Privacy Policy

4.1. PRIVACY POLICY

DAVIDYADRIAN SL must ensure that personal data of the data subject collected on the website are processed according to the principles relating to processing:

  • Processed lawfully, fairly and transparently in relation to the data subject ("lawfulness, fairness and transparency").
  • Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes ("purpose limitation").
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimisation").
  • Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay ("accuracy").
  • Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed ("storage limitation").
  • Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures ("integrity and confidentiality").

Thus, DAVIDYADRIAN SL will be responsible for complying with the above and must be able to demonstrate it subsequently ("proactive responsibility").

Likewise, processing by the entity will only be lawful if it meets at least one of the following conditions ("lawfulness of processing"):

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Where processing is based on consent by the data subject, the controller must be able to demonstrate that the data subject has consented to the processing of his or her personal data. It shall be as easy to withdraw consent as to give it.

DAVIDYADRIAN SL must include in personal data collection forms the information necessary to comply with articles 13 and 14 of the GDPR.

Obligations when obtaining personal data

  1. Provide the identity and contact details of the Data Controller and, where applicable, the Data Protection Officer.
  2. Specify the legitimate interests of the controller or a third party, where applicable.
  3. Provide the recipients or categories of recipients of the personal data.
  4. Indicate the period for which the personal data will be stored or the criteria used to determine that period.
  5. Inform about the data subject's rights (access, rectification, erasure, objection, restriction, and data portability).
  6. Inform about the possibility of withdrawing consent at any time and lodging a complaint with a Supervisory Authority.
  7. Specify whether the provision of personal data is a statutory or contractual requirement, and the consequences of failing to provide such data.
  8. Inform about the existence of automated decision-making, including profiling.

Layered or tiered information model

Information must be provided in clear, plain language and in a concise, transparent, intelligible and easily accessible form. According to article 11 of the LOPDGDD, a distinction is made between:

  • First layer: Basic information, presented at the same time and through the same medium in which data are collected.
  • Second layer: Additional and detailed information, presented in paper or electronic format.

4.1.1. Basic website information

User registration

Controller: DAVIDYADRIAN SL
Purpose: Collection, recording, and processing of data for user registration.
Rights: Access, rectify, and erase data, as well as other rights, as explained in the additional information.
Additional information: You can consult detailed information on our website, in the Privacy Policy section.
I have read and accept the basic data protection information.

Online product purchase management

Controller: DAVIDYADRIAN SL
Purpose: Collection, recording, and processing of data to manage product payment and shipping.
Rights: Access, rectify, and erase data, as well as other rights.
Additional information: Available in the Privacy Policy section.
I have read and accept the basic data protection information.

Web user management

Controller: DAVIDYADRIAN SL
Purpose: Collection, recording, and processing of user data.
Rights: Access, rectify, and erase data, as well as other rights.
Additional information: Available in the Privacy Policy section.
I have read and accept the basic data protection information.

Commercial actions web form

Controller: DAVIDYADRIAN SL
Purpose: Collection, recording, and processing of data for handling inquiries and/or requests, as well as for advertising and commercial prospecting.
Rights: Access, rectify, and erase data, as well as other rights.
Additional information: Available in the Privacy Policy section.
I have read and accept the basic data protection information.
YES, I want to receive commercial communications.

Cookie installation

Controller: DAVIDYADRIAN SL
Purpose: Management and installation of cookies.
Rights: Access, rectify, and erase data, as well as other rights.
Additional information: Available in the Privacy Policy section.
I have read and accept the basic data protection information.

Web form management

Controller: DAVIDYADRIAN SL
Purpose: To answer your queries and/or requests.
Rights: Access, rectify, and erase data, as well as other rights.
Additional information: Available in the Privacy Policy section.
I have read and accept the basic data protection information.

4.1.2. Website Privacy Policy

PRIVACY POLICY OF www.lasolana2.com

Website owner details

  • Company Name: DAVIDYADRIAN SL
  • Tax ID (NIF): B04728598
  • Domain: www.lasolana2.com
  • Postal Address: Avenida Monserrat 25 Ático, 04006 Almería (Almería)
  • Email Address: info@lasolana2.es
  • Phone Numbers: 676 129 773
  • Commercial Registry: Volume 1468, Folio 81, Sheet AL 38866, Entry 3

Data protection

In accordance with current and applicable personal data protection regulations, we inform you that your data will be incorporated into the processing system owned by DAVIDYADRIAN SL (NIF B04728598) with registered office at Avenida Monserrat 25 Ático, 04006 Almería (Almería).

Processing activities carried out

Newsletter

  • Purpose: Management of newsletter subscription.
  • Retention period: As long as the granted consent is maintained.
  • Legal basis: The consent of the data subject.
  • Data processed: Name and surname, email address.

User registration

  • Purpose: Collection, registration, and processing of data for user registration.
  • Retention period: As long as consent is maintained, unless there is a legal obligation.
  • Legal basis: The consent of the data subject.
  • Data processed: Name and surname, phone number, Tax ID, postal address, and email address.

Online product purchase management

  • Purpose: Management of product payment and shipping.
  • Retention period: 5 years (tax law) and 10 years (L.O. 7/2012).
  • Legal basis: Compliance with a law.
  • Data processed: Name and surname, postal address, email address, signature, financial or insurance data.
  • Disclosures: Tax Agency, banks, savings banks, and public bodies with tax jurisdiction, in compliance with regulations.

Web user management

  • Purpose: Collection, registration, and processing of user data.
  • Retention period: As long as consent is maintained, unless there is a legal obligation.
  • Legal basis: The consent of the data subject.
  • Data processed: Name and surname, email address.

Commercial actions web form

  • Purpose: To handle inquiries or requests, advertising, and commercial prospecting.
  • Retention period: As long as consent is maintained, unless there is a legal obligation.
  • Legal basis: The consent of the data subject.
  • Data processed: Name and surname, email address.

Cookie installation

  • Purpose: Management and installation of cookies.
  • Retention period: As long as the granted consent is maintained.
  • Legal basis: The consent of the data subject.
  • Data processed: Email address, IP address.

Web form management

  • Purpose: To answer inquiries and requests.
  • Retention period: As long as the granted consent is maintained.
  • Legal basis: The consent of the data subject.
  • Data processed: Name and surname, email address, IP address.

Rights of data subjects

DAVIDYADRIAN SL informs users that they may exercise the rights of access, rectification, restriction, erasure, data portability, objection to processing, and the right not to be subject to automated decision-making, including profiling, as well as to withdraw the consent granted.

Description of rights

  • Right of Access: To obtain confirmation regarding the processing of data and associated information.
  • Right to Rectification: To modify inaccurate or incomplete data.
  • Right to Restriction: To limit the purposes of processing in certain cases.
  • Right to Erasure: To request the deletion of data, except for legal exceptions.
  • Right to Portability: To receive and transmit data to another controller.
  • Right to Object: To object to processing based on legitimate interest or direct marketing.
  • Right not to be subject to automated decisions: To avoid decisions based solely on automated processes or profiling.
  • Right to withdraw consent: To withdraw consent at any time and without cost.

Exercise of rights

To exercise any of the aforementioned rights, the data subject must send a request to:

  • Postal address: Avenida Monserrat 25 Ático, 04006 Almería (Almería), attention to DAVIDYADRIAN SL.
  • Email: info@lasolana2.es

The request must include:

  • Reliable identification of the applicant (and, if in doubt, additional documentation such as ID or associated email).
  • In case of representation, express authorization and supporting documents.
  • The right(s) intended to be exercised and specific processing, if applicable.
  • Postal or electronic address for notifications.
  • Supporting documents, if necessary.
  • Means to prove the sending and receipt of the request.

You also have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that the processing of your data infringes current regulations.

Security measures

DAVIDYADRIAN SL undertakes to adopt the necessary technical and organisational measures, in accordance with the risk level of the processing activities carried out, to guarantee the integrity, confidentiality and availability of personal data.

Last updated: May 10, 2025