I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, darijadicionary.com (hereinafter also “Website”) is committed to adopting the necessary technical and organizational measures, in accordance with the level of security appropriate to the risk of the collected data.

Laws Incorporated into This Privacy Policy

This Privacy Policy is adapted to the current Spanish and European regulations regarding the protection of personal data on the Internet. In particular, it complies with the following rules:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007, of 21 December, approving the Development Regulation of Organic Law 15/1999, of 13 December, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of 11 July, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller for the personal data collected on darijadicionary.com is Hajjaj Brothers Sociedad Limitada, with Tax ID: B56733926 (hereinafter, the “Data Controller”). Their contact details are as follows:

• Address: Calle Doctor Creus 1, 2B
• Contact Phone: +34 644 16 05 93
• Contact Email: info@darijadicionary.com

Record of Personal Data

In compliance with the GDPR and the LOPD-GDD, please be informed that the personal data collected by darijadicionary.com through the forms provided on its pages will be incorporated into our file and processed in order to facilitate, expedite, and fulfill the commitments established between darijadicionary.com and the User or to maintain the relationship established via the forms filled out, or to address any request or inquiry. Furthermore, in accordance with the GDPR and the LOPD-GDD (unless the exception provided in Article 30.5 of the GDPR applies), a record of processing activities is maintained that specifies, according to its purposes, the processing activities carried out and the other circumstances established in the GDPR.

Principles Applicable to the Processing of Personal Data

The processing of the User’s personal data will be subject to the following principles set forth in Article 5 of the GDPR and in Article 4 and following of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights:

• Principle of Lawfulness, Fairness, and Transparency: The User’s consent is required at all times, following fully transparent information about the purposes for which the personal data is collected.
• Purpose Limitation Principle: Personal data will be collected for specific, explicit, and legitimate purposes.
• Data Minimization Principle: Only data strictly necessary for the purposes for which it is processed will be collected.
• Accuracy Principle: Personal data must be accurate and kept up to date.
• Storage Limitation Principle: Personal data will only be maintained in a form that permits identification of the User for the time necessary for the purposes of processing.
• Integrity and Confidentiality Principle: Personal data will be processed in a manner that ensures its security and confidentiality.
• Accountability Principle: The Data Controller is responsible for ensuring that the above principles are met.

Categories of Personal Data

The categories of data processed on darijadicionary.com consist solely of identification data. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.

Legal Basis for the Processing of Personal Data

The legal basis for processing personal data is consent. darijadicionary.com undertakes to obtain the explicit and verifiable consent of the User for the processing of their personal data for one or several specific purposes.

The User shall have the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Website.

In cases where the User is required or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, the User will be informed if completing any of them is mandatory because such data is essential for the proper execution of the operation.

Purposes for Which the Personal Data Is Processed

Personal data is collected and managed by darijadicionary.com in order to facilitate, expedite, and fulfill the commitments established between the Website and the User or to maintain the relationship established via the forms filled out, or to address a request or inquiry.

Additionally, the data may be used for commercial, personalization, operational, and statistical purposes, as well as for activities related to the corporate purpose of darijadicionary.com, such as data extraction, storage, and marketing studies to tailor the offered Content to the User, as well as to improve the quality, functionality, and navigation of the Website.

At the time personal data is obtained, the User will be informed of the specific purpose(s) for which the personal data will be processed; that is, the intended use(s) of the collected information.

Retention Periods for Personal Data

Personal data will only be retained for the minimum time necessary for the purposes of its processing and, in any case, for the following period: 18 months, or until the User requests its deletion.

At the time personal data is obtained, the User will be informed of the period during which the personal data will be kept or, if this is not possible, the criteria used to determine this period.

Recipients of the Personal Data

The User’s personal data will be shared with the following recipients or categories of recipients: Google, Facebook, Instagram, Sered, Meta Ads, Mailrelay, Hostinger, Google reCAPTCHA, Google Analytics, OpenAI, Google Gemini, Google Ads, Google Drive, WhatsApp, Google Cloud Services, Evolution.

If the Data Controller intends to transfer personal data to a third country or international organization, the User will be informed at the time the data is obtained of the third country or international organization to which the data is intended to be transferred, as well as of the existence or absence of an adequacy decision by the Commission.

Personal Data of Minors

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, only individuals over 14 years of age may lawfully give their consent for the processing of their personal data by darijadicionary.com. If the data concerns a minor under 14, parental or guardian consent is required, and such processing will only be considered lawful if this consent has been provided.

Confidentiality and Security of Personal Data

darijadicionary.com is committed to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risk of the collected data, to ensure the security of personal data and to prevent accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data is transmitted securely and confidentially, as the transmission of data between the server and the User, as well as the return feedback, is fully encrypted.

However, since darijadicionary.com cannot guarantee the invulnerability of the Internet or the total absence of hackers or others who might fraudulently access personal data, the Data Controller undertakes to notify the User without undue delay if a breach of security occurs that is likely to entail a high risk to the rights and freedoms of individuals. In accordance with Article 4 of the GDPR, a breach of security is understood as any breach of security that leads to the accidental or unlawful destruction, loss, alteration of personal data transmitted, stored, or otherwise processed, or to unauthorized communication or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to ensure, through legal or contractual obligations, that such confidentiality is respected by its employees, associates, and any person to whom the information is made accessible.

Rights Arising from the Processing of Personal Data

The User has the following rights with respect to darijadicionary.com and may therefore exercise the following rights against the Data Controller as recognized in the GDPR and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights:

• Right of Access: The User has the right to obtain confirmation as to whether darijadicionary.com is processing their personal data, and if so, to receive information about their specific personal data and the processing carried out or being carried out by darijadicionary.com, including details on the origin of the data and the recipients of any communications made or planned.
• Right to Rectification: The User has the right to have inaccurate or incomplete personal data corrected.
• Right to Erasure (“the Right to be Forgotten”): The User has the right, provided current legislation does not stipulate otherwise, to have their personal data erased when it is no longer necessary for the purposes for which it was collected or processed; if the User has withdrawn their consent and no other legal basis for processing exists; if the User objects to the processing and there is no other legitimate reason to continue; if personal data has been processed unlawfully; if erasure is required to comply with a legal obligation; or if personal data was obtained as a result of a direct offer of information society services to a minor under 14. In addition to erasing the data, the Data Controller shall take reasonable measures, taking into account available technology and cost, to inform other controllers processing the personal data of the interested party’s request to erase any links to such personal data.
• Right to Restrict Processing: The User has the right to limit the processing of their personal data. The User is entitled to obtain a restriction of processing if they contest the accuracy of their personal data; if the processing is unlawful; if the Data Controller no longer needs the data but the User requires it for making claims; and when the User has objected to the processing.
• Right to Data Portability: In cases where processing is carried out by automated means, the User has the right to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit those data to another data controller. Whenever technically feasible, the Data Controller will transmit the data directly to that other controller.
• Right to Object: The User has the right to object to the processing of their personal data or to have the processing ceased by darijadicionary.com.
• Right not to be Subject to a Decision Based Solely on Automated Processing, Including Profiling: The User has the right not to be subject to an individualized decision based solely on automated processing of their personal data, including profiling, unless current legislation stipulates otherwise.

Thus, the User may exercise their rights by sending a written communication to the Data Controller referencing “GDPR-https://darijadicionary.com”, specifying:

• The User’s name and surname and a copy of their identification document. In cases where representation is admitted, identification of the person representing the User (by the same means) as well as documentation proving the representation is also required. The copy of the ID may be substituted by any other legally valid document that proves identity.
• A request stating the specific reasons for the request or the information to which they wish to gain access.
• A mailing address for notifications.
• The date and signature of the applicant.
• Any documents that substantiate the request.

This request, along with any attached documents, may be sent to the following address and/or email:

• Postal Address: Calle Doctor Creus 1, 2B
• Email: info@darijadicionary.com

Links to Third-Party Websites

The Website may include hyperlinks or links that allow access to third-party websites other than darijadicionary.com, which are not operated by darijadicionary.com. The owners of those websites will have their own data protection policies and are, in each case, responsible for their own files and privacy practices.

Complaints to the Supervisory Authority

If the User believes that there is a problem or violation of current regulations regarding the processing of their personal data, they have the right to judicial protection and to file a complaint with a supervisory authority, particularly in the State where they have their habitual residence, work place, or where the alleged violation occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency (http://www.agpd.es).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees with the conditions regarding the protection of personal data contained in this Privacy Policy, as well as accepts the processing of their personal data, so that the Data Controller may proceed with such processing in the manner, for the duration, and for the purposes indicated. The use of the Website implies acceptance of its Privacy Policy.

darijadicionary.com reserves the right to modify its Privacy Policy, either at its own discretion or due to a legislative, jurisprudential, or doctrinal change by the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is advised to periodically consult this page to stay informed of the latest changes or updates.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 regarding the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR) and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.