Website Privacy Policy

Your Privacy Is Our Priority

We are a company that values transparency in information as a fundamental aspect of building trust with those involved in our project, as well as suppliers and customers. Protecting the personal data of those who trust us is of the utmost importance. Therefore, we want to inform you through this Privacy Policy about how we collect, process, or use such data.

This privacy policy outlines the basis on which the company processes the personal data that our users voluntarily provide through the website.

This Policy will always be applicable when data is provided to the company, which will be responsible for your data (Data Controller), and through any contact or subscription forms where personal data (name, email, etc.) is collected.

Our Commitments

To respect our users' privacy and process their personal data with their consent.

To process only the personal data necessary to provide the requested service and to handle it securely and confidentially, taking necessary measures to prevent unauthorized access and misuse.

Not to use personal data for purposes in which we have not obtained prior consent.

Not to share personal data with third parties.

To retain personal data only for as long as necessary for the specific purpose for which it was provided.

Who is responsible for your personal data?

Gift Campaign is operated by GIFT CAMPAIGN, SL, a company registered in Spain, which acts as the data controller for the purposes of applicable data protection legislation.

Company Name: GIFT CAMPAIGN, SL

Tax ID: ESB66221490

Address: C/Pallars 99, 2nd floor, offices 24 and 27, 08018, Barcelona. Spain.

Although GIFT CAMPAIGN, SL is a Spanish company, Gift Campaign operates commercially in the United Kingdom, offering services specifically aimed at UK customers. For sales and invoicing purposes in the UK, Gift Campaign operates under its UK VAT registration number GB472104323, and applies UK tax and invoicing rules to all orders placed through the UK website.

All matters relating to personal data protection are governed by Spanish legislation, in accordance with the General Data Protection Regulation (EU GDPR). GIFT CAMPAIGN, SL remains the sole data controller, regardless of the country from which our services are accessed.

Personal data may be processed in Spain or elsewhere within the European Union. In all cases, the same GDPR standards, safeguards, and legal protections apply, ensuring a consistent and high level of data protection.

Gift Campaign applies appropriate technical and organisational measures to guarantee the security, confidentiality, and lawful processing of personal data at all times.

If you have any questions about how your personal data is handled or about our legal and operational structure, you can contact us.

What is personal data and personal data processing?

Personal data is any information about an identified or identifiable natural person. An identifiable natural person is someone who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

Personal data processing involves any operation or set of operations performed on personal data or sets of personal data, whether by automated means or not, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

What data processing do we perform and for what purposes?

Request for information: Managing user information requests through the contact form and/or provided email address, postal address, and/or phone number on the website.

Newsletter subscription: Managing newsletter subscriptions.

Working with us via CV submission: Managing received CVs through the website form.

User profile registration and access: Managing user registration and access to the user portal using a corresponding username and password.

Blog comments management: Managing the submission and reception of user comments on the blog.

Information Collection

We collect personal information such as name, email address, telephone number, tax identification number, and other data necessary to provide our services. This information is collected voluntarily through web forms and direct communications.

What personal data do we collect?

Through our website, we can collect personal data for various purposes:

Request for information: We collect the personal data provided for the query.

Newsletter subscription: We collect your email address.

Working with us via CV submission: We collect the information contained in the CV you provide.

User profile registration and access: We collect the username and password, as well as any other data provided to create the account or profile.

Blog comments management: We collect any data provided when posting the comment.

Depending on the purpose for which the data is provided, the necessary data will be required. It is important that the user is aware of the data provided and its purpose, as by providing it, you are accepting that we collect, store, and use such data for the required purpose. You may withdraw your consent at any time through the appropriate channels. The user's consent is the legal basis and justification for processing their personal data.

What is the legal basis for processing personal data?

In accordance with current data protection regulations, we need a legal basis to process your personal data. The legal basis is your consent.

What rights do you have over your personal data?

As a user, you can exercise the following rights:

Right of access: You have the right to obtain confirmation from the company as to whether or not your personal data is being processed, and if so, what data is being processed.

Right of rectification: You have the right to obtain the correction of inaccurate personal data concerning you from GIFT CAMPAIGN, SL. The rectification request must indicate the data to be modified.

Right of opposition: You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you based on the company's legitimate interest.

Right of erasure: You have the right to obtain the erasure of your personal data from GIFT CAMPAIGN, SL.

Right to data portability: You have the right to have your personal data transferred to another data controller.

Right to restriction of processing: You have the right to request the suspension of processing your data in certain circumstances.

You can exercise these rights at any time by writing and providing proof of your identity to the data controller at the address mentioned above or via email at finance@giftcampaign.com.

Additionally, you can file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you believe that the processing of your personal data violates applicable law.

Data Security and Storage

We will retain the data for the time strictly necessary to provide the requested service and while the data subject does not request its deletion. We adopt appropriate technical and organizational measures against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

What personal data do we share with third parties?

Data sharing is not anticipated except in cases where there is a legal obligation or communication necessary to adequately provide the requested service. There is no provision for international data transfers.

Data Retention

The personal data provided by customers will be retained by GIFT CAMPAIGN as follows:

• For users who have made purchases on the website, the data will be retained unless and until the user requests the deletion of their personal data.
• For customer service and email enquiries, the data will be retained for as long as necessary to manage and respond to each specific request.
• For newsletters and commercial communications, the data will be retained until the user withdraws consent.
• For data collected through purchases, the data will be retained for the duration of the contractual relationship.

Once the above retention periods have elapsed, personal data may be blocked and retained solely to address potential legal liabilities, and only for the legally established limitation period.

Once this period has ended, GIFT CAMPAIGN will proceed to delete the personal data.