In accordance with the current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by GEOGARAPEN ASOCIACION PARA LA GESTION DEL GEOPARQUE DE LA COSTA VASCA, with Tax Identification Number G75018705 and registered office at SIMON BERASALUCE 3 BAJO,20820 DEBA(GUIPÚZCOA). The following information is provided regarding the processing activities carried out:
PROCESSING ACTIVITIES CARRIED OUT
Management of the contracting of online services
Purpose: Collection, registration and processing of data of website users for the proper provision of the service.
Retention period: Retention of copies of documents until the actions to claim possible liability have become time-barred.
Legal basis: Performance of the contract.
Data type:
Basic data: First name and surname, Tax Identification Number, Email address, Financial or insurance data
Transfers: your data will be communicated, where necessary, to bodies and/or public administration authorities with competence in the matter for the purpose of complying with the obligations established in the applicable regulations. In addition, you are informed that the legal basis legitimising the transfer is compliance with a law.
Commercial actions through the web form
Purpose: Collection, registration and processing of data for the purpose of responding to your enquiries and/or requests, as well as for advertising and commercial prospecting.
Retention period: for as long as the consent given is maintained, unless there is a legal obligation.
Legal basis: The consent of the data subject.
Data type:
Basic data: First name and surname, Email address
Newsletter
Purpose: Management of the newsletter subscription, in order to make the corresponding mailings.
Retention period: for as long as the consent given is maintained.
Legal basis: The consent of the data subject.
Data type:
Basic data: First name and surname, Email address
Web user management
Purpose: Collection, registration and processing of user data.
Retention period: for as long as the consent given is maintained, unless there is a legal obligation.
Legal basis: The consent of the data subject.
Data type:
Basic data: First name and surname, Email address
Cookie installation
Purpose: Management and installation of cookies.
Retention period: for as long as the consent given is maintained.
Legal basis: The consent of the data subject.
Data type:
Basic data: Email address, IP address
Web Form Management
Purpose: Responding to your enquiries and/or requests.
Retention period: for as long as the consent given is maintained.
Legal basis: The consent of the data subject.
Data type:
Basic data: First name and surname, Email address, IP address
Rights of data subjects
GEOGARAPEN ASOCIACION PARA LA GESTION DEL GEOPARQUE DE LA COSTA VASCA informs Users that they may exercise the rights of access, rectification, restriction, erasure, portability, objection to the processing of their personal data and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the right to withdraw the consent given.
- Right of Access: This is the user's right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data being processed and the legal information regarding the processing (purposes, legal basis, retention periods, transfers, source of the data, etc.).
- Right of Rectification: This is the data subject's right to have data that is inaccurate or incomplete amended. In relation to the website, this may only be satisfied in relation to information that is under the control of the website, for example, deleting comments published on the website itself, images or web content containing the user's personal data.
- Right to Restriction of processing: This is the right to have the purposes of the processing originally envisaged by the data controller restricted in certain circumstances.
- Right of Erasure: This is the right to delete the user's personal data, except as provided for in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defence of claims, etc.).
- Right to Data Portability: The right to receive the personal data that the user has provided, in a structured, commonly used and machine-readable format, and to transmit it to another controller where the processing is based on consent or on the performance of a contract and is carried out by automated means.
- Right to Object: This is the user's right to prevent the processing of their personal data from being carried out or to have such processing ceased by the website when the processing is based on legitimate interest or public interest or when it concerns direct marketing processing.
- Right not to be subject to automated decisions, including profiling: Where the processing is not necessary for the conclusion or performance of a contract, nor is it authorised by European Union or Member State law, nor is it based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
- Right to withdraw consent: For any processing based on your consent, you have the right to withdraw it at any time and free of charge.
To exercise any of the data protection rights described above, you must follow the instructions below:
- Submission of a written request to the address SIMON BERASALUCE 3 BAJO,20820 DEBA(GUIPÚZCOA) (for the attention of GEOGARAPEN ASOCIACION PARA LA GESTION DEL GEOPARQUE DE LA COSTA VASCA) or by email to by email to GEOGARAPEN@GEOGARAPEN.COM.
- The written request submitted by the holder of the personal data (data subject) requesting the exercise of rights must take into account the following:
- The applicant must be reliably identified and, if there are doubts about the identity of the applicant, they will be asked to rectify the request (e.g. by requesting more information, such as the ID number, the ID document, the email address provided, etc.)
- The request may be made by a legal or voluntary representative, provided that the representative is duly identified and authorised by the data holder (by means of an express authorisation from the data holder to exercise the strictly personal rights regulated in the regulations on the protection of personal data)
- Request specifying the application (Right/s intended to be exercised). If it does not refer to a specific processing activity, a response will be provided in relation to all processing activities affecting their personal data. If information is requested regarding a specific processing activity, only information relating to that processing activity will be provided. If the request is made by telephone, the applicant will be instructed to make it in writing and will be informed how to do so and the address to which it must be sent. Information will never be provided by telephone.
- Postal or email address for notification purposes.
- Supporting documents for the request made, where necessary.
- The applicant must use any means that allows proof of the sending and receipt of the request.
Finally, we inform you that you have the right to lodge a complaint with the Spanish Data Protection Agency if you become aware of or consider that an event may constitute a breach of the applicable regulations on personal data protection.
GEOGARAPEN ASOCIACION PARA LA GESTION DEL GEOPARQUE DE LA COSTA VASCA undertakes to adopt the necessary technical and organisational measures, in accordance with the level of risks associated with the processing activities carried out by it and indicated in this same section, in such a way as to guarantee their integrity, confidentiality and availability.