Privacy Policy
In accordance with the current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by THE NEXT FLOW S. L., with Tax ID (NIF) B57790131 and registered office at CARRER INDUSTRIA 19 4H, 07013, PALMA (ILLES BALEARS). Below is the information regarding the processing activities carried out:
| PROCESSING ACTIVITIES CARRIED OUT | |
|---|---|
| Commercial actions via web form |
Purpose: Collection, recording and processing of data for the purposes of handling your inquiries and/or requests, as well as for advertising and commercial prospecting. Retention period: for as long as consent is maintained, unless there is a legal obligation. Legal basis: The consent of the data subject. Type of Data: Basic data: First and last name, Telephone number, Email address |
Rights of data subjects
THE NEXT FLOW S. L. informs Users that they may exercise their rights of access, rectification, restriction, erasure, portability, objection to the processing of their personal data, and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the right to withdraw consent given.
- Right of Access: The user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data processed and the legal information regarding the processing (purposes, legal basis, retention periods, transfers, origin of the data, etc.).
- Right of Rectification: The data subject's right to have inaccurate or incomplete data corrected. In relation to the website, this can only be satisfied with respect to information under the control of the website, for example, removing comments posted on the site itself, images, or web content containing the user's personal data.
- Right to Restriction of processing: The right to have the purposes of processing originally intended by the data controller limited in certain cases.
- Right of Erasure: The right to have the user's personal data erased, except as provided for under the GDPR itself (freedom of expression and information, retention obligations, the formulation, exercise, or defense of claims, etc.).
- Right to Portability: The right to receive the personal data provided by the user in a structured, commonly used, and machine-readable format, and to transmit it to another controller when the processing is based on consent or on the performance of a contract and is carried out by automated means.
- Right of Objection: The user's right to prevent their personal data from being processed, or to have such processing ceased by the website, when the processing is based on legitimate interest or public interest, or when it involves direct marketing.
- Right not to be subject to automated decisions, including profiling: When the processing is not necessary for entering into or performing a contract, is not authorized by European Union or Member State law, and is not based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
- Right to withdraw consent: For any processing based on your consent, you have the right to withdraw it at any time, free of charge.
To exercise any of the data protection rights described above, please follow the instructions below:
- Submit a written request to CARRER INDUSTRIA 19 4H, 07013, PALMA (ILLES BALEARS) (for the attention of THE NEXT FLOW S. L.), or by email to support@thenextflow.com.
- The written request submitted by the holder of the personal data (the data subject) requesting the exercise of rights must take the following into account:
- You must be reliably identified, and if there are any doubts about the identity of the requester, you will be asked to correct the request (e.g., by requesting further information, such as ID number, ID document, the email address provided, etc.)
- The request may be made by a legal or voluntary representative, provided that they are duly identified and authorized by the data subject (through an express authorization from the data subject to exercise the highly personal rights regulated under personal data protection regulations).
- A request specifying what is being sought (the right(s) to be exercised). If it does not refer to a specific processing activity, a response will be provided regarding all processing activities affecting your personal data. If information is requested about a specific processing activity, only information about that activity will be provided. If the request is made by phone, you will be advised to submit it in writing and will be informed how to do so and the address to send it to. Information will never be given over the phone.
- Postal or email address for notification purposes.
- Supporting documents for the request made, where necessary.
- The requester must use a means that allows proof of sending and receipt of the request.
Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you become aware of, or believe that, any act may constitute a breach of the applicable data protection regulations.
THE NEXT FLOW S. L. undertakes to adopt the necessary technical and organizational measures, appropriate to the level of risk associated with the processing activities carried out and indicated in this same section, so as to guarantee their integrity, confidentiality, and availability.