WEBSITE USERS

BASIC INFORMATION ON DATA PROTECTION

Controller CENTRO ESPAÑOL DE SERVICIOS TELEMATICOS, S.A.
Purpose Gestión de comunicación e información a través de la web
Legal basis Solicitud de medidas precontractuales (información y presupuestos) a solicitud del interesado
Recipients No se cederán datos a terceros, salvo obligación legal
Rights You may access, rectify and erase your data, as well as other rights explained in the additional information
Additional information

Full details are available in the Privacy Policy / Website Users section of our site

EXTENDED INFORMATION ON DATA PROTECTIONS

DATA-PROCESSING ACTIVITY: WEBSITE USERS

Controller: CENTRO ESPAÑOL DE SERVICIOS TELEMATICOS, S.A.

Tax ID (CIF): A78632965

Address: C/ Marie Curie, 5-7 Edificio Beta, planta 2ª oficinas 2.5 y 2.6, 28521 Rivas Vaciamadrid (Madrid)

E-mail: PROTECCIONDEDATOS@CESTEL.ES.

Tlf.: +34 91 871 20 95

Purpose

To communicate with you in order to answer requests for information and, where applicable, quotations.

Retention period

Data will be kept as long as the requested relationship lasts and until you revoke consent. Once revoked, data may be kept duly blocked for up to 3 years, solely to meet any legal liabilities arising from processing.

Legal basis

Taking pre-contractual steps at the data subject’s request.

Obligation to provide data

Necessary in order to contact us.

Consequence of not providing data

We will be unable to supply the requested information

Disclosures

No disclosures or international transfers are envisaged, except where required by law.

Your rights

Access – confirm whether we process your data.

Rectification – correct inaccurate or incomplete data

Erasure – request deletion (subject to legal retention duties

Restriction – request limited processing in certain cases

  • Objection – object in certain circumstances for reasons related to your situation.

  • Portability – receive data in structured, common, machine-readable format and transmit to another controller when processing is based on consent or a contract and carried out by automated means.

  • Complaint – lodge a complaint with the Spanish Data Protection Agency (AEPD) at C/ Jorge Juan 6, 28001 Madrid or via <www.agpd.es> if you are dissatisfied..

CLIENTS AND SUPPLIERS

BASIC INFORMATION ON DATA PROTECTION

Controller CENTRO ESPAÑOL DE SERVICIOS TELEMATICOS, S.A.
Purpose Communications necessary for the contractual relationship and to meet economic, administrative and tax obligation.
Legal basis

Contract performance · Legal obligation · Controller’s legitimate interest
Recipients No disclosures except by law and to banks for payment/collection of services
Rights & additional info Same rights as above – see the Privacy Policy / Clients and Suppliers or e-mail PROTECCIONDEDATOS@LCESTEL.ES

EXTENDED INFORMATION

DATA-PROCESSING ACTIVITY: CLIENTS AND SUPPLIERS

(Controller details as above – e-mail PROTECCIONDEDATOS@LCESTEL.ES)

Who Is the Controller Responsible for Processing Your Personal Data?

Corporate name: CENTRO ESPAÑOL DE SERVICIOS TELEMATICOS, S.A.

Tax ID (CIF): A78632965

Address: C/ Marie Curie, 5-7 Edificio Beta, planta 2ª oficinas 2.5 y 2.6, 28521 Rivas Vaciamadrid (Madrid)

Contact e-mail: PROTECCIONDEDATOS@LCESTEL.ES.

Telephone.: +34 91 871 20 95

 

How Long Will We Keep Your Personal Data?

Your data will be used to manage the list of people who “like” or follow our pages on Facebook, Twitter, YouTube, Google+ and LinkedIn, so that you can receive information directly related to the services we provide, as well as news of events, activities and promotions, always through the chosen social network, and interact with us..

 

What is the legal basis for processing your personal data?

The legal bases are:

Performance of a contract in which the data subject is a party (primary basis)

Legal obligations arising from the economic and tax regulations that govern our contractual relationships with clients and suppliers, including (but not limited to):

  • Spanish Commercial Code (1885)

  • Corporate Income Tax Act (Royal Legislative Decree 4/2004 of 5 March), Art. 133.1

  • General Tax Law 58/2003

  • Article 24 of Royal Legislative Decree 1/2011 of 1 July (Consolidated Text of the Audit Law)

  • Royal Decree 1514/2007 of 16 November (Spanish General Accounting Plan)

Legitimate interest of the controller, specifically for contractual communications with clients and suppliers.

 

Are you obliged to provide this personal data?

Yes. It is a contractual requirement.

 

What are the consequences of not doing so?

We will be unable to provide the requested service.

 

Will we disclose your personal data?

Recipients or categories of recipients:

  • Tax Authorities: For compliance with tax obligations.

  • Banks, Savings Banks, and Credit Unions: For the collection/payment of services rendered/received.

What rights do you have when you provide us with your personal data?

  • Right of Access: You have the right to know whether your data is being processed and to receive that information in writing through the requested means.

  • Right to Rectification: You have the right to request the correction of your data if it is inaccurate or incomplete.

  • Right to Erasure: You have the right to request the deletion of your data; however, please note that this right may be limited when there is a legal obligation to retain or block your data.

  • Right to Restriction of Processing: In certain circumstances, you may request the restriction of the processing of your data, in which case we will only retain it for the exercise or defense of legal claims, the protection of third parties, or for reasons of important public interest.

  • Right to Object: In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. The controller will stop processing your data unless there are compelling legitimate grounds or it is necessary for the exercise or defense of legal claims.

  • Right to Data Portability: When the processing of your data is based on consent or is necessary for the execution of a contract or pre-contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another controller.

Any data subject may file a complaint with the competent Data Protection Authority, especially when they have not obtained satisfaction in the exercise of their rights. To do so, they may send a written communication to the Spanish Data Protection Agency at C/Jorge Juan No. 6, 28001 Madrid, or through its electronic headquarters at www.agpd.es.

The forms for exercising your rights are available in the Privacy Policy / Rights section of our website. You may also request them in writing from the data controller’s address, or obtain them directly from the electronic headquarters of the supervisory authority at www.agpd.es, and they must be submitted to the postal or electronic address of the data controller.

SOCIAL MEDIA FOLLOWERS

BASIC INFORMATION ON DATA PROTECTION

DATA CONTROLLER CENTRO ESPAÑOL DE SERVICIOS TELEMATICOS, S.A.
PURPOSE To receive information directly related to the services we offer, events, activities, and promotions of our organization, always through the selected social media platform and to interact with us.
LEGAL BASIS Consent of the data subject.
RECIPIENTS No data will be shared with third parties.
RIGHTS You have the right to access, rectify, and delete your data, as well as other rights, as explained in the additional information.
ADDITIONAL INFORMATION You can consult more detailed information on data protection on our website in the section Privacy Policy / Social Media Followers.

 

 

 

Who is responsible for the processing of your personal data?

Company Name: CENTRO ESPAÑOL DE SERVICIOS TELEMÁTICOS, S.A.
Tax ID (CIF): A78632965
Address: C/ Marie Curie, 5-7, Edificio Beta, 2nd Floor, Offices 2.5 and 2.6, 28521 Rivas Vaciamadrid (Madrid), Spain
Contact Email: PROTECCIONDEDATOS@LCESTEL.ES
Phone: +34 91 871 20 95

 

For what purpose will we process your personal data?

Your personal data will be used to manage the list of individuals who like or follow our pages on Facebook, Twitter, YouTube, Google+, and LinkedIn.

This will allow you to receive information directly related to the services we provide, as well as events, activities, and promotions from our organization—always through the chosen social media platform—and to interact with us.

How long will we keep your personal data?

The data provided through the relevant social media platform will remain accessible to us as long as you keep the “follow” or “like” button active. If at any point you wish to stop following us, you only need to click on “unfollow” or “unlike,” or remove us from your Google+ contacts or delete the connection on LinkedIn.

What is the legal basis for processing your personal data?

The legal basis for processing your personal data is:

Your consent, with the relationship subject to the conditions set forth in the privacy and data protection policies of each social media platform. We provide links to each of them for your review:

Twitter

Facebook

Youtube

Google+

Linkedin

 

Is there an obligation to provide this personal data?

There is no obligation to provide any data beyond what is required to register on each social media platform.

What are the consequences of not doing so?

It would not be possible to communicate or follow you through social media.

Will we share your personal data?

There are no plans to share your personal data or to carry out international transfers.

What rights do you have when you provide us with your personal data?

Please note that we access the personal data shown on your profile solely due to the mutual following on our Twitter, Facebook, or Instagram accounts. Therefore, we understand that the exercise of your data protection rights must be carried out through the respective social network. Nevertheless, we inform you of the following rights:

Right of Access: You have the right to know whether your data is being processed and to receive this information in writing through your requested means.

Right of Rectification: You have the right to request the correction of your data if it is inaccurate or incomplete.

You have the right to request the erasure of your data; however, please note that the right to erasure may be limited when there is a legal obligation to retain or block your data.

In certain circumstances, you may request the restriction of the processing of your data, in which case we will only retain it for the exercise or defense of legal claims, the protection of third parties, or for reasons of important public interest.

In certain situations and for reasons related to your specific circumstances, you may object to the processing of your data. The controller will stop processing the data unless there are compelling legitimate grounds or for the establishment or defense of potential claims.

When your data is processed based on consent or is necessary for the execution of a contract or pre-contract and is carried out by automated means, you have the right to data portability, meaning you can receive it in a structured, commonly used, and machine-readable format and have it transmitted to another controller.

Any data subject may lodge a complaint with the competent Data Protection Authority, especially if they have not obtained satisfaction in the exercise of their rights. To do so, they may write to the Spanish Data Protection Agency at C/ Jorge Juan no. 6, 28001 Madrid, or through its electronic headquarters at www.agpd.es.

The templates for exercising your rights can be found in the “Rights” section of our website. You may also request them in writing from the controller’s address or obtain them directly from the Data Protection Authority’s electronic headquarters at www.agpd.es, and they must be sent to the postal or email address of the controller.

NEWSLETTER USERS

BASIC INFORMATION ON DATA PROTECTION

DATA CONTROLLER CENTRO ESPAÑOL DE SERVICIOS TELEMATICOS, S.A.
PURPOSE Management of communication and information via newsletters through the website.
LEGAL BASIS Consent of the data subject.
RECIPIENTS No data will be transferred to third parties, except when legally required.
RIGHTS You have the right to access, rectify, and delete your data, as well as other rights, as explained in the additional information.
ADDITIONAL INFORMATION You can consult the additional and detailed information on Data Protection on our website under Privacy Policy / Newsletter.

I

EXTENDED INFORMATION ON DATA PROTECTION

NEWSLETTER PROCESSING ACTIVITY

Who is responsible for the processing of your personal data?

Company Name: CENTRO ESPAÑOL DE SERVICIOS TELEMÁTICOS, S.A.
Tax ID (CIF): A78632965
Address: C/ Marie Curie, 5-7, Edificio Beta, 2nd Floor, Offices 2.5 and 2.6, 28521 Rivas Vaciamadrid (Madrid), Spain
Contact Email: PROTECCIONDEDATOS@LCESTEL.ES
Phone Number: +34 91 871 20 95

 

For what purpose will we process your personal data?

Your personal data will be used for the purpose of sending you our newsletter or informational bulletin with content that may be of interest to you related to our field of activity, through your registration on the distribution list.

How long will we keep your personal data?

Your personal data will be processed as long as you do not revoke the consent given for this type of commercial or informational communication. Once revoked, we will keep your data “blocked” for a maximum of 3 years, as long as any liability arising from the processing of your personal data may persist.

What is the legal basis for processing your personal data?

The legal basis for the processing of your personal data is:

Consent of the data subject.

Is there an obligation to provide this personal data?

It is a necessary requirement to subscribe to the newsletter or bulletin.

What are the consequences of not doing so?

It will not be possible to send it to you.

Will we share your personal data?

There are no planned disclosures or international transfers of your personal data.

Data Processors involving transfers to third countries

Commercial communications via email are carried out through MailChimp, which acts as the data processor and with whom we have a contract in accordance with Article 28 of the GDPR.

Your contact details, specifically your email address, are subject to an international data transfer to the USA, since we use a service provider located there for the management of our informational/commercial communications (newsletter).

This transfer is regulated by the agreement between European and U.S. authorities known as the Privacy Shield, which offers guarantees equivalent to those provided within the European Union.

What rights do you have when you provide us with your personal data?

  • Right of Access: You have the right to know whether your data is being processed and to receive that information in writing through your chosen means.

  • Right of Rectification: You have the right to request the correction of inaccurate or incomplete data.

  • Right of Erasure: You have the right to request the deletion of your data. However, please note that this right is limited if there is a legal obligation to retain or block your data.

  • Right to Restriction of Processing: In certain circumstances, you may request the restriction of the processing of your data. In such cases, we will only retain your data for the exercise or defense of legal claims, the protection of third parties, or for important public interest reasons.

  • Right to Object: Under certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. The controller will stop processing your data unless there are compelling legitimate grounds or for the establishment, exercise, or defense of legal claims.

  • Right to Data Portability: When the processing of your data is based on your consent or is necessary for the performance of a contract or precontract and is carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format, and to have it transferred to another controller.

  • Right to File a Complaint: Any data subject may file a complaint with the competent Data Protection Authority, especially if they have not obtained satisfaction in the exercise of their rights. You can contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos Personales) by writing to C/Jorge Juan n.º 6, 28001 Madrid or via their electronic headquarters at www.agpd.es.

Forms to request the exercise of your rights can be found in the Rights section of our website. You may also request them in writing from the data controller or obtain them directly from the Authority’s electronic headquarters at www.agpd.es, and they must be sent to the postal or email address of the data controller.

RIGHTS OF DATA SUBJECTS

 

BASIC INFORMATION ABOUT DATA PROTECTION

Who can exercise the rights?

Data subject rights are strictly personal and therefore must be exercised by the data subject, who must properly prove their identity (an ID card or equivalent will be requested).

However, these rights may also be exercised through their legal representative, due to incapacity or minority that prevents them from personally exercising their rights. In such cases, the condition must be duly proven.

They may also be exercised through voluntary representation by a representative expressly appointed for that purpose. In this case, the identity of the data subject must be clearly proven by providing a copy of their National Identity Document or equivalent, along with the authorization granted to the representative.

How can you exercise your rights?

The exercise of your rights must be done by communicating with the data controller and must include:

  • Full name and surname of the data subject.

  • A photocopy of their national identity document, passport or other valid document identifying them, or that of the person representing them.

  • The use of an electronic signature identifying the data subject exempts them from submitting copies of ID or equivalent.

  • If the request is made electronically, the response will be given via the same medium unless the data subject specifies otherwise.

  • A clear request indicating which right is being exercised.

  • Address for notification purposes, date, and signature of the requester.

  • Any supporting documents for the request, if applicable.

What are our obligations?

The data controller must respond to all requests, regardless of whether or not the requester’s data is found in the processing systems.

If the request does not meet the specified requirements, the controller must ask for it to be corrected.

It is the responsibility of the data controller to prove compliance with the obligation to respond and retain evidence of such compliance.

The response will be given within the legally established deadline. Whenever possible, we will aim to respond in a shorter period. The legal deadlines are:

  • 30 days.

  • An extension of up to two additional months in exceptionally complex and duly justified cases, with prior notice to the data subject.

RIGHT OF ACCESS

The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed, and access to such data (Art. 15 GDPR).

RIGHT TO RECTIFICATION

The data subject has the right to obtain without undue delay the rectification of inaccurate personal data concerning them, and to have incomplete personal data completed, including by means of providing a supplementary statement (Art. 16 GDPR).

RIGHT TO ERASURE

The data subject has the right to obtain without undue delay the erasure of personal data concerning them, and the controller shall be obliged to erase such data without undue delay in certain cases (Art. 17 GDPR).

RIGHT TO RESTRICTION OF PROCESSING

The data subject has the right to obtain restriction of processing in certain circumstances (Art. 18 GDPR).

RIGHT TO DATA PORTABILITY

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance (Art. 20 GDPR).

RIGHT TO OBJECT

The data subject has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them in certain circumstances (Art. 21 GDPR).

RIGHT NOT TO BE SUBJECT TO AUTOMATED INDIVIDUAL DECISIONS

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or similarly significantly affects them (Art. 22 GDPR).

REPRESENTATION MODEL

Any data subject may exercise their rights through properly documented representation, with both the data subject and the representative duly identified.