How did we obtain your data?
The personal data we process comes from the data subjects’ own requests.
The categories of data processed, depending on the category of users and contacts, in general and not in particular may be:
- Typified Data: Personal characteristics, employment details, or commercial/economic/financial information.
- Identifying data: Name and surname, address, NIF / DNI, telephone/e-mail, bank account, and image.
No specially protected data are processed.
Rights of data subjects
1. Access right: The right to obtain from the controller confirmation as to whether or not personal data relating to him/her are being processed and, if so, the right of access to his/her personal data. As well as:
a. The purposes of the processing;
b. The categories of personal data concerned;
c. The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third parties or international organisations;
d. If possible, the intended period of retention of the personal data or, if not possible, the criteria used to determine this period;
e. The existence of the right to request from the controller the rectification or erasure of personal data or the restriction or objection to the processing of personal data relating to the data subject;
f. The right to lodge a complaint with a supervisory authority;
g. Where the personal data have not been obtained from the data subject, any available information on their origin;
h. The existence of automated decisions, including profiling, the logic applied and the significance and intended consequences of such processing.
2. Rectification right: the right to obtain from the controller the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data supplemented, including by means of an additional statement.
3. Erasure right: the right to obtain from the controller the erasure of personal data concerning him/her, who shall be obliged to erase the personal data without undue delay if any of the following circumstances apply:
a. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b. The data subject withdraws the consent on which the processing is based;
c. The data subject objects to the processing;
d. The personal data have been processed unlawfully;
e. Personal data must be erased in order to comply with a legal obligation under Union or Member State law applicable to the controller;
f. Personal data have been obtained in connection with the provision of information society services to minors.
However, there are a number of exceptions where this right does not apply. For example, when the right to freedom of expression and information must prevail.
4. Opposition right: the right to object at any time to the processing of personal data concerning him/her.
The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the formulation, exercise or defence of claims.
5. Processing restriction right: the right to obtain from the controller the restriction of the processing of data where one of the following conditions is met:
a. The data subject challenges the accuracy of the personal data, within a period of time that allows the controller to verify the accuracy of the personal data;
b. The processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use;
c. The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the purposes of making, exercising or defending claims; and
d. The data subject has objected to the processing of his or her personal data.