RESPONSIBLE FOR THE TREATMENT
PURPOSE, PROVENANCE, LEGITIMACY, RECIPIENTS AND DATA RETENTION PERIOD
Listed below we describe the details of the processing of personal data made by Iberlayer based on the channel through which the collection is made and specifying what types of data are collected, what is their origin, what will be the purpose for the which are intended, what legitimizes the treatment and for how long the data is preserved.
E-mail and contact form:
Data: Name, email, address and other information that the interested party needs to deliver.
Provenance: The interested one himself.
Purpose: Address your query.
Conservation period: Up to 2 years after the purpose has been fulfilled.
Data: Name, e-mail, address and other information that the interested party wanted to deliver.
Provenance: The interested party.
Purpose: Commercial, promotional and statistical for direct marketing purposes.
Legitimation: Explicit consent for electronic communications; unequivocal consent for non-electronic communications; legitimate interest for the remission of non-electronic communications when the data can be obtained lawfully and have been checked against advertising exclusion lists, as well as when the provision of article 21 of Law 34/2002 is applicable and whenever the data for a statistical purpose or to know if a communication has been received, forwarded or opened.
Term of conservation: Until the user cancels without this condition, in his case, the execution of the contract that had formalized with Iberlayer.
Conservation terms applicable to all treatments:
In certain cases and under the legitimacy of an imperative law, it will be necessary for Iberlayer to keep the data for a period longer than indicated. Some examples are the following:
- 4 years: Law on Infractions and Sanctions in the Social Order (obligations in terms of affiliation, registration, cancellation, payment of salaries ...); Arts. 66 and next General Tax Law (accounting books ...).
- 5 years: Art. 1964 Civil Code (personal actions without special term).
- 6 years: Art. 30 Commercial Code (accounting books, invoices ...).
- 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
Recipients or assignees:
Iberlayer does not transfer personal data to third parties except by legal obligation or in cases for which the interested party consents after having been duly informed.
No international data transfers are foreseen.
How to exercise rights:
Right to request access to personal data: you can ask Iberlayer if this company is processing your data.
Right to request rectification (if incorrect) or deletion.
Right to request the limitation of your treatment, in which case they will only be kept by Iberlayer for the exercise or defense of claims.
Right to object to the treatment: Iberlayer will no longer process the data in the manner you indicate, unless for compelling legitimate reasons or the exercise or defense of possible claims have to be further processed.
Right to data portability: in case you want your data to be processed by another firm, Iberlayer will facilitate the portability of your data to the new manager.
Models, forms and more information about the referred rights:
Official website of the Spanish Data Protection Agency
Ability to withdraw consent:
In the case that consent has been granted for a specific purpose, the interested party has the right to withdraw the consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.
How to complain to the Control Authority:
If an interested party considers that there is a problem with the way in which Iberlayer is handling their data, they can direct their claims to the Security Officer of Iberlayer or to the corresponding data protection authority, being the Spanish Agency for Data Protection the one indicated in the case of Spain.