3. To which recipients will your data be communicated?
Neptuno informs that, to fulfill the purposes described above, it will not transfer the User's personal data to third parties. Notwithstanding the foregoing, Neptuno may give access to said personal data to its technological service providers with whom it has signed a data processor contract and, if they are located in jurisdictions that generally do not offer adequate guarantees in relation to the processing. of personal data, said contracts will be signed including the appropriate guarantees, including the Standard Contractual Clauses approved by the European Commission. Specifically, the data will be provided to:
• Stripe Inc: Neptuno has contracted Stripe Inc (“Stripe”) as a payment services provider. When the User enters their payment data (holder name, card number, expiration date, CVV), these will be stored directly in Stripe Inc ("Stripe") so none of this data will be stored on Stripe's servers. Neptuno, but will be treated by Stripe in accordance with its Privacy Policy available here. Stripe complies with the security measures established by payment services regulations and is Level 1 certified according to the Payment Card Industry Data Security Standard or PCI DSS.
• Zendesk Inc: Neptuno has contracted Zendesk Inc (“Zendesk”) as a support services provider. As a service provider outside the EEA, Zendesk provides the necessary guarantees, including compliance with the Standard Contractual Clauses approved by the European Commission. You can review Zendesk's privacy policy here.
• Maileon Benelux B.V: Neptuno has contracted Maileon Benelux B.V (“Maileon”) as a mailing service provider, through which commercial communications are sent to Users who have consented. Maileon is a service provider domiciled in the European Economic Area. You can obtain more information about the processing of personal data by Maileon here.
In addition, personal data collected by Neptuno may be disclosed to external consultants, in the course of a “Due Dillligence”, in the context of a merger or acquisition involving Neptuno.
Likewise, personal data may also be communicated to Public Administrations and State Security Forces and Bodies, by virtue of their powers.
Likewise, the personal data of the blog comments will be published on the Website so they may be accessible by any third party who accesses said blog article.
4. Security and confidentiality
Neptuno undertakes to adopt the necessary technical and organizational measures, in accordance with the provisions of the applicable regulations, to guarantee the security of personal data and avoid the destruction, loss or accidental or illicit alteration of personal data transmitted, preserved or processed in any other way, or unauthorized communication or access to said data. Personal data will be treated confidentially by Neptuno, which undertakes to inform and enforce, by legal or contractual obligation, said confidentiality to its employees, partners and any person who must have access to the User's personal data.
5. User Rights
The User may exercise the rights of access, rectification, deletion, opposition and, where appropriate, limitation of data processing and portability by sending an email to administracion@neptuno.es.
Likewise, the User may file a claim with a control authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if they consider that the rights set out above in this Privacy Policy have been violated or if considers that the processing of personal data that concerns you violates the applicable regulations.
6. Changes to the Privacy Policy
Neptuno reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User through a notice on the Website, along with the updated version of the Privacy Policy.
Last version: February 24, 2023
