Rights

Who can exercise their rights?

The rights of the interested parties remain highly personal, therefore, they will be exercised by the data owner, duly proving their identity (for this purpose, a copy of their ID or equivalent will be requested).

However, they may also be exercised through their legal representative, in which case it will be necessary to prove such status (identification of the interested party and their representative and representation model)

 

How can you exercise your rights?

The exercise of rights must be carried out by means of a communication addressed to the data controller, which will contain:

• Name and surname of the interested party
• Photocopy of their national identity document, passport or other valid document that identifies them, or, where appropriate, of the person representing them.
• The use of an electronic signature identifying the affected party or interested party will exempt them from the presentation of photocopies of their ID or equivalent document.
• If the interested party requests any of their rights electronically, they will be answered by the same means, unless the interested party specifies another means
• Request in which the request is specified.
• Address for notifications, date and signature of the applicant.
• Documents supporting the request you make, if applicable.

To make your task easier, we have prepared downloadable documents that you must complete and send to us and which you can access below

 

What are our obligations?

The data controller must respond to the request addressed to him/her in all cases, regardless of whether or not personal data of the affected party or interested party are included in his/her processing.

In the event that the request does not meet the specified requirements, the data controller must request that these be corrected.

The data controller will be responsible for proving compliance with the duty to respond, and must retain proof of compliance with the aforementioned duty.

The response will be made effective within the statutory period at the latest, although whenever the volume of work allows it, an attempt will be made to prepare and deliver the information in less time. Please note that the statutory response periods are:

• 30 days
• Extension of up to two more months in exceptionally complex cases and duly justified and informed to the interested party.

REQUEST FOR THE RIGHT OF ACCESS



The interested party shall have the right to obtain from the data controller confirmation of whether or not personal data concerning him/her are being processed and, if so, the right to access them art. 15 of the GDPR

REQUEST FOR THE RIGHT OF RECTIFICATION


The interested party shall have the right to obtain from the data controller without undue delay the rectification of inaccurate personal data concerning him/her and to have incomplete data completed by means of an additional declaration. Art. 16 GDPR

REQUEST FOR THE RIGHT TO ERASURE



The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall be obliged to erase the personal data without undue delay, in accordance with Art. 17 GDPR

REQUEST FOR THE RIGHT TO RESTRICT OF PROCESSING



The data subject shall have the right to obtain from the controller the restriction of processing of personal data in certain cases in accordance with Art. 18 GDPR.

REQUEST FOR THE RIGHT TO DATA PORTABILITY


The interested party shall have the right to receive the personal data concerning him/her, which he/she has provided to a data controller, in a structured, commonly used and machine-readable format, and to transmit them to another data controller without being prevented from doing so by the controller to whom he/she has provided them in certain cases in accordance with Art. 20 of the GDPR.

REQUEST FOR THE RIGHT TO OBJECT



The interested party shall have the right to object at any time, for reasons relating to his/her particular situation, to the processing of personal data concerning him/her in certain circumstances in accordance with. Art. 21 of the GDPR

REQUEST FOR THE RIGHT NOT TO BE SUBJECT TO AUTOMATED INDIVIDUAL DECISIONS



Any data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her in accordance with Art. 22 of the GDPR

REPRESENTATION TEMPLATE



Any data subject may exercise his or her rights by means of a duly completed representation, with the data subject and the representative duly identified