This privacy policy describes how the personal data of users who access Anhem.es [the Site] and use the related services offered by the Site are processed.

This policy applies exclusively to the processing of personal data carried out through the Site; any third-party websites that can be consulted through links remain subject to the privacy policy provided by the operator of the relevant third-party website. We therefore invite the user [from now on “you”] to read these documents before surfing the third-party sites. The services on this Site are intended for people aged 18 years or older. If you are under the required age, please do not register or purchase a product online and ask an adult (your parents or guardian) to carry out the necessary procedures

 

The Data responsible is Witthayu Group SL [the Company], owner of anhem.es. The Company has its address in Calle Maldonado 25, 28006 Madrid, tax code B56137839 and registration number at the Madrid’s Mercantile Registry in Spain.

For data protection topics related to the Site, you may contact us at the address indicated above and by email at: anhem@anhem.es

 

Data Collection and Storage

You can access our website anonymously. If you choose to register on our website, two categories of data will be processed on your behalf:

[i] Identification data. When you proceed to register on our site, make a purchase, or subscribe to our newsletter, basic contact information will be collected, such as your first and last name, email address, address, number telephone number, purchase order number, email address of the recipient, and encrypted data relating to the credit card or bank account.

The personal data will not be disclosed to third parties under any circumstances and for any reason. guarantees the privacy of its customers while respecting the legislation regarding processing of personal data: Privacy Act governed by Legislative Decree no. 30 June 2003 n. 196 and EU Regulation no 2016/679.

[ii] Data generated by the system [browsing data]. Our service automatically stores metadata based on the other types of data, such as subscription data, including the start date and the date of the last invoice. Invoices issued in connection with purchased products are stored for you to access. This data category includes IP addresses, domain names used to connect the site, the URIs (Uniform Resource Identifiers) of the resources requested, the time of the request, the method used to submit the request to the server, the size of the response file obtained, the numerical code indicating the status of the response given by the server and other parameters related to the operating system and the user’s IT environment.

The Company stores your personal data for the time-period strictly necessary in compliance with civil and tax obligations on data storage and the limits provided for by the law. The data processed to fulfil any contractual obligations with you may be stored for the whole duration of the contract, plus another 10 years after the end of the fiscal year in question, to deal with any tax-related audits and/or disputes. In the event of disputes: if we must defend ourselves or act or make claims against you or third parties, we may store personal data whose processing we consider reasonably necessary to these ends, for the time in which the claim may be pursued.

 

Data Purposes

Improve the website

Personalize user’s experience

Allow subscription management

Identify the user as a contracting party

Issue invoices and process transactions

Set a communication channel with the user

Provide information about your choices and preferences as a user

Send periodic emails [email addresses will be used for the processing of orders and for sending information and updates related to the order, as well as receive products and promotional updates. In any case you wish to unsubscribe from future emails, you can cancel at any moment by sending an email to anhem@anhem.es

When contacting us, you must include your name, email address, postal address and/or telephone number if provided to process your request correctly. We remind you that requests for the cancellation of data are subject to current legal and regulatory obligations regarding the retention of documents. The Company may require you to prove your identity and provide you with information regarding the action taken on a request within one month of receiving the request. In accordance with the Regulation, this deadline may be extended by two months, if necessary, considering the complexity and number of requests, in which case the Company will inform you of this extension, and the reasons for the delay, within one month of receipt of the request.  You also have right to lodge a complaint with a Supervisory Authority for Data Protection at any time in the event of a breach of data protection regulations. For further information:  https://www.garanteprivacy.it/home_en/rights#how

 

Rules Applied

This Privacy Policy is adapted from the Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons about the processing of personal data and free circulation. The treatment and processing of the user’s personal data is legally based on the express consent, the fact that the processing is necessary for the execution of a contract to which the user is a party or to carry out certain actions and measures before entering the contract. If the data processing is based on your express consent, you can withdraw it at any time by contacting the Company through the channels provided in this Privacy Policy.

As the user, you have the right to:

Get confirmation of the existence of your personal data, access their content, and get a copy.

Update, amend and/or correct your personal data.

Request the cancellation or restriction of data processing in the cases provided for by the Regulation, including where data have been processed in violation of the law or storage is not necessary for the purposes for which the data were collected or otherwise processed.

Withdraw consent, where given, at any time, without prejudice to the lawfulness of the processing based on consent given before withdrawal.

Get a copy of the data you provided in a structured, commonly used, machine- readable format and request this data to be transmitted to another data controller where technically feasible.

Object to the processing of your data, at any time, for the purpose of direct marketing, including profiling connected to direct marketing and if the processing is founded on legitimate interest (right to object).

 

Claims

Whenever you deem it appropriate, you can always file a claim regarding the collection and processing of your personal data by the Company before the Spanish Agency for Data Protection (AEPD):

Spanish Data Protection Agency, Calle Jorge Juan, 6. 28001 Madrid

Telephone: 901 100 099/ 91 266 35 17

http://www.agpd.es