Exercising of rights EC

1. Processing of personal data, on which rights are exercised:

1. TRATAMIENTO DE DATOS DE CARÁCTER PERSONAL sobre el que se ejercita el derecho:

2. Notification data:

Specify how you want us to respond to your request: *

By electronic means (notifications will be made by email to the email address we have registered, it cannot be modified unless your identity or empowerment are proved).
Postal mail (to the address indicated in your contact information, it cannot be modified unless your identity or empowerment are proved).
You want to receive an email notification to collect it personally(after sending the notification, it is up to you to personally collect the required information).

3. Contact details of the owner required to exercise their rights :

D. / Ms. * *

Specify how you want us to respond to your request: *

Adult
Minor(over 14 years old)
Minor (under 14 years old) or under legal guardianship

Domicile *

Number *

Location *

Province *

P.C. *

Country *

ID / NIE No. *

E-mail *

4. Particulars of the legal representative of the data holder

(Complete only when the processor acts as a representative.)

D. / Ms.

Specify how you want us to respond to your request: (copy) (copy)

Adult
Minor (over 14 years old)
Minor (under 14 years old) or under legal guardianship

Domicile

Number

Location

Province

P.C.

Country

ID / NIE No.

E-mail

5. Whenever appropriate, the legal representative accredits representation

Multiple Choice

Power of Attorney
Family Book
Legally acceptable authorization, you must attach a photocopy of any identity document of the data owner.

Others. Explain means proposed:

6. Right (s) exercised

(If you need help to exercise your rights, do not hesitate to consult our Data Protection Officer (DPO),

Email. delegadoprotecciondatos@wanf.anf.es

Phone 902 902 172

At the end of this form we provide information about this subject (Consult section 10).

Indicate right (s) you wish to exercise, in accordance with the provisions of Articles 15 to 22 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and as provided in articles 12 to 18 of Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights.

Select: *

RIGHT OF ACCESS BY THE DATA SUBJECT
RIGHT TO RECTIFICATION
RIGHT TO ERASURE (‘RIGHT TO BE FORGOTTEN’)
RIGHT TO RESTRICTION OF PROCESSING
RIGHT TO DATA PORTABILITY
RIGHT TO OBJECT
RIGHT TO OBJECT AND AUTOMATED INDIVIDUAL DECISION-MAKING

7. Additional information:

(In this space you can write all the information you want to tell us about your rights exercising).

Paragraph Text

8. Attached documentation

(If applicable, indicate the documentation attached to exercise your right).

Paragraph Text (copy)

9. Procedure to submit this form:

(If applicable, indicate the documentation attached to exercise your right).

You or your legal representative can exercise your right using this form, or through most convenient media. This form has been prepared in order to make processing easier. We put at your disposal the following procedures for the effective exercise of your rights:

Sent by mail, or personally deliver this completed and signed form, along with a copy of the identity documents to:

ANF Certification Authority
Data Protection Officer
G.V. Corts Catalanes, 996, floor 4ª
Barcelona - 08018 - España

Sent by email, completed and signed digitized form, along with a copy of the identity documents to: delegadoprotecciondatos@wanf.anf.es
Telephone call to 902 902 172", in this call you will be required to prove your identity and you are aware that your call will be recorded, this call must be made from your personal phone. Or you may be required 2FA (multifactor authentication), with session key sent by SMS.

Our website has this form in electronic format, you can fill it out or download digitalized if you have prepared it on paper. You may be required 2FA (multifactor authentication) by sending a session key by SMS to the personal telephone number that we have registered.

Date /hour *

Signed:

(In the event that it is no longer in our possession, remember to attach a photocopy of your identity card, ID, passport, residence card ...)

10. Explanation about your rights

RIGHT OF ACCESS BY THE DATA SUBJECT:

When exercising this right, it is requested that the right of access to the data processing that the organization carries out within a maximum period of one month from the receipt of this request, this information must be sent by mail and free of charges to the address indicated above according to the article 15 of the GPDR, it must be sent in a legible and intelligible way and within the indicated term.

You have the right to know:

- Whether or not we are processing personal data that concerns you.
- The source of your data, if you did not provide it to us.
- The categories of personal data concerned.
- The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations.
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
- The existence of automated decision-making, including profiling, by using your personal data. In such a case you will be informed of the data that has been stored by the interested party.

RIGHT TO RECTIFICATION

When exercising this right, it is requested that the right to rectification be provided free of charge, in accordance with the provisions of article 16 of the GPDR. It will be necessary to provide the corresponding supporting documents.

- You have the right to the accuracy and updating of your personal data.
- Completing them, if they were incomplete
- Updating or rectifying them, if they do not conform to current reality or are inaccurate.

RIGHT TO ERASURE (‘RIGHT TO BE FORGOTTEN’)

By exercising this right, you request that the right to erasure, or right to be forgotten, be provided free of charge, in accordance with the provisions of article 17 of the GDPR. This right can be exercised only if:

- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- If processing was based on the express consent, you withdraw the consent and the processing cannot be covered by another legal grounds.
- You have previously successfully exercised the right to object to the processing of your data.
- Your personal data have been unlawfully processed.
- The data must be erased for the fulfillment of a legal obligation.

The indicated requirements will not apply as long as the processing is necessary to:

- Exercise the right to freedom of expression and information.
- For the fulfillment of a legal obligation, or
- For the fulfillment of a mission carried out in the public interest by the person responsible for the processing, or
- For the formulation, exercise or defense of legal claims..

RIGHT TO RESTRICTION OF PROCESSING

When exercising this right, it is requested that the right to the restriction of the indicated processing be provided free of charge, in accordance with the provisions of articles 18 and 19 of the GPDR. That is, that we keep them without using them for the intended purposes, as long as any of the following conditions are met:

- You request the rectification of your personal data, during a period that allows us, as the organization responsible for the processing, to verify their accuracy.
- The processing is unlawful and you oppose the erasure of personal data, requesting instead the restriction of its use.
- We no longer need your personal data for the purposes of the processing, but you need them for the formulation, exercise or defense of legal claims.
- You have opposed the processing while checking if the legitimate grounds for treating them prevail over your right.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. Once the restriction of processing has occurred, you will be informed before the lifting of such restriction.

RIGHT TO DATA PORTABILITY:

When exercising this right, it is requested that it be provided free of charge to the restriction of the indicated processing, in accordance with the provisions of article 20 of the GPDR. We will put at your disposal the personal data that you have provided in a structured format, commonly used and mechanical reading. Furthermore: - You will have the right to request they are transmitted directly from one controller to another, where technically feasible.

- we are processing your personal data based on your express consent, or

the legal basis is the fulfillment of a contract and,

- Estemos tratando sus datos personales en base a su consentimiento expreso, o
- la base legal sea el cumplimiento de un contrato y,
- the processing is carried out by automated means.

RIGHT TO OBJECT

When exercising this right, it is requested that it be provided free of charge to the restriction of the indicated processing, in accordance with the provisions of articles 21 and 22 of the GPDR. Through this right, officers are required to stop using your personal data.

You can exercise your right to object when the processing of your personal data is based on your legitimate interests.

If the processing is based on your consent, you can withdraw it and obtain effects similar to the right to object.

RIGHT TO OBJECT AND AUTOMATED INDIVIDUAL DECISION-MAKING

Based on the processing of your personal data, including profiling.s

The data subject shall have the right not to be subject to a decision with legal effects or otherwise affecting you in a significant way, provided that it has been based exclusively on the automated processing of your data and without human intervention.

If you have been subject to a decision of the type described and you do not agree, you can request that we review the decision to seek human intervention, express your point of view or challenge that decision in any way.

You will not have the right to object when the decision automatically taken is:

- Necessary for the conclusion or execution of your contract,
- Authorized by law and there are adequate measures to safeguard your legitimate interests and freedoms, or
- Based on your explicit consent.

DEADLINE AND GUARDIANSHIP

If, within one month, ANF Certification Authority does not inform you that it is not appropriate to fully or partially address the right exercised, it is mandatory that:

- If, prior to the legal claim before the Spanish Data Protection Agency, you consider that your rights have not been properly satisfied, you may request an assessment before the Data Protection Officer.

GDPR Agreement *