PROCESSING OF PERSONAL DATA

We inform you that the data you provide on this website when filling in the ‘contact form’ (or form or email form) will be processed in accordance with the provisions of Organic Law 2016/679, of 5 December, on the protection of personal data, and Royal Decree) 2016/679, of 27 April, implementing the Organic Law).
The ‘contact form’ available on the website allows users of the site to contact the owner of the website by sending an email using this contact form.
This information corresponds to the personal data sent by the user when filling in the contact form.
We inform you that the data you voluntarily provide through the form will be sent in an email that may be stored in the website owner’s email system.
The data will not be saved or stored on other media or devices; nor will any other data from your browsing of the website be stored.

1. PURPOSES OF THE PROCESSING OF PERSONAL DATA
The purposes of processing your personal data are as follows:
The data you provide may be used to contact you in order to respond to any requests you may send us via the online form.

2. NATURE OF DATA PROCESSED AND METHODS OF PROCESSING

The personal data processed will be exclusively the ordinary data strictly necessary and relevant for the purposes mentioned in the aforementioned point 1.
b. The processing of the personal data you provide is carried out by means of the operations or set of operations indicated in Article 3(c) of Organic Law 15/1999. The processing is carried out directly by the organisation of the Website Owner.

3. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL
Please note that you are not obliged to provide your personal data to the website owner via the contact form.
Providing your data via the contact form is optional.
However, failure to provide the data for the purposes set out in Art. 1 will make it impossible to contact the website owner via the contact form.

4. DATA CONTROLLER (PROCESSOR)
The personal data collected via the contact form will be sent by email to the data controller of this website, who is the processor.

5. DATA SUBJECT’S RIGHTS
Please note that you may exercise at any time the rights granted to you by applicable regulations, and in particular the rights recognised in articles 13 and following of Organic Law 15/1999, which are reproduced below, by contacting the website owner via the contact form.

Article 13. Impugnation of assessments.

1. Citizens have the right not to be subject to a decision with legal effects on them, or which significantly affects them, that is based solely on a processing of data intended to evaluate certain aspects of their personality.
2. The data subject may challenge administrative acts or private decisions that involve an assessment of their behaviour, the sole basis of which is processing of personal data that provides a definition of their characteristics or personality.
3. In this case, the data subject has the right to obtain information from the data controller about the assessment criteria and the programme used in the processing which served as the basis for the decision which constituted the act.
4. An assessment of citizens’ behaviour, based on data processing, may only be used as evidence at the request of the data subject.

Article 14. Right of access to the General Data Protection Register.

Any person may find out, by requesting the relevant information from the General Data Protection Register, the existence of personal data processing, its purposes and the identity of the data controller. The General Register shall be publicly and free of charge.

Article 15. Right of access.

1. The data subject shall have the right to request and obtain free of charge information about their personal data undergoing processing, the origin of the said data, as well as the communications made or which are planned in respect thereof.
2. The information may be obtained by mere consultation of the data through display, or by the provision of the data being processed by written, faxed, photocopied or certified means, whether or not certified, in a legible and intelligible form, without the use of keys or codes requiring the use of specific mechanical devices.
3. The right of access referred to in this article may only be exercised at intervals of no less than twelve months, unless the data subject demonstrates a legitimate interest for this purpose, in which case it may be exercised before.

Article 16. Right of Rectification and Cancellation.

1. The data controller shall implement the data subject’s right of rectification or cancellation within ten days.
2. Personal data shall be rectified or cancelled, where applicable, if the processing of such data does not comply with this Law, and in particular where the data is inaccurate or incomplete.
3. Cancellation shall result in the blocking of the data, which shall be retained solely at the disposal of public authorities, judges and courts, for the purpose of addressing any potential liabilities arising from the processing, for the limitation period for such liabilities. Once this period has expired, the data must be erased.
4. If the rectified or erased data have been previously communicated, the data controller must notify the rectification or erasure to the recipients to whom they have been disclosed, unless this proves impossible or involves a disproportionate effort.
5. Personal data must be retained for the periods provided for in applicable provisions or, where applicable, the contractual relationships between the data controller and the data subject.

Article 17. Procedure for objection, access, rectification or cancellation.

1. The procedures for exercising the right of objection, access, as well as those of rectification and cancellation shall be established by regulation.
2. No fee shall be charged for the exercise of the rights of objection, access, rectification or cancellation.

Article 18. Protection of rights.

1. Actions contrary to the provisions of this Law may be the subject of a complaint by the interested parties to the Spanish Data Protection Agency, in the manner to be determined by regulation.
2. An interested party to whom the exercise of the rights of objection, access, rectification or cancellation is denied, in whole or in part, may bring this to the attention of the Spanish Data Protection Agency or, where applicable, the competent authority of each autonomous community, which shall ascertain whether the refusal is justified or unjustified.
3. The maximum period for issuing an express decision on rights protection is six months.
4. Administrative litigation is available against the decisions of the Spanish Data Protection Agency.

Article 19. Right to compensation.

1. Data subjects who, as a result of a breach of this Law by the controller or the processor, suffer damage or injury to their property or rights are entitled to compensation.
2. In the case of publicly owned files, liability shall be pursued in accordance with the legislation governing the liability regime of public administrations.
3. In the case of private files, the action shall be brought before the ordinary courts of law.

The processing shall not last longer than is necessary for the purposes for which the data have been collected.