The protection of personal data is one of the most important concerns for this organisation.
In our day-to-day work we strive to protect the privacy of the data you provide us with and to comply with current legislation on the protection of personal data.
The purpose of this policy is to inform data subjects about the various processing operations carried out by this organisation that affect their personal data in accordance with the provisions of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
1. IDENTIFICATION AND CONTACT DETAILS OF THE DATA CONTROLLER.
DA GAYO INVERSIONES SL domiciled at
C/ RUFINO BLANCO, NUM 12 PTA 3, PUERTA D 28028 MADRID, SPAIN, with contact telephone: 692 49 24 22 and email info@spanishinvestorvisa.com
2. PURPOSE OF THE PROCESSING OF YOUR PERSONAL DATA
USERS OF THE WEBSITE OF THE RESPONSIBLE PARTY.
We will process your personal data provided through our web forms in order to:
Respond to requests, complaints and incidents made through our contact channels incorporated into the website.
To understand the behaviour of the surfer within the website in order to detect possible computer attacks on our website.
To comply with the legal obligations that are directly applicable to us and regulate our activity.
To protect and exercise our rights or respond to claims of any kind.
To send newsletters relating to the goods or services that make up the activity of the person responsible or news related to our activity and service.
CUSTOMERS AND SUPPLIERS.
We will process your personal data provided through our web forms for:
The execution of pre-contractual measures in which you are a party in the event that you purchase or contract our goods or services.
To deal with requests, complaints and incidents transferred through our contact channels incorporated in the website.
To understand the behaviour of browsers on the website in order to detect possible computer attacks on our website.
Carry out quality surveys.
Sending newsletters about news related to the activity of the responsible.
Sending commercial communications relating to the goods or services that make up the activity of the controller.
Sending commercial information relating to the goods or services that make up the activity of the data controller.
To comply with the legal obligations that are directly applicable to us and regulate our activity.
To manage your data and provide them, where appropriate, to external suppliers for the proper functioning of our business.
To protect and exercise our rights or respond to claims of any kind.
To comply with a legal obligation. In certain cases, we may need to process your data in order to comply with a legal obligation, for example, to comply with court orders, subpoenas or warrants issued by law enforcement agencies or other governmental or public authorities or administrations, including when they are located outside your country of residence. We may also provide your personal data to respond to requests made by them for the prevention, detection or investigation of a crime or other violation of the law.
In certain cases, we will process personal data to improve our services and your browsing experience and use of the website. We may also need to use your personal data to protect our rights or to respond to claims of any kind.
Incident management.
Valuation and statistical study of customers.
CANDIDATES FOR JOB OFFERS OR JOB APPLICANTS.
We will process your personal data provided through our web forms in order to:
To manage the personnel selection processes carried out in the organisation to which you have applied by sending your Curriculum Vitae and/or cover letter through the “work with us” form or to the e-mail address provided on the web page.
To understand the behaviour of the surfer within the website in order to detect possible computer attacks on our website.
To protect and exercise our rights or respond to claims of any kind.
To send communications relating to new job offers.
To send communications relating to events, activities, congresses in which the organisation participates.
3. LEGITIMISATION OF THE PROCESSING.
USERS BROWSING THE WEBSITE OF THE CONTROLLER.
The basis for the processing of personal data by the organisation is based on:
The consent of the data subject in order to:
Respond to requests, complaints and incidents transferred through our contact channels incorporated in the website.
Sending of newsletters relating to the goods or services that make up the activity of the responsible party or news related to its activity.
Sending communications and surveys, as well as statistical and evaluative study of customers, to improve our services and their experience in browsing and use of the website.
Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
Legitimate interest of the data controller.
To understand the behaviour of the surfer within the website in order to detect possible computer attacks on our website.
To protect and exercise our rights or respond to claims of any kind.
CUSTOMERS AND SUPPLIERS.
The basis for the processing of personal data by the organisation is based on:
The execution of a contract to which it is a party or the application of pre-contractual measures.
To correctly and adequately manage and provide the service contracted through this website.
To carry out all the necessary steps in order to ensure the reception of the product purchased through this website.
The administrative, accounting and fiscal management of the relationship established with our clients when they have contracted us.
The sending of communications related to the services, activities or events offered and/or developed by the organisation.
The refusal to provide your personal data may lead to the impossibility of providing the requested service or managing the purchase of the product you wish to acquire.
The consent of the interested party for:
The execution of pre-contractual measures in which you are a party in the event that you purchase or contract our goods or services.
To deal with queries, complaints or incidents sent through our contact channels and to send the requested information.
Sending commercial information relating to the goods or services that make up the activity of the responsible party.
Sending newsletters on news related to the activity of the person responsible.
To carry out quality surveys.
To carry out prize draws and to present offers of our services.
Refusal to provide your personal data may result in the impossibility of providing the requested service or managing the purchase of the product you wish to acquire.
Legal obligations applicable to the data controller.
To comply with the legal obligations that are directly applicable to us and regulate our activity.
In this case, the data subject may not refuse the processing of personal data.
Legitimate interest of the controller.
To understand the behaviour of the surfer within the website in order to detect possible computer attacks on our website.
To manage your data and provide it, where appropriate, to external suppliers for the proper functioning of our business.
To protect and exercise our rights or respond to claims of any nature.
CANDIDATES FOR EMPLOYMENT:
The basis on which the processing of personal data by the organisation is based is covered by:
The consent of the interested party for:
To include your application in the personnel selection process.
To include your CV in our database in order to be able to collaborate for specific purposes.
To send communications relating to new job offers.
Sending of communications relating to events, activities, congresses in which the organisation participates.
Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
Legitimate interest of the data controller.
To understand the behaviour of the surfer within the website in order to detect possible computer attacks on our website.
To protect and exercise our rights or respond to claims of any kind.
4. DATA RETENTION PERIODS OR CRITERIA.
The personal data provided will be kept in accordance with the following criteria:
The time necessary to fulfil the purposes for which they were initially collected.
Once the data are no longer necessary for the processing in question, they will be kept duly blocked in order to, where appropriate, make them available to the competent Public Administrations and Bodies, Judges and Courts or the Public Prosecutor’s Office, in accordance with the statute of limitations period for any actions that may arise from the relationship maintained with the client and/or the legally established retention periods.
The personal data provided will be kept in accordance with the periods established in the following regulations:
THE CIVIL CODE. Between 5 or 15 years depending on the case, in accordance with the provisions of article 1964.2 of the aforementioned legal body.
THE COMMERCIAL CODE.
THE GENERAL TAX LAW. For 4 years in accordance with the provisions of Articles 66 to 70 of the aforementioned body of law. It applies to information related to tax obligations.
All other laws that may be applicable in each Autonomous Community in accordance with the devolved or concurrent autonomous competences that they have recognised at State level.
5. AUTOMATED DECISIONS AND PROFILING.
The website does not make automated decisions nor does it create profiles.
6. AUTOMATED DECISIONS AND PROFILING.
For the duration of the processing of your personal data, the organisation may transfer your data to the following recipients:
Judges and Courts, State Security Forces and Corps, and in general, competent public authorities or bodies, when the data controller is legally obliged to provide the personal data.
Banks and Financial Institutions, in the event that they contract us.
SEPBLAC.
In the event of such a transfer, the organisation undertakes to inform you of these aspects and to obtain your express consent, except in the case of an obligation legally imposed on the data controller.
7. INTERNATIONAL DATA TRANSFERS.
The organisation does not carry out any International Data Transfer.
8. RIGHTS
Interested parties may at any time and free of charge exercise their rights of access, rectification and deletion, as well as request that the processing of their personal data be restricted, oppose the processing, request the portability of such data (whenever technically possible) or withdraw the consent given, and where appropriate, when applicable, not to be subject to a decision based solely on automated processing, including profiling.
To do so, you may use the forms provided by the organisation, or write to the postal address or e-mail address indicated above. In any case, your request must be accompanied by a photocopy of your ID card or equivalent document, in order to prove your identity.
In the event that you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency), through its website: www.agpd.es.
In compliance with the provisions of article 21 of Law 34/2002 on information society services and electronic commerce, if you do not wish to receive any more information about our services, you can unsubscribe by sending an e-mail to the address info@spanishinvestorvisa.com with the subject “UNSUBSCRIBE”.
9. VERACITY OF THE DATA.
The interested party guarantees that the data provided are true, accurate, complete and up to date; undertaking to inform of any change with respect to the data provided, through the channels provided for this purpose and indicated in point one of this policy. The user will be responsible for any damage or harm, both direct and indirect, that may be caused as a result of non-compliance with this obligation.
In the event that the user provides data of third parties, he/she declares that he/she has the consent of the interested parties and undertakes to provide them with the information contained in this clause, exempting the organisation from any liability arising from failure to comply with this obligation.