Privacy Policies
Who can exercise these rights?
The rights of the interested parties remain personal, therefore, they will be exercised by the owner of the data as long as the request is accompanied by sufficient proof of identity.
However, they may also be exercised through their legal representative, either because of inability or minor status that prevents them from exercising these rights in person, in which case it will be necessary for them to prove such a condition.
This may also be done through voluntary representation by a representative expressly appointed for the exercise of the right. In this case, the identity of the represented party must be sufficiently accredited.
Pursuant to Article 12 of the GDPR, if there is reasonable doubt as to the identity of the data subject or their representative, additional data may be requested.
How can they exercise their rights?
The exercise of the rights must be carried out by means of a communication addressed to the data controller, which must contain:
- Sufficient identification of the applicant and, if applicable, of their representative, as well as a document of representation, allowing verification of the applicant's identity before providing them with their rights.
- Document in which the request is specified.
- Address for notification purposes, date and signature of the applicant.
- Documents accrediting the request being made, if applicable.
- If the interested party requests any of their rights by electronic means, they will be answered by the same means, unless the interested party specifies another means.
In order to facilitate your task, we provide you with downloadable documents below that you can fill in and send us, and which include instructions for their completion.
What are our obligations?
The data controller shall answer the request addressed to them in any case, regardless of whether or not personal data of the data subject or interested party are included in their data processing.
In the event that the application does not meet the specified requirements, the data controller shall request the correction of these issues, including, if necessary, data that help to identify the applicant or their representative.
The controller shall be responsible for the proof of compliance with the duty to respond, and shall keep the accreditation of compliance with the aforementioned duty.
The response will be made effective within the regulatory deadline established, although whenever the workload allows it, we will try to prepare and deliver the information in a shorter time. The regulatory response deadlines are:
- 30 days.
- Extension of up to two additional months in exceptionally complex cases that are appropriately justified and explained to the interested party.
RIGHT OF ACCESS
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed and, if so, the right of access to such data, art. 15 of the GDPR.
Adobe Acrobat Document [70 KB]
Download
RIGHT OF CORRECTION
The data subject shall have the right to obtain without undue delay from the controller the rectification of inaccurate personal data concerning him/her and to have incomplete data completed by means of an additional declaration. Art. 16 of the GDPR.
Adobe Acrobat Document [69 KB]
Download
RIGHT OF DELETION
The data subject shall have the right to obtain without undue delay from the controller the erasure of personal data concerning them, who shall be obliged to erase without undue delay the personal data, in certain cases which will be discussed below. Art. 17 of the GDPR.
Adobe Acrobat Document [69 KB]
Download
RIGHT TO LIMIT OF PROCESSING
The data subject shall have the right to obtain from the controller the restriction of data processing in certain cases which will be discussed below. Art 18 of the GDPR.
Adobe Acrobat Document [72 KB]
Download
RIGHT TO DATA PORTABILITY
The data subject shall have the right to receive personal data concerning themselves which they has provided to a controller, in a structured, commonly used and machine-readable format, and to transmit it to another controller without being prevented from doing so by the controller to whom they have provided it in certain cases. Art. 20 of the GDPR.
Adobe Acrobat Document [69 KB]
Download
RIGHT OF OPPOSITION
The data subject shall have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them in certain circumstances that will be discussed below. Art. 21 of the GDPR.
Adobe Acrobat Document [71 KB]
Download
THE RIGHT NOT TO BE SUBJECT TO AUTOMATED INDIVIDUAL DECISIONS
Every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. Art. 22 of the GDPR.
Adobe Acrobat Document [71 KB]
Download
MODEL OF REPRESENTATION
Any interested party may exercise their rights by means of a properly executed representation, with the interested party and the representative being duly identified.
Adobe Acrobat Document [56 KB]
Download