PRIVACY POLICY

Processing of personal data


1. Data controller

Kartma is the sales platform used by Philarthropic to sell works online through the website kartma-shop.org. Kartma is a registered trademark owned by Filartropia, S.L. (hereinafter referred to as Philarthropic), a company with CIF (Spanish Corporate Tax No.) B-67173807 and with its registered address at Via Augusta, 35, 7º piso, despacho 22, Barcelona (08006), registered in the Mercantile Register of Barcelona, Volume 46316, Sheet 94, Page 516355, and email contact contact@philarthropic.org.

 

2. Purpose of the processing and legitimation

The processing of your data is for the following purposes and on the legal grounds which legitimize it:

  • To respond to and process requests for information, queries and claims made by means of filling in the contact form available on the web portal or by email, legitimized by your free, informed and specific consent by virtue of accepting the Privacy policy.

  • The sending of informative and promotional correspondence, legitimized by virtue of your consent. On no account will your refusal to grant your consent to the processing of your data for this purpose interfere with the honouring of your contractual relationship with Philarthropic.

  • The management of the contractual relationship with customers due to the fulfilment of a contractual relationship. The processing of your data as a customer is necessary for the performance of a contract of which you are a party. As the provision of personal data is a legal or contractual requirement and a stipulation necessary for the signing of the above-mentioned contract, as the interested party you are informed that you are obliged to provide the personal data and, furthermore, that the consequences of not doing so may mean that the requested service will not be provided.

  • The maintenance of updated deletion lists due to a legal obligation to prevent the sending of correspondence if you so request.

  • Permitting the operation of our website/applications by means of technical and functional cookies, upon the basis of a legitimate interest.

  • The gathering of statistics, upon the basis of a legitimate interest.

 

3. Retention of the Data

The personal data you supply will be retained until the purposes for which they were collected are fulfilled or as long as the relationship is maintained, provided that you do not request their deletion. They will be retained in accordance with the time periods stipulated by law in fiscal and accounting matters, taking the last item of correspondence as the reference date and time.

 

4. Decisions

The company will NOT make automated decisions, construct profiles or apply logic to your data.

 

5. Recipients

During the period the processing lasts, it will not make any assignment or transfer, unless there is a legal obligation to do so.

 

6. Rights of the interested party

You, as the interested party, may exercise the following rights:

  • Right to request access your personal data.

  • Right to request their correction or deletion.

  • Right to request a restriction to their processing.

  • Right to oppose their processing.

  • Right to the portability of the data.

  • Right to withdraw the consent granted.

Any person has the right to obtain confirmation with regard to whether the company is processing data concerning them or not. Interested parties have the right to access their personal data, as well as to request the correction of inaccurate data or, when appropriate, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, interested parties may request a restriction to the processing of their data, in which case the company will only retain them for the exercise or defence of claims. In certain circumstances and for reasons related to their particular situation, interested parties may oppose the processing of their data. In such a case, the company will cease to process the data, except for compelling legitimate reasons or for the exercise or defence against potential claims.

If you have granted your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without the above affecting the lawfulness of the processing based on the consent granted prior to its withdrawal. To do so you can either write to Philarthropic at Via Augusta, 35, Piso 7, Despacho 22, Barcelona (08006) or send an email to contact@philarthropic.org, accompanied by a copy of your identity document.

In the event that you feel that your rights in relation to the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can submit a claim to the competent Data Protection Supervisory Authority on its website at: www.agpd.es.

 

7. Data categories

The categories of data which are processed are as follows:

  • Identifying data

  • Identification codes and keys

  • Postal and electronic addresses

  • Commercial information

  • Financial data

 

8. Confidentiality

Philarthropic has implemented the policies, means and technical and organizational procedures to guarantee and protect the confidentiality, integrity and availability of the personal data of its users, preventing, as far as possible, unauthorized accesses, unlawful modifications, theft and/or loss of the processed data, in order to ensure the security thereof.