Forms

Informative clauses in web forms (DOUBLE LAYER)

INFORMATION ON PROCESSING BY LAYERS (art. 11 LOPDGDD)

In each of the forms where personal data are obtained, basic processing information must be provided (1st layer) including, at least:

The identity of the data controller and its representative, if applicable.

It will not be necessary to provide this information when their identity is in the legal notice and can also be evidenced by the website itself (domain name, advertised brand, etc.).

The purposes of the processing.

Generic information on the purposes for which the personal data to be collected are intended.

Link to the Privacy Policy.

Which will contain complete information about the processing (2nd layer).

CONFIGURATION INSTRUCTIONS ON THE WEB PAGE

Include the following informative clauses at the end of each of the following web forms.

The clause may contain one or more purposes and some of these may require the user’s consent:

If consent is not required, the recipient of the form may process the data for the described purpose only by informing the user.
If consent is required, an “I agree…” box will be displayed for the user to decide whether or not to accept the processing of data for the particular purpose. In both cases, the recipient should keep evidence of whether or not the user has given consent; for example, a copy of the form in the form of an e-mail or other non-manipulable media.
If the user consents, the recipient may process the data for this specific purpose and for other purposes that do not require consent, if any.
If the user does not agree, the recipient may not process the data for this specific purpose, but may process the data for the other purposes, if any.
Sending the form should not be made conditional on consent, so if there is a purpose that does not require consent, the form should still be able to be sent.

FORM: Consent to data processing (short version)

CONSENT TO THE PROCESSING OF PERSONAL DATA
Comfort Aligners, S.L. is the Responsible for the processing of the user’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and the Organic Law 3/2018 of 5 December (LOPDGDD), so you are provided with the following processing information:
Purposes and legitimacy of the processing: maintaining a business relationship (for legitimate interest of the controller, art. 6.1.f GDPR) and sending communications of products or services (by consent of the data subject, art. 6.1.a GDPR).
Data retention criteria: data will be retained for no longer than necessary to maintain the purpose of the processing or as long as there are legal prescriptions dictating their custody and when no longer necessary for this purpose, they will be deleted with appropriate security measures to ensure the anonymization of the data or the total destruction of the data.
Communication of data: data will not be communicated to third parties, unless legally obliged to do so.
Rights of the user: the right to withdraw consent at any time. Right of access, rectification, portability and deletion of your data, and to limit or oppose its processing. Right to file a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.
Contact details to exercise your rights: ……………………..