Área Urbana Asturiana S.L.U. informs you that your personal data will be processed in accordance with the provisions of data protection regulations [Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC, General Data Protection Regulation (GDPR); Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD); Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE)] and other applicable regulations.

The website https://www.canaryoil.com/ is owned by Área Urbana Asturiana S.L.U.

Data Controller:

Identity: Área Urbana Asturiana S.L.U.

VAT ID:

Address: Calle Carreño Miranda, 11 7ºA, Avilés, 33401, Asturias

Phone: +34 684 643 249.

Email: rsgoil@rsgoil.com.

Registered in the Mercantile Registry of Santa Cruz de Tenerife, Volume 3186, Book 0, Folio 190, Section 8, Sheet TF 9366, Entry or annotation 14.

Data Protection Officer (DPO): AFONSO & GONZÁLEZ ASESORES, S.L.

DPO-ES2111220. Certificate of Conformity with the DPO Certification Scheme of the Spanish Data Protection Agency (AEPD).

Email: dpd@aygasesores.net.

Definitions:

WEBSITE: A domain made available to Internet Users, describing the system for accessing information via the Internet. Pages designed and published under a domain name on the Internet that result from the information the owner provides to the User.

USER: An individual or legal entity browsing the website. Access to and use of this website is subject to the prior reading and full, express, and unconditional acceptance of the current Privacy Policy at the time of access, which we kindly ask you to read carefully. By accessing or using the website, you acknowledge that you have read and understood, without limitation or reservation, the current Privacy Policy.

CONTENT: Information and services that make up the entire domain that Área Urbana Asturiana S.L.U. makes available to the User. It includes messages, texts, graphics, photographs, icons, logos, links, software, appearance, graphic design, and, in general, all the information contained on the website.

HYPERLINK: A technique by which the User can navigate through different pages of the website or the Internet with a simple click on the text, icon, or button indicating the link.

COOKIES: A technical means for traceability and tracking of navigation on websites, small text files written to the User's computer. As they have implications for privacy, Área Urbana Asturiana S.L.U. duly and expressly informs the User of their use on this website.

Purpose of Processing:

When a User provides information, it may include personal data such as their name, surname, physical address, email address, phone number, among others. By providing this information, the User consents to the collection, use, management, and storage of their information by Área Urbana Asturiana S.L.U. only as described in this Privacy Policy.

On this website, there are different systems for capturing personal information, treating the information provided by the User for the following purposes:

    Establish communication between the parties.
    Manage access to the Client Area.
    Manage the established contractual or similar relationship.
    Respond to inquiries.
    Provide technical support for problem resolution and incidents.
    Offer personalized attention.
    Ensure compliance with the terms of use and applicable law.
    Support and improve the services offered by this website.

Área Urbana Asturiana S.L.U. may use your data to contact you, both electronically and non-electronically, to gather your opinion about the service provided. You can revoke your consent at any time by sending a written request with the subject "UNSUBSCRIBE" to Área Urbana Asturiana S.L.U. through their contact details (postal or email address).

We will not process your personal data for any purpose other than those described unless required by law or there is a judicial requirement.

Systems for capturing personal information:

Contact Form: Área Urbana Asturiana S.L.U. requires the User to provide their data through the contact form. In this regard, the following personal data are requested, among others: Name, Surname, Email, Phone Number. It will be necessary for the User to provide all the personal data identified as required in the form. Failure to provide the requested data could affect the stated purpose.

Purpose of Processing: The purpose of processing this data will be:

1. Administrative management of the necessary data to process your request/inquiry/offer.
2. Provide you with the information or services you request.
3. For the development, fulfillment, and execution of the established contractual or similar relationship.
4. Manage inquiries, including call requests.

Lawfulness of Processing: The processing is necessary for the execution of a contract in which the data subject is a party or for the application at the data subject's request of pre-contractual measures [Article 6.1.b) of the GDPR]; The data subject has given consent to the processing of their personal data for one or more specific purposes [Article 6.1.a) of the GDPR].

The website has SSL encryption that allows the User to securely send their personal data through standard contact forms hosted on servers contracted by Área Urbana Asturiana S.L.U. to PROCONSI, S.L., with VAT ID: B-24208100 and registered office at Parque Tecnológico de León, Calle Andrés Suárez, Number 5, 24009, León, Spain. The processing of data by this entity is regulated by a data processing agreement.

You can consult the Privacy Policy of PROCONSI, S.L. at the following link: https://www.proconsi.com/politica-de-privacidad.

Access to the Client Area: Área Urbana Asturiana S.L.U. requires the User to authenticate through a Username and password. It will be necessary for the User to provide all the data identified as required in the Client access form. Failure to provide the requested data could affect the stated purpose.

Purpose of Processing: The purpose of processing this data will be:

1. Administrative management of the data necessary to process the Comodato Contract in accordance with the stipulations agreed upon in the contract.
2. Manage and process your request for access to the Client Area.
3. Provide you with the information or services you request.
4. For the development, fulfillment, and execution of the established contractual or similar relationship.
5. Billing purposes.
6. Manage requests for inquiries/requests.

Lawfulness of Processing: The processing is necessary for the execution of a contract in which the data subject is a party or for the application at the data subject's request of pre-contractual measures [Article 6.1.b) of the GDPR].

The website has SSL encryption that allows the User to securely send their personal data through standard contact forms hosted on servers contracted by Área Urbana Asturiana S.L.U. to PROCONSI, S.L., with VAT ID: B-24208100 and registered office at Parque Tecnológico de León, Calle Andrés Suárez, Number 5, 24009, León, Spain. The processing of data by this entity is regulated by a data processing agreement.

You can consult the Privacy Policy of PROCONSI, S.L. at the following link: https://www.proconsi.com/politica-de-privacidad.

A. Email: The User may provide their personal data through email.

Purpose of Processing: The purpose of processing this data will be to provide you with the information or services you request via email, respond to questions, inquiries, including requests for call-backs.

Lawfulness of Processing: The processing is necessary for the execution of a contract in which the data subject is a party or for the application at the data subject's request of pre-contractual measures [Article 6.1.b) of the GDPR], and the data subject has given consent to the processing of their personal data for one or more specific purposes [Article 6.1.a) of the GDPR].

Emails have SSL security certificates and are hosted on servers contracted by Área Urbana Asturiana S.L.U. from PROCONSI, S.L., with VAT ID: B-24208100 and registered office at Parque Tecnológico de León, Calle Andrés Suárez, Number 5, 24009, León, Spain. The processing of data by this entity is regulated by a data processing agreement.

You can consult the Privacy Policy of PROCONSI, S.L. at the following link: https://www.proconsi.com/politica-de-privacidad.

Instant Messaging: The User may provide their personal data through instant messaging (WhatsApp Business).

Purpose of Processing: The purpose of processing this data will be solely to provide you with the information or services you request, carry out direct and instant attention, streamline the management of requested services, for which explicit consent is requested. The processing of data in this case will be informative, for appointment confirmations, meetings, and, in general, as a means of communication.

Lawfulness of Processing: The data subject has given consent to the processing of their personal data for one or more specific purposes [Article 6.1.a) of the GDPR], in relation to Article 46.2.c) of the GDPR. Transfers with adequate safeguards based on standard data protection clauses adopted by the Commission.

WhatsApp Business services are provided by WhatsApp Ireland Limited (WhatsApp Ireland), located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The information controlled by WhatsApp Ireland Limited may be transferred to WhatsApp LLC as a subprocessor. WhatsApp LLC is located in the United States. An International Data Transfer to a third country or international organization has been made with adequate safeguards and provided that data subjects have enforceable rights and effective legal remedies, based on the Standard Contractual Clauses according to Commission Implementing Decision (EU) 2021/914 of June 4, 2021, on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council. You can consult the Appendix on the data transfer of WhatsApp Business at the following link: https://www.whatsapp.com/legal/business-data-transfer-addendum.

Cookies: Currently, the website uses its own and third-party cookies for technical and analytical or measurement purposes. Technical cookies ensure basic functionalities and security features of the website. These cookies are exempt from compliance with the obligations set out in Article 22.2 of the LSSI-CE when they allow the service requested by the User, so their use does not require the User's consent. Analytical or measurement cookies allow distinguishing users and sessions, limiting the percentage of requests; these cookies do not collect personal data as the information collected is anonymized.

You can get more information about the cookies we use by accessing our Cookie Policy.

Social Media: Área Urbana Asturiana S.L.U. has profiles on some of the main social media networks (Facebook, Instagram, Twitter). Your data as a User will be processed solely for the purpose of managing the Área Urbana Asturiana S.L.U. profile on the Social Network, providing advertising about our services.

Purpose of Processing: Monitoring Social Media (SSM) and advertising our services.

Lawfulness of Processing: The data subject has given consent to the processing of their personal data for one or more specific purposes [Article 6.1.a) of the GDPR].

We provide below the social media platforms where Área Urbana Asturiana S.L.U. has a profile:

1. Facebook: https://www.facebook.com/CanaryOil/. You can consult their Privacy Policy at the following link: https://es-es.facebook.com/privacy/explanation/.

2. Instagram: https://www.instagram.com/canaryoil_/. You can consult their Privacy Policy at the following link: https://es-la.facebook.com/help/instagram/155833707900388/.

3. Twitter: https://twitter.com/canaryoil_. You can consult their Privacy Policy at the following link: https://twitter.com/es/privacy/previous/version_11.

The processing of data from Users who follow Área Urbana Asturiana S.L.U. on social media will be governed by this section, as well as by the terms of use, privacy policies, and access regulations belonging to the respective social network, which have been previously accepted by the User.

The processing that Área Urbana Asturiana S.L.U. will carry out within each of the mentioned social networks will be, at most, what the Social Network allows for corporate profiles. Área Urbana Asturiana S.L.U. will manage its presence on the Social Network correctly, informing about activities, contests, giveaways, events, news, and services. Área Urbana Asturiana S.L.U. may inform, when not prohibited by law, its followers by any means that the social network allows about its activities, contests, events, news, and services.

Data Extraction: In no case will Área Urbana Asturiana S.L.U. extract data from Social Media unless the User has given explicit and specific consent for it.

Rights: Due to the nature of social media, the effective exercise of the data protection rights of the follower is subject to the modification of their personal profile.

Área Urbana Asturiana S.L.U. may also collect anonymous information about the User's usage of the website.

Legality of Data Processing:

The legal bases for the processing of personal data are:

1. The processing is necessary for the execution of a contract in which the data subject is a party or for the application at the data subject's request of pre-contractual measures [Article 6.1.b) of the GDPR].

2. The data subject has given consent to the processing of their personal data for one or more specific purposes [Article 6.1.a) of the GDPR].

3. Transfers with adequate safeguards based on standard data protection clauses adopted by the Commission [Article 46.2.c) of the GDPR].

User consent will be sought at the moment of:

1. Making a request.

2. Before proceeding to process their personal data.

To provide personal data through the website's forms, consent to this Privacy Policy is required by checking the designated box.

The prospective or commercial offer of products and services is based on the consent requested, and the withdrawal of this consent does not in any case condition the execution of the established contractual relationship.

Área Urbana Asturiana S.L.U. will only provide User information to the State Security Forces and Bodies, competent Public Administrations in cases provided by law and for the purposes defined therein, and Judges and Courts by judicial requirement or order or by obligation of a law with the rank of Law.

Data Source:

Personal data comes directly from the User as the interested party and has been collected through various systems for capturing personal information, such as contact forms or telephone calls with contact requests.

Data Categories:

The categories of data processed through the website are identifiable data. No specially protected categories of data are processed.

Retention Periods:

Área Urbana Asturiana S.L.U. retains personal data for a limited and proportional period. Data processed for the management of the relationship between the User and Área Urbana Asturiana S.L.U. (name, surname, email, etc.) will be kept throughout the term of the contractual relationship or similar, or until the User requests its deletion. In this case, the identifiable personal data of the User will be retained, duly blocked, on our servers only for the purpose of responding to any requests from Judges and Courts, the Public Prosecutor's Office, or competent Public Administrations for the enforcement of possible responsibilities arising from the processing, and only for the prescription period of such responsibilities. Once the retention period has ended, the data and backups will be deleted from all media, with appropriate security measures to ensure their total destruction.

Disaggregated Data: Disaggregated data will be retained indefinitely.

User Data: The retention period for personal data will vary depending on the service that the User contracts. In any case, it will be the minimum necessary and may be maintained up to:

1. Year: Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE), traffic data related to electronic communications.
2. 4 years: Articles 66 and following of the General Tax Law.
3. 6 years: Article 30 of the Commercial Code.
4. 10 years: Article 25 of Law 10/2010, of April 28, on the prevention of money laundering and the financing of terrorism.

Data Processors:

Área Urbana Asturiana S.L.U. may contract with service providers as data processors. The data processing is regulated by a data processing agreement.

1. PROCONSI, S.L., with VAT ID: B-24208100 and registered office at Parque Tecnológico de León, Calle Andrés Suárez, Number 5, 24009, León, Spain, for hosting the website and email. You can consult their privacy policy at the following link: https://www.proconsi.com/politica-de-privacidad.
2. WHATSAPP IRELAND LIMITED (WhatsApp Ireland), located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, for instant communications via WhatsApp Business. You can consult their legal information at the following link: https://www.whatsapp.com/legal/business-data-processing-terms.

Recipients of Transfers and International Data Transfers: [Details about recipients and international data transfers are missing. If there's specific information you need about this section, please provide it, and I'll be happy to assist further.]

**Data Disclosures:**
Data is disclosed to:

1. Banks / Savings Banks.
2. Fraud Detection and Prevention Entities.
3. Judges and Courts, Public Prosecutor's Office, or competent Public Administrations in cases provided for by law and for the purposes defined therein.

**International Data Transfers:**
International Data Transfers are made to:
- WhatsApp LLC, as a subprocessor of WhatsApp Ireland Limited. WhatsApp LLC is located in the United States. The international data transfer is made to a third country or international organization that has offered adequate guarantees and on the condition that data subjects have enforceable rights and effective legal remedies, based on the Standard Contractual Clauses according to the Decision of the Commission (EU) 2021/914 of June 4, 2021.

Área Urbana Asturiana S.L.U. does not sell, rent, or transfer personal data that can identify the User, nor will it do so in the future, to third parties without prior consent. In some cases, collaborations may be made with other professionals, and in such cases, prior consent of the Users will be required, providing information about the collaborator's identity and the purpose of the collaboration. These collaborations will be conducted with the strictest security standards.

**Security Measures:**
For data processing, Área Urbana Asturiana S.L.U. implements all technical and organizational security measures established by current legislation. Necessary data protection measures are taken to prevent the loss of information, alteration of data, or unauthorized access.

Regarding the confidentiality of data processing, Área Urbana Asturiana S.L.U. ensures that anyone authorized to process User data, including its staff, collaborators, and providers, is obligated to respect confidentiality.

**Principles of Personal Data Processing:**
Área Urbana Asturiana S.L.U. adheres to the principles of personal data processing in accordance with the requirements of the General Data Protection Regulation (GDPR):

1. **Principle of lawfulness, fairness, and transparency:** Process data lawfully, fairly, and transparently concerning the data subject.
2. **Purpose limitation principle:** Collect data for specified, explicit, and legitimate purposes and not process them subsequently in a manner incompatible with those purposes.
3. **Principle of data minimization:** Use only data that is adequate, relevant, and limited to what is necessary for the purposes of processing.
4. **Accuracy principle:** Keep data accurate, and if necessary, update or rectify it.
5. **Principle of storage limitation:** Retain data for the time necessary for the purposes of processing.
6. **Principle of integrity and confidentiality:** Process data in a way that ensures security, protecting it against unauthorized or unlawful access, and against accidental loss or damage.

In addition, data protection measures are applied from the design phase and throughout the life cycle of the information, tailored to the state of the art and the risks associated with the processing of personal data.

**Data Protection by Default:**
Technical and organizational measures are implemented to ensure that, by default, only personal data necessary for each specific purpose of processing is processed.

**Established Security Measures:**
Área Urbana Asturiana S.L.U. establishes the following security measures:

1. **Backup:** Performs regular backup or data backup.
2. **Communication Channel Encryption:** Encrypts communication channels using the SSL protocol to ensure secure transmission of electronic data.
3. **SSL Certificates on Mail Servers:** Mail servers hosting mailboxes have two SSL certificates, ensuring encrypted communication.
4. **Secure Storage:** Stores personal information on secure servers, protected by passwords and firewalls.
5. **Internal Audits:** Conducts periodic internal audits on data protection.
6. **Purpose-Conforming Use:** Does not use personal data for purposes other than those for which it was initially collected.


**Translation:**

Área Urbana Asturiana S.L.U. acknowledges that it cannot guarantee the impregnability of the Internet network, and therefore, the violation of data through fraudulent access by third parties cannot be completely ruled out.

**Navigation:**
When browsing the website, data such as the geographical location of access, type and version of the browser, operating system, information, and duration of visits, website usage, etc., are collected. This data is used to improve navigation on the website.

**Accuracy and Truthfulness of Data:**
The User is responsible for the truthfulness and correctness of the provided data. Users must ensure the accuracy, validity, and authenticity of the personal data provided, committing to keep it updated.

Área Urbana Asturiana S.L.U. is exempt from any responsibility regarding the truthfulness of the data provided by Users.

**Rights of Individuals:**
Any person has the right to confirm whether Área Urbana Asturiana S.L.U. processes personal data related to them. Interested parties can exercise the following rights:

1. **Right of Access:** Allows the interested party to know and obtain information about their personal data undergoing processing.
2. **Right of Rectification or Deletion:** Allows correcting errors, modifying inaccurate or incomplete data, or requesting the deletion of inappropriate or excessive data.
3. **Right of Objection:** Allows the interested party to object to the processing of their personal data, except for compelling legitimate reasons.

To exercise these rights, a written request must be submitted to Área Urbana Asturiana S.L.U. or to the Data Protection Officer (DPO), including a photocopy of the ID card or other identification document.

**Copyright:**

The source code, graphic designs, images, photographs, animations, software, texts, as well as the information and content collected on this website are protected by Spanish legislation on intellectual and industrial property rights. The total or partial reproduction of this website, its computer processing, public communication, distribution, dissemination, modification, or transformation is not allowed without the prior written permission of Área Urbana Asturiana S.L.U.

The user only has the right to private use of these materials, requiring express authorization from Área Urbana Asturiana S.L.U. to modify, reproduce, exploit, or distribute them.

Notwithstanding the above, the user is granted the rights of access, download, printing, reproduction on any medium, as well as the use of the contents of the website to which access is permitted, for purely informational purposes.

**Access Conditions:**

Access to this website is free and does not require prior subscription or registration. The user must access in good faith and in accordance with this Privacy Policy, and access is undertaken at their own exclusive responsibility.

The user is expressly prohibited from using and obtaining the services and contents offered on the website for procedures other than those stipulated.

**Cookies:**

Currently, the website uses its own and third-party cookies for technical and analytical or measurement purposes. Technical cookies ensure basic functionalities and security features of the website. Technical cookies are exempt from compliance with the obligations established in article 22.2 of the LSSI-CE, as they allow providing the service requested by the user, and their use does not require the user's consent. Analysis or measurement cookies allow distinguishing users and sessions, limiting the percentage of requests; these cookies do not collect personal data as the collected information is anonymized.

You can access our Cookie Policy and get extended information about the cookies we use.

**Responsibilities:**

By making the website available to the user, we aim to provide quality content and services, using the utmost diligence not only in their provision but also in the technological means used. However, we will not be held responsible for the presence of viruses or any other elements that could damage the user's computer system, documents, and files.

Área Urbana Asturiana S.L.U. does not guarantee the proper functioning regarding the availability and continuity of its website. To the extent possible, we will try to inform the user of any service interruption, rectifying it as soon as possible. However, we are exempt from any responsibility arising from the incorrect functioning or interruptions of this website.

**Language and Regulatory Framework:**

The applicable language for this Privacy Policy is Spanish.

The regulatory framework applicable to the processing of personal data carried out by Área Urbana Asturiana S.L.U. includes Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and the free movement of such data and repealing Directive 95/46/EC, General Data Protection Regulation (GDPR), Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE), and other applicable regulations.

**Changes in the Privacy Policy:**

Área Urbana Asturiana S.L.U. reserves the right to modify this policy to adapt it to legislative or jurisprudential developments. In such cases, Área Urbana Asturiana S.L.U. will announce the changes on the website in advance of their implementation.

**Privacy Policy Updates:**

This Privacy Policy was established on May 12, 2022. We reserve the right to modify it at any time; please check the issuance date each time you connect to our website to ensure that no changes affecting you have occurred. For any clarification, you can contact us at the phone number +34 922.614.159 or at the email address rsgoil@rsgoil.com.