Privacy Policy
In compliance with the provisions of Article 10 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce, the name of the owner of this website is:
In accordance with the provisions of Organic Law 15/1999, of December 13, on the Protection of Personal Data, we inform you that the personal data voluntarily provided to us through the various forms available on our website will be incorporated into an automated file under the responsibility of CREA SGR, for the purpose of providing you with the requested service, addressing your information request, or contacting you if requested.
The user of the website will be solely responsible for the truthfulness and accuracy of the provided data, with CREA SGR acting in good faith as a mere service provider. In case false or third-party data is provided without their consent, CREA SGR reserves the right to immediately destroy said data in order to protect the rights of the data subject(s).
Likewise, it is the policy of CREA SGR website not to collect or process data from individuals under the age of fourteen. If a person under said age provides their data through the contact form available on CREA SGR website or through any other means, CREA SGR reserves the right to immediately destroy said data.
CREA SGR is committed to complying with its obligation of confidentiality regarding personal data and its duty to keep them secure, adopting all technical and organizational measures necessary to guarantee the security of personal data and prevent their alteration, loss, processing, or unauthorized access, taking into account the state of the technology, the nature of the stored data, and the risks to which they are exposed, in accordance with the provisions of Royal Decree 994/1999, of June 11.
Any person has the right to obtain confirmation as to whether or not CREA is processing personal data concerning them.
Interested persons have the right to:
Data subjects may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, data subjects may request the limitation of the processing of their data, in which case they will only be kept for the exercise or defense of legal claims or for compliance with legal obligations.
In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. CREA will stop processing the data, except for compelling legitimate reasons, or for the exercise or defence of possible claims. As a data subject, the user has the right to receive the personal data concerning him/her, which he/she has provided and in a structured, commonly used and machine-readable format, and to transmit it to another data controller when:
When exercising the right to data portability, the data subject has the right to have their personal data transmitted directly from one data controller to another, where technically feasible.
The subjects also have the right to effective judicial protection and the right to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency, if they consider that the processing of personal data concerning them is in breach of the Regulation.
| LEGAL PRINCIPLES | |
|---|---|
| Principle of legality, fairness and transparency | Consent will always be required for the processing of personal data for each specific purpose, always providing clear and transparent information. |
| Data minimisation principle | Only strictly necessary data will be requested in relation to third parties for the purposes for which they are required, with an effort to minimize their quantity. |
| Principle of limitation of the conservation period | Data will be retained no longer than necessary for the purposes of the processing, depending on the purpose, and informing about the corresponding retention period. If there are subscriptions or newsletters, the records will be periodically reviewed, eliminating outdated and inactive ones after a set period of time. |
| Principle of integrity and confidentiality: | Data will be processed in such a way as to ensure adequate security of personal data and guarantee confidentiality. All necessary precautions will be taken to prevent unauthorized access or misuse of user data by third parties. |
Transparencia Organos de gobierno
