1. Treatment of personal data
In accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016 (hereinafter, "GDPR"), all personal data provided by the User through the Website www.imctoys.com (hereinafter, the "Website") will be incorporated and treated in the files owned by the company IMC TOYS, SA, (hereinafter, "IMC") with the sole purpose of being able to attend your requests and keep you informed, even by electronic means, about our products and services.
Providing all the information requested through the Website is necessary in order to ensure optimum provision of the services offered to the User. If all the information required by IMC is not provided, IMC cannot guarantee that the information to be provided to User and the services to be rendered, are indeed provided or rendered or are rendered adequately or adjusted to the needs of the User.
2. Basic information on personal data protection
|Basic Information on Personal Data Protection|
|Data Controller||IMC TOYS, S.A.|
|Purpose||Manage requests form the User and providing information on IMC and commercial research.|
|Recipient||No data is transferred to third parties.|
|Rights||Access, rectification, erasure, objection, restriction of processing, data portability and not to be the subject of automated individual decisions.|
|Detailed information||For further information on the protection of your data, consult below.|
3. Detailed information on data protection
3.1. Data Controller
The controller of the User’s information is IMC TOYS, S.A. company, located in Pare Llaurador St. 172, Terrassa, 08224 (Barcelona), Spain, with Tax I.D number (CIF) A-08667370, telephone number +34937888992 and email firstname.lastname@example.org.
3.2. Purpose of the data processing
Access by IMC to the personal data of the Users, will be made solely and exclusively for the purpose of IMC being able to respond the requests of the Users and to keep them informed, including by electronic means, of our products and services, without being able to apply or use them for any other purpose than that specified above.
In addition, in response to this purpose, a "commercial profile" will be created, based on the information provided. No automated decisions will be made based on that profile.
3.2.1. Data storage
The personal data provided will be stored as long as the data subject does not request erasure of such data or, as the case may be, during the maximum legal period allowed by the data protection legislation, which in such cases, must be deleted or returned to the controller; the same will happen to any other means or documents that contain personal data object of the treatment. This shall be without prejudice to a legal provision that requires the preservation of certain data or that these would be useful in the event of a claim arising from the rendering of the agreed services.
3.3. Legal grounds for treatment of personal data
The legal basis of the treatment of the User’s data is addressing the requests of the User and to be able to keep User informed, even by electronic means, about our products and services. Also, such purpose is not subject to the consent of processing of data that is not necessary for said purpose.
3.4. Data recipients
3.5. Exercise of rights
The User may exercise the following rights, as provided in the GDPR, in relation to the processing of his/her personal data:
- The right to request access to the personal data relating to the data subject.
- The right to request the rectification or erasure of personal data.
- The right to request the restriction of processing personal data.
- The right to object to processing of personal data.
- The right to data portability.
- The right to not be subjected to automated individual decision-making.
Such rights may be exercised through a written communication addressed to IMC TOYS S.A., Pare Llaurador street, 172, Terrassa, 08224 (Barcelona), Spain, with C.I.F. A-08667370, or by e-mail to email@example.com. In both cases, the User must accompany a copy of his/her national identity document, passport or other valid document that identifies him/her. The communication must be made immediately and shall in no case be done beyond the following working day after the reception of the request, together with, where appropriate, other information that may be relevant to solve the request.
3.6. Security measures
IMC has implemented the appropriate measures to maintain the required level of security, depending on the nature of the personal data processed and the circumstances of the processing, in order to avoid, to the extent possible and always according to the state of the art, its alteration, loss, treatment or unauthorized access.
Also, IMC guarantees that it has implemented mechanisms to:
- Ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
- Restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
- Regularly test, assess and evaluate the effectiveness of technical and organisational measures for ensuring the security of the treatment.
- Pseudononymise and encrypt personal data, where applicable.
3.7. Scope of application
The structure of files, equipment and information systems, will be applied to all files, temporary or permanent, owned by IMC containing personal data, as well as any other equipment or information system that treat them, in order to comply with the legislation in force regarding data protection.
3.8. User’s consent
3.9. Commercial and promotional information
The personal data that you provide us through this form will be processed by IMC, with the purpose of notifying business contents and commercial communications of IMC to you.
3.10. Confidentiality and professional secrecy
The data collected in all the private communications between IMC and the Users will be treated with absolute confidentiality, committing IMC to the obligation of secrecy of the personal data, to its duty to keep them and adopt all the measures necessary to prevent their alteration, loss and unauthorized access, in accordance with the applicable legislation.
In addition, information of any kind that the parties exchange with each other shall also be classified as confidential, as well as any information parties agree to have such nature, or the one that simply deals with the content of such information. The visualization of data over the Internet, will not imply direct access to them, unless there is express consent from its holder for each occasion.
3.11. Changes in security and data protection policy
IMC reserves the right to modify its security and data protection policy in order to adapt it to new legislation or jurisprudence, as well as those that may derive from existing standard codes in the matter, or by strategic corporate decisions, with effect from the date of publication of this modification on the IMC Web page.
4. Data communications made by the User