Privacy Policy
This Privacy Notice describes how Arroyo Alba Atelier collects and further processes personal data, i.e., any information that identifies or could reasonable be used to identify any person. It further informs about the rights of the persons whose personal data is processed.
This Privacy Notice applies exclusively to the use of the website arroyoalba.world and to the registration for the Arroyo Alba Atelier newsletter.
Other privacy notices may be applicable to specific circumstances (such as the privacy notices relating to the contractual performance of the services, Human Resources, or else).
If you disclose personal data to or share data with Arroyo Alba Atelier about other individuals, Arroyo Alba Atelier assumes that you are authorized to do so and that the relevant data is accurate. When you share data about others with Arroyo Alba Atelier, you confirm that. Make sure that these individuals have been informed about this Privacy Notice.
The Swiss Data Protection Act applies to Arroyo Alba Atelier data processing, whereas the General Data Protection Regulation for the European Union (GDPR) may also apply.
Arroyo Alba Atelier may amend this Privacy Notice at any time without prior notice. The current version published on the Website shall apply.
Last update: 1 July 2023.
1. WHO PROCESSES THE PERSONAL DATA?
CONTROLLER
The Controller of the personal data is:
ARROYO ALBA ATELIER
Segantinistrasse 38, Zurich 8049, Switzerland
arroyoalba.world
atelier@arroyoalba.world
Please contact us with any questions or concerns relating to data protection:
ARROYO ALBA ATELIER
Pedro Pablo Arroyo Alba
Segantinistrasse 38, Zurich 8049, Switzerland
ask@arroyoalba.world
EEA REPRESENTATIVE
Arroyo Alba Atelier representative in the European Economic Area as an additional point of contact for supervisory authorities and persons visiting the Website and receiving the newsletter according to art. 27 GDPR is:
Araceli Arroyo Alba
Garibay 4, Bajo B, Madrid 28007, Spain
ask.eea@arroyoalba.world
2. WHAT DATA IS PROCESSED AND FOR WHICH PURPOSE?
WEBSITE VISIT
A. GENERAL
When you visit Arroyo Alba Atelier website arroyoalba.world ("Website"), general, technical visit information is automatically recorded in so-called log files.
This includes personal data such as the IP address of the device used; the browser type and language; the operating system of the device you are using; the date and time of the visit; and the name of the website from which the Website was accessed.
The collection and processing of this personal data is carried out in order to ensure the Website can be used without any problems (connection establishment); permanently ensure and increase the security and stability of our systems; to constantly improve the Internet offer and to generate internal statistics.
The legal basis for the data processing is Art. 6 para. (1) sentence 1 lit. f.) GDPR.
B. CONTACT VIA EMAIL OR PHONE
If you contact Arroyo Alba Atelier via email, the data you provide (your email address, if applicable your name, address and telephone number) will be stored by us in order to respond to your request. The communication of this information is based on your consent.
Of course, you can revoke this consent at any time. You can also request that Arroyo Alba Atelier deletes the corresponding personal data at any time.
The legal basis for the data processing is Art. 6 para (1) sentence 1 lit. a) and b) and f) GDPR.
C. NEWSLETTER
If you would like to subscribe to Arroyo Alba Atelier newsletter, Arroyo Alba Atelier requires an email address from you. To ensure a consensual registration, Arroyo Alba Atelier uses a double opt-in procedure, in which you confirm via an activation link that you really want to subscribe to Arroyo Alba Atelier newsletter.
Arroyo Alba Atelier uses "Campaign Monitor" from "Marigold" as IT service provider for the newsletter. If you subscribe for the Arroyo Alba Atelier newsletter, your data (email address) will be transmitted to Marigold. Marigold is contractually prohibited from selling your data and using it for purposes other than sending newsletter.
For more information regarding the data processing by Marigold visit:
Marigol. Customer Data Subject
In order to improve Arroyo Alba Atelier services, the newsletters will be statistically analyzed for Arroyo Alba Atelier by Campaign Monitor. Campaign Monitor uses the cookie from reCAPTCHA (_GRECAPTCHA), for the purpose of providing risk analysis. You can object to the use of your personal data for marketing purposes by unsubscribing from receiving the newsletter at any time.
The legal basis for the data processing by Arroyo Alba Atelier as well as the disclosure of aforementioned data to Marigold is based on your consent as per Art. 6 para (1) sentence 1 lit. a) GDPR.
You can revoke your consent of the storage of the personal data and their use for sending you the newsletter at any time via the unsubscribe link in the newsletter or via email to the persons indicated in Section 1 above.
D. COOKIES
Arroyo Alba Atelier typically uses cookies and similar techniques on the Website, which allows for an identification of your browser or device.
A cookie is a small text file that is sent to your computer and automatically saved by the web browser on your computer or mobile device, when you visit the Website. Cookies help to make your visit to the website easier, more pleasant and more meaningful.
We may use the following cookies:
-
Technically necessary cookies: these cookies are mandatory for the functioning of our website and cannot be disabled in our systems.
-
Functional cookies: these cookies enable the provision of improved functions and personalization. They may be set by us or by third parties whose services we use on our website.
-
Analytics cookies: these cookies allow us to count visits and identify sources of access to determine and improve the performance of our website.
-
Marketing cookies: these cookies and other tracking technologies allow us to show personalized advertising.
You can set your browser to block cookies. However, this may result in some areas of the website not functioning.
By using Arroyo Alba Atelier website and consenting to the receipt of newsletters you agree to Arroyo Alba Atelier use of such techniques. If you object, you must configure your browser or email program accordingly.
E. GOOGLE ANALYTICS
Arroyo Alba Atelier uses Google Analytics on its Website.
Google Analytics is provided by Google Ireland Ltd. (located in Ireland), Google Ireland relies on Google LLC (located in the United States) as its sub-processor (both «Google»).
Google Analytics uses cookies and similar technologies to collect certain information about the behavior of individual users to measure and evaluate the use of the Website on an anonymized basis.
For more information, visit:
Google. Safeguarding Your Data
Google Analytics. Cookie Usage on Websites
Arroyo Alba Atelier has configured the service in such a way that the IP addresses of visitors are truncated by Google in Europe before forwarding them to the United States and then cannot be traced back. Arroyo Alba Atelier has turned off the «Data Sharing» option and the «Signals» option.
Although Arroyo Alba Atelier can assume that the information it shares with Google is not personal data for Google, it may be possible that Google may be able to draw conclusions about the identity of visitors based on the data collected, create personal profiles and link this data with the Google accounts of these individuals for its own purposes.
In this case, the processing of your personal data by Google will be conducted in accordance with its data protection regulations.The service provider only provides us with data on the use of the respective website (but not any personal information of you).
3. DOES ARROYO ALBA ATELIER FORWARD DATA TO THIRD PARTIES?
In the context of Arroyo Alba Atelier business activities and in line with the purposes of the data processing set out in Section 2, Arroyo Alba Atelier may transfer data to third parties, insofar as such a transfer is permitted and Arroyo Alba Atelier deems it appropriate, in order for them to process data for it or, as the case may be, their own purposes.
In particular, the following categories of recipients may be concerned:
OUR SERVICE PROVIDERS, INCLUDING PROCESSORS (e.g., IT PROVIDERS)
Certain Recipients may be within Switzerland but they may be located in any country worldwide. In particular, you must anticipate your data to be transmitted to other countries in Europe and the USA where our service providers are located, such as:
-
Internet Domain: CDmon
-
Web Hosting: Hetzner
-
Newsletter: Campaign Monitor of Marigold
-
Tracking Services: Google Analytics
If a recipient is located in a country without adequate statutory data protection, Arroyo Alba Atelier requires the recipient to undertake to comply with data protection (e.g., such as the European Commission's standard contractual clauses), unless the recipient is subject to a legally accepted set of rules to ensure data protection and unless Arroyo Alba Atelier cannot rely on an exception.
An exception may apply for example in case of legal proceedings abroad, but also in cases of overriding public interest or if the performance of a contract requires disclosure, if you have consented or if data has been made available generally by you and you have not objected against the processing.
4. HOW LONG IS YOUR PERSONAL DATA RETAINED?
Arroyo Alba Atelier retains your personal data no longer than it is necessary for the purposes for which the information is collected, that it has a legitimate interest, or that it is legally required to retain, e.g., due to legal retention and documentation obligations.
As soon as your personal data are no longer required for the aforementioned purposes, they will be deleted or anonymized, to the extent possible.
In general, shorter retention periods of no more than twelve months apply for data recorded in log files.
With respect to personal data through your contact by email or phone, the storage period depends on whether you, your employer, or principal have a customer relationship with Arroyo Alba Atelier. In that case, the retention period is generally ten years from the conclusion of the last project with the respective customer.
Otherwise, the retention period is twelve months from submission of the contact.
5. DATA SECURITY
Arroyo Alba Atelier takes appropriate security measures in order to maintain the required security of your personal data and ensure its confidentiality, integrity and availability, and to protect it against unauthorized or unlawful processing, and to mitigate the risk of loss, accidental alteration, unauthorized disclosure or access.
6. YOUR RIGHTS
In accordance with and as far as provided by applicable law (as is the case where the GDPR is applicable), you have the following rights at any time:
-
Right to obtain information as to whether any personal data is being processed.
-
Right to obtain rectification of inaccurate personal data without undue delay.
-
Right to obtain erasure of personal data without undue delay (Right to be forgotten).
-
Right to restriction of personal data processing or to object to Arroyo Alba Atelier personal data processing.
-
Right to notification of any rectification, erasure of personal data or restriction of processing unless this proves impossible or involves disproportionate effort.
-
Right to receive the personal data that was provided to Arroyo Alba Atelier (Right to data portability).
-
Right to file a complaint to the competent supervisory authority regarding the processing of your personal data. You can contact the supervisory authority at your place of residence, work or the location of the suspected data protection violation. The competent data protection authority of Switzerland is the Federal Data Protection and Information Commissioner (edoeb.admin.ch), whereas a list of supervisory authorities can be found HERE.
Arroyo Alba Atelier reserves its right to enforce statutory restrictions on its part, e.g., if it is obliged to retain or process certain personal data, has an overriding interest or needs the personal data for asserting its claims.
Arroyo Alba Atelier may require appropriate proof of your identity in order to process your request. The legality of the data processing, which is carried out prior to the receipt of a revocation of the consent to process personal data, remains unaffected by the objection or revocation.
In order to assert these rights, please contact us at the addresses provided in Section 1 above.