Social media privacy policy

1. USER INFORMATION

1.1 Who is responsible for processing your personal data?

The company BUENALSANTA, SL, with NIF B81245656 and postal address at Calle Manuela Malasaña 18, 28004, Madrid, hereinafter the Controller, informs the User that it has created a profile on Social Networks (Facebook, Instagram, etc.), and is responsible for the processing of the user's personal data carried out on said social networks.

This data will be processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), and Organic Law 3/2018, of 5 December (LOPDGDD).

BUENALSANTA, SL is part of a group of companies operating under the common name of Grupo La Musa (hereinafter, “Grupo La Musa”). Information regarding these entities can be found in the Legal Notice of this Website.

1.2 What do we use your personal data for?

End of treatment: to maintain a relationship between the User and the Controller that may include the following operations:

  • Process requests and inquiries submitted to the responsible party.
  • Report on activities and events organized by the person in charge.
  • Report on products or services offered by the responsible party.
  • Interact through official profiles.

1.3 Why are we allowed to process your personal data?

Legal basis for processing: Article 6.1.a GDPR, the data subject has given consent to the processing of his or her personal data for one or more specific purposes.

The User has a profile on the same social network and has decided to join the Controller's social network, thus showing interest in the information published there. Therefore, when requesting to follow our official profiles, the User gives their consent for the processing of the personal data published on their profile.

The User can access the privacy policies of the social network itself at any time, as well as configure their profile to guarantee their privacy.

The Data Controller has access to and processes publicly available User information, specifically their contact name. This data is only used within the social network itself and will only be added to the Data Controller's file when necessary to process the User's request.

1.4 How long will we keep your personal data?

Data retention criteria: They will be kept until the User revokes the consent given as indicated in this privacy policy.

1.5 Who do we share your personal data with?

Data communication: The information provided by the User through the Controller's social networks, including their personal data, may be published, always depending on the services that the User uses, and therefore may be publicly available to other third-party users of social networks.

From the profile of each social network, the User can configure what information they want to make public in each case, see the permissions that have been granted, delete them or deactivate them, like any third-party application that they no longer wish to use.

No communication of personal data to third parties outside the social network is planned unless it is essential for the development and execution of the purposes of the processing, in which case they may be communicated to the companies that make up the La Musa Group identified in the Legal Notice or to our service providers related to reservations, communications, technological management, etc., with whom the Controller has signed the confidentiality and data processing agreements required by current privacy regulations.

1.6 What are your rights?

1.6.1 Rights that assist the User

These rights can only be satisfied in relation to information that is under the control of the Data Controller:

  • Right to withdraw consent at any time.
  • Right of access, rectification, portability and erasure of your data, and to limit or oppose its processing.
  • Right to lodge a complaint with the supervisory authority (www.aepd.es) if you believe that the treatment does not comply with current regulations.

1.6.2 Contact details to exercise your rights

La Musa Group
Manuela Malasaña Street, 18 – 28004 Madrid
E-mail: protecciondatos@grupolamusa.com

2. USING THE PROFILE

The Responsible Party will carry out the following actions:

  • Access to public profile information.
  • Publication on the User's profile of all information already published on the social network of the Controller.
  • Send personal and individual messages through social network channels.
  • Page status updates that will be published on the User's profile.

The User can always control their connections, delete content that is no longer of interest to them, and restrict who they share their connections with; to do this, they must access their privacy settings.

3. PUBLICATIONS

Once the User becomes a follower or has joined the social network of the Controller, they may publish comments, links, images, photographs or any other type of multimedia content supported by it.

In all cases, the User must be the owner of the published content, hold the copyright and intellectual property rights, or have the consent of the affected third parties.

Any publication on the social network, whether texts, graphics, photographs, videos, etc., that offend or are likely to offend morality, ethics, good taste or decorum, and/or that infringe, violate or break intellectual or industrial property rights, the right to one's image or the Law, is expressly prohibited.

In these cases, the Controller reserves the right to remove the content immediately, without prior notice, and may request the permanent blocking of the User.

The Data Controller will not be responsible for content freely published by a User.

The User should bear in mind that their posts will be known to other users, so they are primarily responsible for their own privacy.

Images that may be published on the social network will not be stored in any file by the Data Controller, but they will remain on the social network.

4. DATA ON MINORS OR PERSONS WITH SPECIAL NEEDS

Access and registration through the social networks of the Responsible party is prohibited to minors under 14 years of age.

For their part, if the User has special abilities, the intervention of the holder of their parental authority or guardianship, or of their legal representative through a valid document that proves the representation, will be necessary.

The Data Controller will be expressly exonerated from any liability that may arise from the use of social networks by minors or people with special needs.

The Controller's social media accounts do not knowingly collect any personal information from minors; therefore, if the User is a minor, they should not register, use the Controller's social media accounts, or provide any personal information.