Privacy Policy

The purpose of this policy is to inform data subjects about the different data processing activities carried out by this association through the website that may affect their personal data, in accordance with the provisions of Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights, and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.

1. Identification and Contact Details of the Data Controller

The organization CAMBIAR, with Tax Identification Number (CIF) CAMBIAR, with registered address at CAMBIAR, email hello@myroamupwpml.vida-marketing.es, and telephone CAMBIAR

2. Purposes of the Processing of Your Personal Data

Users/Browsers of the Controller’s Website

We will process the personal data you provide through our web forms in order to:

Handle requests, complaints, and issues submitted through the contact channels available on the website.
Understand user behavior on the website in order to detect possible cyberattacks against our website
Comply with the legal obligations that are directly applicable to us and regulate our activity.
To protect and exercise our rights or respond to claims of any kind.

Customers

We will process the personal data you provide through our web forms in order to:

Management of the commercial relationship.
The provision of the services you have contracted with us.
Management of matters related to the shipping and delivery of products purchased through this website.
Administrative, accounting, and tax management.
Handle requests, complaints, and issues submitted through the contact channels available on the website.
Understand user behavior on the website in order to detect possible cyberattacks against our website

3. Legal Basis for Processing

Users/Browsers of the Controller’s Website

Based on the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
In order to comply with the legal obligations applicable to us. In this case, the data subject may not refuse the processing of their personal data.
Based on our legitimate interest in protecting our image, business, and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of their personal data, although they may exercise, where applicable, the rights recognized in section eight of this policy.

Customers

Performance of a contract to which you are a party or the implementation of pre-contractual measures. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.Ejecución de un contrato en el que sea parte o aplicación de medidas precontractuales. La negativa a facilitar sus datos personales conllevara la imposibilidad de tratar sus datos con las finalidades mencionadas.
Based on the consent you have given us to process your data for purposes unrelated to the development or execution of the existing contract. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
In order to comply with the legal obligations applicable to us. In this case, the data subject may not refuse the processing of their personal data.
Based on our legitimate interest in protecting our image, business, and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of their personal data, although they may exercise, where applicable, the rights recognized in section eight of this policy.

4. Data Retention Periods or Criteria

The personal data provided will be retained for the time necessary to fulfill the purposes for which they were initially collected.

Once the data are no longer necessary for the relevant processing, they will be properly blocked and, where appropriate, made available to the competent Public Administrations and Authorities, Judges and Courts, or the Public Prosecutor’s Office, in accordance with the statutory limitation periods that may arise from the relationship maintained with the client and/or the legally established retention periods.

THE CIVIL CODE. Between 5 and 15 years depending on the case, in accordance with the provisions of Article 1964.2 of the aforementioned legal text.
THE COMMERCIAL CODE. For a period of 6 years, in accordance with the provisions of Article 30 of the aforementioned legal text. This applies to commercial information related to (issued and received invoices, receipts, corrective invoices, bank documents, etc.).
THE GENERAL TAX LAW. For a period of 4 years, in accordance with the provisions of Articles 66 to 70 of the aforementioned legal text. This applies to information related to tax obligations.

5. Automated Decision-Making and Profiling

The website does not carry out automated decision-making or profiling.

6. Recipients

During the period in which your personal data are processed, the organization may disclose your data to the following recipients:

Judges and Courts.
State Security Forces and Law Enforcement Authorities.
Other competent public authorities or bodies when the controller has a legal obligation to provide personal data.
Banks and Financial Institutions, if you contract our services.

7. International Data Transfers

The organization does not carry out any International Data Transfers.

8. Rights

Data subjects may exercise at any time and completely free of charge their rights of access, rectification, and erasure, as well as request the restriction of the processing of their personal data, object to such processing, request the portability of their data (where technically possible), or withdraw the consent previously given. Where applicable, they also have the right not to be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the organization or send a written request to the postal address or email address indicated above. However, you may be asked to provide your ID card or another equivalent document in order to verify your identity, provided that this cannot be done through less intrusive means.

If you believe that your rights regarding the protection of your personal data have been violated, especially if you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency) through its website: www.agpd.es.

In compliance with the provisions of Article 21 of Law 34/2002 on Information Society Services and Electronic Commerce, if you do not wish to receive further information about our services, you may unsubscribe by sending an email to hello@myroamupwpml.vida-marketing.es, with the subject line “UNSUBSCRIBE.”

9. Accuracy of the Data

The data subject guarantees that the data provided are true, accurate, complete, and up to date, and undertakes to inform of any changes to the data provided through the channels established for this purpose and indicated in section one of this policy. The data subject shall be responsible for any damage or harm, whether direct or indirect, that may arise as a result of failure to comply with this obligation.El interesado garantiza que los datos aportados son verdaderos, exactos, completos y se encuentran actualizados; comprometiéndose a informar de cualquier cambio respecto de los datos que aportara, por los canales habilitados al efecto e indicados en el punto uno de la presente política. Será responsable de cualquier daño o perjuicio, tanto directo como indirecto, que pudiera ocasionar como consecuencia del incumplimiento de la presente obligación.

In the event that the user provides data relating to third parties, the user declares that they have obtained the consent of the data subjects and undertakes to provide them with the information contained in this clause, releasing the organization from any liability arising from failure to comply with this obligation.

Last review: March 11, 2026