PRIVACY POLICY
1. DATA OF THE DATA CONTROLLER
Company Name: SPANISH ASSOCIATION FOR THE ENERGY VALORIZATION OF BIOMASS (hereinafter, the “Company” or the “Controller”).
CIF: G47538525
Home: C/ SAN BLAS 14, ESC.DCHA. METLANCE – 47003 – VALLADOLID – VALLADOLID
Telephone: 983091801
Email for communications regarding Data Protection: administracion@avebiom.org
1.1. Applicable regulations
Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
By providing us with your data, you declare that you have read and understood this Privacy Policy, giving your unequivocal and express consent to the processing of your personal data in accordance with the purposes and terms expressed herein.
The Company may modify this Privacy Policy to adapt it to new legislation, case law, or interpretations by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and General Terms and Conditions that may apply to specific products or services, if such access involves any special considerations regarding the protection of personal data.
1.2. Data Protection Officer
There is no designated Data Protection Officer.
2. PURPOSE OF PROCESSING PERSONAL DATA
The processing of your personal data is carried out for the following purposes:
– To provide you with information related to the products and services offered by our company and detailed on this website.
– To contract our services by accepting the corresponding quote / order and/or signing a commercial contract.
– To send you by email and/or post news and updates about our organization, as well as updates to our catalog of products and services.
2.1. Data Retention Period
We will retain your personal data from the moment you give us your consent until you revoke it or request the restriction of processing. In such cases, we will keep your data blocked for the legally required periods.
3. LEGAL BASIS AND DATA COLLECTED
The legal basis for processing your data is the express consent given through a positive and affirmative act (filling in the corresponding form and checking the box to accept this policy) when you provide us with your personal data.
3.1. Consent to process your data
By filling out the forms, checking the box “I accept the Privacy Policy” and clicking to send the data, or by sending emails to the Company through the accounts enabled for this purpose, the User declares that he/she has read and expressly accepted this privacy policy, and gives his/her unequivocal and express consent to the processing of his/her personal data in accordance with the purposes indicated.
3.2. Data Categories
The data collected refers to the category of identifying data, such as: Name and Surname, Telephone, Postal Address, Company, Email, as well as the IP address from where you access the data collection form.
4. SECURITY MEASURES
As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed, in accordance with Article 32 of the GDPR EU 679/2016.
5. TRANSFER OF DATA
No data transfers or international transfers of your data are foreseen, except those authorized by tax, commercial and telecommunications legislation, as well as in those cases where a judicial authority requires it.
6. USER RIGHTS
Any interested party has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of legal claims. For reasons relating to their particular situation, data subjects may object to the processing of their data. The Data Controller will cease processing the data, except for compelling legitimate grounds, or for the exercise or defense of possible legal claims.