Web Privacy Policy

icono flecha

GOURMAN SISTEMAS SL must ensure that the personal data of the data subject is processed according to the principles related to processing:

  • Processed lawfully, fairly, and transparently in relation to the data subject (“lawfulness, fairness, and transparency”).
  • Collected for specified, legitimate, and explicit purposes, and not processed in a way incompatible with those purposes (“purpose limitation”).
  • Adequate, relevant, and limited to what is necessary for the purposes for which they are processed (“data minimization”).
  • Accurate and, if necessary, kept up to date, adopting reasonable technical and organizational measures to ensure that inaccurate data are erased or rectified without delay (“accuracy”).
  • Kept in a form that allows identification for no longer than is necessary for the purposes of the processing (“storage limitation”).
  • Processed in a manner that ensures appropriate security through the use of appropriate technical or organizational measures (“integrity and confidentiality”).

Thus, GOURMAN SISTEMAS SL will be responsible for compliance with the above and must be able to demonstrate this subsequently (“accountability”).

Similarly, the processing carried out by the entity will only be lawful if at least one of the following conditions is met:

  • The data subject has given consent to the processing of their personal data for one or more specific purposes;
  • The processing is necessary for the performance of a contract in which the data subject is a party or for the application of pre-contractual measures at the request of the data subject;
  • The processing is necessary for compliance with a legal obligation to which the data controller is subject;
  • The processing is necessary to protect the vital interests of the data subject or another person;
  • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • The processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, particularly where the data subject is a child. This legitimate basis will not apply to processing carried out by public authorities in the exercise of their functions.