ELYSIUS EUROPA, S.L. (with its trademark STELAE) respects the current legislation on the protection of personal data, the privacy of users and the secrecy and security of data in accordance with the provisions of the applicable legislation on data protection, and applies appropriate technical and organizational measures in order to ensure and be able to demonstrate that the processing of data for which STELAE. is responsible, complies with the aforementioned regulations.
Personal data will only be obtained by STELAE. for processing when they are adequate, relevant and not excessive in relation to the scope and the specific, explicit and legitimate purposes for which they have been obtained. To access the contents of STELAE's web pages, the user must be of legal age. The User declares that the data provided are true and correct, and undertakes to inform STELAE of any changes that may occur in them.
Therefore, STELAE informs users of all matters relating to its privacy policy and access to personal data:
1. Data controller
The data controller is ELYSIUS EUROPA, S.L., parent company of STELAE with registered office at C/Saragossa 6, 08830 Sant Boi de Llobregat, Barcelona, N.I.F. B-63.230.759.
Contact details: 900 230 238
2. What information we collect
We collect different categories of personal information, which may include:
- Identification data: name, surname and identity/passport number.
- Contact data: e-mail address, postal address and telephone number.
- Financial and banking data, necessary for the correct provision of the service.
- Browsing history data: IP address, web pages visited and country from which the connection is made.
This personal information is collected in a number of ways, including:
- When you actively submit personal information to us, for example, when you register for our services.
- We also collect certain personal information about you when you make an enquiry/contact using our website through cookies when you visit our websites.
3. Purposes of processing
To initiate, execute and maintain the contractual relationship of the services contracted by customers through the STELAE website.
- To contact the customer in relation to informative communications related to the products or services contracted,
- relating to funeral services/products or floral products (online sales),
- to manage possible changes or refunds once the funeral services/products have been contracted, and to manage requests for information on availability depending on whether they are available at any given time and place,
- regardless of the means of payment used, and to manage the payment of the contracted services and/or products,
- regardless of the means of payment used. Manage the payment of contracted services and/or purchased products,
- regardless of the means of payment used.for invoicing purposes, as well as making available to the user the tickets and invoices for the contracted services and/or products.
- contract courier services for the delivery of the ashes of the deceased.respond to requests for information and suggestions from customers.
- carry out website maintenance tasks to provide a secure environment for its users.
4. Legitimation
The legal basis for the processing of the data is:
a. Article 6.1.a of the GDPR - Consent of the data subject.
Data subjects may give their consent through data collection forms, by clicking on acceptance buttons or ticking boxes, replying to emails or taking any other clear affirmative action.
Data subjects may withdraw their consent at any time, as detailed in Section 8. In any event, withdrawal of consent shall not affect the lawfulness of any processing previously carried out.
b. Article 6.1.b of the GDPR - Contractual relationship
Refusal to provide the personal data requested by STELAE may result in the impossibility of concluding or maintaining such a contract.
c. Article 6.1.c of the GDPR - Legal obligation
STELAE needs to process the personal data requested in order to fulfil its contractual legal obligations.
The right to withdraw consent may be exercised at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
4. Periods of conversation
The data derived from the execution of the service will be kept for as long as the contractual relationship that we have established is maintained, in order to be able to manage it properly and there is no request for deletion by the interested party. Once this relationship has ended, we shall keep the data duly blocked for an additional period during which there may be any legal liabilities arising from services provided or processing carried out.
6. Communication and/or transfer of personal data
(i) Group entities: We may share your personal data with entities belonging to the ELYSIUS EUROPA, S.L. group, parent company and/or subsidiaries, for the purposes set out in this Privacy Policy.
We also specifically inform you that the entities of the ELYSIUS EUROPA, S.L. group share, with varying degrees of integration, common IT services and accounting, personnel management and payroll services, among others, in order to take advantage of existing synergies, optimise resources and offer a better service to customers.
(ii) OOther Entities: Personal data may also be disclosed to other companies related to funeral services, such as:
insurers or mutual insurance companiesdelivery and courier companiescollaborators and service providers, such as, but not limited to, lawyers, auditors, consultants, specialists in administrative procedures, financial institutions, and other suppliers and professionals, who will process the personal data as data processors on behalf of and for the account of the data controller for the purpose of ensuring that the personal data is processed in a professional manner.
who will process the personal data as data processors on behalf of and for the account of the data controller, for the purpose of guaranteeing the services provided by the data controller in the performance of the contract or service, complying with the obligations deriving from the applicable regulations, in legitimate interest and/or in accordance with the consent provided, where applicable.
7. International transfers
STELAE does not carry out international transfers of any of your data and we process your data within the European Economic Area and, in general, we contract service providers also located within the European Economic Area (EEA) or in countries that have been declared with an adequate level of protection.
8. Rights of data subjects
The user has the right to:
- Right of access: Request access to your personal data being processed and receive such information in writing by the means requested.
- Right of rectification: Request the rectification of inaccurate personal data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purpose for which they were collected.
- Right to object: to object to the processing of your personal data where appropriate, in which case your data will no longer be processed except for legitimate reasons.
- Right of portability: the right to portability of your personal data where the processing is based on consent and is carried out by automated means. The data will be provided in a structured, commonly used and machine-readable form.
- Right to erasure "to be forgotten": the right to withdraw the consent given and have your data erased.
- Right to complain to the Spanish data protection agency.
The user may exercise the aforementioned rights through the following postal or e-mail address, having to prove their identity in any case and beforehand:
Att. department responsible for Data Protection
c/ Saragossa, 6
08830 sant boi del llobregat.
The communication made by the user to the e-mail address: protecciondatos@stelaeservices.com will also be valid.
STELAE assures you of the confidentiality of your personal data and guarantees their security, adopting the necessary measures to prevent their alteration, loss, unauthorised processing or access.
The provision of personal data is absolutely voluntary for the User, although the failure to provide certain data or questions that may be asked in the registration process or in the various electronic forms presented to the User may make it impossible to access certain services for the provision of which it is essential to have personal data, in which case STELAE will inform of the mandatory and / or necessary to provide personal data for the operation of the service.
9. Security
STELAE assures you of the confidentiality of your personal data and guarantees their security, adopting the necessary measures to prevent their alteration, loss, processing or unauthorised access.
10. Changes to the privacy policy
STELAE reserves the right to revise this Privacy Policy without prior notice, whenever necessary, for example, due to the publication of new rules or criteria or the implementation of new treatments.