1. Introduction
1.1. This is the privacy policy for website https://vaporpin.eu/. The site is operated by Vapor Pin (we, us and our). We are committed to protecting your privacy online. We appreciate that you do not want the personal information you provide us distributed indiscriminately and here we explain how we collect information, what we do with it and what controls you have.
1.2. This policy applies in so far as we are acting as a data controller and responsibilities pertaining to the protection of personal data gathered on the site.
1.3. “Personal data”, as defined in Article 4(1) of the GDPR, refers to “any information relating to an identified or identifiable natural person (‘the subject’)”.
1.4. We use cookies on the site. Your consent to our use of cookies is requested when you first visit our website and is important for the optimal deployment of the services we offer.
1.5. The site uses privacy controls which affect the processing of your personal data.
2. We may collect the following information about you:
2.1. information (such as your name, IP address, email address, postal address and telephone number) that you provide by completing forms on the site, including if you register as a user of the site, subscribe to any service, upload or submit any material, or request any information;
2.2. communications you send to Vapor Pin, for example to report a support problem or to submit queries or comments regarding the site or its content. The site may generate metadata associated with your communications made using contact forms;
2.3. information from surveys that Vapor Pin may, from time to time, run on the site for research purposes, if you choose to respond to them;
2.4. details of your visits to the site, the resources you access and any data you download; employment details if you send us a CV or other details of your employment history in connection with an advertised job vacancy or a general enquiry regarding employment opportunities with Vapor Pin.
2.5. We may process personal data provided in the course of the delivery of our services. The service data may be processed for the purposes of operating the site, providing services, ensuring security, maintaining back-ups and communicating with you and third parties.
2.6. We may process information contained in enquiry forms that you submit to us regarding the services we provide.
2.7. We may process data where necessary for the exercise or defense of legal claims, in or out of a court of law. The legal basis for this processing are our legitimate interest, including, but not limited to, the protection and assertion of legal rights.
2.8. Article 6 of the GDPR states: “Processing shall be lawful only if and to the extent that at least one of the following applies: […] processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
2.9. The site gathers usage data. This usage data may be processed to improve your user experience, and to analyze the use of the site. The legal basis for our processing activity is your express consent OR based on expressions of legitimate interests.
2.10. You are under no obligation to provide such information. However, if you choose to withhold information, we may not be able to provide you with certain services. Your data will be held with us for an extended period until either i) Vapor Pin deem it no longer necessary to hold your information in order to satisfy the user objectives; or ii) a formal request for erasure is received.
2.11. Please do not supply the personal data of any other person to us through the site, unless they give you their express permission.
3. How is this information used?
3.1. Vapor Pin will use the information you provide to: identify visitors to the site; enable us to provide you with the services and information offered through the site and which you request; audit the downloading of data from the site; verify financial transactions (where relevant); improve the layout and/or content of our web pages and customise them for users; carry out research on our users’ demographics; and send you information we think you may find useful, including information about our products and services, provided you have indicated that you do not object to being contacted for these purposes.
3.2. You can tell us not to contact you with information regarding our products and services by following the unsubscribe instructions on any communications sent to you. You can also exercise the right at any time by contacting us using the contact details at the end of this privacy policy.
4. How secure is your data?
4.1. Vapor Pin places great importance on the security of all personally identifiable information associated with our users. We have security measures in place to attempt to protect against the loss, misuse and alteration of personal information under our control. Our security and privacy policies are periodically reviewed and enhanced as necessary and only authorized personnel have access to user information. User data held on our website is encrypted. While we cannot ensure or guarantee that loss, misuse or alteration of information will not occur, we use all reasonable efforts to prevent this. In the unlikely event of a data breach, we will work to inform the Supervisory Authority and concerned data subjects within 72 hours of becoming aware of the breach, in accordance with Articles 33 and 34 of the GDPR.
4.2. You should bear in mind that transmission of information over the internet is never entirely secure. We cannot guarantee the security of information you transmit to the site and any such transmission is at your own risk.
4.3. It is advisable to close your browser when you have finished your user session to help ensure others do not access your personal information if you use a shared computer or a computer in a public place.
5. Who do we share data with?
5.1. Vapor Pin may share personal data to any member of our group of companies (including subsidiaries) as necessary for the purposes set out, and according to the legal basis outlined, in this policy.
5.2. We may disclose your personal data to our insurers and legal counsel, as reasonably necessary for the purposes of coverage, managing risks, obtaining advice, or the establishment, exercise or defense of legal claims.
5.3. We may disclose limited personal data to suppliers or subcontractors insofar as reasonably necessary for the provision of our services.
5.4. With regards ecommerce, financial transactions processed through the site OR handled by our payment services providers: We will share your transaction data with our payment services providers only when necessary for the purposes of processing payments, refunds, and dealing with queries.
5.5. We may share your data with select third party suppliers of goods and services, for the purpose of enabling them to contact you so that they can offer, market and sell to you relevant goods and/or services, where necessary and as permitted through legitimate interest. Any third party with which we share your data will act as a data controller in relation to the data; and upon contacting you, third parties will provide you with access to their own privacy policy, which will govern the data relationship between yourself and the third party.
6. International transfers of your personal data (outside of the European Economic Area (EEA))
6.1. We have premises in [list countries outside the EEA]NOTE NOT ALWAYS RELEVANT FOR THE CLIENT). The European Union has made an “adequacy decision” with respect to transfers of data to these locations.
6.1.1. Article 13 of the GDPR requires that data controllers disclose “the fact that the controller intends to transfer personal data to a third country or international organization and the existence or absence of an adequacy decision by the Commission” and put in place “appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available”.
6.2. Transfers of your data will be protected to the same standard as data that remains within the EEA, as outlined in section 4 of this privacy policy.
6.3. The hosting facilities for the Site are situated in [specify countries where relevant].
6.4. By agreeing to this policy, you acknowledge that your data may be available, via the internet, around the world. We cannot prevent the use (or misuse) of such personal data by others beyond the safeguards outlined here.
7. Public forums
7.1. The site may make chat rooms, forums, message boards and/or news groups available to its users. Any information that is disclosed in these areas becomes public information and you should exercise caution when using these and never disclose your personal information.
8. Retaining your data
8.1. Any personal data that we process shall not be kept for longer than is necessary.
8.2. In certain instances it is not possible for us to specify the period of time for which your personal data will be retained. In such cases, we will determine the period of retention based on the purpose of the retention of that data, as described in section 3 of this privacy policy. Once we deem the period of use for the data complete, then data will no longer be retained.
9. Your acceptance of these terms.
9.1. By using the site, you consent to the collection and use of information in accordance with this privacy policy. Vapor Pin may change this privacy policy from time to time by displaying the revised policy on the site.
9.2. We may update this policy from time to time by publishing a new version on our website.
10. Your rights
10.1. You have a legal right to a copy of all the personal information about you held by us. You also have a right to correct any errors in that information. As mentioned above, you have a right to prevent us using your personal information for direct marketing purposes. In some circumstances you may also request that personal information about you that is held by us be erased from our records, without undue delay, in compliance with Article 17 of the GDPR.
10.2. Your principal rights under data protection law are:
10.2.1. the right to access;
10.2.2. the right to rectification;
10.2.3. the right to erasure;
10.2.4. the right to restrict processing;
10.2.5. the right to object to processing;
10.2.6. the right to data portability;
10.3. You have the right to confirmation as to whether or not we process your data and to have access to that personal data.
10.4. In certain circumstances you have the right to lodge a complaint with the Supervisory Authority. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement.
10.5. In so far as the legal basis for our processing your personal data is consent, as explained above, you have the right to withdraw that consent at any time. Do note, however, that withdrawal does not affect the lawfulness of processing before the time of the withdrawal.
10.6. You have the right to receive your data from us in a clear and machine-readable format. However, this right does not apply should we deem it might adversely affect the rights and freedoms of others.
11. Cookies
11.1. Cookies are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Most web browsers automatically accept cookies, but if you prefer, you can change your browser to prevent that. However, you may not be able to take full advantage of a website if you do so. Cookies are specific to the server that created them and cannot be accessed by other servers, which means they cannot be used to track your movements around the web. Although they do identify a user’s computer, cookies do not personally identify users or passwords and do not store credit or debit card details. For more information see our Cookies Policy.
11.2. Most browsers allow you to refuse to accept cookies and to delete cookies. The methods vary depending on your browser and the type of cookie, but this link could help you block and delete cookies: https://support.google.com/chrome/answer/95647?hl=en
12. Contact us
12.1. The site is owned by Vapor Pin [companies should provide their corporate names, their registration numbers if applicable, their place of registration and their registered office address]
12.2. You can contact us at email address and postal address.
12.2.1. Where applicable insert -> Our data protection officer’s contact details are: email address
NOTE: These settings will only apply to the browser and device you are currently using.
Calle Pirineus s/n – esquina Espinau