OUR COMMITMENT TO PERSONAL DATA PROTECTION: “INFORMED INDIVIDUALS AND PROTECTED DATA”
Rebel Strings LLC, as the data controller, assumes the utmost responsibility and commitment to the establishment, implementation, and maintenance of this Data Protection Policy, guaranteeing the continuous improvement of its processes with the objective of achieving excellence in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the applicable Spanish legislation on personal data protection.
This Data Protection Policy is based on the principle of proactive responsibility, according to which the data controller not only complies with the applicable legal and jurisprudential framework but can also demonstrate this to the competent supervisory authorities.
In this regard, the processing of personal data shall be governed by the following principles:
Data Protection by Design: Appropriate technical and organisational measures shall be applied, both at the time of determining the means for processing and at the time of the processing itself, designed to implement data protection principles effectively (such as data minimisation) and to integrate the necessary safeguards into the processing.
Data Protection by Default: Appropriate technical and organisational measures shall be adopted to ensure that, by default, only personal data which are necessary for each specific purpose of the processing are processed.
Data Protection throughout the Information Lifecycle: Measures guaranteeing the protection of personal data shall be applicable throughout the entire information lifecycle.
Lawfulness, Fairness, and Transparency: Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.
Purpose Limitation: Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Data Minimisation: Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Accuracy: Personal data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.
Storage Limitation: Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
Integrity and Confidentiality: Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Information and Training: One of the keys to guaranteeing the protection of personal data is staying informed about the legal obligations in this area. In this regard, the data controller is committed to regular training and updating to ensure compliance with current regulations.
This Data Protection Policy will be available to all interested parties.
Consequently, this Policy must be understood as an individual commitment of the data controller, who assumes the responsibility to apply it, verify its compliance, and detect opportunities for improvement with the objective of achieving the highest quality in personal data management.
This Policy shall be reviewed by Rebel Strings LLC as often as deemed necessary, to adapt, at all times, to the current provisions on the protection of personal data.