In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, repealing Directive 95/46/EC (hereinafter RGPD), Law 34/2002 of 11 July, on information society services and electronic commerce (hereinafter, LSSI-CE) and the Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights, the Owner guarantees the protection and confidentiality of personal data, of any kind provided to it by users, in accordance with the provisions of the General Regulation on the Protection of Personal Data.

The Data Controller's Data Protection Policy is based on the principle of proactive responsibility, according to which the Data Controller is responsible for compliance with the regulatory and jurisprudential framework and is able to demonstrate this to the relevant supervisory authorities.

The data provided will be treated in accordance with the terms established in the RGPD; in this regard, the Owner has adopted the levels of protection legally required, and has installed all the technical measures at its disposal to prevent loss, misuse, alteration, unauthorized access by third parties, set forth below. However, the User should be aware that Internet security measures are not impregnable.

Data controller: Who are we?

Name of Owner: RODRIGO ASCARIZ MARTÍNEZ
E-mail: staff(At sign)SwCardCollection[point]com
(unsolicited commercial emails will be reported to the AEPD)

Purpose of processing: What will we use your data for?

The data processed on the website to open a profile will be: user location (province, region, country), name, surname, nickname, email and Telegram user.

The purpose of the use of this data will be to create a user profile and facilitate card exchanges.

Although this information is not considered personal data, the User is informed that the following details will also be managed: language, number of comments, ranking, date of registration, login, and anonymous user status, if the profile owner so decides.

Legitimacy of the treatment: Why do we need your data?

• a) Legitimate interest: To respond to the queries and complaints that you submit to us.
• b) Your consent: If you are a User of our Website, through the appropriate system, you authorize us to send you the necessary communications to respond to your queries or requests for information.

Recipients: With whom do we share your data?

We do not disclose your personal information to anyone, except those public or private entities to whom we are obliged to provide your personal information in compliance with any law.

In the event that, apart from the aforementioned cases, we need to disclose your personal information to other entities, we will request your prior permission through clear options that will allow you to decide in this regard.

Communication: Where can we send your data?

We will not make international transfers of your personal data for any of the above purposes.

Retention: How long will we keep your data?

We will only retain your personal information for as long as necessary to achieve the purposes for which it was collected. Once the profile is deleted, this deletion will be final and the information cannot be recovered.

Security: How will we protect your data?

We use all reasonable efforts to maintain the confidentiality of personal information processed on our systems. We maintain strict levels of security to protect the personal data we process against accidental loss and against unauthorized access, processing or disclosure, taking into account the state of technology, nature and risks to which the data is exposed. However, we cannot be held responsible for your use of the data (including username and password) you use on our Website. Our staff follows strict privacy standards and where we engage third parties to provide support services, we require them to abide by the same standards and allow us to audit them for compliance.

Your rights: What rights can you exercise as a data subject?

We inform you that you may exercise the following rights:

• a) Right of access to your personal data, to know which are being processed and the processing operations carried out with them;
• b) Right to rectify any inaccurate personal data;
• c) Right to erasure of your personal data, where this is possible (e.g., as required by law);
• d) The right to limit the processing of your personal data when the accuracy, lawfulness or necessity of the data processing is in doubt, in which case, we may retain the data for the exercise or defense of claims.
• e) Right to object to the processing of your personal data, when the legal basis that enables us to process them is our legitimate interest. The Owner will stop processing your data unless it has a legitimate interest or it is necessary for the defense of claims, when this right applies.
• f) Right to data portability, when the legal basis that enables us to process your data is the existence of a contractual relationship or your consent.
• g) Right to revoke the consent given to the Data Subject.

To exercise your rights, you can do so free of charge and at any time by contacting us at staff(At sign)SwCardCollection[point]com (unsolicited commercial emails will be reported to the AEPD)

Protection of rights: Where can you file a claim?

If you believe that your rights have been disregarded by our entity, you can file a complaint with the Spanish Data Protection Agency through one of the following means:

Electronic office: https://www.aepd.es
Postal address: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001, Madrid.
Telephone: +34 901.100.099 or +34 912.663.517
Filing a complaint with the Spanish Data Protection Agency is free of charge and does not require the assistance of a lawyer or solicitor.

Updates: What changes may be made to this Privacy Policy?

The Owner reserves the right to modify this policy to adapt it to new legislation or jurisprudence that may affect compliance with it.

In order to ensure compliance with the regulations on personal data protection, the Owner has received consulting and advisory services from ClickDatos.