en

DETAILED INFORMATION ON THE PROCESSING OF PERSONAL DATA IN COMPLIANCE WITH REGULATION (EU) 2016/679 (RGPD) AND ORGANIC LAW 3/2018 (LOPDGDD)

 

Responsible for the data processing:

Identity: ESPA 2025, S.L.

NIF: B-55091797

Address: Ctra. de Mieres s/n, 17820 Banyoles (Girona)

Contact phone: +34 972 588 000, extension 8622

Contact e-mail: [email protected]

 

Purpose of processing:

Carry out the provision of contracted products or services; the specific purpose for which you have given us your data; as well as accounting and administrative procedures necessary to execute the product or service.

 

Legitimacy of processing:

Consent: in starting the contractual or commercial relationship, in giving us the data for a specific purpose.

Execution of the contract: in managing and processing the contracted product or service.

Compliance with a legal obligation: where appropriate.

Legitimate interest: in transmitting the data to the ESPA Group companies for administrative and organizational purposes.

 

Data recipients:

No data is transferred to third parties, except for the fulfilment of the contract and/or due to legal obligation.

In the event that personal data is transferred outside the European Economic Area, it ensures that the data is protected in a manner that is consistent with the General Data Protection Regulation (GDPR).

 

Rights of the interested parties:

In relation to the rights indicated below, you may exercise them by sending a communication to [email protected] or to Ctra. de Mieres s/n, 17820 Banyoles (Girona), attaching a document proving your identity and providing the necessary details to process the request. request.

 

Access: the right to request confirmation at any time as to whether your personal data is being processed, to be provided with information about your data and its processing, and to obtain a copy your data.

 

Rectification: right to request the rectification of inaccurate, outdated or incomplete personal data that concerns you.

 

Cancellation or deletion - also right to oblivion: right to request the deletion of your personal data when, among other reasons and provided that a proportionality judgment is made, the data is no longer necessary for the purposes for which it was collected and when the right to information doesn’t prevails. However, this right is not absolute, so the data may continue to be duly blocked in the cases provided for by the applicable regulations. The deindexation of the links that relate personal data is part of the right to oblivion.

 

Opposition: right that allows you to oppose the processing of your personal data, including profiling. Your right cannot be addressed only when your data is processed for compelling legitimate reasons for the treatment or for the formulation, exercise or defence of claims.

 

Limitation of the processing data: right to request that we limit the treatment of your personal data, which means that they can continue to be stored, but not continue to be treated if any of the following conditions are met:

- That challenges the accuracy of the data, for a period of time that allows the person in charge to verify the accuracy of these data.

- That the treatment is illegal and opposes the deletion of the data and, instead, requests the limitation of its use.

- That the data is no longer needed for the purposes of the treatment, but is needed for the formulation, exercise or defense of claims.

- That you have opposed the treatment or requested its cancellation, while verifying whether the legitimate reasons of the person in charge prevail over yours.

 

To portability: the right to have your data transmitted to another data controller in a structured, commonly used and machine-readable format. This right applies when the processing of your personal data is based on consent or the execution of a contract and this processing is carried out by automated means.

 

To the revocation of consent: when the legitimacy of the processing of your personal data is consent, you will have the right to withdraw or revoke it at any time, without this having retroactive effects.

 

To claim before the Spanish Agency for Data Protection (AEPD): in the event that we do not attend to your rights, you can file a claim with the AEPD, the data of which you can consult on its website https://sedeagpd.gob.es /sede-electronica-web/vistas/formNuevaReclamacion/reclamacion.jsf or at your address C/ Jorge Juan núm. 6, 28001-Madrid.

 

Regarding rights, it is worth noting:

- That the copy of your personal data will be free, although the request for additional copies may be subject to charging a reasonable amount based on administrative costs.

- That more information may be required to manage your request.

 

Existence of profiling through automated decisions: not expected.

 

Storage period:

In accordance with the data protection regulations, personal data will be kept for the time necessary to fulfil the purposes for which they were collected, provided that you do not exercise your right of cancellation/deletion, and, subsequently, they will be kept duly blocked while are necessary to be able to meet possible responsibilities arising from the treatment, until the end of the legal prescription periods established in the current regulations.

Do you want to receive the latests news from ESPA?