PRIVACY POLICY

Privacy Policy

Privacy Policy SAPA Placencia, S.L, hereinafter SAPA, in accordance with the legal requirements imposed by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free circulation of these data, is recognized as the Controller of personal data and undertakes to process them in accordance with regulatory requirements and the risks associated with their processing, which have been previously identified. Simply visiting this Portal does not involve the processing of personal data, since no personal data that identifies the User is automatically recorded. To ensure proper management of personal data, all SAPA personnel involved in processing processes are familiar with the entity’s established data protection policies, thereby ensuring the confidentiality, integrity, availability, and resilience of personal data, as well as the ability to effectively and quickly restore personal data in the event of an incident.

Responsible for the processing of your personal data

Fiscal address: Carretera Nacional 1, s/n
Website address: www.sapa.es
Contact email: sapa@sapaplacencia.com
Contact phone number: +34 943 304 204
Data Protection Officer (DPO) identification: SAPA Placencia, S.L.
Main DPO contact: SAPA Placencia, S.L.

Purpose and duration of the processing of your personal data

Each time SAPA requests the User’s personal data, it will expressly inform the User, at the time of data collection, of the purpose of the processing for which the User is providing consent. The processing of personal data will generally be indefinite unless expressly indicated otherwise by SAPA or the User exercises their right to erasure, at which point we will delete the personal data, except for those that we are legally required to retain for the specified period.

Legitimation of the processing of your personal data

The legal basis that legitimizes us to process personal data is the express consent granted by the User. SAPA will always clearly and simply communicate the purpose of the processing for which express consent is given; if express consent is refused, SAPA will not be able to provide the requested service.

Recipient of your personal data

SAPA, unless expressly required by law, does not intend to transfer the User’s personal data to third parties. If such a transfer is to be made, express consent will be requested in advance, informing the User of the recipients of the transfers or the category of recipients if these are not clearly predetermined. SAPA may, however, contract the provision of services to third parties that involve access to personal data on behalf of a third party, but always within the scope of the provision of a service, giving rise to a data processing order under the conditions set forth in Articles 28 and 29 of the aforementioned European Regulation. In these cases, SAPA will regulate the data processing order through the corresponding confidentiality agreement, which will clearly reflect the commitments that both parties acquire in the processing of your personal data with respect to its confidentiality and security. If the data processing is carried out by an entity outside the European Union, we will work with entities that, in the opinion of the Spanish Data Protection Agency, have a comparable level of security, demonstrable through the following means:

The company providing the service is located on the list of countries with a level of protection comparable to that of the European Union. The international transfer of personal data is expressly authorized by the Spanish Data Protection Agency. The company providing the service operates under the EU-US Privacy Shield.

Rights related to the processing of your personal data

The User, as the data subject of personal data processed by SAPA, and in application of articles 15 to 21 of the aforementioned European Regulation, may exercise, at any time, the rights of access, rectification or deletion, restriction of processing, objection and/or portability. To do so, they must contact SAPA through any of the usual means of communication, and in particular, through the contact details set out in point 1 of this Data Protection Policy, requesting the desired right. To do so, they must unequivocally identify themselves in advance, guaranteeing that they are the data subject of the personal data over which they wish to exercise the right. SAPA will make this effective as soon as possible and, in any case, without undue delay. Should the User have any questions about what their rights are and how to exercise them, SAPA is at their disposal to provide further information and facilitate their exercise. Should the User consider that the request to exercise their rights has not been adequately addressed, they may file a complaint with the competent Supervisory Authority; To this end, we provide the main contact information for the Spanish Data Protection Agency:

Spanish Data Protection Agency (AEPD) C/ Jorge Juan, 6 28001 Madrid www.agpd.es Contact telephone numbers: 901 100 099 – 912 663 517

Origin of the data

The User’s personal data processed by SAPA will be obtained from the data subject, their legal representative, or the person or persons expressly authorized by the data subject. The categories of data processed through this Portal will always include identifying, financial, commercial, academic, and/or professional data, and, in general, any type of personal data not considered specially protected.