L. with their data, or does so incorrectly or incompletely, it will not be possible to use the WEB form.

  1. PROCESSING CARRIED OUT, PURPOSE OF THE PROCESSING, LEGITIMACY, AND RETENTION PERIOD OF PERSONAL DATA.

KALEIDOSCOPE DESIGN S.L. will proceed to process personal data lawfully, fairly, transparently, adequately, relevantly, limited, accurately, and updated.

  • For the processing of MANAGEMENT OF INQUIRIES AND WEB INFORMATION:
  1. This processing has the purpose of addressing and responding to inquiries and requests for information received through the web contact forms.
  2. KALEIDOSCOPE is legitimized to use this data based on the existence of a contractual or pre-contractual relationship with the interested party through a contract or pre-contract (art. 6.1.b. GDPR). As well as on the basis of the legitimate interest of KALEIDOSCOPE or third parties to address the information requests received through the web form (art. 6.1.f. GDPR).
  3. The data that will be processed are identifying data (name, email, and phone).
  4. The data will be provided by the interested party or their legal representative.
  5. Regarding its retention, it will be for a period of 1 year from the last confirmation of interest. It will also be retained for the time necessary to fulfill the purpose for which it was obtained and to determine any potential liabilities that may arise from that purpose and the processing of data, as long as the interested party does not request its deletion.
  • For the processing and MANAGEMENT OF POTENTIAL CLIENTS:
  1. This processing has the purpose of preparing proposals and budgets; managing clients and potential contacts; managing contacts who show interest or request information about the organization’s products or services but who are not yet clients.
  2. KALEIDOSCOPE is legitimized to use this data based on the existence of a contractual or pre-contractual relationship with the interested party through a contract or pre-contract (art. 6.1.b. GDPR).
  3. The data that will be processed are identifying data (name, email, and phone).
  4. The data will be provided by the interested party or their legal representative.
  5. Regarding its retention, it will be for a period of 1 year from the last confirmation of interest or at an earlier period if we consider that they are no longer necessary for developing commercial contact actions, either because they are not appropriate, relevant, or are outdated.
  • For cases of OPTIONAL PROCESSING ACTIVITIES. The processing of this kind is not essential for the provision of the service requested by the USER and will only be carried out if the user has marked YES and therefore has indicated their acceptance for the performance of these activities:
  • MANAGEMENT OF WEB SUBSCRIBERS
  1. a) Este tratamiento tiene como finalidad la gestión de las suscripciones para envíos de newsletters, boletines informativos, promociones o similares; marketing, publicidad y prospección comercial.
  2. b) KALEIDOSCOPE está legitimado para el uso de estos datos en base a la existencia del consentimiento del interesado para el caso de que este lo haya prestado de manera expresa e inequívoca a través de la aceptación de la casilla habilitada en el formulario web (art. 6. 1.a. RGPD). 
  3. c) Los datos que se tratarán son los datos identificativos de los suscriptores (nombre, mail y teléfono).
  4. d) Los facilitará el propio interesado o su representante legal
  5. e) En cuanto a su conservación los datos se conservarán mientras no se solicite su supresión por parte del interesado.  Es decir, se mantendrán hasta que el consentimiento sea revocado, el interesado ejercite su derecho de supresión u oposición al tratamiento, o si en el plazo de 1 año desde la última confirmación de interés, consideramos que los datos han dejado de ser necesarios para desarrollar acciones comerciales, bien porque no sean adecuados, pertinentes o estén desactualizados.  

 

  1. RECIPIENTS OF THE DATA

The data will not be communicated to any third party outside of KALEIDOSCOPE DESIGN S.L., except by legal obligation or, in any case, with prior consent from the USER. On the other hand, KALEIDOSCOPE DESIGN S.L. may give access to or transmit the personal data provided by the USER to third-party service providers (partners), with whom it has entered into data processing agreements, and who will only access this information to provide a service on behalf of the RESPONSIBLE party or complementary services.

  1. RETENTION AND CONSERVATION OF THE DATA.

In all cases, the data will be retained for the legally established periods indicated in point 4 for each processing. KALEIDOSCOPE DESIGN S.L. informs the USER that, as a provider of data hosting services and under the provisions of Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI), it retains for a maximum period of 12 months the information necessary to identify the source of the hosted data and the moment when the service provision began. The retention of this data does not affect the secrecy of communications and may only be used in the context of a criminal investigation or for the safeguarding of public security, being made available to judges and/or courts or the Ministry that requests it. The communication of data to the State Security Forces and Corps will be made under the provisions of the regulations on personal data protection, and with the utmost respect for the same.

  1. PROTECTION OF THE HOSTED INFORMATION.

The DATA CONTROLLER takes the necessary measures to ensure the security, integrity, and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data. While the DATA CONTROLLER makes backups of the content hosted on its servers, it is not responsible for the accidental loss or deletion of data by USERS. Likewise, it does not guarantee the full restoration of data deleted by USERS, as such data may have been removed and/or modified during the time elapsed since the last backup.

  1. EXERCISE OF RIGHTS.

KALEIDOSCOPE DESIGN S.L. informs the USER that they have the rights of access, rectification, limitation, deletion, opposition, not to be subject to automated decisions or profiling, to revoke their consent, and to portability concerning the use of their personal data; which they can exercise by sending a request to the email address: proyectos@kaleidoscope.es These rights are personal and non-transferable, meaning they can only be exercised by the data subject, subject to verification of their identity. Therefore, to exercise these rights, the individual must be identified by presenting their ID for verification. Additionally, the User has the right to revoke the consent initially granted and to file complaints regarding their rights with the Spanish Agency for Data Protection (AEPD):

  1. COMMERCIAL COMMUNICATIONS BY ELECTRONIC MEANS.

In application of the LSSI (Law on Information Society Services), KALEIDOSCOPE DESIGN S.L. will not send advertising or promotional communications via email or any other equivalent electronic communication method unless they have been previously requested or expressly authorized by the recipients. In the case of users with whom there is a prior contractual, legal, or service relationship, the DATA CONTROLLER is authorized to send commercial communications regarding products or services of the DATA CONTROLLER that are similar to those initially contracted by the client. If the USER wishes to unsubscribe from receiving these communications, they may do so by sending their request via email to: proyectos@kaleidoscope.es

  1. TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES

KALEIDOSCOPE DESIGN S.L. adopts the necessary organizational and technical measures to ensure the security and privacy of your data, prevent its alteration, loss, unauthorized processing or access, depending on the state of technology, the nature of the stored data, and the risks to which they are exposed. Among others, the following measures stand out:

  • Ensure the permanent confidentiality, integrity, availability, and resilience of the treatment systems and services.
  • Restore the availability and access to personal data quickly in the event of a physical or technical incident.
  • Regularly verify, evaluate, and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
  • Pseudonymize and encrypt personal data if it involves sensitive data.

On the other hand, the Data Controller has decided to manage the information systems in accordance with the following principles:

  • Compliance principle: All information systems will comply with applicable legal, regulatory, and sectoral standards affecting information security, especially those related to personal data protection, system security, data, communications, and electronic services.
  • Risk management principle: Risks will be minimized to acceptable levels, seeking a balance between security controls and the nature of the information. Security objectives must be established, reviewed, and consistent with information security aspects.
  • Awareness and training principle: Training programs, awareness campaigns, and sensitization will be organized for all users with access to information regarding information security.
  • Proportionality principle: The implementation of controls that mitigate security risks to assets will seek a balance between security measures, the nature of the information, and the risk.
  • Responsibility principle: All members of the Data Controller will be responsible for their conduct concerning information security, complying with the established rules and controls.
  • Continuous improvement principle: The effectiveness of the implemented security controls within the organization will be regularly reviewed to increase adaptability to the constant evolution of risk and the technological environment.
  1. DATA VARIATION

Unless we are informed otherwise, we will assume that the data has not been modified and that you commit to notifying us of any changes.

  1. ACCEPTANCE AND CHANGES TO THE POLICY

It is necessary for the user of the website to have read and agree with the data protection conditions contained in this Privacy Policy, as well as accept the processing of their personal data so that the Data Controller can proceed with it in the manner, time frames, and purposes indicated. The Data Controller reserves the right to modify this Privacy Policy at its discretion or due to legislative, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency. Changes or updates made to this Privacy Policy affecting the purposes, conservation periods, data transfers to third parties, international data transfers, as well as any rights of the website user, will be explicitly communicated to the user.