Who can profess the rights?
The rights of the interested parties remain very personal; therefore, they will be exercised by the owner of the data duly accrediting his identity (for this he will be asked for the ID number or equivalent).
It may also be done through voluntary representation through a representative expressly designated for the exercise of the right. In that case, the identity of the represented party must be clearly evidenced, through the provision of a copy of the National Identity Document or equivalent document, and the representation conferred by it.
How you can profess your rights?
The exercise of rights must be carried out by means of a communication addressed to the responsible for the treatment, which will contain:
- Name and surname of the interested party
- Copy of your national identity document, passport or other valid documents that identifies you, or of the person who represents you.
- The use of an electronic signature identifying the affected or interested party will exempt the presentation of the copies of the ID document or equivalent document.
- If the interested party requests any of their rights electronically, they will be answered by the same means, unless the interested party specifies another means.
- Petition in which the request is specified.
- Address for the purposes of notifications, date and signature of the applicant.
- Documents accrediting the petition that formulates, if applicable.
To facilitate this task to you we have prepared downloadable documents that you must complete and send us and to which you can access below.
What are our obligations?
The responsible for the treatment must answer the request addressed to him in any case, regardless of whether or not personal data of the affected party or interested in their treatments are included.
In case that the request does not meet the specified requirements, the person in charge of the file must request the correction of the same.
The responsible for the treatment will be responsible for proof of compliance with the duty to respond and must keep the accreditation of compliance with the aforementioned duty.
The answer will be effective at the maximum within the established term, although whenever the volume of work permits, we will try to elaborate and deliver the information in a shorter time. It is recalled that the regulatory response deadlines are:
- 30 days
- Extends up to two more months in exceptionally complex cases and duly justified and informed to the interested party.
Subsequently, the proposed models for the exercise of rights and the representation model will be presented as downloadable, together with a brief description.
The interested party will have the right to obtain from the responsible for the treatment the confirmation of whether or not personal data concerning him/her are being processed and, in such a case, the right of access to them (Article 15 RGPD).
The interested party shall have the right to obtain, without undue delay from the responsible for the treatment, the rectification of the inaccurate personal data concerning him or her and to complete the incomplete data by means of an additional declaration (Article 16 RGPD).
The interested party shall have the right to obtain without undue delay from the responsible for the treatment of the deletion of personal data concerning him/ her (Article 17 RGPD).
The interested party shall have the right to obtain from the responsible for the treatment the limitation of the processing of the data in certain cases in accordance with art. 18 RGPD.
The interested party shall have the right to receive the personal data that concern him and that he has provided to a responsible for the treatment, in a structured format, of common use and mechanical reading, and to transmit them to another responsible without being prevented by the person responsible who facilitated them according to art. 20 RGPD.
The interested party will have the right to object at any time, for reasons related to their particular situation, to the fact that personal data concerning them are subject to treatment in certain circumstances in accordance with art. 21 RGPD.
Any interested party will have the right not to be the subject of a decision based exclusively on automated processing, including the elaboration of profiles, which produces legal effects on him or which significantly affects him in a similar way (Article 22 RGPD).
Any interested party can profess their rights through duly completed representation, leaving the interested party and the representative duly identified.