Privacy Policy
Following the principles of legality, loyalty and transparency, we provide you with this Privacy Policy based on Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on Personal Data Protection and its implementing regulations.
Who is the Data Controller of your data?
Concello de Vilaboa
VAT NUMBER: P3605800F
REGISTERED OFFICE: C/ Toural, 1 36141: Vilaboa Galicia.
CONTACT:
Phone: 986 708 215
Fax: 986 708 387
Email: info@vilaboa.org
For what purposes do we process your personal data?
On the Entroido de Cobres website (entroidodecobres.com), depending on the category of interested party in question, we process the information you provide us with the following purposes:
- Potential customers: To manage the potential commercial and/or professional relationship, manage the sending of requested information and/or resolve the queries raised in the different forms or contact details. The category of data that, mainly, we will process: contact data and query data.
- Clients: To manage the commercial and/or professional relationship that binds us. To process orders, requests or any type of request made by the user through any of the contact forms made available to them. The category of data that we will mainly process are: identification, contact and financial data.
- Suppliers: To manage the commercial and/or professional relationship. The category of data that we will mainly process are: identification, professional, contact and financial data.
- Candidates: To manage the personnel selection process. The category of data that we will mainly process are: Identity data, employment details, academic data, skills, personality and any other data that includes the candidate.
- Sending commercial communications (email, fax, SMS, MMS, social communities or any other electronic or physical means, present or future): To provide information of interest about our activities, our services, relevant news and news regarding the research and development we carry out. The sending of commercial communications will be carried out to those who have a previous contractual relationship, unless otherwise opposed, and, in the absence of a previous relationship, when they expressly consent to it.
- Events: Data relating to training courses and/or events for the qualification of personnel for a better performance of their activity.
The data we request are adequate, relevant and strictly necessary and in no case are you obliged to provide them, but failure to provide them may affect the purpose of the service or the impossibility of providing it.
What is the legitimacy for the processing of your data?
The legal basis for processing your personal data, depending on the category of data subject concerned, may be:
INTERESTED |
LEGAL BASIS |
POTENTIAL CUSTOMERS |
Art. 6.1.a GDPR: consent of the data subject. Art. 6.1.b GDPR: application, at the data subject’s request, of pre-contractual measures (estimates, order forms, service offers, etc.). Art. 6.1.f RGPD: Legitimate interest (sending requested information, answering queries raised…). |
CUSTOMERS/TRAINING /EVENTS |
Art. 6.1.b GDPR: performance of a contract to which the data subject is a party. Art. 6.1.f GDPR: Legitimate interest (sending requested information, answering queries raised…). |
SUPPLIERS |
Art. 6.1.b GDPR: performance of a contract to which the data subject is a party. Art. 6.1.f GDPR: Legitimate interest (sending requested information, answering queries raised…). |
CANDIDATES |
Art. 6.1.a RGPD: Consent of the data subject. |
COMMERCIAL COMMUNICATIONS |
Commercial communications by electronic means: Regulations on information society services:
In any case, you may oppose the sending of any communication. Commercial communications by non-electronic means: Following the aforementioned criteria, Art. 6.1.f RGPD will be applied: Legitimate interest. |
How long will we keep your personal data?
Your data will be kept for the minimum time necessary for the correct provision of the service offered as well as to meet the responsibilities that may arise from the same and any other legal requirement in the case of potential customers, clients, collaborators and suppliers. Contractual regulations, general tax regulations and consumer and user regulations, among others, will be taken into account.
Candidates’ data will be kept for a maximum period of one year, unless there is opposition to the contrary.
Commercial communications will be sent until the client opposes the sending of these through the mechanisms established in each email.
To which recipients will your data be communicated?
The web Entroido de Cobres (entroidodecobres.com) will not communicate your data to any third party, unless expressly informed of it.
Additionally we inform you that certain data, under the current regulations or the contractual relationship that maintains the web Entroido de Cobres (entroidodecobres.com), may be communicated to:
- Banks and financial institutions for the collection of contracted services and/or purchased products.
- Public administrations with competence in the sectors of activity of the web Entroido de Cobres (entroidodecobres.com), when so established by current regulations.
- In order to carry out administrative procedures, your data may be communicated to the different companies belonging to the Cobres Vilaboa Cultural Association. You will be informed of this.
On the other hand, the Company’s data processors, i.e. service providers who have to access your personal data in order to carry out their functions, may have access to your personal data.
What are your rights when you provide us with your data?
The data protection rights held by data subjects are:
- The right to request access to personal data relating to the data subject.
The right to rectification or erasure
The right to object
The right to request the restriction of data processing
The right to data portability
The holders of the personal data obtained may exercise their personal data protection rights by sending a written communication to the registered office of Concello de Vilaboa or to the e-mail address provided for this purpose, info@vilaboa.org, including in both cases a photocopy of their ID card or other equivalent identification document.
Models, forms and further information about your rights are available on the website of the national supervisory authority, the Spanish Data Protection Agency, hereinafter, AEPD, www.aepd.es.
Can I withdraw consent?
You have the possibility and the right to withdraw your consent for any specific purpose granted at the time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
Where can I complain if I feel that my data is not being processed correctly?
If any interested party considers that their data is not being treated correctly by the Entroido de Cobres website (entroidodecobres.com) they can send their complaints to info@vilaboa.org or to the corresponding data protection authority, the AEPD being the one indicated in the national territory, www.aepd.es.
Security and updating of your personal data
In order to safeguard the security of your personal data, we inform you that the Entroido de Cobres website (entroidodecobres.com) has adopted all the technical and organisational measures necessary to guarantee the security of the personal data supplied. All this to avoid its alteration, loss, and/or unauthorised treatment or access, as required by law, although absolute security does not exist.
It is important that, so that we can keep your personal data up to date, you inform us whenever there is a change in them.
Confidentiality
The Entroido de Cobres website (entroidodecobres.com) informs you that your data will be treated with the utmost care and confidentiality by all the staff involved in any of the processing phases.