I. PRIVACY POLICY AND DATA PROTECTION
In accordance with current legislation, Artemisa (hereinafter also referred to as the Website) undertakes to implement the necessary technical and organizational measures appropriate to the level of risk associated with the data collected.
Legislation Incorporated into This Privacy Policy
This privacy policy is adapted to current Spanish and European regulations on the protection of personal data online. Specifically, it complies with the following laws:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
Royal Decree 1720/2007 of 21 December approving the implementing regulation of Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The data controller for the personal data collected on Artemisa is: Álvaro De Fuentes Mangas, with NIF: 71326762J (hereinafter, the Data Controller). Contact details:
Address: C/Lope de Vega 18 Phone: 653925462 Fax: — Email: administracion@artemisaconcept.com
Personal Data Registration
In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by Artemisa through forms on its pages will be incorporated into and processed in our database in order to facilitate, expedite, and fulfill the commitments established between Artemisa and the User, or to maintain the relationship established in the forms completed by the User, or to respond to a request or inquiry.
Furthermore, in accordance with the GDPR and LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other circumstances established by the GDPR.
Principles Applicable to the Processing of Personal Data
The processing of the User’s personal data shall be subject to the following principles, as set out in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:
Lawfulness, fairness, and transparency: User consent will be required at all times, with prior transparent information about the purposes for which personal data is collected.
Purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
Data minimization: Only the data strictly necessary for the purposes for which they are processed will be collected.
Accuracy: Personal data must be accurate and kept up to date.
Storage limitation: Personal data will be retained only for the time necessary for the purposes of processing.
Integrity and confidentiality: Personal data will be processed in a manner that ensures security and confidentiality.
Proactive responsibility: The Data Controller shall be responsible for ensuring compliance with the above principles.
Categories of Personal Data
The categories of data processed by Artemisa are solely identifying data. No special categories of personal data are processed as defined in Article 9 of the GDPR.
Special categories of personal data include those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of genetic data, biometric data for uniquely identifying a natural person, health data, or data concerning a person’s sex life or sexual orientation.
Processing of special categories of personal data will always require the explicit consent of the User for one or more specific purposes.
Legal Basis for Processing Personal Data
The legal basis for processing personal data is consent. Artemisa undertakes to obtain the User’s express and verifiable consent for the processing of personal data for one or more specific purposes.
The User has the right to withdraw consent at any time. Withdrawal of consent shall be as easy as granting it. As a general rule, withdrawal of consent will not affect the use of the Website.
When the User is required or able to provide data through forms to make inquiries, request information, or for matters related to the Website’s content, the User will be informed if the completion of any of these forms is mandatory due to the essential nature of the data for the proper execution of the operation.
Purposes of Processing Personal Data
Personal data is collected and managed by Artemisa for the purpose of facilitating, expediting, and fulfilling the commitments established between the Website and the User, or to maintain the relationship established in the forms completed by the User, or to respond to a request or inquiry.
Additionally, data may be used for commercial purposes related to personalization, operations, statistics, and activities aligned with Artemisa’s corporate purpose, as well as for data extraction, storage, and marketing studies to tailor the content offered to the User and improve the quality, functionality, and navigation of the Website.
At the time personal data is obtained, the User will be informed of the specific purpose(s) for which the data will be processed—that is, the intended use(s) of the collected information.
Retention Periods for Personal Data
Personal data will be retained only for the minimum time necessary for the purposes of processing and, in any case, for no longer than 12 months, or until the User requests its deletion.
At the time personal data is obtained, the User will be informed of the retention period or, if not possible, the criteria used to determine that period.
Recipients of Personal Data
User personal data will not be shared with third parties.
In any case, at the time personal data is obtained, the User will be informed of the recipients or categories of recipients of the personal data.
If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed at the time of data collection of the third country or organization, as well as the existence or absence of an adequacy decision by the European Commission.
Personal Data of Minors
In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only individuals over the age of 14 may lawfully consent to the processing of their personal data by Artemisa. If the User is under 14 years of age, parental or guardian consent will be required, and processing will only be considered lawful to the extent that such consent has been granted.
Confidentiality and Security of Personal Data
Artemisa undertakes to implement the necessary technical and organizational measures, appropriate to the level of risk associated with the data collected, to ensure the security of personal data and prevent its accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
The Website uses an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the transmission between the server and the User is fully encrypted.
However, since Artemisa cannot guarantee the absolute invulnerability of the internet or the absence of hackers or others who may fraudulently access personal data, the Data Controller undertakes to notify the User without undue delay in the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons. As defined in Article 4 of the GDPR, a personal data breach is any breach of security that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed.
Personal data will be treated as confidential by the Data Controller, who undertakes to ensure—through legal or contractual obligation—that such confidentiality is respected by employees, partners, and any person to whom the information is made accessible.
Rights Arising from the Processing of Personal Data
The User has the following rights under the GDPR and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights:
Right of access: To obtain confirmation of whether Artemisa is processing personal data and, if so, to access such data and information about its origin and recipients.
Right to rectification: To request the correction of inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”): To request the deletion of personal data when it is no longer necessary, consent has been withdrawn, processing is unlawful, or other legal grounds apply.
Right to restriction of processing: To limit the processing of personal data under certain conditions, such as contesting accuracy or pending legal claims.
Right to data portability: To receive personal data in a structured, commonly used, machine-readable format and transmit it to another controller, where technically feasible.
Right to object: To object to the processing of personal data.
Right not to be subject to automated decision-making, including profiling: To avoid decisions based solely on automated processing unless otherwise permitted by law.
To exercise these rights, the User may send a written request to the Data Controller with the reference “GDPR-www.artemisaconcept.com,” including:
Full name and copy of ID (or equivalent legal proof of identity).
Specific request and reason.
Address for notifications.
Date and signature.
Any supporting documents.
Requests may be sent to: Postal address: C/Lope de Vega 18 Email: administracion@artemisaconcept.com
Links to Third-Party Websites
The Website may include hyperlinks to third-party websites not operated by Artemisa. These sites have their own privacy policies and are responsible for their own data practices.
Complaints to the Supervisory Authority
If the User believes that their personal data is being processed in violation of applicable regulations, they have the right to effective judicial protection and to file a complaint with a supervisory authority, particularly in the country of their habitual residence, place of work, or place of the alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD).
II. Acceptance and Changes to This Privacy Policy
The User must read and agree to the terms of this Privacy Policy and consent to the processing of their personal data for the Data Controller to proceed as described. Use of the Website implies acceptance of this Privacy Policy.
Artemisa reserves the right to modify this Privacy Policy at its discretion or due to legislative, jurisprudential, or regulatory changes. Updates will not be explicitly notified to the User. Users are encouraged to review this page periodically to stay informed of changes.
This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016 (GDPR), and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights.
This document was generated using an online privacy policy template generator on 30/06/2025.
Website Privacy Policy
Design, dedication, and sustainable distinction
contact
administracion@artemisaconcept.com
© 2025. All rights reserved.