This document describes how your personal data are processed and the rights conferred to you pursuant to current data protection regulations – Regulation (EU) 2016/679, of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the GDPR), and Organic Law 3/2018, of 5 December, on personal data protection and guaranteeing digital rights, hereinafter the “applicable data protection regulations”.
1. Data controller and contact information
The entity responsible for the processing of your data is Portsur Castellón S.A. (Portsur), with registered office at PO Box Correos no. 80 – 12100 CASTELLÓN (SPAIN) If you wish, you may contact us by emailing us at portsur@portsurcastellon.com or by sending written communication to the aforementioned postal address.
2. For what purpose(s) do we process you data and on what legal basis?
Your personal data are processed in accordance with the provisions set out in applicable data protection regulations, as well as the legal basis and purposes detailed next:
a) Consent of the interested party
Your personal data will be processed, if you have given us your consent, for the following purposes: to respond to your questions or requests and to send you information that may be of interest to you in accordance with the request made. You may withdraw your consent at any time. If you do so, this revocation will not be retroactive in nature.
b) Compliance with a legal obligation applicable to the data controller
Your personal data are processed, in accordance with the provisions set out in applicable data protection regulations, for the purpose of responding to you when exercising your rights set out in the GDPR, provided you have made a request to exercise your rights using the channels made available to this end. In this regard, if you do not allow us to process your personal data for this purpose, and given that processing of your data is essential to comply with the legal obligations applicable to the data controller, we will not be able to respond to your rights request.
3. What categories of data do we process?
The possible categories of data to be processed are:
a) Consent of the interested party
Identifying data
b) Compliance with a legal obligation applicable to the data controller.
Potentially any type of data included by the data subject in their request to exercise their rights.
4. To which recipients will your data be communicated?
To develop all of the aforementioned purposes, Portrsur enjoys the collaboration of third-party service providers who may have access to personal data as a result of executing the hired services. In any case, Portsur follows strict selection criteria when hiring said third parties with a view to ensuring compliance with its data protection obligations and it signs the corresponding data protection agreement with them, through which these third parties are bound to comply with their data protection obligations and, in particular, to implement the appropriate legal, technical and organisational security measures to ensure the security, integrity and confidentiality of the interested parties’ data, in relation to their processing for the purposes mentioned in this document.
Your data may be communicated to other companies in the business group with a view to ensuring the interested party’s rights are exercised.
Additionally, Portsur may disclose the user’s personal data and any other information about them when required by the public authorities when exercising the functions that legitimately correspond to it, and in accordance with the applicable provisions, where necessary.
5. How long do we store your data for?
Portsur will comply with the provisions set out in regulations in force with regard to the duty to delete personal information once the intended purpose has been achieved, or when your consent to processing is revoked, with the information being duly blocked, so it may be made available exclusively to judges and courts, the Public Prosecution Service or the competent public administrations to address any possible liability arising from processing, and only for the limitation period for said liability. Once the limitation periods have expired, the information will be definitively deleted using secure methods.
6. How have we obtained your data?
The personal data processed by Portsur are the personal data provided by you in the web contact form. As well as the information provided by the interested party for the exercise of their rights.
7. What are your rights when you provide us with your data?
In accordance with the provisions set out in applicable data protection regulations, in addition to national data protection regulations, you have the right to exercise (if you wish) your rights of access, rectification and deletion, as well as request that processing of your personal data be limited, oppose it, request data portability, and ask not to be the subject of individual automated decisions.
In addition, if the personal data processing described is based on the consent you grant, you may withdraw said consent at any time. In this regard, note that revoking your consent will not affect the legality of the processing carried out prior to your consent being withdrawn.
You may exercise the aforementioned rights through the following channels, accompanying your request with documentation that will allow us to confirm your identity (copy of your identification document, passport, foreigner identification number, etc.):
- In writing, by request addressed to PO Box Correos no. 80 – 12100 CASTELLÓN (SPAIN)
- By email, to the following address: portsur@portsurcastellon.com.
8. Who can you file claims with?
If you believe your data protection rights have been violated, or if you have any claims regarding your personal information, you can contact the data controller, whose contact information can be found in Section 1.
In any case, interested parties can always turn to the Spanish Data Protection Agency, which is the control authority in data protection matters: http://www.agpd.es, Calle Jorge Juan, number 6, 28001, Madrid.