Data Controller

At NURRK, we are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use and protect the information of our customers and users.

Company Name: MINIUM DATA SYSTEM SL

VAT NO: B-64189855

Address: Calle Jeronimo Zurita, 6 - PISO 2 IZ, Zaragoza, 50001, Zaragoza

Contact:         proteccion.datos@nurrk.com

Purposes and grounds for legitimisation

In the following, we inform you about the purposes of the processing of your personal data and the legal basis for the processing of your personal data.

• • Creation of user accounts and management of your orders: We process the data necessary for the management of your account and your orders. The basis of legitimacy is the fulfilment of a contract and/or the implementation of pre-contractual measures.

• • Management of orders as a guest: We process the information required to manage your orders placed as a guest. This processing is also based on the fulfilment of a contract and/or the implementation of pre-contractual measures in your favour.

• • Sending notices of product availability: If you consent, we will use your data to send you notifications when a product of interest to you becomes available. The basis of legitimacy is your express consent.

• • Sending of Newsletter: With your consent, we will send you our Newsletter to keep you informed about our news and offers. The basis of legitimacy is your consent.

• • Management of the attention to queries related to the products in the shop: with your consent, we will attend to the queries that you ask us about the products in the online shop.

Addressees

We may share your data with our suppliers where this is necessary for the provision of the contracted service. Possible recipients or categories of recipients may include:

• • Payment Service Providers: Financial institutions and electronic payment service providers for processing payments made by customers.

• • Transport and Logistics Companies: Collaborating companies in charge of delivering products to customers.

• • Technology and Cloud Service Providers: Providers of hosting services, data storage, and e-commerce platforms that facilitate the technological infrastructure necessary for the operation of the online shop.

• • Marketing and Advertising Platforms: Digital marketing and advertising services to manage campaigns, including social media and online advertising platforms that allow targeting and targeting of offers and promotions.

• • Legal and Accounting Advisors: In the event that legal or accounting advice is required, these professionals may have access to personal data to the extent necessary to provide their services.

• • Regulatory Authorities and Other Third Parties under Legal Obligation: If required by law, data may be disclosed to tax, judicial, regulatory or administrative authorities.

Data retention

The personal data provided will be kept for as long as the contractual relationship is maintained; once it ends, we will keep it blocked for the time stipulated by law in case a judicial or administrative claim arises. In the case of data processing based on consent, we will retain your data for as long as you do not object or withdraw your consent.

Rights

You may exercise your data protection rights in relation to the use of your personal data, as recognised in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to data processing (General Data Protection Regulation, hereinafter "GDPR") and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

In particular, you will be entitled to:

• • Access: to find out whether or not your data is being processed.

• • Rectify: to rectify inaccurate data.

• • Delete: to cease processing when, among other reasons, they are no longer necessary for the purposes for which they were collected.

• • Oppose: to stop them from being treated in specific circumstances.

• • Limiting processing: to limit the scope of processing in certain cases, while ensuring their preservation.

• • Pass on your data: to receive the data previously provided or request that it be sent to a third party.

• • To revoke at any time the consent previously granted, without affecting the lawfulness of the processing prior to the revocation.

• • Formulate a complaint to the Spanish Data Protection Agency if you consider that Sesé has not correctly dealt with any of the above.

To exercise your rights, you should write an e-mail to the Data Protection Officer at the following address proteccion.datos@nurrk.comindicating the right you are exercising. We will indicate whether it is necessary for you to provide any additional information or document if there are doubts about the verification of your identity. If you prefer, you can use the forms for exercising your rights provided by the Spanish Data Protection Agency. You have a model for each right.

Security

The data controller has adopted security measures to protect your personal data. In this way, your data are processed by applying technical and organisational security measures in accordance with the type of data processed, the technology used and the risks involved, making every effort to prevent unauthorised third parties from accessing, modifying or deleting your information.

Date this Privacy Policy was last updated: 06/11/2023