This website www.virtualzone.es (virtualZone from now on) is property of Virtual Zone Nexus SL (Nexus from now on) with CIF B42692533 and address Plaza de los Luceros nº17, Planta 2 - Oficina 1, 03004 - Alicante (España). E-mail: info@virtualzone.es, telephone no. (+34) 622 58 49 76. This company has been registered in the Registro Mercantil de Alicante, tomo: 4280, folio: 32, Hoja: A-168908, Inscripción: 1.

The current Privacy Policy regulates the use we make of your personal information at www.virtualzone.es and in the context of the offered services at the aforesaid site.

www.virtualzone.es concurs with all the demands by the Ley Orgánica 15/1999, December 13, of the Protección de Datos de Carácter Personal (LOPD) and the Real Decreto 1720/2007 December 21st known as the Reglamento de desarrollo of the LOPD. It also concurs with the regulations (EU) of the European Parliament and the Council of April 27 2016 relative to the ‘protección de las personas físicas’ (GDPR) as well as the Ley 34/2002, July 11th, of Servicios de la Sociedad de la Información y Comercio Electrónico (LSSICE or LSSI).

Virtualzone.es saves the right to modify the contents of the current Privacy Policy to adapt it to any new laws or regulations as well as the reports or rulings by the Agencia Española de Protección de Datos or the Grupo de Trabajo of Article 29.

1.- Who is the data controller responsible for your personal information?

The data controller responsible for your personal information that we collect, process and store through this website is: Virtual Zone Nexus SL, with CIF B42692533  address Plaza de los Luceros nº17, Planta 2ª - Oficina 1, 03004 - Alicante (Spain). E-mail: info@virtualzone.es  telephone number (+34) 622 58 49 76.

2.- Principles we will base on to collect and process your personal data.

• Principles of legality, loyalty and transparency: We will always ask for your consent before collecting any type of personal data for any pertinent purpose(s). You will be informed of these purposes before hand with absolute transparency.
• Data minimization principle: We will only collect data that are strictly necessary for the proper functioning of our services and only as long as they are related to the purposes for which we require them. We will collect as little information as possible.
• Principle of storage limitation: The storage of your personal data will never be longer than strictly necessary. We will inform you of the length of this period although it will depend on the purpose for which your data are being processed. Please note that we will check our database periodically and we will remove any records that have been inactive for a reasonable period of time.
• Principle of integrity and confidentiality: We will process your personal data in a way that grants both safety and confidentiality. Please note that we apply all the pertinent measures and precautions to avoid any kind of unauthorized access or misuse of any of your personal data by any third parties.

3.- HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

The personal information VirtualZone collects and stores might come from different sources:

a)- We collect, process and store personal information of all the users who willingly make a booking with us and fill in the form (including the blanks that are required for its submission) in our website. This information would be the following: Name, telephone number and e-mail. Nexus will only store information related to the payment method used by each customer to pay for the requested services (credit or debit card, bank account, Paypal etc.). Nexus will never under any circumstances collect any data such as credit or debit card numbers, passwords etc. as all payments will be made through the corresponding banking entity’s payment gateway which isn’t connected to Nexus in any way.

Each user will be responsible of the veracity and authenticity of the information they submit on our booking form. It will be the users duty to keep their personal information up-to-date at all times to avoid any mistakes by our side. Users will be responsible for any fake or inexact information resulting from the data submitted through our form.

b)-As Virtualzone puts its website to all users disposal, please note that the contents of the aforesaid website are hosted at the servers of: Igarcom - TECNOCRÁTICA Centro de Datos, S.L., located in Calle Salvatierra, 4, Madrid, Spain.

4.- Legal basis for the collection and processing of your personal data?

Our legal basis for the processing of the collected data through our booking form is consent. When filling in the aforesaid form, users agree to every statement appearing in the present privacy policy. The legal basis for the collection and processing of your personal data obtained through the e-mails we receive at www.virtualzone.es is offering a reply to every question or inquiries any users may send our way. This however means no contractual obligation of any kind.

5.- What are the purposes for which we collect and process your personal data?

The purposes for which your personal data are processed by Nexus after its collection through VirtualZone will depend on how those data have been collected.

A) Booking form: All personal data obtained through this form will be processed by Nexus with the purpose of managing the booking of the hired services by each user. The payment process for the aforesaid hired services will be done through the pertinent banking entity’s payment gateway. In this case, Banco Santander.

B) E-mails received at www.virtualzone.es: All personal data obtained through the aforesaid emails will be processed by Nexus with the purpose of offering a reply to every question or inquiry any users may send our way

C) Gathering of images and videos during each group session. All personal information obtained through the aforementioned images and videos will be processed by Nexus -after obtaining the user’s permission- for the following purposes:

• - To allow the Virtual Zone staff to overview every session and make sure everything is working correctly and to be able to offer assistance when necessary.
• - To be able to send every participant in the same group a series of images and videos of their experience via smartphone or e-mail. This materials will be sent exclusively to each member of the same group.
• - To upload images and/or videos to the social networks, media or any other broadcasting method in which users appear making use of our facilities (individually or in group) for commercial purposes.

Other purposes for which we process your personal data:

• c) To ensure the compliance of the terms and conditions and the governing law by developing new tools and algorithms that contribute to the confidentiality of the collected personal data. .
• d) To develop and improve the quality of our products and services.
• e) Through the cookies we also collect some unidentifiable data which help us customize every user’s experience for a better assistance, improve our website etc. For further information, it is advisable to check our cookie policy by clicking here.
• f) To manage the social networks in which VirtualZone is present (Facebook, Twitter, YouTube, Instagram and Pinterest). The processing of the personal data of the users that become followers of any of VirtualZone official accounts in the social networks will be regulated by the statements present in this section, as well as the terms and conditions, privacy policies and accessing rules belonging to each of these social networks which the users must have agreed to beforehand. From Nexus, we will process your data with the purpose of managing your presence in each social network, offering information about each of VirtualZone’s different activities or services etc. We will never, under any circumstances, use our follower’s profiles in our social networks for individual advertisement purposes.

6.- How and for how long will we store your personal data?

All the personal data provided by the users of VirtualZone will be stored under physical, technical and organizational precautions to grant the safety of the aforesaid data and at the same time to try and reduce the risk of an accidental or illegal destruction, loss, unauthorized access, alteration, unauthorized modification, or divulgation of your personal data, as well as any other illicit ways of processing your personal information, in compliance with the article 32 of the GDPR.

To that end, Nexus have implemented all the pertinent mechanisms to:

• 1. Grant the permanent confidentiality, integrity, availability and resilience (ability of a technological system to endure and recover from any disasters or disturbances) of our systems and processing services.
• 2. Quickly restore the availability and the access to any personal data in case of physical or technical incident.
• 3. Verify, evaluate and value, in a regular basis, the effectiveness of our technical and organizational implemented precautions to grant the safety of your personal information.
• Pseudonymize (processing of your personal information in a way that no one can be identified without using additional information) and encode your personal data.

However, as a user you recognize and accept that the internet safety precautions are not invulnerable and that the networks used to access the internet are not 100% safe so any communication sent using this mean might be intercepted and/or modified by unauthorized people. It is advisable that you, as a user, take all the necessary precautions as well.

A violation of personal information means a breach in the security of Nexus information systems that may cause the intentional or unintentional destruction, alteration, loss, unauthorized access or divulgation of the provided personal information. If that was the case we would notify every person affected in compliance with the article 33 of the GDPR.

In regards to the period of time your personal data are stored, these data will be kept until the commercial relationship comes to an end, until a user in particular asks us expressly to remove their personal information or until we proceed to its removal after a reasonable inactivity period.

7.- Who will we share your personal information with?

The personal information provided by our users through VirtualZone will not be sold, rented, transferred or exchanged with any third parties unless express consent of the user or legal obligation.

To offer some services that are strictly necessary for the correct functioning of VirtualZone, Nexus will be using some tools managed by third parties to process your personal data such as:

• Google Analytics: Web analysis service offered by Google, Inc., which uses cookies to help Nexus analysing the use our users make of VirtualZone. The information generated by each cookie about your use, including your IP address will be transferred and stored by Google on their servers in the U.S.
• E-mail marketing: SendinBlue SAS, located in Paris, France processes personal data with the purpose of doing email marketing tasks for Nexus.

As mentioned in section 5 of the present Privacy Policy, VirtualZone is present on some social networks like Facebook, Twitter, YouTube, Instagram and Pinterest without prejudice to the use of some different ones in the future.

That is the reason why, after carefully reading the present privacy policy, you accept that the responsibility of the processing of the posted data by VirtualZone in the aforesaid platforms, as well as the personal data users send to Virtual Zone with the purpose of being extracted falls solely on you. However, Virtualzone will not be sharing or divulging any kind of personal information of its followers through its profiles in the social networks.

We would like to state that all VirtualZone profiles in the different social networks are public and reachable by anyone and share the purpose of promoting and giving our brand, services or contests etc. as much visibility as possible. This is why, all the information our followers choose to post on our public wall will be under their sole responsibility.

If you wish to unfollow any of Virtualzone.es official accounts in any social networks, all you need to do is stop following the aforementioned accounts in accordance with the T&Cs and privacy policies of the pertinent social network. Any personal data uploaded to our profiles will remain there from the moment users give their consent until they say otherwise. To have your data removed you must contact the staff at the pertinent social network.

• Facebook: This social network is based in the U.S. This means any information we upload to this social network translates into an international data transfer, as the servers of the aforementioned company are located in the U.S. as well. Facebook, Inc. possess the privacy shield certificate in the EU-U.S. and Switzerland - U.S. Now, VirtualZone will not be uploading or processing any kind of personal information of our users on the aforesaid social network, it is the users who voluntarily choose if they want to become followers or not. As we have mentioned before, this social network complies with the EU - U.S. privacy shield (for further information on this topic please check their privacy policy https://www.facebook.com/privacy/explanation).
• Youtube: This social network is based in the U.S. This means any information we upload to this social network translates into an international data transfer, as the servers of the aforementioned company are located in the U.S. as well. Now, VirtualZone will not be uploading or processing any kind of personal information of our users on the aforesaid social network, it is the users who voluntarily choose if they want to become followers or not. This social network complies with the EU - U.S. privacy shield (for further information on this topic please check their privacy policy: https://support.google.com/youtube/answer/2801895).
• Instagram: This social network is based in the U.S. This means any information we upload to this social network translates into an international data transfer, as the servers of the aforementioned company are located in the U.S. as well. Now, VirtualZone will not be uploading or processing any kind of personal information of our users on the aforesaid social network, it is the users who voluntarily choose if they want to become followers or not. This social network complies with the EU - U.S. privacy shield (for further information on this topic please check their privacy policy: (https://help.instagram.com/519522125107875)).
• Pinterest: This social network is based in the U.S. This means any information we upload to this social network translates into an international data transfer, as the servers of the aforementioned company are located in the U.S. as well. Now, VirtualZone will not be uploading or processing any kind of personal information of our users on the aforesaid social network, it is the users who voluntarily choose if they want to become followers or not. This social network complies with the EU – U.S. privacy shield (for further information on this topic please check their privacy policy: (https://policy.pinterest.com/es/privacy-policy).

8.- ¿What are your rights as a data subject?

Along with the right to be informed, here are your rights in accordance with the GDPR:

• The right of access: you have the right to access your personal data to know what information is being processed, for what purpose and its origin.
• The right to rectification in the case the collected information is incomplete or incorrect.
• The right to erasure: You have the right to request that we delete your data. In case there is any limitation, Nexus will block your data but will keep them with the only purpose of exercising or defending complaints.
• The right to oppose: If you don’t want us to process your data for a determined purpose you may oppose, as long as there aren’t any legal reasons that force us to keep processing them. Given the case, we would expressly inform you.
• The right to request a limitation of the processing of your personal information. You may request for a limitation of the processing of your personal data in any of the following situations:
• a. If your personal information is not correct. Nexus will need a period of time to check that the data are indeed incorrect.
• b. If the processing of your personal information becomes illicit according to the current regulations and you opt to have them restricted instead of deleted.
• c. If you require your personal information to establish, exercise or defend any kind of legal complaints.
• The right to data portability: You have the right to receive your personal data via a structured and commonly used e-format to be able to transfer them to another person in charge.
• The right of removal: You may ask to have your personal data removed from our servers and Nexus will have to fulfil your request with no unjustifiable delay when:
• a. Your data are no longer necessary in relation to the purposes they were collected or processed for in the first place.
• b. You no longer give your consent for the processing of your personal data and there isn’t any other legal reason to keep them stored in our servers.
• c. You oppose to the processing of your data because they are used for direct marketing purposes.
• d. Your personal data have been illegally collected and/or processed.
• e. Your personal data must be removed to comply with a new regulation (regional and/or national).

Apart from the aforementioned rights, there are two more rights you may exercise.

• The right to cease your consent: If you no longer want us to collect your data for any purpose in particular you may request so at anytime. You simply need to get in touch with us via the following methods:
• a) By writing a letter to ‘Virtual Zone Nexus SL, Plaza de los Luceros, 17 - Planta 2 - Oficina 1, 03004 Alicante’.
• b) By sending an email to servicios@nexusconsultores.com under the subject ‘data protection rights VirtualZone’.
• Right to make a formal complaint to the control authorities. You may got to the pertinent control authorities if you consider Nexus is not handling your personal data correctly. In Spain, the control authority is the Agencia Española de protección de datos (http://www.aepd.es) with headquarters in C/ Jorge Juan, 6, 28001-Madrid. Contact: 901 100 099 / 91 266 35 17.

9.- Minors

Nexus thoroughly concurs with all the requisites requested by the GDPR in relation to the collection of data of underage people. We do not (intentionally) collect any personal data of any kind of minors under 8 years of age.

If you are underage and you want to browse through this website, it is imperative to have the consent of your parents or legal guardians, which will become responsible for any actions you may do.

The minor’s legal representatives will be fully responsible for the actions these minors do on the internet. There are many computer programs and filtering tools to stop minors from reaching inappropriate sites.

If your kids, or someone you are in charge of are under 8 years of age and you suspect they might have submitted any kind of personal information to VirtualZone, please contact us and we will have all that information removed as soon as possible.

Nexus will only collect information about minors from 8-17 years of age as long as they have previously accepted the terms and conditions present in the current privacy policy and they have provided an express consent of their parents or legal guardians.

In any case, minors will not be able to make any bookings on VirtualZone. Only people of 18 years of age or older will be able make a booking.