Privacy Policy

USER INFORMATION

ACTURUS CAPITAL, S.L. informs you that in accordance with General Regulation (EU) 2016/679 on Data Protection (GDPR) and Spanish Organic Law 3/2018 of 5 December on Data Protection and the Guarantee of Digital Rights (Ley Orgánica 3/2018), we will process your data as specified in this Privacy Policy.

This Privacy Policy details how and why we collect your personal data, what we do with it, who we share it with, how we protect it, and your options with regard to its processing.

This Policy applies to the treatment of your personal data collected by the company for the provision of services. If you complete any of our forms, you must first accept the terms of this Policy and we will retain a record of your consent.

1. DATA CONTROLLER

The entity responsible for processing the data collected on this website is:

Name: Acturus Capital, SL (EL GANSO)
Tax ID: B83233346
Address: c/ Impresores 14, 28660 Boadilla del Monte, Madrid
e-mail: info@elganso.com

2. PURPOSE, LEGITIMACY, STORAGE

We collect and process your personal data through the forms available on our website:

Work with us

Purpose: To process your application for vacant positions and manage your participation in current and future selection processes.
Legitimacy: Processing is based on the candidate’s unequivocal consent when submitting their data and their CV.
Storage: The CVs received are stored in our databases for a maximum of one year.

Purpose: To respond to your requests for information and address your questions and concerns.
Legitimacy: Processing is based on the execution of a response after completing and submitting the form.
Storage: Your data will be stored in our databases for 12 months.

Newsletter

Purpose: To send you commercial information about our activities and services, including by electronic means.
Legitimacy: Processing is based on the user’s unequivocal consent when completing the subscription form.
Storage: Your data will be retained until you unsubscribe from our promotional mailings.

Shop

Purpose: To manage product purchases and send information related to those purchases.
Legitimacy: Processing is based on contractual relationship and legitimate interest.
Storage: Your data will be retained for the legally required period of time.

Events

Purpose: To manage your participation in events, contests, or promos.
Legitimacy: Processing is based on the user’s unequivocal consent when completing the subscription form.
Storage: Your data will be retained until you unsubscribe from our promotional mailings.

3. TYPE OF DATA COLLECTED

The type of data requested includes:

Identification and contact details.
Professional details
Banking details

We also automatically collect data about your visit(s) to our website, as described in the Cookie Policy.

ACTURUS CAPITAL, S.L. does not collect data considered particularly sensitive, such as that pertaining to race, ethnicity, politics, religion, philosophy, union participation, health, sexual activity or orientation, biometrics, or genetics.

It is the responsibility of each data subject to ensure the information provided is true, accurate, complete, and up-to-date; they alone will be responsible for any direct or indirect damage or loss caused by a violation of this obligation.

Should a User provide data belonging to a third party, the User must inform that third party of the aspects contained in this Privacy Policy and obtain their consent to provide their data to ACTURUS CAPITAL, S.L.

4. DATA RECIPIENTS

Data may be communicated to third parties in their capacity as processors, for the provision of various services, but we will not transfer your data to third parties unless required to do so by law or without your prior notification and consent.

We share your information with:

Service providers hired by (Data Processors). For example: our hosting service, IT personnel or legal advisors. All processors are contractually obligated to use the personal data provided exclusively for the purpose stipulated in the contract and to return the data to us or destroy it upon completion.

Service providers located outside the European Economic Area (international data transfers). These instances require recipients to comply with the measures designed to protect personal data and based on mechanisms approved by the EU that allow such transfers, like standard contractual clauses, for example.

By legal obligation: Tax Authority, the competent Public Administration, Judges, Courts, etc.

5. DATA SUBJECT RIGHTS

You have the right to request confirmation about whether we process your personal data and, if so, to access that data or request its portability.
You have the right to object to the processing of your data (we take into account your objection to receiving publicity materials) and/or to request its erasure.
You may request to restrict the processing of your data in the following cases:

While the objection to the accuracy of your data is being verified.
If the processing is unlawful, but you oppose the erasure of your data.
If the educational centre does not need your data, but you need it to exercise or defend your claims.
If you have opposed the processing of your data to fulfil a mission in the public interest or to satisfy a legitimate interest, while verifying if legitimate purpose of the processing prevails over your own.

You may withdraw your consent at any time. However, please bear in mind that after fulfilling your revocation request, we may continue to communicate with you when necessary to comply with our legal obligations or to fulfil your agreement with us.

To properly exercise your rights, we ask that, when issuing your request, you verify your identity by including a photocopy of your ID (or equivalent official document) and identify the company to which your data is linked, if applicable. Available channels:

Post: addressed to the Centre, indicating in the subject line: "Data Protection".

Email: addressed to privacidad@elganso.com, indicating in the subject line: "Data Protection".

If you believe we have failed to process your personal data in accordance with regulation, you may contact the Data Protection Officer at privacidad@elganso.com, indicating in the subject line: Data Protection Claim.

You may obtain further information about your rights by contacting the Spanish Data Protection Agency (www.aepd.es), where you may also file a complaint.

6. PRIVACY POLICY UPDATES

In an effort to continuously improve our services, processes, and the protection of data subject rights, we will update this privacy policy periodically. We recommend that you consult it on a regular basis.

Privacy Policy

USER INFORMATION

ACTURUS CAPITAL, S.L., informs you that, in accordance with the provisions of the General Regulation (EU) 2016/679, data protection (GDPR) and in the L.O. 3/2018, of data protection and guarantee of digital rights (LOPDGDD), we will process your data as reflected in this Privacy Policy.

In this Privacy Policy we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it and your options regarding the treatment of your personal data.

This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you complete any of our forms you must first accept the terms of this Policy and we will keep a record of that acceptance.

1. DATA CONTROLLER CONTACT DATA

The person responsible for processing the data collected on this website is:

Company name: ACTURUS CAPITAL, S.L.
Trade name: El Ganso
Tax numer: B83233346
Address: c/ Impresores 14, 28660 Boadilla del Monte, Madrid
e-mail contact DPO: privacidad@elganso.com

2. PURPOSE, LAWFULNESS AND STORAGE
We collect and process your personal data through the forms on our website:

Newsletter

Purpose: To send you commercial information about our activities and services, including by electronic means.
Lawfulness: The processing is based on the unequivocal consent given by the user when filling in thesubscription form.
Storage: Until you request the cancellation of the subscription to our shipments with advertising character.

Loyalty customer registration

Purpose: To manage your registration as a member of our loyalty program Gansociety and inform you about discounts on your purchases, early access to sales and launches, invitations to events, gifts on special occasions and other advantages.
Lawfulness: The treatment is based on the unequivocal consent given to us by the user when completing and sending the registration form.
Storage: The data will be retained as long as the User does not request to unsubscribe as a member of our program or exercise his/her right of deletion.

Purchase

Purpose: Management of the purchase of products and sending advertising communications, where appropriate.
Lawfulness: Execution of contractual relationship and, for the sending of advertising communications, the consent granted by checking the corresponding optional box.
Storage: The data generated when formalizing your purchase will be retained for 6 years by legal obligation, and the data relating to the subscription to the newsletter, until you request unsubscription or revoke the consent granted for this purpose.

Events

Purpose: To manage your participation in the corresponding sweepstakes, contest or activity and send advertising communications, if applicable.
Lawfulness: The processing is based on the unequivocal consent given to us by the user when filling in the form to participate and, for the sending of advertising communications, the consent given by ticking the corresponding optional box.
Storage: The data will be kept as long as necessary to manage your participation in the corresponding sweepstakes, contest or activity. The data relating to the subscription to the newsletter, until you request the cancellation or revoke the consent given for this purpose.

Also, if you contact us through other means available on this website (phone or email), we will process your data in order to answer your requests for information, fulfill your requests and answer your questions or doubts. The basis of legitimacy is the unequivocal consent that you give us when you contact us by the chosen means. We will keep your data in our databases for a maximum period of 12 months.

3. TYPES OF DATA COLLECTED

The types of data requested are:

Identification and contact data.
Personal circumstances data
Bank details
Image and voice in case of using the virtual shopping assistant.

We also automatically collect data about your visit to our website, as described in the cookie policy.

ACTURUS CAPITAL, S.L. does not collect data considered particularly sensitive such as: race or ethnic origin, political opinions or religious or philosophical beliefs, trade union membership, health, sexual activity or sexual orientation, biometrics or genetic data.

It is the responsibility of each user to provide data that is true, accurate, complete and up to date and they alone shall be liable for any damage or harm, direct or indirect, that may be caused as a result of failure to comply with this obligation.

The user guarantees that the data provided are true, exact, complete and up to date, and shall be liable for any direct or indirect damage or harm that may be caused as a consequence of non- compliance with this obligation. In the event that the user provides data of third parties, he/she declares that he/she has their consent and undertakes to pass on to them the information contained in this clause, exempting ACTURUS CAPITAL, S.L. from any liability in this regard. However, ACTURUS CAPITAL, S.L. may carry out checks to verify this fact, adopting the appropriate due diligence measures, in accordance with data protection regulations.

4. RECIPIENTS OF THE DATA

All personal data provided by the user may be communicated to:

Public Administrations, in the cases provided for by law, based on compliance with a legal obligation.
Courts and Tribunals, in the cases provided for by law, based on compliance with a legal obligation.
Banks and financial institutions for the collection of the services offered.
Aplázame (brand of WiZink Bank, S.A.U.) and Klarna Bank AB if you select deferred payment, in order to process the application for financing and, where appropriate, analyze, evaluate and manage the credits that you as a user request, in accordance with their data protection policies that can be found at https://aplazame.com/legal/privacy-policy/ and https://cdn.klarna.com/1.0/shared/content/legal/terms/0/es_es/privacy
Google, you can consult the processing of your data on Google's Business Data Responsibility Site

In addition, ACTURUS CAPITAL, S.L. will have the collaboration of third parties, service providers, who may have access to your personal data, who will process, on behalf of ACTURUS CAPITAL, S.L., user data, for the provision of the contracted services.

To this end, ACTURUS CAPITAL, S.L. follows rigorous procedures for selecting suppliers in order to comply with its data protection obligations, including the signing of the corresponding data processing contract in accordance with art. 28 of the GDPR.

Specifically, ACTURUS CAPITAL, S.L. will rely on the provision of services by third party suppliers who carry out their activity, by way of example and without limitation, in the following sectors of activity: legal advice and technological and computer services.

5. USER RESPONSIBILITY

The user guarantees that he/she is over fourteen (14) years of age and that the data he/she provides to ACTURUS CAPITAL, S.L. are true, accurate, complete and up to date. To this end, the user is responsible for the veracity of all the data he/she provides and shall keep the information provided suitably updated, so that it corresponds to his/her real situation.

Likewise, he/she guarantees that he/she has informed the third parties from whom he/she provides his/her data, if he/she does so, of the aspects contained in this document. He also guarantees that he has obtained their authorisation to provide their data to ACTURUS CAPITAL, S.L. for the aforementioned purposes.

In any case, the User shall be liable for any false or inaccurate information provided through the website, and for any damages, direct or indirect, that this may cause to ACTURUS CAPITAL, S.L. or to third parties.

6. EXERCISE OF RIGHTS

As the owner of the data, the user may send a letter to ACTURUS CAPITAL, S.L., at the address indicated in the heading of this Privacy Policy, or by e-mail to the address: privacidad@elganso.com at any time and free of charge, to exercise the following rights:

a) Right of Access:

You will have the right to be informed by ACTURUS CAPITAL, S.L. as to whether or not it is processing your personal data and, if so, to be able to access such data and receive information on the purposes for which they are processed, the categories of data affected by the processing, the recipients to whom your personal data were communicated and the expected period for which the data will be kept, among other information.

b) Right of Deletion and Opposition:

You have the right to request the erasure of personal data provided that the legal requirements are met or to object to the processing at any time, on grounds relating to your particular situation, in case the processing is based on our legitimate interest.

c) Right of rectification:

You will have the right to request the rectification of inaccurate data concerning you when, among other reasons, they are no longer necessary for the purposes for which they were collected.

d) Restriction of processing and withdrawal of consent:

In certain circumstances (e.g. in case the applicant contests the accuracy of his or her data, while the accuracy of the data is being verified), you may request that the processing of your personal data be restricted and processed only for the exercise or defence of claims. You also have the right to withdraw your consent at any time.

e) Portability of your data:

You will have the right to receive the personal data you have provided to ACTURUS CAPITAL, S.L. in a structured, common and machine-readable format, and to be able to transmit them to another data controller without being prevented from doing so by the controller to whom you have provided them, in the cases legally provided for this purpose.

f) Automated individual decisions:

Likewise, in addition to the aforementioned rights, in the event that automated decisions are taken, including profiling, you will have the right to obtain human intervention by ACTURUS CAPITAL, S.L. and to express your point of view and challenge the decision.

Finally, we inform you that you may lodge a complaint regarding the protection of your personal data with the Spanish Data Protection Agency (www.aepd.es), when the interested party considers that ACTURUS CAPITAL, S.L. has infringed the rights that are recognised by the applicable data protection regulations.

The period to exercise your right, as a data subject, will be one month from receipt of the request, which may be extended for a further two months in cases of complexity or number of requests received.

7. SECURITY MEASURES

ACTURUS CAPITAL, S.L. will treat the User’s data at all times in the strictest confidence and will maintain the mandatory duty of secrecy with respect to them, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organisational measures to guarantee the security of your data and prevent their alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed.

8. ACCEPTANCE AND CONSENT

The User declares that he/she has been informed of the conditions on personal data protection, accepting the content of this Privacy Policy.

9. OBLIGATORY NATURE OF PROVIDING DATA

The data requested on the forms are, in general, obligatory (unless otherwise specified in the required field) in order to comply with the purposes for which they are being collected.

Therefore, if you do not provide them or do not provide them correctly, your requests cannot be dealt with, without prejudice to the fact that you may freely view certain contents of our website.

10. UPDATING THE PRIVACY POLICY

We strive to continually improve our services, processes and the protection of the rights of data subjects and therefore reserve the right to revise this privacy policy at any time we deem appropriate, in which case it will be communicated to users. Please check back regularly to read the latest version of the Privacy Policy.