Data protection commitment

Our commitment to personal data protection: “Informed people, protected data”

The Management / Governing Body of Muebles Incosur, S.L.U. (hereinafter, the controller) takes full responsibility for and is committed to establishing, implementing and maintaining this Data Protection Policy, ensuring continuous improvement with the aim of excellence in complying with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) and Spanish data protection law (Organic Law 3/2018, sector-specific legislation and implementing rules).

The Data Protection Policy of Muebles Incosur, S.L.U. rests on the principle of accountability, under which the controller is responsible for compliance with the regulatory framework governing this Policy and is able to demonstrate it to the competent supervisory authorities.

Accordingly, the controller will be guided by the following principles, which must serve all its staff as a guide and frame of reference when processing personal data:

• Data protection by design: appropriate technical and organisational measures, such as pseudonymisation, applied both when determining the means of processing and during processing itself, to implement data protection principles such as data minimisation effectively.
• Data protection by default: by default, only the personal data necessary for each specific purpose will be processed.
• Protection throughout the information life cycle: measures protecting personal data apply throughout the life cycle of the information.
• Lawfulness, fairness and transparency: personal data will be processed lawfully, fairly and transparently.
• Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with them.
• Data minimisation: personal data will be adequate, relevant and limited to what is necessary.
• Accuracy: personal data will be accurate and, where necessary, kept up to date; every reasonable step will be taken to erase or rectify inaccurate data without delay.
• Storage limitation: personal data will be kept in a form that permits identification for no longer than necessary.
• Integrity and confidentiality: personal data will be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
• Information and training: all staff with access to the data will be properly trained and informed about their data protection obligations.

The Data Protection Policy of Muebles Incosur, S.L.U. is communicated to all the controller's staff and made available to all interested parties.

This Policy therefore involves all the controller's staff, who must know it, embrace it as their own and apply it, verifying the data protection rules applicable to their activity and identifying opportunities for improvement.

This Policy will be reviewed by the Management / Governing Body of Muebles Incosur, S.L.U. as often as necessary to keep it in line with the data protection provisions in force at all times.