RIGHT OF ACCESS TO DATA

You have the right to be informed by the Controller whether or not your personal data is being processed, and in the event that the processing is confirmed, the Controller will enable your access by providing you with the following information:

  • The purposes of the processing.
  • The categories of data involved.
  • The retention period or criteria.

Right to rectification of data:

You will have the right to have the Data Controller rectify your data when they are inaccurate or incomplete by means of an additional rectifying statement.

Right of data deletion

The data subject shall have the right to have his or her data deleted by the Data Controller, when:

  • The processing is unlawful.
  • The data subject has withdrawn his/her consent.
  • They are no longer necessary in relation to the purposes for which they were collected or processed.
  • The data subject has exercised the right to object and no other legitimate grounds for the processing prevail.
  • The data must be deleted in order to comply with a legal obligation of the Controller.

The data subject shall not have the right to have his or her data deleted by the Data Controller when the processing is necessary:

  • To exercise the right to freedom of expression and information.
  • To comply with a legal obligation of the Controller.
  • For the formulation, exercise or defense of claims.
  • In the public interest based on current legislation for reasons of public health or for historical, statistical or scientific research purposes.

Right to data portability:

You have the right to have your data transmitted by the Controller to another Data Controller or to the data subject himself/herself, using a structured format that is commonly used and machine-readable, when the processing is carried out by automated means and is based on:

  • The data subject’s consent for specific purposes.
  • The execution of a contract or pre-contract with the data subject.
  • The right to data portability shall not apply when:
  • Transmission is technically impossible.
  • It may adversely affect the rights and freedoms of third parties.
  • The processing has a public interest mission based on the legislation in force.

Right to limit treatment:

The data subject shall have the right to object to the processing of his/her data carried out by the Controller on grounds relating to his/her particular situation, where the processing is based on:

  • Direct marketing.
  • Profiling.
  • Legitimate interest of the Controller or third parties, provided that the interests or the rights and freedoms of the data subject, especially if he/she is a child, do not prevail.
  • Historical, statistical or scientific research, unless the processing is necessary for reasons of public interest.

Even if the data subject objects to the processing of his or her data, the Controller may continue to process them provided that the legitimate interest of the Controller outweighs the interests or the rights and freedoms of the data subject in a court proceeding that justifies it.

The Data Controller shall inform the data subject of the right to object to the processing of his/her data explicitly, clearly and separately from any other information, at the time of the first communication.

Right of opposition

It is the right not to carry out the processing of such data or to cease such processing when their consent to the processing is not necessary, due to the concurrence of a legitimate and well-founded reason, referring to their specific personal situation, which justifies it, and provided that a Law does not provide otherwise.

Right not to be subjected to profiling

The data subject shall have the right not to be subject to profiling whose purpose is to make individual decisions based on automated data processing and intended to evaluate, analyze or predict the following personal aspects:

  • Professional performance.
  • Financial situation.
  • Health.
  • Personal preferences or interests.
  • Reliability.
  • Behavior.
  • Location or movements of the person.

When profiling is based solely on automated processing:

  • The data subject shall have the right to be informed if the decision that may be taken is likely to produce legal effects that significantly affect him/her.
  • The data subject shall have the right to obtain human intervention by the Controller, to express his or her point of view and to challenge the decision, if the processing has been authorized by means of:
  • The data subject’s explicit consent.
  • A contract between the Controller and the data subject.

It shall not apply to the right not to be subject to profiling when the decision that may be taken as a result thereof is authorized by:

  • The explicit consent of the data subject.
  • A contract between the Controller and the data subject.
  • A treatment based on the legislation in force.