Forms

Information Clauses on Web Forms (DOUBLE LAYER)

INFORMATION ON LAYERED PROCESSING (Art. 11 of the LOPDGDD)

Each form used to collect personal data must provide basic information about the processing (first layer), including, at a minimum:

  • The identity of the data controller and, if applicable, the data controller’s representative.

It will not be necessary to provide this information if your identity is included in the legal notice and can also be clearly inferred from the website itself (domain name, advertised brand, etc.).

  • The purposes of the processing.

General information about the purposes for which the personal data to be collected will be used.

  • Link to the Privacy Policy.

It will contain the complete information on the treatment (2nd layer).

WEB SITE SETUP INSTRUCTIONS

Include the following disclosure statements at the end of each of the following forms on the website.

The clause may include one or more purposes, and some of these may require the user’s consent:

  1. If consent is not required, the recipient of the form may process the data for the described purpose simply by informing the user.
  2. If consent is required, an “I agree…” checkbox will be displayed so that the user can decide whether or not to consent to the processing of their data for that specific purpose. In both cases, the recipient must retain evidence confirming whether or not the user has given consent; for example, a copy of the form in the form of an email or other tamper-proof means.
  • If the user consents, the recipient may process the data for this specific purpose and for any other purposes that do not require consent, if any.
  • If the user does not consent, the recipient will not be able to process the data for this specific purpose, but may process it for other purposes, if any.
  • Submitting the form should not be contingent on consent; therefore, if there is any purpose that does not require consent, it should still be possible to submit the form.

FORM: Consent to Data Processing (Abridged Version)

CONSENT TO THE PROCESSING OF PERSONAL DATA
Comfort Aligners, S.L. is the data controller responsible for processing the user’s personal data and hereby informs the user that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27 (GDPR), and Organic Law 3/2018 of December 5 (LOPDGDD). Accordingly, the following information regarding the processing is provided:
Purposes and legal basis for processing: maintaining a business relationship (based on the controller’s legitimate interest, Art. 6.1.f of the GDPR) and sending communications regarding products or services (based on the data subject’s consent, Art. 6.1.a of the GDPR).
Data Retention Criteria: Data will be retained for no longer than is necessary to fulfill the purpose of the processing or for as long as there are legal requirements mandating its retention; once it is no longer necessary for that purpose, the data will be deleted using appropriate security measures to ensure its anonymization or complete destruction.
Disclosure of Data: Data will not be disclosed to third parties, unless required by law.
User rights: the right to withdraw consent at any time. Right of access, rectification, portability, and erasure of your data, as well as the right to restrict or object to its processing. Right to file a complaint with the Supervisory Authority (www.aepd.es) if you believe that the processing does not comply with current regulations.
Contact information for exercising your rights: ……………………..