APPLICABLE REGULATORY FRAMEWORK.
Without being exhaustive, the following regulatory framework is identified as operative:
In relation to the protection of personal data:
Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of said data, and by which the Directive 95/46/EC (GDPR).
Organic Law 3/2018, of December 5, Protection of Personal Data and Guarantee of Digital Rights.
In relation to the information society and telecommunications:
Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce.
Law 9/2014, of May 9, General Telecommunications.
RESPONSIBLE FOR THE TREATMENT.
The person responsible for the processing of your personal data is RAMÓN ISORNA LAFUENTE, with NIF 78795307K and address at Rúa Ameas, Praza de Abastos, Bajos 80-85 (15704 Santiago de Compostela).
PURPOSE OF THE TREATMENT.
In general, your personal data will be used and processed to be able to interact with you (the interested party) and to be able to provide the services offered and agreed. Likewise, they may also be processed for other purposes and activities; such as, for example, administrative management, attention to requests, queries and proposals, of a statistical or study type, filing, management of candidacies and HR, management of complaints and suggestions (also including after-sales and loyalty services), for compliance of legal obligations, promotion with authorization or general information.
In this sense, in all our forms and requests and, among other issues, a section has been introduced where you are informed in a clear and simple way about the purpose and rights related to your personal data.
However, you can consult additional information on the specific purposes, requesting it in the email email@example.com.
LEGITIMATION OF THE TREATMENT.
The processing of personal data is based on one or more of the assumptions included in article 6.1 and, where appropriate, 9.2 of the General Data Protection Regulation:
The processing of the data is necessary for the execution of a contract; compliance with it being impossible without such treatment. They may also be processed for the application of pre-contractual measures at the request of the interested party.
In certain cases, the processing of personal data will be based on validly granted consent; This can be withdrawn at any time without affecting the treatments carried out previously.
The processing of personal data may also be necessary for the satisfaction of legitimate interests pursued by the data controller or by a third party (in such cases the causative situation will be justified).
In other cases, the processing of the data will be necessary for compliance with legal obligations or for a mission carried out in the public interest or in the exercise of public powers conferred on the data controller.
In the event that some other supposed enabler of the specific treatment to be carried out is active, the interested party or affected party will be duly informed in this regard.
ORIGIN AND CATEGORIES OF THE DATA PROCESSED.
The personal data that we process in this entity usually comes directly from the interested party. In the event that in any case they were obtained through other sources, the appropriate information on such origin would be provided, as well as the categories of data affected.
RECIPIENTS: DATA ASSIGNMENTS AND INTERNATIONAL TRANSFERS.
As a reason for transfer and communication, those public or private entities may have knowledge of your personal data:
To which we are obliged to provide your personal data for compliance with any legal provision.
Due to the satisfaction of legitimate interests pursued by the data controller or by a third party.
For the fulfillment of a mission carried out in the public interest or in the exercise of public powers conferred on the data controller.
In favor of contractual execution and/or fulfillment of the agreed professional assignment.
In the event that, apart from the aforementioned assumptions, we justifiably communicate your personal information to other entities, we will previously request your valid consent through clear options that will allow you to decide in this regard.
Complementing the above, in the event that any other alleged communication enabler other than those mentioned is operative, the interested party or affected party will be duly informed in this regard.
In addition, those in charge of the treatment of this entity may have access to your personal data; that is, those service providers who have to access your personal data for the functional or operational development of the service to be offered.
Furthermore, international data transfers are not contemplated. Given the possibility of the existence of such transfers, these will be made with the authorization and the precise requirements for it.
However, you can request more information about the planned assignments and possible future transfers, by emailing firstname.lastname@example.org.
In the case of receiving communications by electronic means, we inform you that the messages are addressed exclusively to their recipient and may contain privileged or confidential information. If you are not the intended recipient, you are hereby notified that unauthorized use, disclosure and/or copying is prohibited under current legislation.
In accordance with the provisions of Law 34/2002, of July 11, on services of the information society and electronic commerce, we inform you that in the event that you do not wish to receive communications and information of a commercial, advertising or of a similar type, indicate it through the email email@example.com, indicating in the subject “BAJA PUBLICITARIAS COMMUNICATIONS”, so that your personal data can be removed from our database. Your request will be dealt with within 10 days from its submission.
In the event that this entity makes use of certain social networks or other types of structures, media and digital platforms, and you become our “friend” or “follower” in such areas, we may process your data to interact with you and keep you informed of our activities, services and promotions. These data will be processed on the legal basis of your consent and will be kept as long as you remain our “friend” or “follower”, being able to revoke your consent at any time you wish; although this will not affect the legality of the treatments carried out previously. Providing data for this purpose is voluntary; although, in the case of not doing so, you will not be able to be a “friend” or “follower” on the platforms or media in which we act.
On the other hand, in the event that this website has the user registration option and this allows the option to register through social networks, the personal data that will be specifically processed for this purpose will come from the social network in question. , to which, previously, the interested party will have provided said data for the purposes provided in their corresponding privacy policies. The categories of data processed and collected from the social network in question would be those that would appear in the registration form itself and those related to the data that you have provided to the aforementioned social network. If in order to proceed, where appropriate, to register on this website, more data than those provided by the social network are essential, these would be requested and should be additionally completed in said registration form, subject to the current privacy conditions.
RIGHTS AND ADDITIONAL INFORMATION ON DATA PROTECTION.
The interested party has the right to obtain confirmation as to whether RAMÓN ISORNA LAFUENTE processes personal data that concerns them, as well as to access their personal data, request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, the interested party may request the limitation of the processing of their data; in which case they will only be kept for the exercise or defense against possible claims.
Likewise, in certain circumstances and, for reasons related to their particular situation, the interested party may oppose the processing of their data. RAMÓN ISORNA LAFUENTE will cease processing the data, except for compelling legitimate reasons, or for the exercise or defense of possible claims. Similarly, the interested party holds the right to data portability when technically possible and in certain cases.
In addition, the consent that has been previously given may be withdrawn at any time.
On the other hand, and, where appropriate, you have the right not to be subject to decisions based solely on the automated processing of your data. This also, when appropriate, before the possible elaboration of profiles. In such hypothetical cases of realization and decision-making, he would be duly informed in this regard.
The interested party may raise any questions they consider in relation to this policy, obtain additional information on data protection, as well as exercise their rights in the legally provided terms, having to send a communication in person, by postal mail to: RAMÓN ISORNA LAFUENTE, Rúa Ameas, Praza de Abastos, Bajos 80-85 (15704 Santiago de Compostela) or by email to: firstname.lastname@example.org, indicating the corresponding request and accompanied by a copy of the DNI or other document accrediting the identity in terms of such power to exercise their rights. In the event that acting through representation, a copy of the ID of the represented person (or equivalent document) and supporting documentation of the representation of the representative must also be provided.
The models for the exercise of the various rights in data protection are provided below. Likewise, you can have such models and forms by requesting them directly from the entity itself.
In the event that you consider that your rights have not been properly addressed, you may file a claim with the Spanish Agency for Data Protection: www.aepd.es.
NOTICE, POLICY AND SECURITY MEASURES.
RAMÓN ISORNA LAFUENTE, taking into account the nature, scope, context and purposes of the treatment, has proceeded to implement all technical and organizational measures to ensure proper compliance with data protection regulations. This in accordance with the provisions of articles 24 and following of the General Data Protection Regulation and article 28 of Organic Law 3/2018.
Likewise, the application to the processing of personal data of the appropriate security measures, required and in favor of the current regulations, is guaranteed to guarantee full compliance with it.
Minors may not use the services available through the website without the prior authorization of their parents or guardians as legal representatives, who will be solely responsible for all acts carried out through this website by such minors under their care. ; including the completion of the possible forms that may exist and the marking, where appropriate, of the boxes that accompany them.
Regarding the specific matter of protection of personal data, respecting the provisions of articles 8 of the GDPR and 7 of the LOPDGDD, only those over fourteen years of age may grant their consent for the processing of their personal data in a lawful manner. If it is a minor under fourteen years of age, the consent of the parents or guardians will be necessary as legal representatives for the treatment; and this will only be considered lawful to the extent that they have authorized it. In no case or circumstance will data related to the professional, economic situation or the privacy of the other family members be obtained from the minor, without the prior consent of the latter.
Update: MAY 2022