Who is the data controller for the processing of your data?
SPEC, S.A. (hereinafter “SPEC”)
Address: Calle Caballero, 81-83, 08014 (Barcelona)
Email address: firstname.lastname@example.org
Telephone No.: 932478800
Company Tax Number (N.I.F.): A-08537300
Why do we process your personal data?
We process the information provided to us by interested parties in order to manage the contact requests sent via the form on our website. Also to manage electronic communications related to the products and services offered by SPEC.
How long will we keep your data for?
The personal data provided via the contact form shall be kept until we reply to the question asked, and no longer than six (6) months from receipt of the question.
The personal data provided in the subscription to electronic communications regarding SPEC products and services shall be kept until you revoke your consent.
You may revoke your consent at any time.
What is the legitimation for processing your data?
The legal basis for the processing of your data is the request for information by the interested party via the contact form, and the subscription to electronic communications regarding SPEC products and services.
Who is your data sent to?
Your personal data shall not be assigned to third parties, except when it is legally required.
What are your rights when you provide us with your data?
Any person is entitled to obtain confirmation concerning whether at SPEC we are processing data related to them or not.
Interested persons are entitled to access their personal data and request the rectification of inaccurate data, or, if they wish, request deletion when, among other reasons, the data are no longer required for the purposes for which they were collected.
In certain circumstances, interested parties may request a limitation concerning the processing of their data, in which case we shall only store the data required to make or defend ourselves against claims.
Also, in certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data.
SPEC, S.A. shall cease to process the data, except for legitimate mandatory reasons, or in order to make or defend itself against possible claims.
SPEC, S.A. hereby informs you that you may exercise your rights of access, rectification, deletion, opposition and limitation of the processing in accordance with the conditions and limitations provided in current legislation, by writing to SPEC, S.A., Calle Caballero, 81-83, 08014 (Barcelona), or by sending an email to email@example.com. In all cases, you must provide a copy of your national identification document (DNI), passport or equivalent document. If you consider it necessary, you may submit a claim to the Spanish Data Protection Agency (agpd.es).
How have we obtained your data?
The personal data that we process at SPEC come from requests made by interested parties.
The data categories processed are:
- Identification data, and
- Email addresses
- Specially protected data are not processed.
Rights of interested parties
1. Rights of access: The right to obtain confirmation from the data controller about whether it is processing data related to them and, if so, the right of access to their personal data. Also:
a. The purposes of the processing
b. The personal data categories involved
c. The recipients or the types of recipients that have received or will receive the personal data, in particular recipients in third-party countries or international organisations
d. If possible, the planned storage period for the personal data or, if this is not possible, the criteria used to determine this period
e. The right to ask the data controller to rectify or delete personal data or to limit the processing of personal data related to the interested party, or to object to said processing
f. The right to submit a claim to a supervisory authority
g. Any question regarding the origin, when the personal data have not been obtained from the interested party
h. The existence of automated decisions, including the preparation of profiles, the logic applied and the importance and predicted consequences of said processing.
2. Right of rectification: The right to obtain rectification of inaccurate personal data related to them from the data controller. Taking into account the purposes of the processing, interested parties shall be entitled to demand that any incomplete data be completed, even through an additional declaration.
3. Right of deletion: he right to obtain the deletion of the personal data related to them from the data controller, which must delete the personal data without undue delay in any of the following circumstances:
a. If the personal data are no longer required for the purposes for which they were collected or otherwise processed
b. If the interested party withdraws the consent on which the processing is based.
c. If the interested party objects to the processing
d. If the personal data have been processed illegally
e. If the personal data must be deleted to comply with a legal obligation established in European Law or the law of member states that is applied to the data controller
f. If the personal data have been obtained in relation to the offer of information society services directly to a child.
However, a series of exceptions are regulated in which this law is not applicable. For example, when the right to freedom of expression and information must prevail.
4. Right of opposition: The right to object to personal data related to them being processed.
The data controller shall cease to process the personal data, unless it can demonstrate legitimate mandatory reasons for the processing that prevail over the interests, rights and liberties of the interested party, or for the preparation of, exercise of and defence against claims.
5. Right to limitation of the processing: The right to obtain a limitation in the data processing from the data controller when one of the following conditions is fulfilled.
a. If the interested party challenges the accuracy of the personal data within a period that allows the data controller to check their accuracy
b. If the processing is illegal and the interested party objects to the deletion of the personal data and instead requests the limitation of their use
c. If the data controller no longer needs the personal data for the purposes of processing, but the interested party needs them for the preparation of, exercise of or defence against claims, and
d. If the interested party has objected to the processing while it is being verified whether the legitimate reasons of the data controller prevail over those of the interested party.