RIGHT OF ACCESS BY THE DATA SUBJECT:
When exercising this right, it is requested that the right of access to the data processing that the organization carries out within a maximum period of one month from the receipt of this request, this information must be sent by mail and free of charges to the address indicated above according to the article 15 of the GPDR, it must be sent in a legible and intelligible way and within the indicated term.
You have the right to know:
- Whether or not we are processing personal data that concerns you.
- The source of your data, if you did not provide it to us.
- The categories of personal data concerned.
- The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations.
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
- The existence of automated decision-making, including profiling, by using your personal data. In such a case you will be informed of the data that has been stored by the interested party.
RIGHT TO RECTIFICATION
When exercising this right, it is requested that the right to rectification be provided free of charge, in accordance with the provisions of article 16 of the GPDR. It will be necessary to provide the corresponding supporting documents.
- You have the right to the accuracy and updating of your personal data.
- Completing them, if they were incomplete
- Updating or rectifying them, if they do not conform to current reality or are inaccurate.
RIGHT TO ERASURE (‘RIGHT TO BE FORGOTTEN’)
By exercising this right, you request that the right to erasure, or right to be forgotten, be provided free of charge, in accordance with the provisions of article 17 of the GDPR. This right can be exercised only if:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- If processing was based on the express consent, you withdraw the consent and the processing cannot be covered by another legal grounds.
- You have previously successfully exercised the right to object to the processing of your data.
- Your personal data have been unlawfully processed.
- The data must be erased for the fulfillment of a legal obligation.
The indicated requirements will not apply as long as the processing is necessary to:
- Exercise the right to freedom of expression and information.
- For the fulfillment of a legal obligation, or
- For the fulfillment of a mission carried out in the public interest by the person responsible for the processing, or
- For the formulation, exercise or defense of legal claims..
RIGHT TO RESTRICTION OF PROCESSING
When exercising this right, it is requested that the right to the restriction of the indicated processing be provided free of charge, in accordance with the provisions of articles 18 and 19 of the GPDR. That is, that we keep them without using them for the intended purposes, as long as any of the following conditions are met:
- You request the rectification of your personal data, during a period that allows us, as the organization responsible for the processing, to verify their accuracy.
- The processing is unlawful and you oppose the erasure of personal data, requesting instead the restriction of its use.
- We no longer need your personal data for the purposes of the processing, but you need them for the formulation, exercise or defense of legal claims.
- You have opposed the processing while checking if the legitimate grounds for treating them prevail over your right.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. Once the restriction of processing has occurred, you will be informed before the lifting of such restriction.
RIGHT TO DATA PORTABILITY:
When exercising this right, it is requested that it be provided free of charge to the restriction of the indicated processing, in accordance with the provisions of article 20 of the GPDR. We will put at your disposal the personal data that you have provided in a structured format, commonly used and mechanical reading. Furthermore:
- You will have the right to request they are transmitted directly from one controller to another, where technically feasible.
- we are processing your personal data based on your express consent, or
the legal basis is the fulfillment of a contract and,
- Estemos tratando sus datos personales en base a su consentimiento expreso, o
- la base legal sea el cumplimiento de un contrato y,
- the processing is carried out by automated means.
RIGHT TO OBJECT
When exercising this right, it is requested that it be provided free of charge to the restriction of the indicated processing, in accordance with the provisions of articles 21 and 22 of the GPDR. Through this right, officers are required to stop using your personal data.
You can exercise your right to object when the processing of your personal data is based on your legitimate interests.
If the processing is based on your consent, you can withdraw it and obtain effects similar to the right to object.
RIGHT TO OBJECT AND AUTOMATED INDIVIDUAL DECISION-MAKING
Based on the processing of your personal data, including profiling.s
The data subject shall have the right not to be subject to a decision with legal effects or otherwise affecting you in a significant way, provided that it has been based exclusively on the automated processing of your data and without human intervention.
If you have been subject to a decision of the type described and you do not agree, you can request that we review the decision to seek human intervention, express your point of view or challenge that decision in any way.
You will not have the right to object when the decision automatically taken is:
- Necessary for the conclusion or execution of your contract,
- Authorized by law and there are adequate measures to safeguard your legitimate interests and freedoms, or
- Based on your explicit consent.
DEADLINE AND GUARDIANSHIP
If, within one month, ANF Certification Authority does not inform you that it is not appropriate to fully or partially address the right exercised, it is mandatory that:
- If, prior to the legal claim before the Spanish Data Protection Agency, you consider that your rights have not been properly satisfied, you may request an assessment before the Data Protection Officer.