Privacy policy

This policy explains how [RAZÓN SOCIAL O NOMBRE Y APELLIDOS DEL TITULAR] processes the personal data of people who visit henji.es or get in touch through the website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 on data protection and the guarantee of digital rights (LOPDGDD).

1. Data controller

• Controller: [RAZÓN SOCIAL O NOMBRE Y APELLIDOS DEL TITULAR]
• Tax ID: [NIF / CIF]
• Address: [DOMICILIO: calle y número, código postal, población, provincia]
• Email: hola@henji.es
• Data protection officer: [DPO DETAILS, or "none appointed" where not applicable]

2. What data we process

We only process the data you give us, plus what browsing generates technically:

• Contact form: name, email address and the content of your message.
• Email or telephone: your contact details and whatever you include in your message.
• Server logs: IP address, date and time of access and pages requested, generated automatically for security and operational reasons.

We do not process special categories of data (health, beliefs, religion and the like), we do not build profiles, and we make no automated decisions with legal effects. The site is not aimed at children under 14.

3. Why we process it, and on what legal basis

• To answer your enquiry. Basis: your consent when submitting the form (art. 6.1.a GDPR) and, where the enquiry precedes a contract, pre-contractual measures (art. 6.1.b).
• To manage client and supplier relationships. Basis: performance of the contract (art. 6.1.b) and compliance with legal, accounting and tax obligations (art. 6.1.c).
• To keep the site secure and working. Basis: the controller's legitimate interest (art. 6.1.f).

We do not send marketing messages without your prior, explicit consent.

4. How long we keep it

• Enquiries that do not lead to a contract: [PERIOD, for example one year] from the last contact.
• Client data: for as long as the relationship lasts and then for the applicable statutory limitation periods (six years for commercial and accounting matters, four for tax).
• Server logs: [PERIOD, for example twelve months].

5. Who we share it with

We do not sell or disclose your data to third parties. Only the providers needed to run the service have access, under a signed data processing agreement (art. 28 GDPR):

• Website hosting: [PROVEEDOR DE ALOJAMIENTO: nombre, NIF y país donde están los servidores]
• Email: [PROVEEDOR DE CORREO ELECTRÓNICO]
• Public authorities, courts and law enforcement: where legally required.

6. International transfers

[TO COMPLETE: state that providers process data within the European Economic Area or, where one is outside it, name the provider and the safeguard relied on: a European Commission adequacy decision or standard contractual clauses.]

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, without affecting the lawfulness of processing carried out beforehand.

To do so, write to hola@henji.es stating the right you wish to exercise and attaching a copy of a document proving your identity. We will reply within one month.

If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data against destruction, loss, alteration and unauthorised access: encrypted connections (HTTPS), access control, security updates and backups.

9. Cookies

Cookie use is described in the Cookie policy.

10. Changes to this policy

This policy may be updated to reflect legal or service changes. The version in force is the one published on this page.

Last updated: [FECHA DE LA ÚLTIMA ACTUALIZACIÓN]