1. Privacy Policy

The website cisma.art is owned by CISMA, with its registered office at Calle Trinidad 10, 46009 Valencia (Spain), and contact email info@cisma.art. CISMA is responsible for processing your personal data provided through this website, which includes any of the services offered on it. The terms "we," "Company," "CISMA," or "cisma.art" refer to CISMA.

We have adopted this Privacy Policy, which determines how CISMA processes the information it collects and provides the reasons why we must collect certain personal data about you. Therefore, you must read this Privacy Policy before using the website. We care about your personal data and are committed to ensuring its confidentiality and security.

2. Personal Information We Collect

When you visit CISMA, we automatically collect certain information about your device, which you can review in the cookie policy.

Additionally, we will collect, process, and store personal data only if you provide it to us directly.

You may do so as a user of this website, by inquiring about our services, by becoming a client or supplier, or a potential supplier.

Personal information encompasses any information that relates to you as an identifiable person. Below are examples of the types of data this may include:
- "Identity Data" may include first and last names, personal or professional titles, location, username, or similar identifiers.
- "Contact Data" may include physical address, email address, and phone number.
- "Transaction Data" may include requests for products and services made to us or related to products or services we have provided to you.
- "Technical Data" may include your Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices used to access this website.
- "Profile and Usage Data" may include inquiries sent by you, information provided, survey responses and comments, and how you use our website, products, and services.
- "Marketing Data" may include details of any preferences you have informed us regarding marketing communications from us.

We may also collect non-personal data, such as aggregated data, which can be derived from your personal data but does not directly or indirectly identify you. This may include profile and usage data that detail how you use our website and the features and areas you have interacted with.

If you wish to review all the data we may collect when you create a user account on CISMA, please contact us at info@cisma.art. This privacy policy applies to any registered user of the platform.

3. How We Collect Your Personal Data

We collect your data through direct interactions with us in person, by phone, email, or otherwise, or when you have provided us with your identity and contact data. We also collect your data through automated technologies or interactions with our website, including using the web inquiry form, where we may also collect transaction, technical, profile and usage, and marketing data.

4. Why Do We Process Your Data?

Our top priority is the security of our users' data, and as such, we may process only minimal user data, only to the extent that it is absolutely necessary to maintain the website. Automatically collected information is used only to identify potential abuse cases and establish statistical information about the use of the website. This statistical information is not aggregated in such a way that it would identify any particular user of the system.

The legal basis for processing the data is the legitimate interest to:
- Enable us to provide our services, communicate with you, and fulfill our contractual commitments to you. This may include identity, contact, and transaction data.
- Notify you about any changes in our business, such as improvements to our website or changes to the service/product that may affect our service or relationship with you. This may include identity and contact data.
- If you are an existing or potential customer, we may contact you with information about goods and services similar to those previously sold to you, an inquiry made, or a discussion held with you. This may include identity and contact data. - When you have consented to receive such information, provide information about third-party products or services that we believe may be of interest to you. This may include identity, contact, and marketing data.
- When you have consented to receive our electronic newsletters. This may include identity and contact data.
- When we need to comply with a legal obligation. This may include identity, contact, transaction, and technical data.
- To protect the user from potential security threats, tracking, or third parties.
- When it is necessary for our legitimate interests (or those of a third party) and your fundamental interests and rights do not override those interests. This may include all types of data.
We will only use your personal data for a purpose other than the purpose for which it was originally obtained if we consider that we need to use it for that other purpose and have a legitimate interest in doing so.

You can visit our website without telling us who you are or revealing any information by which someone could identify you as a specific person.

However, if you wish to use some of the website's features, or if you want to receive emails from CISMA or provide other details by completing a form, you may provide us with personal data such as your email, first name, last name, city of residence, organization, and phone number. You may choose not to provide your personal data, but you may not be able to take advantage of some of the website's features and our services. Users who are unsure about what information is mandatory can contact us via info@cisma.art.

5. Data Recipients

When you visit CISMA or use any service offered on the website, please be aware that your data may have several recipients:
5.1. Service Providers:

For the proper use of the website and the services offered on the CISMA platform, data may need to be transferred outside the European Economic Area (EEA). For example, through our website, the information you provide may be transferred and stored in countries outside the EEA. This is because we use remote servers to provide the website and certain aspects of our service, which may be located outside the EEA or use servers outside the EEA, which is generally the nature of data stored in the "cloud." It may also be processed by staff operating outside the EEA who work for one of our suppliers, such as our server provider axarnet.es. These services have their updated privacy policies.

This data processing outside the EEA is covered by legal mechanisms to allow data transfer. If you need additional information about the international transfer of data, please contact us at info@cisma.art.

5.2. Law Enforcement:

You should also be aware that we may disclose your data to third parties for legal reasons. CISMA may access your information, as well as store and disclose it if required by law, in compliance with this Agreement, or if in good faith CISMA believes that such access, storage, or disclosure serves a legitimate interest, such as (i) complying with legal requirements; (ii) enforcing this Agreement; (iii) responding to claims that content violates the rights of third parties; (iv) responding to your customer service requests; or (v) protecting the rights, property, and personal safety of the Company or any individual.

We inform you that if you want more details about these recipients, please send an email to info@cisma.art.

6. Data Retention Period

Your personal data may be processed for various purposes. Each of these purposes is associated with a legal basis that justifies our processing. Likewise, your data is retained for a predetermined period, depending on the purpose of the processing. This period is expressed as an "active database," corresponding to the phase in which your data is processed to achieve the purpose described in the table, and as an "intermediate archive," corresponding to a state of data retention with restricted access. Archived data is no longer used for processing purposes but is retained to fulfill a legal obligation and/or to allow us to defend our legal rights if necessary.

The duration of time we retain and store data depends on the purpose for which it was collected. We will only store data for as long as necessary to fulfill that purpose or to comply with legal requirements.

The purposes, legal bases, and retention periods are detailed in the following table:

7. Accurate and Updated Information

You confirm that all information and personal data you provide on our website is accurate and truthful and that you have the right to publish the Content on the Service. You understand and agree that we may monitor and investigate any Content you post on the Service. We may remove any Content, in whole or in part, that in our sole discretion violates this privacy policy or may damage the reputation of the Service.

8. Your Rights

If you are a European resident, you have the following rights related to your personal data:
- The right to be informed.
- The right of access to know what data is being processed and the processing operations carried out on it.
- The right to rectification.
- The right to data erasure.
- The right to restrict processing.
- The right to data portability.
- The right to object when this is possible.
- The right to withdraw consent.
- Rights related to automated decision-making and profiling.
If you wish to exercise this right, please contact us at contacto@cisma.art. Additionally, if you are a European resident, we highlight that we are processing your information to fulfill contracts we might have with you (for example, if you purchase a service through the site), or otherwise to pursue our legitimate business interests as listed above.

Also, please note that your information may be transferred outside of Europe, including to Canada and the United States.

If your rights as a data subject have not been properly fulfilled by us, please be informed that you have the right to file a complaint with the Data Protection Agency if you believe that an infringement regarding the processing of your personal data has occurred on this website.

9. Links to Other Websites:

Our site may contain links to other websites that are not owned or controlled by us. Please note that we are not responsible for those websites or the privacy practices of third parties. We recommend that you be aware when you leave our website and read the privacy statements of each website that may collect personal information.

10. Information Security:

We secure the information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical security measures to protect against unauthorized access, use, modification, and disclosure of personal data under your control and custody. However, the transmission of information over the Internet or via email is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of data during transmission to our site; such transmission is at your own risk.

We have implemented security measures to prevent accidental loss or disclosure of your data. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorized access.

If we have provided you with (or if you have chosen) a password to access certain parts of our site, you are responsible for keeping this password confidential. You should choose a password that is not easy to guess.

In case of a security breach, we will notify you within 72 hours.

11. Legal Disclosure:

We will disclose any information we collect, use, or receive if required or permitted by law, such as to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

12. Contact Information:

If you wish to contact us to understand more about this Policy or wish to contact us regarding any matter related to individual rights and your personal information, you may send an email to info@cisma.art.

13. Privacy Policy Updates:

We may update the Cisma privacy policy, so we advise you to review this policy each time you access this website.