WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
- Company name: AGUA DE INSALUS SA.
- C.I.F./N.I.F.: A20000139
- Registered Office: Kondeko Aldapa 5B, 2B, 20400 Tolosa (Gipuzkoa)
- Registered in the Gipuzkoa Commercial Register, Sheet -SS 452, Folio -180, Volume -1991, Section -8, First Entry.
- Telephone: 943 659 602
- E-mail: insalus@insalus.es
FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?
In accordance with the provisions of EU Regulation 679/2016 and Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights, we inform you that the personal data that you provide us with and those that are generated during the development of the relationship with you are processed for the following purposes:
-
Data provided to formalise a purchase and/or a service:
- Manage, process, send and follow up on purchases and/or services made.
- Contact the user to finalise the purchase process.
- Carry out quality and satisfaction surveys.
- Send personalised commercial communications to the User about our products and services, by any means provided to us.
- Carry out analysis on the use of the Website and check the preferences and behaviour of users.
- Allow their participation in commercial promotions and/or prize draws.
- Accounting, tax and administrative management.
- Data provided through contact with this entity:
- To manage, process and respond to your requests, applications, incidents or queries.
- To offer products and services.
- To carry out analyses on the use of the Website and to check the preferences and behaviour of users.
- Data provided for the sending of the Newsletter:
- Manage the subscription and/or unsubscription of the Newsletter.
- The offering of products and services.
- Carry out analyses on the use of the Website and check the preferences and behaviour of the users.
- Data provided in order to participate in personnel selection processes or spontaneous applications:
- To assess your candidacy in personnel selections.
How long will we keep your data?
The personal data provided will be kept for as long as their deletion is not requested by the person concerned, or whoever legally acts as their legal representative, and for as long as they are necessary – including the need to keep them for the applicable or relevant statute of limitations – for the purpose for which they were collected or recorded.
The retention of the data shall be conditional upon AGUA DE INSALUS SA’s legal obligation to retain them. Once these periods have expired, the data will be destroyed or deleted, and the deletion, elimination or destruction will be carried out in such a way that the information contained in the media cannot be recovered.
Legitimation
The legal basis for the processing of your data is the consent given by the person concerned. This consent is obtained expressly and unequivocally by filling in and, where appropriate, sending the documents and forms on paper or electronically in which your data are collected. In all of the entity’s documents used to collect data for the different uses, there are informative clauses in accordance with the provisions of the data protection regulations and consent is expressly given by the data subject’s signature, or by sending the forms on the website.
The processing is also legitimate if it is necessary for the performance of a contract, or the provision of a service to the data subjects, or for the application of pre-contractual measures (art. 6.1.a and b RGPD).
AGUA DE INSALUS SA is also legitimised to process your data in compliance with the legal obligations to which it is subject and for the satisfaction of legitimate interests, provided that the interests or fundamental rights of the persons concerned do not prevail over these.
If the cause of legitimisation is consent, it may be revoked at any time.
To which recipients will your data be communicated?
Your data will not be transferred to any entity without your consent, except for the legally stipulated transfers, in this sense your express consent will be requested for the transfer of your data to any other entity.
As a consequence of the authorised purposes, your data may be communicated to entities or persons directly related to AGUA DE INSALUS SA and the services provided by the same. Likewise, your personal information will be at the disposal of the Public Administrations, Judges and Courts, for the attention of possible liabilities arising from the processing and provided that these transfers are protected by law.
Your data may also be transferred to companies that provide us with some kind of consultancy, IT maintenance, marketing, training or auditing services. These entities only have access to the personal information that is necessary to carry out these services, and are required by means of a ‘data processing contract’ to maintain confidentiality, not to use the information for other purposes and to adopt measures that guarantee the integrity and availability of the information.
International data transfers outside the European Union or to entities that do not comply with the data protection standards established by EU Regulation 679/2016 are not foreseen.
What categories of data does AGUA DE INSALUS SA process?
The data processed are those necessary for the fulfilment of the purposes authorised by the user.
-
To formalise a purchase and/or service:
- Identification data: name, surname and ID card number.
- Contact data: e-mail address, telephone number and postal address.
- Transactions of goods and services: products and services purchased.
- Economic and financial data: bank card.
- Browsing data.
-
Data provided through contact with this entity:
- Identification data: name and surname.
- Contact data: e-mail address.
- Navigation data.
-
Data provided for the sending of the Newsletter:
- Identification data: name and surname(s).
- Contact data: e-mail address.
- Navigation data.
-
Data provided to participate in personnel selection processes or spontaneous candidacies:
- Identification data: name and surname(s).
- Contact data: e-mail address.
- Navigation data.
- Any other data provided in the curriculum.
In the event that the user provides data of other persons, he/she declares that he/she has their consent and undertakes to transfer the information contained in the Privacy Policy to them.
What are your rights?
Any person has the right to obtain confirmation as to whether or not AGUA DE INSALUS SA processes personal data concerning them.
Interested parties have the right to access their personal data and to obtain a copy of the personal data being processed, to update it, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. AGUA DE INSALUS SA will stop processing the data, except for legitimate reasons, or the exercise or defence of possible claims.
Also in certain circumstances, provided for in Article 18 RGPD, data subjects may request the limitation of the processing of their data, in which case AGUA DE INSALUS SA will process them, with the exception of their storage, with the consent of the data subject or for the formulation, exercise or defence of claims, or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a specific Member State.
As a consequence of the application of the right to erasure or objection to the processing of personal data in the online environment, data subjects have the right to be forgotten according to the case law of the Court of Justice of the EU.
Under the right to portability, data subjects have the right to obtain the personal data concerning them in a structured, commonly used and machine-readable format and to transmit it to another controller.
Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, subject to the exceptions provided for in Article 22(1) GDPR.
The data subject has the right to the erasure of his or her data, due to the disappearance of the purpose for which the data was processed or collected, due to revocation of consent when this is the consent that legitimises the processing, or for the other reasons contained in article 17 GDPR. The deletion will be carried out by proceeding to the high-level erasure of the data contained in automated media and the physical destruction of the non-automated media.
How can rights be exercised?
By writing to the addresses indicated in the heading.
What channels of complaint are there?
If you consider that your rights have not been duly addressed, you can file a complaint with the Spanish Data Protection Agency, whose contact details are as follows: Telephones: 900 293 183 / 900 293 621. Electronic site: https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/inicioCiudadano.jsf Postal address: C/ Jorge Juan, 6, 28001, Madrid.