Privacy Policy

1. USER INFORMATION
Who is responsible for the processing of your personal data?
Susan Cabot S.L.U is responsible for the processing of the user's personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).
What type of data do we request and process?
Depending on the form or mode of obtaining your data, we always ask for the minimum necessary to fulfill the purposes detailed in each case.
What do we process your personal data for and why do we do it?
Depending on the form where we have obtained your personal data, we will treat them confidentially to achieve the purposes:
In the Contact form
Respond to queries or any other type of request made by the user through any of the following channels
of the forms of contact made available to you on the website of the responsible party.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other means.
electronic or physical means, present or future, that make it possible to send commercial communications. These
communications will be made by the responsible party and will be related to its products and services, or of its products and services.
its collaborators or suppliers, with whom it has reached a promotional agreement. In this case,
third parties will never have access to personal data (by consent of the data subject, 6.1.a GDPR).

Perform statistical analysis and market research.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the Newsletter form

To send newsletters, news, offers and promotions online (with the consent of the data subject, 6.1.a GDPR).

In the Request a quote form

Send commercial quotations about products and services.
(for the performance of a contract or pre-contract, 6.1.b GDPR)

In the Resume form

Involve the interested party in the personnel selection processes and analyze the applicant's profile with the
objective of selecting a candidate for the vacant position of the person in charge.
(by consent of the data subject, 6.1.a GDPR)
Susan Cabot S.L.U
Susan Cabot S.L.U

In the Testimonial form

Moderate and publish on the website the user's experiences, opinions and suggestions about a product or service.
service.
(by consent of the data subject, 6.1.a GDPR)

In the Comments form

Moderate and publish feedback on a publication on the website.
(by consent of the data subject, 6.1.a GDPR)

In the Ethical or Whistleblower Channel form

Adequately manage the ethical channel, processing the corresponding irregularities reported through
and deciding whether to initiate an investigation in order to detect possible offenses.
and to prevent the imposition of any type of liability, as well as to avoid any type of conduct
contrary to the entity's internal or external regulations.
(for compliance with a legal obligation, 6.1.c GDPR)

In the User Registration form

Manage the user's account to provide personalized access to the website and services.
interactive features it offers.
(by consent of the data subject, 6.1.a GDPR)

In the Appointments form

Schedule appointments and meetings with the person in charge.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the Social Networks form

Contact through the Social Networks in order to maintain a relationship between the User and the Responsible Party
which may include the following operations: - Processing your requests and inquiries. - Reporting on activities
and events. - Inform about products and/or services. - Interact through official profiles. The user
has a profile on the same social network and has decided to join the social network of the person in charge, thus showing
your interest in the information published therein, therefore, at the time of requesting to follow our
official website, you provide us with your consent to the processing of your data. The User can access at any time
to the privacy policies of the social network itself, as well as configuring your profile to ensure your privacy.
privacy. Once the User is a follower or has joined the Responsible Party's social network, he/she will be able to post in the
same comments, links, images, photographs or any other type of content supported by the same.
The User, in all cases, must be the owner of the published content, enjoy the copyright and the rights of
intellectual property or have the consent of the affected third parties. - Sending communications
Group companies, as well as companies outside the Group, with the aim of providing the Group with the necessary
that have established commercial collaboration or intermediation agreements.
(by consent of the data subject, 6.1.a GDPR)

In the Instant Messaging form

Schedule appointments and meetings with the person in charge.
(for the legitimate interest of the controller, art. 6.1.f GDPR)
Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other means.
electronic or physical means, present or future, to customers, that enable commercial communications to be made
products or services that are similar to those that were initially contracted with the company.
the customer (art. 21.2 LSSI).
(for the legitimate interest of the controller, art. 6.1.f GDPR)
Manage, maintain, improve or develop the services provided.
(for the performance of a contract or pre-contract, 6.1.b GDPR)
Manage your purchase or online order, process the payment and proceed with the shipment or activation of the same, based on the
general terms and conditions.
(for the performance of a contract or pre-contract, 6.1.b GDPR)
Send commercial quotations about products and services.
(for the performance of a contract or pre-contract, 6.1.b GDPR)
Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other means.
electronic or physical means, present or future, that make it possible to send commercial communications. These
communications will be made by the responsible party and will be related to its products and services, or of its products and services.
its collaborators or suppliers, with whom it has reached a promotional agreement. In this case,
third parties will never have access to personal data.
(by consent of the data subject, 6.1.a GDPR)
Respond to queries or any other type of request made by the user through any of the following channels
of the forms of contact made available to you on the website of the responsible party.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the Video Surveillance form

Purpose Security and access control, labor and internal activity control Legitimation Public interest
for security and access control and Legitimate interest of the Person Responsible based on Art. 20.3 of the Statute of the Company
Workers Conservation A maximum of 30 days
(by consent of the data subject, 6.1.a GDPR)

In the form Images and recordings

File with static and/or dynamic images. It includes the publication in the media of the person in charge of
(by consent of the data subject, 6.1.a GDPR).

In the form Customers and suppliers

Commercial management with customers and suppliers
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the Advertising Exclusion form

Data management to prevent the sending of commercial communications to those who have expressed their consent to the
refusal or opposition to receive them.
(for compliance with a legal obligation, 6.1.c GDPR)

In the Commercial Advertising form

Advertising management and commercial prospecting. Includes data from legitimate, publicly available sources.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the form Right of the interested parties

Respond to requests from citizens in exercising their rights under the GDPR.
(for compliance with a legal obligation, 6.1.c GDPR)

In the Money Laundering Prevention form

Data management for the prevention of money laundering and terrorist financing.
(for compliance with a legal obligation, 6.1.c GDPR)
In the form Web users, app and other platforms of the responsa

Identification data of users accessing the corporate website.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the form Training, courses, workshops, activities or similar, please fill in the following fields

Management of access and use conditions.
(for the legitimate interest of the controller, art. 6.1.f GDPR)

In the form Child or Vulnerable Data

The data controller shall not collect or process personal data from children under the age of fourteen, without full compliance
to the requirements established in the applicable data protection regulations, with respect to compliance with the
duty to inform and to obtain the necessary consents. The data collected
will be processed for the management of the informed purposes. The data controller has security measures in place
(by consent of the data subject, 6.1.a GDPR).

In the form Legal representatives and contact persons

In the event that you are a legal representative or contact person of any of the entities or persons listed below, you will be required to provide the following information
with which the Foundation is related, the data controller will process your data in order to control the development of the relationship
(by the data subject's consent, 6.1.a GDPR).

On the Credit Information form

Credit information policy *Before contracting our services, we will necessarily treat your data as confidential.
We will also use the personal information that you have provided us, as well as the information we obtain from the Asnef file. During the registration process
as a customer, we will process your personal data for the following purposes: 1- To manage your request for registration for the
customer and proceed to the application of the appropriate measures to be able to manage the contracting of the service. 2-
To assess their financial and credit solvency by consulting the Asnef, Cirbe and similar files, where
We will evaluate the capacity to face the economic obligations. 3- Assist you during the
contracting process of the intended services. 4- Analyze your current income and financial situation.
your current assets and liabilities, including any information you provide us about your household or other information that we may need to know about you.
We will also provide you with the information we may request from you, such as payslips, tax returns, etc. Likewise,
information provided by you as guarantor or guarantor in the course of the
mortgage contracting (by consent of the data subject, 6.1.a GDPR)

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the processing or there are legal prescriptions that dictate their custody and when it is no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure the anonymization of the data or the total destruction of the data.

To whom do we provide your personal data?

No communication of personal data to third parties is foreseen, except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the data controller has signed confidentiality and data processor contracts required by the privacy regulations in force.

Third party data provided by the User
In the event that the USER provides personal data of third parties for any purpose, he/she guarantees to have previously informed the affected parties and to have obtained their consent for the communication of their data to the Controller.

The USER guarantees that those concerned are of legal age and that the information provided is accurate and truthful.
The Controller may verify the consent of those affected by means of a first e-mail with non-commercial content in which the verification of the consent given on their behalf by the USER will be requested.
In the event of liability arising from a breach of these conditions by the USER, the USER shall be liable for the consequences of such breach.

Do we do international transfers?
In accordance with the provisions of Article 44 of the GDPR, the authorization of international data transfers to
a country that has not been declared as a country with an adequate level of protection can only be granted if the following are obtained
sufficient guarantees. Thus, it may be granted if the data controller provides a written contract, entered into between the data controller and the data subject.
the data exporter and the data importer, containing the necessary guarantees of respect for the protection of personal data.
and the exercise of their rights is guaranteed.

The responsible party may have services from providers that have servers or locations elsewhere and,
Therefore, these transfers are made. For an updated list of suppliers, please consult with the
responsible or through admin@susan-cabot.es
What are your rights?
The user's rights are as follows:
Right to withdraw consent at any time.
Right of access, rectification, portability, deletion of your data, limitation or opposition to its processing.
The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing is not carried out in compliance with the law.
conforms to the regulations in force.
Contact information to exercise your rights:
Susan Cabot S.L.U. C/ Manacor, 155 A - 07007 Palma (Illes Balears). E-mail: admin@susan-cabot.esDatos of the Representative in the
EU: , C/ Manacor, 155 A 07007 Palma, scabot1975@gmail.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
Users, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to fulfill their request, by the provider, being voluntary the inclusion of data in the remaining fields. The user guarantees that the personal data provided to the responsible are truthful and is responsible for communicating any changes to them.
The responsible informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the user. If all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs.
If by any means, you provide us with personal data of other people, the responsible warns that you must do so with their consent and have informed, in advance, of the points contained in this Privacy Policy.
Likewise, the responsible party undertakes to provide any third party whose data is provided to us with the relevant information, in accordance with the provisions of article 14 of the General Regulations.

3. SECURITY MEASURES
That in accordance with the provisions of the regulations in force on the protection of personal data, the responsible is
complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The responsible party guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of users and has communicated the appropriate information to them so that they can exercise them.
For more information about privacy guarantees, you can contact the responsible person through Susan Cabot S.L.U. C/ Manacor, 155 A - 07007 Palma (Illes Balears). E-mail: admin@susan-cabot.esDatos of the Representative in the EU: , C/ Manacor, 155 A 07007 Palma, scabot1975@gmail.com

4. VALIDITY
This privacy policy is effective as of 04/29/2025.
The responsible party reserves the right to modify this policy to adapt it to future legislative or regulatory updates.
applicable jurisprudence, or for other technical, operational, commercial, corporate, etc. reasons. If a
If, as a result of the changes, the rights of the users are affected, the person in charge undertakes to inform about the reasons.

Navigation

Legal

Contact