1 DATA CONTROLLER
1.1 Who is responsible for processing your data?
Identity: REPLASA ADVANCED MATERIALS, S. A. (Data controller)
Postal address: Carretera Estella Km.11 · 31190, Astrain (Navarra)
Telephone number: 948 35 30 15
2.1 What will the Data Controller use my data for?
The data you provide us with may be used by the Data Controller for one or more of the purposes indicated below, which will be determined by factors such as your relationship with us (e.g. customer) or by the means used to send the data (e.g. issuing a business card).
Service provision and maintenance of business relationship:
Requests for information:
2.2 How long will you keep my data?
The amount of time we will keep your data for is closely linked to the type of processing it will undergo.
Therefore, in order to calculate the time we need to retain the data for, we need to take the period indicated in section 2.2.2 as a starting point relating to the specific data processing and add to this the period of time that could apply in terms of the statute of regulations and the statute of limitations for actions.
Time periods related to the specific processing:
Time periods imposed by the regulations and the statute of limitations for actions:
3 LEGITIMISATION OF PROCESSING
3.1 Why can the Data Controller process my data? Why is this legitimate?
Depending on the relationship that is established and, therefore, the purpose of the processing, the legal basis may vary. Below is a list of the different situations that may arise and the legal basis that may apply to you depending on the processing:
PURPOSES RELATED TO THE PROVISION OF SERVICES OR YOUR CUSTOMER STATUS:
ATTENDING TO REQUESTS FOR INFORMATION:
3.2 Consequences of withdrawing your consent or opposing the processing of your data. Mandatory and optional fields.
In the event that you are asked at any time to give your authorization for the processing of a purpose for which your consent is required, failure to give your consent (or the subsequent withdrawal of consent) will not affect you in any way. Neither will your opposition to the processing of your data for purposes based on legitimate interest (for example, the use of your data as a customer for sending commercial communications).
On some data collection forms, you will clearly see that some fields are marked as mandatory (with an asterisk) while the rest are absolutely optional. Therefore, there will be no repercussions if you leave the optional fields blank, although you may fill them in if you so wish.
4.1 Will my data be passed on to third parties?
In general, your data will not be passed on to any third party without your explicit and affirmative consent, unless we are legally obliged to do so.
4.2 Providers of services related to the website and the e-mail service
Hosting: the website of the Data Controller is hosted by the provider DinaHosting, S.L.
5.1 What are my data protection rights? General information.
With regards the personal data collected for processing you are entitled to exercise your rights of access, rectification, deletion and portability. We also inform you that in certain circumstances you will have the right to request a limitation or to oppose the processing of your data in which case the Data Controller will stop processing and will only retain the data if legally required to do so or until the statute of limitations for any actions that may arise has expired.
If you would like more information about the aforementioned rights please continue reading or consult the infographic produced by the Spanish Data Protection Agency that can be accessed via the following link.
5.2 What are these rights?
Right of access: This right allows the data subject to obtain confirmation from the Data Controller as to whether or personal data concerning him is being processed and, if so, the right of access to the personal data as well as to the following additional information:
Right of rectification: This right entitled the data subject to request the Data Controller to rectify or supplement inaccurate personal data without delay. It is important that the data held in the databases is up to date and in this regard, we are ready and willing to rectify any errors or inaccuracies that may exist in the data.
Right to deletion: You are entitled, at any time, to ask us to delete your personal data. We will comply with such a request without delay unless any of the circumstances set out in the General Data Protection Regulations apply, including the fact that we must retain your data in order to comply with a legal obligation or so we are able to defend ourselves against a claim.
Right of portability: In the case of automated data based on your consent, you may request that we, in a structed, commonly used and machine-readable format, forward the personal data you have provided to another data controller.
Right of objection: This right entitles the data subject to object to the processing of his data by the data controller. This right is not absolute, which means that the data controller may continue to process the data provided that he can prove legitimate reasons that prevail over his interests, the rights of the data subject or for the submission, exercise and defense of claims.
Right to limit processing: This right entitles the data subject to request the data controller to limit the processing of his personal data under certain circumstances, as indicated below. If this right is exercised, the data controller may only process the data with the consent of the data subject. The circumstances under which this right may be exercised are those listed below:
5.3 How and where can I exercise these rights?
We will be happy to answer any questions or complaints you may have regarding data protection. Similarly, you may submit your complaint or exercise your rights through any of the contact channels indicated at the beginning of this data protection policy.
You may also contact the supervisory authority which you consider appropriate to file your complaint (for example, in the country where you have your usual residence or place of work or where you consider the alleged infringement to have occurred). To this effect, we hereby inform you that in the Spain the Controlling Authority is the Spanish Data Protection Agency, and you may exercise your rights via the forms authorized by this entity for this purpose, and which are available on its online site.
5.4 How long may it take to process my request to exercise my rights?
The reference period is one month from the receipt of your request. However, this period may be extended by a further two months if necessary, considering the complexity and number of requests. The Data Controller will inform the data subject of any such extension within one month of receipt of the request, stating the reasons for the delay.
5.5 Will it cost me anything to exercise these rights?
It will not cost you anything to exercise your rights, except in the case of manifestly unfounded or excessive requests, in particular repetitive requests, the Data Controller may charge a fee to compensate for the administrative costs of dealing with the request or refusing to act (the fee must not imply extra revenue for the data controller, but must correspond effectively to the true cost of processing the request).