Our goal is to be as transparent as possible with our users and customers about the personal data we collect. Your privacy is important to us.

By reading this Privacy Policy, the user is informed about the way in which CRYS COMPOSITES collects, treats and protects the personal data provided to it through the website – https://my-dune.com (hereinafter, the website) and any other data that may be provided in the future to CRYS COMPOSITES by other means.

The User should carefully read this Privacy Policy, which has been written in a clear and simple manner, to facilitate its understanding, and freely and voluntarily determine whether he/she wishes to provide his/her personal data to CRYS COMPOSITES.

By filling out any form on the corporate website and clicking on the box “I have read the privacy policy” or similar, the user expressly states that he/she has read this privacy policy, which indicates the data processing carried out and the purposes, among other information, thus complying with the duty to inform imposed by the Data Protection regulations.

In those cases where the corporate website requests consent for a specific purpose, by clicking on the “I accept” or similar box, or by checking thecheck box, the user gives unequivocal and explicit consent to the data processing in question.

Who is responsible for the processing of your data?

• Identity: CRYS COMPOSITES, S.L.U – NIF: B01591379
• Address: C/ Ripollès, 24, 17486-Castelló d’Empúries (GIRONA)
• Phone: +34 686 696 918
• E-mail: duneskimboards@gmail.com

– Processing of DATA collected through the WEBSITE

For what purposes do we process your personal data?

In CRYS COMPOSITES we process the information provided by interested parties in order to respond to your request and, where appropriate, send you information about our products or services, as well as our newsletters.

No automated decisions will be made based on the data provided.

How long will we keep your data?

The data will be kept as long as the interested party does not request their deletion or for the duration of the business relationship, always respecting the statute of limitations of responsibilities.

What is the legitimacy for the processing of your data?

Consent of the interested party (by checking the check box): To respond to your request and, where appropriate, to send you commercial communications, as well as our newsletters.

To which recipients will your data be communicated?

No data will be transferred to third parties, unless legally required.

Data transfers to third countries?

No transfer of data to third countries is foreseen.

How did we obtain your data?

The personal data that we process in CRYS COMPOSITES come from the person concerned.

– Processing of CUSTOMER DATA

For what purposes do we process your personal data?

In CRYS COMPOSITES we process the information provided by the interested parties with the main purpose of providing the requested services, as well as to perform the administrative, accounting and tax management derived from such services or product sales, and, where appropriate, to send commercial communications about our products and services.

No automated decisions will be made based on the data provided.

How long will we keep your data?

The data will be kept for as long as the data subject does not request its deletion, and if applicable, for the years necessary to comply with legal obligations.

What is the legitimacy for the processing of your data?

• Execution of a contract: Providing the requested services
• Legal obligation: To perform the administrative, accounting and tax management of the services requested.
• Legitimate interest of the responsible party: To send commercial communications about our products and services.

To which recipients will your data be communicated?

The data will be communicated to the following recipients:

• Tax Agency, in order to comply with legal obligations. (Legal requirement).
• Financial institutions, in order to issue the corresponding receipts, if applicable. (Contractual requirement)

Data transfers to third countries

No transfer of data to third countries is foreseen.

How did we obtain your data?

The personal data that we process in CRYS COMPOSITES come from the person concerned or his legal representative.

The categories of data processed are:

• Identification data
• Postal and e-mail addresses
• Commercial information
• Bank information, if applicable

– Treatment of the USE of the IMAGE

For what purposes do we process your personal data?

In CRYS COMPOSITES we process the data obtained (image and, where appropriate, voice) in order to publish these images on websites or social networks, as well as in other media, such as magazines, publications, etc., for advertising or dissemination of our activities.

No automated decisions will be made based on the data provided.

How long will we keep your data?

The data will be retained from the time the user gives consent until the user withdraws such consent.

What is the legitimacy for the processing of your data?

Express consent of the interested party: Use of photographs and, if applicable, videos where the image of the interested party appears.

It is also reported that by granting consent the images may be published on the company’s website, social networks and any support that the company deems appropriate to publicize its activities, events and services.

To which recipients will your data be communicated?

They will be published on the company’s website and/or social networks or other media.

Data transfers to third countries?

The use of images in social networks can involve international transfers of

data.

– Data processing for ADVERTISING

For what purposes do we process your personal data?

In CRYS COMPOSITES we process the information provided by interested parties in order to manage the sending of commercial communications about our products and / or services by electronic means (e-mail, WhatsApp, SMS …).

No automated decisions will be made based on the data provided.

How long will we keep your data?

The data will be retained from the time the user gives consent until the user withdraws such consent.

What is the legitimacy for the processing of your data?

Consent of the interested party (by signing the document to obtain consent, marking or ticking the check box or any other valid means of obtaining consent): For the sending of commercial communications.

To which recipients will your data be communicated?

Platforms for sending advertising by electronic means, in order to send it with guarantees and obtain statistical data.

Data transfers to third countries?

No transfer of data to third countries is foreseen.

How did we obtain your data?

The personal data that we process in CRYS COMPOSITES come from the person concerned.

The categories of data processed are:

• Identification data and postal and e-mail addresses
• Commercial information.

RIGHTS OF THE INTERESTED PARTY

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether or not CRYS COMPOSITES is processing personal data concerning them.

Interested persons have right of access (art. 15 RGPD) to their personal data, as well as to request the rectification (art. 16 RGPD) of (art. 16 RGPD) of inaccurate data or, where appropriate, request its deletion (art. 17 RGPD) when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, the interested parties may request request the limitation (Art. 18 RGPD) of the processing of their data, in which case we will only keep them for the exercise or defense of claims.

In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their personal data. object to the processing (art. 21 RGPD) of their data. In this case, CRYS COMPOSITES will stop processing the data, except for compelling legitimate reasons or the exercise or defense of possible claims.

You will also have the right to request the portability (art. 20 GDPR) of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, so that it can be transmitted to another entity directly, where technically possible.

If you have given your consent for a specific purpose, you have the right to withdraw your consent. right to withdraw your consent (art. 7 RGPD) at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

You may exercise your rights by contacting the responsible in person, by mail or by email to the email address of the responsible, sending the instance / request. The forms for the exercise/application of rights can be found on the website of the Spanish Data Protection Agency:

https://www.aepd.es/reglamento/derechos/index.html#section1

In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority, by accessing the electronic headquarters of the Spanish Data Protection Agency:

https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/queSede.jsf

OBLIGATION TO PROVIDE THE DATA

The data requested in the forms accessible from the CRYS COMPOSITES Website and, in general, those requested by the company for the provision of the service/sale of the product, are, in general, mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if they are not provided or are not provided accurately, it is possible that requests cannot be fulfilled correctly.

In the event that the interested party provides data of third parties, he/she declares to have the consent of these and undertakes to transfer to the interested party, owner of such data, the information contained in this Privacy Policy, exempting CRYS COMPOSITES from any liability in this regard.

SECURITY MEASURES

Personal data shall be processed in a lawful, fair and transparent way in relation to the data subject (“lawfulness, fairness and transparency”); collected for specified, explicit and legitimate purposes, and not further processed in a way incompatible with those purposes; adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, kept in a form which permits identification of data subjects for no longer than is necessary for the purposes of the processing of the personal data (respecting the statute of limitations for liabilities); processed in such a way as to ensure appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, through the implementation of appropriate technical or organizational measures (“integrity and confidentiality”).

We follow strict criteria for the selection of service providers with access to personal data, in order to comply with their data protection obligations, as well as to formalize with them the corresponding data processor contract (art. 28 RGPD), whereby they will be required, among others, to: implement appropriate technical and organizational measures; process the data according to our instructions; and delete or return the data to us once the provision of the services has been completed.