MYLED LIGHTING RETAIL, S.L. complies with the treatment of personal data of its customers with the current legislation in Spain and the European Union. To this end, it adopts the necessary technical and organizational measures to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided, given the state of technology, the nature of the data and the risks to which they are exposed. MYLED LIGHTING RETAIL, S.L. uses social networks and this is another way to reach you. The information collected through the messages and communications you post may contain personal information that is available online and accessible to the public. Through our website we collect personal information related to your browsing through the use of cookies. To know clearly and precisely what cookies we use, what their purposes are and how you can configure or disable them, please see our Cookies Policy. Below, in compliance with the provisions of the data protection regulations, we inform you about the terms and conditions of the data processing carried out by MYLED LIGHTING RETAIL, S.L.

Who is responsible for the processing of your data?

The responsible will be MYLED LIGHTING RETAIL, S.L. with CIF: B70765987 and social address located in Vilagarcía De Arousa, Pontevedra (ES) 36600, Spain.

For what purposes do we process your data and under what legitimacy?

The processing of your data pursues the following purposes:

• Purpose 1: Provision of services to third parties for customized software development and innovation projects.
• Purpose 2: Sending information about our services.
• Purpose 3: Development of commercial actions about our products and/or services.
• Purpose 4: Personnel selection management.
• Purpose 5: To channel requests for information, suggestions and complaints that you may send us.
• Purpose 6: Management of the commercial relationship with our suppliers.

What kind of data do we process?

For the purposes set out in the previous section, the following types of data are processed:

• Data provided directly by the customer: data provided directly by the customer, either at the time of providing a service or by requesting information or a quote.
• Data obtained from sources other than the client itself: data obtained from public sources.
• Data derived from the development of the relationship: data provided indirectly or directly by the client that derive from the provision of the service and the maintenance of the activity.

To whom do we communicate your data?

In general, in MYLED LIGHTING RETAIL, S.L. we do not share your personal information, except for those assignments that we must make based on imposed legal obligations. Also, your personal information will be available to the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the treatment.

How do we protect your information?

MYLED LIGHTING RETAIL, S.L. is committed to protecting your personal information. We use physical, organizational and technological measures, controls and procedures, reasonably reliable and effective, aimed at preserving the integrity and security of your data and ensure your privacy.

In addition, all personnel with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.

All these security measures are reviewed periodically to ensure their adequacy and effectiveness.

However, absolute security cannot be guaranteed and no security system is impenetrable, so in the event that any information under our control and under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Control Authority and, where appropriate, those users who may have been affected to take appropriate action.

For how long?

Personal data will be retained for as long as the contractual relationship with the customer is maintained. After termination of the contractual relationship, the data will be deleted in accordance with the provisions of the data protection regulations.

In the event that you wish to join our staff and apply for one of our jobs, the data provided will become part of our employment exchange and will be kept for the duration of the selection process and for a maximum of three years or until you exercise your right of deletion.

If at any time we have collected your data to address you as a potential user of our services or to respond to a request for information made by you, such data will be retained for a maximum of three years from its collection, and will be deleted after that period if no contractual relationship has been formalized or at the time you request us to do so.

What are your rights?

Our data protection regulations give you a number of rights in relation to data processing which can be summarized as follows:

• Right of access: to know what type of data we are processing and the characteristics of the processing we are carrying out.
• Right of rectification: to be able to request the modification of your data because they are inaccurate or not truthful.
• Right of portability: to be able to obtain a copy in an interoperable format of the data being processed.
• Right of erasure: request the erasure of your data when the processing is no longer necessary.
• Right of opposition: to request the cessation of the sending of commercial communications in the terms indicated above.
• Right to revoke the consent given, being your request processed within approximately 10 days.
• Right to file a complaint with the supervisory authority (in Spain the AEPD).

You can exercise your rights by sending an e-mail to info@thefocoproject.com, indicating the right to be exercised and attaching the required documentation. On the website of the AEPD you can find a series of models that will help you in the exercise of your rights.