PRIVACY POLICY

This Privacy Policy applies only to personal data obtained through this website and does not cover information collected by third parties on other websites, even if linked from this site.

The website demonstrates its commitment to maintaining and ensuring secure business relationships with users by protecting personal data and safeguarding users’ privacy rights.


Personal Data Collected

To provide our services, we may require certain identifying information depending on the service provided:

For the contact form:

  • Name and surname: to respond to inquiries.

  • Phone number: to respond to inquiries.

  • Email address: to respond to inquiries.

For payments:
If using a credit or debit card or a PayPal account for direct payment of any service or product, financial or banking data involved in the payment are always managed directly by the service providers listed under «Third-Party Services.» The website will never have access to users’ banking data.

Additionally, certain technical information, such as your IP address assigned by your Internet service provider, is automatically stored when you visit the website.


Legal Basis

We process your data based on your consent, which is required to access our services properly.

You have the right to request the deletion of all your data from our database at any time (“right to be forgotten”).


Categories of Data

The data we collect is not considered sensitive under GDPR.

Under Article 9.1 of the GDPR, sensitive personal data includes:

  • Ethnic or racial origin

  • Political opinions

  • Religious or philosophical beliefs

  • Trade union membership

  • Genetic data

  • Biometric data used to identify an individual

  • Health data

  • Data regarding sexual life or sexual orientation

We only process the minimum necessary personal data to provide our services: name, surname, address, phone, email, and tax ID (NIF/code).


Data Retention

Client data (name, phone, postal address, email, etc.) will be stored as long as legally and technically necessary for the normal operation of the website unless the user requests deletion or updating of their information.


Applicable Law

As of May 25, 2018, this website is governed by the European Union’s General Data Protection Regulation (GDPR).
Official GDPR Text


Security Measures

The website is hosted on systems operated by Arcadina Sistemas Informáticos S.L. (“Arcadina”). Technical and organizational measures are in place to ensure the security of personal data, preventing alteration, loss, unauthorized access, or processing, considering technology, data sensitivity, and risks.

Specific measures include:

  • SSL connection for the website

  • Encryption of passwords using standard cryptographic algorithms

  • Server protection via firewalls, process isolation, and standard security measures

  • Daily geographically distributed backups to ensure service continuity

Arcadina continuously monitors, controls, and evaluates processes to ensure data privacy.


User Rights

Users may exercise their rights of access, rectification, deletion, restriction, and objection to the processing of personal data.

To do so, users can contact the website via the registered email or in writing, specifying “Data Protection” and providing identification and the reason for the request:

Email: info@sohamia.com

Data required to comply with legal, fiscal, or contractual obligations will be blocked and only used for those purposes.


Policy Modifications

The website reserves the right to modify this Privacy Policy due to legislative, jurisprudential, or doctrinal changes.

Any modification will be published at least ten days before it takes effect.


Data Controller and Processors

The data controller is the website owner.


Third-Party Services

To provide essential website services, the following third-party providers are used under their respective privacy policies:

 

 

Consent and Revocation

Users acknowledge that they have been informed about the processing of personal data, accept it, and consent to its use as described.

Consent may be revoked at any time without affecting past actions (non-retroactive).