Website Privacy Policy

theboredparents.com

I. Privacy and data protection policy

In compliance with current legislation, The bored parents (hereinafter, also the Website) undertakes to adopt the necessary technical and organisational measures, appropriate to the level of risk involved in the data collected.

Laws incorporated by this privacy policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data online. Specifically, it complies with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
• Royal Decree 1720/2007, of 21 December, approving the Regulation implementing Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The data controller for personal data collected through The bored parents is: Óscar Javier San Millán Bermejo, with NIF: 72081027Q (hereinafter, the Controller). Contact details:

• Address: Calle General Dávila 206, Santander, Cantabria, Spain
• Contact phone: 645596025
• Contact email: info@theboredparents.com

Personal data registration

In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected by The bored parents through the forms on its pages will be incorporated into and processed in our files in order to facilitate, streamline and fulfil the commitments established between The bored parents and the User, or to handle a request or enquiry.

Principles applicable to the processing of personal data

The processing of the User's personal data will be subject to the following principles:

• Principle of lawfulness, fairness and transparency: the User's consent will always be required, with full transparent information about the purposes for which personal data is collected.
• Purpose limitation: personal data will be collected for specified, explicit and legitimate purposes.
• Data minimisation: only personal data strictly necessary in relation to the purposes for which it is processed will be collected.
• Accuracy: personal data must be accurate and kept up to date.
• Storage limitation: personal data will be kept in a form that permits identification of the User only for as long as necessary for the purposes of processing.
• Integrity and confidentiality: personal data will be processed in a manner that ensures its security and confidentiality.
• Accountability: the Controller will be responsible for ensuring compliance with all the above principles.

Categories of personal data

The categories of data processed by The bored parents are solely identification data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.

Legal basis for processing personal data

The legal basis for processing personal data is consent. The bored parents undertakes to obtain the User's express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw consent at any time. As a general rule, withdrawal of consent will not affect use of the Website.

Purposes of personal data processing

Personal data is collected and managed by The bored parents in order to facilitate, streamline and fulfil the commitments established between the Website and the User, or to handle requests or enquiries.

Data may also be used for personalisation, operational and statistical purposes, as well as to improve the quality, performance and navigation of the Website.

Personal data retention periods

Personal data will only be retained for the minimum time necessary for the purposes of processing and, in any case, for the following period: 18 months, or until the User requests its deletion.

Recipients of personal data

The User's personal data will not be shared with third parties.

Personal data of minors

In accordance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only persons aged 14 or over may lawfully consent to the processing of their personal data by The bored parents. For persons under 14 years of age, the consent of a parent or guardian is required for processing to be lawful.

Security of personal data

The bored parents undertakes to adopt the necessary technical and organisational measures to ensure the security of personal data and to prevent its accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

The Website uses an SSL (Secure Socket Layer) certificate, ensuring that personal data is transmitted securely and confidentially, with all data transmission between the server and the User fully encrypted.

Rights of data subjects

The User has the right to exercise the following rights against the Controller, as recognised in the GDPR and Organic Law 3/2018:

• Right of access: obtain confirmation as to whether their personal data is being processed.
• Right of rectification: have inaccurate or incomplete personal data corrected.
• Right to erasure ("right to be forgotten"): have personal data erased when it is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing: restrict the processing of their personal data.
• Right to data portability: receive personal data in a structured, commonly used, machine-readable format.
• Right to object: object to the processing of their personal data.
• Right not to be subject to automated decision-making: not be subject to a decision based solely on automated processing.

To exercise these rights, the User may contact the Controller in writing with the reference "GDPR-theboredparents.com", providing their name, surname and a copy of their ID document, at:

• Postal address: Calle General Dávila 206, Santander, Cantabria, Spain
• Email: info@theboredparents.com

Links to third-party websites

The Website may include hyperlinks to third-party websites not operated by The bored parents. Those website owners will have their own data protection policies and will be solely responsible for their own files and privacy practices.

Complaints to the supervisory authority

If the User considers that there is an infringement of the applicable regulations regarding the processing of their personal data, they have the right to lodge a complaint with the supervisory authority. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (https://www.aepd.es/).

II. Acceptance and changes to this privacy policy

By using the Website, the User accepts this Privacy Policy. The bored parents reserves the right to modify this Privacy Policy in accordance with its own criteria or due to legislative, jurisprudential or doctrinal changes. Users are advised to consult this page periodically to stay informed of the latest updates.