PRIVACY POLICY
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter referred to as the “GDPR”) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter referred to as the “LOPDGDD”), we hereby provide information regarding the various personal data processing activities carried out through this website.
DATA CONTROLLER
INSTITUTO INTRA-TP S.L.U., Tax Identification Number (NIF): B70578323, with registered office at Calle Juaquín Galiacho, 10, Ground Floor, Postcode 15009, Canteira de Eiris (A Coruña), Spain.
Contact Details: +34 981 249 766 | info@intra-tp.com
DATA PROTECTION OFFICER
PROFESSIONAL GROUP CONVERSIA, S.L.U.
Contact Details: dpd.cliente@conversia.es
PROCESSING ACTIVITIES
Please be informed that your personal data will be incorporated into the processing systems owned by the Data Controller. The main aspects of the processing activities carried out are detailed below.
CONTACT
- Purpose: To respond to enquiries, suggestions, complaints or requests for information submitted through the various communication channels made available by the organisation via the “Contact” section of the website.
- Lawful Basis: Consent of the data subject pursuant to Article 6(1)(a) of the GDPR.
- Categories of Data: Identification data and any information voluntarily provided by the individual within the communication.
- Retention Period: Personal data will be retained for as long as the consent provided remains valid and, once consent has been withdrawn or the request has been addressed, for the statutory limitation periods applicable to the management of any potential liabilities.
- Disclosure of Data: No disclosure of personal data to third parties is envisaged unless required by law.
- International Data Transfers: The social media platforms through which you choose to contact us may transfer personal data to countries located outside the European Economic Area, specifically the United States of America in the case of Facebook and LinkedIn.
To ensure a level of protection equivalent to that provided within the European Union, Meta Platforms, Inc. (owner of Facebook) and LinkedIn Corporation have adhered to the applicable Data Privacy Framework mechanisms.
Meta Platforms, Inc.'s Privacy Policy may be consulted at:
https://www.facebook.com/privacy/center/
LinkedIn's Privacy Policy may be consulted at:
- Automated Decision-Making and Profiling: No automated decision-making processes or profiling activities are carried out using the data provided.
RIGHTS OF DATA SUBJECTS
You have the right to request further information regarding the processing of your personal data, as well as to exercise the rights established under Articles 15 to 22 of the GDPR.
To exercise your rights, you may submit your request through any of the following channels:
- By email: info@intra-tp.com
- By post or in person: Calle Juaquín Galiacho, 10, Ground Floor, Postcode 15009, Canteira de Eiris (A Coruña), Spain.
As the data subject, you are entitled to the following rights:
- Right of Access: The right to obtain information regarding your personal data, the processing activities carried out or intended to be carried out, the origin of such data, and any disclosures made or planned.
- Right to Rectification: The right to have inaccurate or incomplete personal data corrected. This right may only be exercised in relation to information under the control of the organisation.
- Right to Restriction of Processing: The right to request the restriction of processing activities originally envisaged by the Data Controller.
- Right to Erasure: The right to have personal data erased, except where retention is required under the GDPR or other applicable legislation.
- Right to Data Portability: The right to receive personal data provided by the data subject in a structured, commonly used and machine-readable format and to transmit such data to another controller, provided the legal requirements are met.
- Right to Object: The right to object to the processing of personal data or, where applicable, to request that such processing cease.
- Right Not to Be Subject to Automated Decision-Making, Including Profiling (the Data Controller does not carry out such processing activities).
Any request submitted by a data subject seeking to exercise their rights must comply with the following requirements:
- Identification of the Data Subject: The identity of the person submitting the request must be verified. Where the request is made through a representative, both the identity of the representative and the data subject must be established by providing a copy of the relevant identity document or equivalent identification, together with documentation evidencing the authority to act on behalf of the data subject.
- Identity Verification: Where reasonable doubts exist regarding the identity of the individual making the request, the Data Controller may request additional information necessary to confirm that individual's identity, in accordance with Article 12(6) of the GDPR.
- Processing of Identity Documents: Where an identity document is required, the data subject and, where applicable, their representative, should conceal any information that is not necessary for identification purposes, such as the document support number, photograph or nationality.
Once identity has been verified, the identity document will be deleted. Only a record confirming that verification has been completed will be retained, without keeping a copy of the document itself.
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you become aware of, or consider that, any circumstance may constitute a breach of the applicable data protection legislation.
Complaints may be submitted through the following website:
ACCURACY OF INFORMATION
Users warrant that all personal data and information provided are accurate, complete and up to date and undertake to keep such information updated through the channels made available for this purpose whenever necessary.
Where users provide personal data relating to third parties, they declare that they have obtained the relevant individual's consent and undertake to provide such individuals with this Privacy Policy.
Under no circumstances shall the organisation be held liable for any loss or damage resulting from a user's failure to comply with the obligations described above.
SECURITY MEASURES
INSTITUTO INTRA-TP S.L.U. undertakes to implement the technical and organisational measures appropriate to the level of risk associated with the processing activities carried out and referred to within the Terms and Conditions of Use, in order to guarantee the integrity, confidentiality and availability of personal data, all in accordance with Article 32 of the GDPR.
UPDATES TO THIS PRIVACY POLICY
Please note that this Privacy Policy may be amended or updated in response to legal requirements, guidance issued by data protection authorities, or changes made to our website.
We therefore strongly recommend that you review this Privacy Policy on a regular basis.
Finally, should you have any questions regarding this Privacy Policy, please contact us at: