We inform you below, in the form of questions and answers, of the conditions under which we process your personal data:
Who is responsible for the processing of your data?
- Identity: TEN SPORT AND INVESTMENT 2020 SL.
- VAT NUMBER: B40654386
- Postal address:C/ Conde Salvatierra 19 2 6 46004 ( Valencia )
- Telephone: 698 264 824
- E-mail: firstname.lastname@example.org
Who is the entity’s Data Protection Officer (DPO) and how can he/she help you
The DPD is a figure, legally foreseen, whose main functions are to inform and advise our entity on the obligations that affect it with regard to the protection of personal data and to supervise its compliance.
In addition, the DPD acts as a point of contact for any issues relating to the processing of personal data, so if you have any queries, concerns or suggestions in relation to how we use your personal data, you can contact them:
- Identity of the Data Protection Officer:TEN SPORT AND INVESTMENT 2020 SL
- DPD contact e-mail: email@example.com
For what purposes do we process your personal data?
We process the personal data you provide for the purpose of channelling requests for information, contacting the sender of the request and replying to it, as well as for subsequent follow-up. Providing the data for this purpose is voluntary, although, if you do not do so, we will not be able to respond to your request for information. Therefore, the communication of your personal data for these purposes is a necessary requirement for us to be able to deal with your request.
For how long will we process your data?
We only keep your data for the period of time necessary to fulfil the purpose for which they were collected, to comply with the legal obligations imposed on us and to meet any possible liabilities that may arise from the fulfilment of the purpose for which the data were collected.
Specifically, the data processed to respond to requests for information will be kept for the time necessary to respond to them and to consider them definitively closed. Subsequently, they will be kept as a communications history for a period of one year, unless you request their deletion before then.
What is the legitimacy for the processing of your data?
The basis for the processing is your consent. Specifically, the categories of personal data whose processing is based on your consent are as follows: Identification and contact data. Consent can be withdrawn at any time and can be communicated to us by any means. Withdrawal of consent does not affect the lawfulness of the data previously processed.
To which recipients will your data be communicated?
The data will not be communicated to third parties, except for those transfers that must be made as required by the legislation in force.
Although it is not a transfer of data, it may be that third party companies, acting as our suppliers, access your information to carry out the service. These third parties access your data on our instructions and may not use it for any other purpose, and they do so in strict confidence and on the basis of a contract in which they undertake to comply with the requirements of current legislation on the protection of personal data.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not we are processing personal data concerning him or her. Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Under the conditions provided for in the General Data Protection Regulation, data subjects may request the limitation of the processing of their data or their portability, in which case we will only keep them for the exercise or defence of claims.
In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data. If you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. In such cases, we will stop processing the data or, as the case may be, we will stop processing it for that specific purpose, except for compelling legitimate reasons, or the exercise or defence of possible claims.
In addition, data protection regulations allow you to object to being subject to decisions based solely on automated processing of your data, where appropriate.
The aforementioned rights are characterised by the following:
- It is free of charge, except in the case of manifestly unfounded or excessive requests (e.g. repetitive nature), in which case a fee proportional to the administrative costs incurred may be charged or a refusal to act may be made.
- You can exercise your rights directly or through your legal representative or volunteer.
- Your request must be responded to within one month, although, taking into account the complexity and number of requests, the deadline can be extended by a further two months.
- We are obliged to inform you about the means of exercising these rights, which must be accessible and without being able to refuse you the exercise of the right on the sole ground that you have chosen another means. If the request is made by electronic means, the information will be provided by electronic means where possible, unless you ask us to do otherwise.
- If, for whatever reason, the request is not granted, we will inform you within one month of the reasons for this and of the possibility to complain to a supervisory authority.
All the aforementioned rights may be exercised through the means of contact listed at the beginning of this clause.
In all cases, you must prove your identity by enclosing a photocopy or scanned copy of your ID card or equivalent document, or a document accrediting representation, if the right is exercised through a representative.
All the aforementioned rights may be exercised through the means of contact with the entity listed at the beginning of this clause.
In the event of any breach of your rights, in particular where you have not obtained satisfaction in exercising your rights, you may lodge a complaint with the Spanish Data Protection Agency (contact details available at www.aepd.es), or other competent supervisory authority. You can also obtain further information about your rights by contacting these bodies.
How do we protect your personal data?
We are committed to protecting the personal data we process. We use reasonably reliable and effective physical, organisational and technological measures, controls and procedures to maintain the integrity and security of your data and to ensure your privacy.
In addition, all staff with access to personal data have been trained and are aware of their obligations in relation to the processing of their personal data.
In the case of the contracts we sign with our suppliers, we include clauses requiring them to maintain the duty of secrecy regarding the personal data to which they have had access by virtue of the order placed, as well as to implement the necessary technical and organisational security measures to guarantee the permanent confidentiality, integrity, availability and resilience of the systems and services for the processing of personal data.
All these security measures are regularly reviewed to ensure their adequacy and effectiveness.
However, absolute security cannot be guaranteed and no security system is impenetrable so, in the event that any information under our control and under our control is compromised as a result of a security breach, we will take appropriate steps to investigate the incident, notify the Supervisory Authority and, where appropriate, those users who may have been affected to take appropriate action.
What is your responsibility as a data subject?
By providing us with personal data, the person doing so guarantees that he/she is over 14 years of age and that the data provided is true, accurate, complete and up to date.
To this effect, the interested party is responsible for the veracity of the data and must keep them suitably updated so that they correspond to their real situation, and shall be liable for any false or inaccurate data that may be provided, as well as for any damages, direct or indirect, that may arise.
If you provide data of third parties, you assume the responsibility of informing them in advance of the provisions of Article 14 of the General Data Protection Regulation under the conditions set forth therein.