The present Privacy Policy explains how the personal data of users and customers is processed jeisonsalazar.com, including data provided when making a purchase, requesting information, using forms or interacting with services available on the website.

The processing of personal data will be carried out in accordance with Regulation (EU) 2016/679 —General Data Protection Regulation or GDPR—, Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights —LOPDGDD— and other applicable regulations.

1. Data Controller

• Responsible: Jeirsson Hernando Salazar Moncada
• NIF: 02359594R
• Home: Clara Campoamor Street, 5, Castilleja de Guzmán, Seville, Spain
• Email: contacto@jeisonsalazar.com
• Website: jeisonsalazar.com

2. What personal data can we process

Depending on how the user interacts with the website, different categories of personal data may be processed.

Identification and contact information:

• Name and surname.
• Email address.
• Phone number, when necessary.
• Postal address and details necessary to make deliveries.

Order and billing information:

• Products purchased.
• Photographs or licenses acquired.
• Order number and details.
• Billing address.
• Information needed to issue invoices and comply with tax obligations.
• Information regarding the status of payment and order.

Data related to queries:

• Information provided voluntarily through forms or email.
• Content of communications held with the user or Client.

Technical and navigation data:

• IP address.
• Information about the device or browser.
• Technical and security records.
• Information obtained through cookies or similar technologies where applicable.

Special categories of personal data will not be intentionally requested through the ordinary forms on this website.

3. Purposes of the processing

Personal data may be processed for the following purposes:

• Manage purchases and orders: process the purchase of prints, physical products, digital photographs and licenses.
• Manage payments: process and verify payments made through the means available on the web.
• Manage shipments: provide the necessary data to transport providers to deliver physical products.
• Manage downloads and licenses: provide access to the acquired digital files and identify the corresponding license.
• Customer service: to answer inquiries, requests, incidents, returns or complaints.
• Billing and tax obligations: issue invoices and keep the legally required documentation.
• Security: to protect the website, prevent fraudulent use, and detect potential malicious access or activity.
• Website operation and improvement: To maintain and technically improve the website and, where appropriate, to obtain statistical information in accordance with applicable regulations.
• Commercial communications: to send promotional information when there is a valid legal basis for doing so and, where necessary, the corresponding consent has been obtained beforehand.

4. Legal basis for processing

The legal basis used will depend on the specific purpose for which the data is processed.

4.1 Performance of a contract or pre-contractual measures

When the user makes a purchase, requests the contracting of a product or license, or carries out prior actions directly related to said contracting, the processing of certain data is necessary to manage the contractual relationship.

This includes, among other actions, managing orders, payments, shipments, downloads, licenses, returns, and purchase-related support.

4.2 Compliance with legal obligations

Certain data may be processed and stored to comply with legal obligations applicable to the controller, including tax, accounting, administrative obligations and those related to the rights of consumers and users.

4.3 Consent

When a certain processing requires consent, the data will be processed on the basis of the consent given by the user.

This may apply, for example, to certain commercial communications or to cookies and similar technologies when they legally require consent.

The user may withdraw their consent at any time without affecting the lawfulness of the processing carried out before its withdrawal.

4.4 Legitimate interest

In certain cases, data may be processed on the basis of the legitimate interest of the controller or of third parties, provided that such interest is in accordance with the regulations and does not override the fundamental rights and freedoms of the persons concerned.

This basis may be applicable, depending on the circumstances, to certain security measures, fraud prevention, website protection or defense against claims.

5. Information needed to make a purchase

Certain data requested during the purchase process are necessary to formalize and manage the order.

If the Customer does not provide the necessary information to process the payment, issue the corresponding documentation or make the delivery, it may not be possible to complete the purchase or provide the requested service.

6. Data recipients

Personal data will not be sold to third parties.

However, in order to provide the website services, certain providers may need to access or receive certain data.

Depending on the services used, these providers may include:

• Web hosting and technical service providers.
• Maintenance and security providers.
• E-commerce providers.
• Payment service providers.
• Financial institutions when necessary to process payments.
• Transport and logistics companies for product delivery.
• Email and communications providers.
• Providers of consent and cookie management tools.
• Consultants, management companies or other professionals when necessary to comply with legal, tax or administrative obligations.

When these providers act as data processors, access to the data will be limited to what is necessary to provide the corresponding service.

The data may also be communicated to public administrations, authorities, courts, tribunals or other bodies when there is a legal obligation.

7. Payment providers

Payments made through the website may be processed by third-party payment service providers.

The data necessary to process the transaction may be processed directly by these providers in accordance with their own terms and privacy policies.

The Holder does not necessarily need to store the complete details of the bank card used to make the payment when these are managed directly by the corresponding payment provider.

8. International data transfers

Some technology providers used by the website may be located or process information outside the European Economic Area.

When international transfers of personal data occur, the mechanisms and safeguards provided for by applicable regulations will be used, such as adequacy decisions of the European Commission, standard contractual clauses or other legally recognized mechanisms where appropriate.

9. Data retention

Personal data will be kept only for the time necessary to fulfill the purpose for which it was collected and, subsequently, for the periods necessary to comply with legal obligations or address possible liabilities.

In general:

• Order and billing information: They will be kept for the periods required by tax, accounting and other applicable legislation.
• Data related to queries: They will be kept for the time necessary to address the request and, subsequently, for the period necessary to address any potential liabilities.
• Customer data: They may be kept while a contractual relationship exists and subsequently for the legally required periods.
• Commercial communications: They will be processed as long as there is a valid legal basis and until the user withdraws their consent or exercises the corresponding right where applicable.
• Information obtained through cookies: It will be stored for the periods indicated in the Cookies Policy and in the corresponding consent manager.

10. Rights of interested parties

Individuals whose data is processed may exercise, where appropriate, the rights recognized by data protection regulations.

• Access: to know what personal data is being processed.
• Rectification: request the correction of inaccurate or incomplete data.
• Suppression: request the deletion of the data when the legal requirements are met.
• Limitation: request that treatment be limited in certain circumstances.
• Opposition: to oppose certain treatments when legally appropriate.
• Portability: to receive certain personal data in a structured, commonly used and machine-readable format, and to request its transmission to another controller where applicable.
• Withdrawal of consent: withdraw at any time the consent given for those treatments that are based on it.

To exercise these rights, you can send a request to:

contacto@jeisonsalazar.com

The application must contain sufficient information to identify the applicant and determine the right they wish to exercise.

When there are reasonable doubts about the identity of the person making the request, additional information may be requested as necessary to confirm their identity.

11. Right to file a complaint

If you believe that the processing of your personal data does not comply with applicable regulations, you have the right to file a complaint with the competent supervisory authority.

In Spain, the competent authority is the Spanish Data Protection Agency (AEPD).

12. Data Security

The Data Controller shall adopt appropriate technical and organizational measures to protect personal data against destruction, loss, alteration, unauthorized disclosure or access, taking into account the nature of the data, the context of the processing and the existing risks.

However, no system connected to the Internet can guarantee absolute security.

13. Cookies and similar technologies

This website may use cookies and similar technologies to enable certain functionalities, remember preferences and, where appropriate, obtain information about site usage.

Cookies that legally require consent should not be used for that purpose until the user has given the corresponding consent.

You can find more detailed information and manage your preferences in the Cookie Policy and in the consent manager available on the website.

14. Commercial communications

When the option to receive promotional communications is offered and it is necessary to obtain consent, these communications will only be sent when the user has given such consent.

The user may request to stop receiving commercial communications through the mechanisms included in each communication or by contacting us through contacto@jeisonsalazar.com.

15. Minors

The e-commerce services on this website are not specifically directed at minors.

There is no intention to knowingly collect personal data from minors outside of the cases permitted by applicable law.

16. Data accuracy

The user is responsible for ensuring that the data provided is correct, complete, and up-to-date.

If the data provided changes and becomes relevant to a contractual relationship or ongoing application, the user must communicate the modification when necessary.

17. Automated decisions and profiling

In general, it is not foreseen to adopt decisions based solely on automated processing that produce legal effects on the user or similarly significantly affect him.

If such treatment is implemented in the future, the corresponding information will be provided in accordance with applicable regulations.

18. Changes to the Privacy Policy

This Privacy Policy may be updated when necessary due to legal changes, modifications to the services offered, the addition of new providers, or changes in the way personal data is processed.

The current version will be the one published on this page and will show its corresponding update date.

19. Contact

For any questions related to this Privacy Policy or the processing of personal data, you can contact us through:

• Email: contacto@jeisonsalazar.com
• Responsible: Jeirsson Hernando Salazar Moncada
• Home: Clara Campoamor Street, 5, Castilleja de Guzmán, Seville, Spain