8.1.-Rights of Interested parties

The Owner of the personal data has the following rights in accordance with the RGDP.

·   Right to information.- Right to be informed (art. 15 of the RGDP) about the processing of your personal data.

·   Right to rectification.- Right to request that we correct (Art. 16 of the GDPR) incorrect or incomplete personal data that concerns you. 

·  Right to deletion.- If the conditions specified in Art. 17 of the RGDP apply, you as the owner of the personal data have the right to request the deletion of your data. You may, for example, request the deletion of your data, to the extent that it is no longer necessary for the purposes for which they were collected. You can also request deletion if your data were processed on the basis of your consent and you withdraw said consent.

·  Right to limitation of processing.- Right to request the limitation of the processing of your personal data. Do not hesitate to contact us. The right to restrict processing exists in the following cases:

-   If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. While verification lasts, you have the right to request the limitation of the processing of your personal data.

-   If the processing of your personal data is illegal, you can request the limitation of the processing of the data instead of its deletion.

-   If we no longer need your personal data, but you need them to exercise, defend or file legal claims, you have the right to request the limitation of the processing of your personal data instead of its deletion. 

-   If you raise an objection pursuant to Art. 21 (1) GDPR, a balance must be achieved between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request for the limitation of the processing of your personal data. 

-   If you have restricted the processing of your personal data, these data may only be used with your consent - except for storage - for the purposes of filing, exercising, or defending legal claims or to protect the rights of another natural or legal person. or also for reasons of important public interest of the European Union or of a Member State.

·       Right to data portability. - With respect to the data that we process automatically based on your consent or in the context of the fulfilment of a contract, you have the right to have said data transferred to you or to a third party, in a standard machine-readable format. If you request the direct transfer of the data to another responsible person, it will only be carried out to the extent that it is technically feasible.

·       Right to make opposition. - If the data processing is carried out based on article 6 (1) e or f of the GDPR, you have the right to make opposition to the processing of your personal data at any time for reasons arising from your situation; this also applies to profiling based on these provisions. The relevant legal basis on which the processing is based can be found in this data protection declaration. If you raise an objection, we will stop processing the relevant personal information, unless we can verify strong and legitimate reasons for the processing, which override your interests, rights, and freedoms, or where the data processing is necessary to submit, exercise or defend legal claims (right to object in accordance with Art. 21 (1) GDPR). If your personal data is processed for the purposes of direct advertising, you have the right to make objection at any time to the processing of personal data concerning you for the purposes of this form of advertising; this also applies to profiling, when it is related to this type of advertising. If you make objection, your personal data will no longer be used for direct marketing purposes. (Objection according to Art. 21(2) GDPR).

·       Right of revocation. - Many data processing operations are only possible by counting on your explicit consent. You can withdraw your consent at any time. The legality of the data processing carried out up to the moment of revocation will not be affected by it. 

8.2.-How to exercise the rights

The interested party, owner of the personal data, has the right to withdraw his consent at any time.

Likewise, we inform you that the interested party, owner of the personal data, may exercise their rights of access, rectification, and deletion (Right to be forgotten), limitation of data, portability of data and opposition, by sending a letter to Avda. Diagonal 538 – 08002 Barcelona, or email hola@joieriagrau.com

GRAU BARCELONA DIAGONAL, S.L.. counts on an internal protocol called the Protocol for the Exercise of Rights, as well as a Record of the Exercises of Rights carried out by the Owners of Personal Data processed as Data Controller.

8.3.- Competent Data Protection Control Authority

The interested person can file a claim with the competent data protection control authority, which is currently the Spanish Data Protection Agency (AEPD), through its electronic website: www.sedeagpd.gob.es/sede -electronica-web, or by sending a postal letter to C/ Jorge Juan nº6 – 28001 MADRID.