Responsible for the treatment
The person in charge of the treatment of the User's data is the company CRIS SERRA, with NIF 39414824T, telephone +34 677598219 and email email@example.com
Purpose of data processing
The access by CRIS SERRA to the personal data contained in the files owned by the Client, will be carried out solely and exclusively for the purpose that CRIS SERRA can meet the User's requests and be able to keep him informed, even by electronic means, about our products and services, without being able to apply or use them for any other purpose. Likewise, said purposes are not subject to the consent of data that is not necessary for said purposes.
The personal data provided will be kept as long as its deletion is not requested by the interested party or, where appropriate, while the commercial relationship between the parties is maintained from the last confirmation of interest of the User, in such cases they must be destroyed; The same destination must be given to any support or documents that contain any personal data that is the object of the treatment. All this without prejudice to the existence of a legal provision that requires the conservation of certain data or that these are useful in the event of a claim arising from the provision of agreed services.
Legitimation for data processing
The legal basis for the processing of the User's data is the unequivocal consent of the interested party for the specific purposes established in this document, based on the provisions of article 6.1.a of the General Data Protection Regulation.
CRIS SERRA will not transfer the data in any case to third parties, unless there is a legal obligation that obliges it to do so.
exercise of rights
The User may exercise the following rights, provided for in the GDPR, in relation to the processing of their personal data:
- Right to request access to personal data relating to the interested party.
- Right to request its rectification or deletion.
- Right to request the limitation of your treatment.
- Right to oppose the treatment.
- Right to data portability.
- Right not to be subject to automated individualized decisions.
These rights may be exercised by means of a written communication addressed to CRIS SERRA, , 08021 Barcelona, with NIF 39414824T, or by e-mail to the address firstname.lastname@example.org. In both cases, the interested User must accompany a copy of his national identity document, passport or other valid document that identifies him.
Likewise, we inform you that you can exercise your rights before the competent Control Authority. If applicable, the Spanish Agency for Data Protection (AEPD), address at calle Jorge Juan, nº6, 28001 Madrid.
Security measures and levels
CRIS SERRA has adopted the necessary measures to maintain the level of security required, depending on the nature of the personal data processed and the circumstances of the treatment, in order to avoid, as far as possible and always according to the state of the art, its alteration, loss, treatment or unauthorized access.
Likewise, CRIS SERRA guarantees that it has implemented mechanisms to:
- Guarantee the confidentiality, integrity, availability and permanent resilience of treatment systems and services.
- Restore availability and access to personal data quickly, in the event of a physical or technical incident.
- Verify, evaluate and assess, on a regular basis, the effectiveness of the technical and organizational measures implemented to guarantee the safety of the treatment.
- Pseudonymize and encrypt personal data, if applicable.
Area of application
The treatment structure, equipment and information systems in order to comply with current legislation on data protection, will be applied to all treatments, temporary or permanent, owned by CRIS SERRA that contain personal data, as well as well as any equipment or information system that treats them.
Commercial and promotional information
The personal data that you provide us through this form will be processed by CRIS SERRA, with the aim of notifying you of business content and commercial communications CRIS SERRA.
Confidentiality and professional secrecy
The data collected in all private communications between CRIS SERRA and the clients or Users will be treated with absolute confidentiality, committing CRIS SERRA to the obligation of secrecy of the personal data, to its duty to keep them and to adopt all the necessary measures that avoid its alteration, loss and treatment or unauthorized access, in accordance with the provisions of the regulations applicable to Security Measures of Automated treatments that contain personal data.
In addition, the information of any kind that the parties exchange with each other, that which they agree is of such a nature, or that which is simply seen about the content of said information, will also have the status of confidential. The visualization of data through the Internet will not imply direct access to them, except with the express consent of the owner for each occasion.
Changes in the security and data protection policy
CRIS SERRA reserves the right to modify its security and data protection policy in order to adapt it to new legislation or jurisprudence, as well as those that may derive from existing standard codes in the matter, or by strategic corporate decisions, with the effects of the date of publication of said modification on the CRIS SERRA website.
Data communications made by the User himself
- The User consents that CRIS SERRA may process their data in order to meet the requests that he himself may make.
- The User consents that CRIS SERRA may process their data to send them information about their products and services.
- The User consents that CRIS SERRA can process their data to send them information about the promotional events that it carries out.