Processing in general includes the retention of the data, its communication to the appropriate departments of each company and even the communication of the data between the different companies of the group.
The legal bases for the processing are the express consent provided by the data subject, the legitimate interest of the controller and the performance of a contractual relationship. It is necessary for the data subject to provide the data in order to be able to provide the services entrusted. Should such data not be provided, the data controller will not be able to carry out said services.
The personal data will be retained for the legally mandatory retention period and an additional period of four years.
The data subject has the possibility of requesting from the controller access to their personal data, its rectification, its erasure, the restriction of its processing, to object to said processing or to exercise the portability of the data that are processed by automated means.
To exercise your rights, you must attach a copy of the official document that identifies you (national ID card, driving licence or passport) to the contact email address.
In the event of a conflict, the data subject may turn to the Spanish Data Protection Agency or to any other competent supervisory authority to hear their complaints.
The data subject may withdraw their consent at any time, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.
The data subject’s data will not be used for automated individual decisions.