Privacy policy

EUROCHANGE MONEY SERVICES, SA is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by EUROCHANGE MONEY SERVICES, SA, implies acceptance by the user of the provisions contained in this Privacy Policy and that their personal data be treated as stipulated. Please note that although there may be links from our website to other websites, this Privacy Policy does not apply to other companies or organizations to which the website is redirected. EUROCHANGE MONEY SERVICES, SA does not control the content of third-party websites nor does it accept any type of responsibility for the content or privacy policies of these websites.

1) OWNER INFORMATION

In compliance with Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, the identifying data of the Owner are set out below:

Web:	www.eurochange.es
Owner:	EUROCHANGE MONEY SERVICES, SA
Address:	AV. MONTECARLO, 4 EDIF. GEMELOS XV- LOCAL 1 03503-BENIDORM
Tax ID (C.I.F.):	A54731831
Telephone:	615 403 877
Email:	[email protected]
Registry Data:	Registered in the Mercantile Registry of Alicante Volume 3717 Folio 70 Sheet A-136587, and with Bank of Spain License number 1785.

2) APPLICABLE LAWS

This privacy policy is based on current Spanish and European regulations regarding the protection of personal data on the internet. Specifically, it respects the following rules:

• Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018, of December 5, on Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

3) PRIVACY ISSUES

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, (GDPR) and Organic Law 3/2018, of December 5, on Protection of Personal Data and Guarantee of Digital Rights, we offer you the following information about the processing of personal data that you may provide to us:

File Controller

EUROCHANGE MONEY SERVICES, SA

Our data can be found at the top of this legal notice.

Register of Personal Data

In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by EUROCHANGE MONEY SERVICES, SA, through the forms extended on its pages will be incorporated and treated in our file in order to be able to facilitate, expedite and fulfill the commitments established between EUROCHANGE MONEY SERVICES, SA and the User or the maintenance of the relationship established in the forms that the latter fills out, or to attend to a request or inquiry from the same. Likewise, in accordance with the provisions of the GDPR and the LOPD-GDD, unless the exception provided for in Article 30.5 of the GDPR applies, a record of processing activities is maintained that specifies, according to its purposes, the processing activities carried out and other circumstances established in the GDPR.

Legal Basis for Processing Purpose

AML/CFT: Comply with legal obligations regarding the prevention of money laundering and terrorist financing, including the formal identification of the client, the conservation of documentation and, where appropriate, the communication of operations to the competent authorities.

The legal basis for this purpose is compliance with a legal obligation, in accordance with Law 10/2010, of April 28, on the prevention of money laundering and terrorist financing, and its implementing regulations.

The legal basis for the processing of personal data will be, as the case may be:

• The execution of a contract or the application of pre-contractual measures, when the processing is necessary to provide currency exchange services or other services requested by the user.
• Compliance with legal obligations, in particular those derived from regulations on the prevention of money laundering and terrorist financing, as well as tax, commercial and payment services regulations that may apply.
• The legitimate interest of EUROCHANGE MONEY SERVICES, SA, for example, to manage the security of the website, prevent fraud or send commercial information about products or services similar to those contracted.
• The User's consent, when necessary, for example, for the sending of commercial communications by electronic means in cases not covered by the legitimate interest indicated above.

The User shall have the right to withdraw their consent at any time, without this affecting the lawfulness of processing based on consent prior to its withdrawal.

The User shall have the right to withdraw their consent at any time. It will be as easy to withdraw consent as to give it. As a general rule, the withdrawal of consent will not condition the use of the Website.

Principle of lawfulness, fairness and transparency:

• The processing of personal data will always be based on a valid legal basis (contract execution, compliance with legal obligations, legitimate interest and/or consent).
• When processing is based on consent, this will be requested in advance, after providing completely transparent information on the purposes for which personal data are collected.

Other Bases of Legitimation:

Compliance with legal obligations.

Legitimate interest: sending own advertising.

Categories of data

The categories of data processed at EUROCHANGE MONEY SERVICES, SA are solely identifying data. In no case are special categories of personal data processed within the meaning of Article 9 of the GDPR.

Origin of your data

Data provided by clients receiving services, by any means.

Data that users supply through the different services offered on the website.

Period of Conservation of personal data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, only during the following period: The personal data provided will be kept for the strictly necessary time. That is, as long as you are a user of our services or want to continue receiving information, or until the User requests their right of cancellation or opposition, or limitation of processing. However, we will keep certain personal identification and traffic data for a maximum period of 2 years in the event that it is required by Judges and Courts or to initiate internal actions derived from the misuse of the website.

At the time personal data is obtained, the User will be informed about the period during which personal data will be kept or, when that is not possible, the criteria used to determine this period.

Likewise, we inform you that our information retention policies conform to the deadlines marked by the different legal responsibilities for prescription purposes:

a) General Rule: regarding the prevention of money laundering and terrorist financing, EUROCHANGE MONEY SERVICES, SA will keep the documentation and information obtained in application of due diligence measures (identification documents, information on operations, etc.) for a period of ten years from the termination of the business relationship or the execution of the occasional operation, in accordance with Law 10/2010 and its Regulation. This affects all accounting, tax, labor or commercial documentation, including correspondence.

b) Specific deadlines: Our company must also mark minimum deadlines based on the type of data being processed and attending to the different prescription periods, which each of the departments must know.

You will not be subject to decisions based on automated processing that produce effects on your data.

Purposes of processing

We detail below the purposes of the data processing carried out:

CUSTOMER MANAGEMENT: To be able to provide the contracted services within the natural activity of each company and invoice them. The data provided will be kept while the commercial relationship is maintained or for the years necessary to comply with legal obligations.

POTENTIAL CUSTOMER MANAGEMENT: To be able to send people with legitimate interest information related to our products and services by any available means, and invite them to events of their interest. The data provided will be kept as long as you do not request the cessation of such processing and will be collected with prior express consent.

Legal basis AML/CFT: Compliance with a legal obligation (Law 10/2010, of April 28, and its Regulation, RD 304/2014), as well as, where appropriate, the fulfillment of tasks carried out in the public interest related to the prevention of money laundering.

Recipients of the data

Personal data may be communicated to:

• Competent authorities and public bodies regarding the prevention of money laundering and terrorist financing, financial, tax and judicial supervision, when there is a legal obligation to provide information (for example, SEPBLAC, Bank of Spain, Tax Agency, Courts and Tribunals).
• Financial entities and payment service providers involved in the management of currency exchange operations or related services.
• Providers that provide services to the controller (IT services, cloud storage, regulatory compliance, etc.), with whom the data processing agreements required by art. 28 GDPR have been signed.

Personal data of minors

Respecting the provisions of articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights, only those over 14 years of age may give their consent for the processing of their personal data lawfully by EUROCHANGE MONEY SERVICES, SA. If it is a minor under 14 years of age, the consent of parents or guardians will be necessary for processing, and this will only be considered lawful to the extent that they have authorized it. If not, the legal representative must inform us as soon as possible.

Rights derived from the processing of personal data

The User may exercise the following rights recognized in the GDPR and Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights against the Data Controller:

Right of access: It is the User's right to obtain confirmation of whether EUROCHANGE MONEY SERVICES, SA is processing their personal data or not and, if so, obtain information about their specific personal data and the processing that EUROCHANGE MONEY SERVICES, SA has carried out or carries out, as well as, among other things, the information available on the origin of said data and the recipients of the communications made or planned for them.

Right of rectification: It is the User's right to have their personal data modified if it turns out to be inaccurate or, taking into account the purposes of the processing, incomplete.

Right of deletion ("the right to be forgotten"): It is the User's right, provided that current legislation does not establish otherwise, to obtain the deletion of their personal data when these are no longer necessary for the purposes for which they were collected or processed; the User has withdrawn their consent to processing and this does not have another legal basis; the User objects to processing and there is no other legitimate reason to continue with it; personal data have been processed unlawfully; personal data must be deleted in compliance with a legal obligation; or personal data have been obtained as a result of a direct offer of information society services to a minor under 14 years of age. In addition to deleting the data, the Data Controller, taking into account available technology and the cost of its application, must take reasonable measures to inform those responsible who are processing the personal data of the interested party's request for deletion of any link to that personal data.

Right to limitation of processing: It is the User's right to limit the processing of their personal data. The User has the right to obtain the limitation of processing when they challenge the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User needs it to make claims; and when the User has objected to processing.

Right to data portability: In the event that processing is carried out by automated means, the User shall have the right to receive from the Data Controller their personal data in a structured, commonly used and machine-readable format, and to transmit them to another data controller. Whenever technically possible, the Data Controller will directly transmit the data to that other controller.

Right of opposition: It is the User's right not to have their personal data processed or to cease processing them by EUROCHANGE MONEY SERVICES, SA.

Right not to be subject to a decision based solely on automated processing, including profiling: It is the User's right not to be subject to an individualized decision based solely on the automated processing of their personal data, including profiling, existing unless current legislation establishes otherwise.

Finally, interested parties have the right to file a claim with the competent Control Authority (AEPD) in the event that the User considers that there is a problem or violation of current regulations in the way their personal data is being processed.

You can exercise the above rights by sending us a letter attaching a copy of a document that identifies you to our address or email (appearing at the beginning of this text).

4) PRINCIPLES APPLICABLE TO PERSONAL DATA PROCESSING

The processing of the user client's personal data will be subject to the following principles set out in art. 5 of the GDPR and in article 4 and following of the LOPDGDD:

Principle of lawfulness, fairness and transparency: User consent will be required at all times after completely transparent information on the purposes for which personal data are collected.

Principle of purpose limitation: Personal data will be collected for specified, explicit and legitimate purposes.

Principle of data minimization: Personal data collected will be only strictly necessary in relation to the purposes for which they are processed.

Principle of accuracy: Personal data must be accurate and always up to date.

Principle of limitation of the conservation period: Personal data will only be kept in a way that allows the identification of the user for the time necessary for the purposes of processing.

Principle of integrity and confidentiality: Personal data will be treated in a way that guarantees its security and confidentiality.

Principle of proactive responsibility: The Website controller will maintain and regulate the necessary technical and logistical means sufficient for all principles applicable to processing to be met.

5) WHAT SECURITY MEASURES DO WE APPLY?

We apply the security measures established in Article 32 of the GDPR, therefore, we have adopted the necessary security measures to guarantee a level of security appropriate to the risk of the data processing we carry out, with mechanisms that allow us to guarantee the confidentiality, integrity, availability and permanent resilience of processing systems and services.

Some of these measures are:

• Information on data processing policies to staff.
• Performing periodic backups.
• Data access control.
• Regular verification, evaluation and assessment processes.

6) SECRECY AND SECURITY OF PERSONAL DATA

EUROCHANGE MONEY SERVICES, SA is committed to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, so as to guarantee the security of personal data and avoid accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the data transmission between the server and the User, and in feedback, is fully encrypted.

However, because EUROCHANGE MONEY SERVICES, SA cannot guarantee the impregnability of the internet or the total absence of hackers or others who fraudulently access personal data, the Data Controller undertakes to communicate to the User without undue delay when a violation of the security of personal data occurs that is likely to entail a high risk to the rights and freedoms of natural persons. Following the provisions of Article 4 of the GDPR, a violation of the security of personal data is understood to be any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform of and guarantee by means of a legal or contractual obligation that said confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.

7) LINKS TO THIRD PARTY WEBSITES

The Website may include hyperlinks or links that allow access to web pages of third parties other than EUROCHANGE MONEY SERVICES, SA, and which are therefore not operated by EUROCHANGE MONEY SERVICES, SA. The owners of said websites will have their own data protection policies, being themselves, in each case, responsible for their own files and their own privacy practices.

8) ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees with the conditions on the protection of personal data contained in this Privacy Policy, as well as that they accept the processing of their personal data so that the Data Controller can proceed with it in the form, during the deadlines and for the purposes indicated. Use of the Website implies acceptance of its Privacy Policy.

EUROCHANGE MONEY SERVICES, SA reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a legislative, jurisprudencial or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User consult this page periodically to be aware of the latest changes or updates.

Data Protection Officer (DPO):

EUROCHANGE MONEY SERVICES, SA has appointed a Data Protection Officer, who can be contacted at [email protected] for any questions related to the processing of your personal data.