Arts. 12 et seq of Regulation (EU) 2016/679 (GDPR)
In compliance with the provisions of EU Regulation 2016/679 (hereafter GDPR) we hereby provide information regarding the processing of personal data provided by the data subject, relating to the relationships with the Data Controller (as defined hereafter).
The information is provided pursuant to art. 13 GDPR.
The Data Controller is Chapp Global SLU, with registered office in Parque Cientifico Tecnologico – Edificio Polivalente 3, P3, Oficinas 305-306. 35017, Las Palmas de Gran Canaria / Spain and the contact data are: email: email@example.com, tel: 0034 928459581
The Data Protection Officer is VTV Asesores S.L.P B-96256649, contact person: Mrs. Marina Ferragut; tel: +34 963 531 136; email: firstname.lastname@example.org
*After deletion, data may be retained for an additional period of up to one year, depending on backup storage policies.
The data subject must provide necessary data for carrying out the contractual relationship to the Data Controller, as well as the data necessary to fulfil the obligations provided for by laws, regulations, community standards, and by provisions of Authorities legitimated by law and by supervisory and control bodies (referred to in purposes a) and f) above).
Data that are not essential for the performance of the contractual relationship are qualified and considered supplementary and their provision by the data subject, if requested, is optional and subject to consent. Consent provided may be withdrawn by the data subject at any time by sending an email to the address: email@example.com. Such withdrawal shall in no way affect the lawfulness of processing based on the consents given prior to withdrawal of consent.
Personal data will be recorded, processed and stored in the Data Controller’s archive, paper and electronic, in compliance with the appropriate technical and organizational measures referred to in Art. 32 of the GDPR. The processing of the data subject personal data may consist of any operation or set of operations described in Art. 4, paragraph 1, point 2 of the GDPR.
Personal data will be processed using suitable tools and procedures that guarantee security and confidentiality. Such processing may be carried out directly and/or via delegated third parties, both manually using hard-copy support and electronically using IT equipment and other instruments. In order to manage properly the relationship and fulfillment of legal obligations, personal data may be entered in the internal documentation of the Data Controller and, if necessary, in the documents and registers required by law.
Your data may be processed by the employees of the company departments of the Data Controller assigned to the pursuit of the above-mentioned purposes. These employees have been expressly authorized to process the data and have received adequate operating instructions pursuant to and for the purposes of Art. 29 GDPR.
The data may be communicated and processed by external parties operating as autonomous data controllers under Articles 4 and 24 GDPR such as, for example, authorities and supervisory and control bodies and in general public or private subjects entitled to request the data and / or subjects operating as data processors under Art. 28 GDPR), such as consulting firms and / or professional firms, and / or legal and tax professionals and insurance companies.
The data may also be disclosed to the Data Controller’s business partners for the performance of services related to the execution of the contract or for carrying out commercial actions by the same, subject to your express consent.
The data provided by the data subject will be processed in European Union countries and/or in Switzerland. In the event that the personal data of the data subject isn’t processed in an EU country and/or in Switzerland, the rights attributed to the latter by the Community legislation will be guaranteed and the data subject will be promptly notified.
Pursuant to Articles 15 et seq of the GDPR, the data subject may exercise the following rights:
It should also be noted that – before processing the requests – the Data Controller may ascertain the identity of the data subject, in order to evaluate the legitimacy of the same.
To exercise such rights, the data subject may contact the Data Controller at firstname.lastname@example.org or call 0034 928459581.
The Data Controller will respond within 30 days of receiving the data subject formal request.
If the abovementioned rights concerning data subject personal data are infringed, the latest may complain to the competent authority.