1. USER INFORMATION
GESPOFISA SLU, hereinafter the CONTROLLER, is the controller responsible for processing the User’s personal data and informs you that these data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD), and therefore provides you with the following information on the processing:
Purpose of processing: to maintain a business relationship with the User. The processing operations planned are:
- Sending commercial advertising communications by email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enables commercial communications. These communications will be carried out by the CONTROLLER and related to its products and services, or those of its partners or suppliers with whom it has reached a promotional agreement. In this case, third parties will never have access to the personal data.
- Carrying out statistical studies.
- Processing orders, requests, or any type of application made by the user through any of the contact methods made available to them.
- Sending the website newsletter.
Legal basis for processing: the data subject’s consent.
Data retention criteria: data will be kept for no longer than necessary to maintain the purpose of the processing and, when it is no longer necessary for that purpose, it will be deleted using appropriate security measures to ensure data pseudonymization or its complete destruction.
Data disclosure: Data will not be disclosed to third parties, except where required by law.
User rights:
- The right to withdraw consent at any time.
- The right of access, rectification, portability and erasure of your data, and the right to restrict or object to its processing.
- The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current regulations.
Contact details to exercise your rights:
- GESPOFISA SLU.
- CONDE DE PEÑALVER, 28 4ºDCHA EXT – 28006 MADRID (Madrid).
- Email: [email protected]
2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
Users, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form, presented in download forms or in discounts and promotions, expressly and freely and unequivocally accept that their data are necessary to handle their request by the provider, while the inclusion of data in the remaining fields is voluntary. The User guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for communicating any changes to them.
The CONTROLLER expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever any type of transfer of personal data is to be made, the Users’ prior express, informed and unequivocal consent will be requested. All data requested through the website are mandatory, as they are necessary to provide an optimal service to the User. If not all data are provided, it is not guaranteed that the information and services provided will be fully tailored to your needs.
3. SECURITY MEASURES
In accordance with current personal data protection regulations, the CONTROLLER is complying with all provisions of the GDPR regulations for the processing of personal data under its responsibility, and expressly with the principles described in Article 5 of the GDPR, whereby data are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR in order to protect Users’ rights and freedoms, and has provided them with the appropriate information so that they can exercise them.
